Method and apparatus for providing secure interface to externally hosted application servers

• US 7,852,832 B1
• Filed: 11/30/2005
• Issued: 12/14/2010
• Est. Priority Date: 11/30/2005
• Status: Active Grant

• Current Assignee: Uber Technologies, Inc.
• Original Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Inventors: Croak, Marian, Eslambolchi, Hossein
• Primary Examiner(s): ADDY, THJUAN KNOWLIN
• Application Number:
  US11/291,199
• Time in Patent Office: 1,840 Days
• Field of Search: 370/352, 379/196, 379/188, 379/201.01
• US Class Current: 370/352
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention

Abstract

A method and apparatus for enabling a network provider to provide a security server in a packet network, e.g., a VoIP network that allows a third party partner to interface an application server hosted in the third party'"'"'s network with the VoIP network infrastructure are disclosed. The security server provides the appropriate level of network address translations, firewall support, content filtering, and validation for the third party application server.

Claims

1. A method for providing a secure interface in a communication network, comprising:

receiving a call setup message that requires access to an externally hosted application server to complete a call setup, wherein the call setup message is received by a call control element; and

communicating with the externally hosted application server via a security server to facilitate the call setup, where the security server is deployed within the communication network, wherein the communicating comprises;

forwarding a call processing request related to the call setup message to the security server by the call control element;

forwarding the call processing request to the externally hosted application server by the security server;

receiving a response for the call processing request from the externally hosted application server by the security server; and

forwarding the response to the call control element by the security server.

2. The method of claim 1, wherein the communication network is an Internet protocol network.

3. The method of claim 1, wherein the call processing request to the externally hosted application server is forwarded to the externally hosted application server after undergoing at least one of:

a firewall function, a network address translation function, a content filtering function, or a validation function, that is performed by the security server.

4. The method of claim 1, wherein the response to the call control element is forwarded after undergoing at least one of:

a firewall function, a network address translation function, a content filtering function, or a validation function, that is performed by the security server.

5. The method of claim 1, further comprising:

completing the call setup by the call control element after communicating with the externally hosted application server.

6. A non-transitory computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by a processor, cause the processor to perform steps of a method for providing a secure interface in a communication network, comprising:

receiving a call setup message that requires access to an externally hosted application server to complete a call setup, wherein the call setup message is received by a call control element; and

communicating with the externally hosted application server via a security server to facilitate the call setup, where the security server is deployed within the communication network, wherein the communicating comprises;

forwarding a call processing request related to the call setup message to the security server by the call control element;

forwarding the call processing request to the externally hosted application server by the security server;

receiving a response for the call processing request from the externally hosted application server by the security server; and

forwarding the response to the call control element by the security server.

7. The non-transitory computer-readable medium of claim 6, wherein the communication network is an internet protocol network.

8. The non-transitory computer-readable medium of claim 6, wherein the call processing request to the externally hosted application server is forwarded to the externally hosted application server after undergoing at least one of:

a firewall function, a network address translation function, a content filtering function, or a validation function, that is performed by the security server.

9. The non-transitory computer-readable medium of claim 6, wherein the response to the call control element is forwarded after undergoing at least one of:

a firewall function, a network address translation function, a content filtering function, or a validation function, that is performed by the security server.

10. The non-transitory computer-readable medium of claim 6, further comprising:

completing the call setup by the call control element after communication with the externally hosted application server.

11. An apparatus for providing a secure interface in a communication network, comprising:

a call control element configured to receive a call setup message that requires access to an externally hosted application server to complete a call setup; and

a security server for communicating with the externally hosted application server to facilitate the call setup, where the security server is deployed within the communication network, wherein the call control element forwards a call processing request related to the call setup message to the security server, wherein the security server forwards the call processing request to the externally hosted application server, wherein the security server receives a response for the call processing request from the externally hosted application server, and the security server forwards the response to the call control element.

12. The apparatus of claim 11, wherein the communication network is an internet protocol network.

13. The apparatus of claim 11, wherein the call processing request to the externally hosted application server is forwarded to the externally hosted application server after undergoing at least one of:

a firewall function, a network address translation function, a content filtering function, or a validation function, that is performed by the security server.

14. The apparatus of claim 11, wherein the response to the call control element is forwarded after undergoing at least one of:

a firewall function, a network address translation function, a content filtering function, or a validation function, that is performed by the security server.