Multimedia communication control unit as a secure device for multimedia communication between LAN users and other network users

• US 9,531,776 B2
• Filed: 02/26/2014
• Issued: 12/27/2016
• Est. Priority Date: 08/15/2000
• Status: Expired due to Term

• Current Assignee: Polycom Incorporated (HP Inc.)
• Original Assignee: Polycom Incorporated (HP Inc.)
• Inventors: Even, Roni, Rabinison, Uri
• Primary Examiner(s): Daftuar, Saket K
• Application Number:
  US14/191,139
• Publication Number:
  US 20140181318A1
• Time in Patent Office: 1,035 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 65/1043 Gateway controllers, e.g. media gateway control protocol [MGCP] controllers
• CPC Class Codes: H04L 65/1046 Call controllers; Call servers
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1106 Call signalling protocols; H.323 and related
• CPC Class Codes: H04L 65/60 Network streaming of media packets
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 65/70 Media network packetisation

Abstract

A system and method for providing multimedia communication between a firewall protected, LAN based endpoint and an endpoint that is external to the LAN. A logical port of a multimedia communications control unit is attached to the LAN behind the firewall. Another logical port of the multimedia communications control unit is attached to the external endpoint. Multimedia communication data, consisting of call management data and media data, can be exchanged between the endpoints via the multimedia.

Claims

1. A method for facilitating multimedia communication between a first endpoint on a first network secured by a firewall and a second endpoint on a second network external to the firewall, the method comprising:

routing a call setup message via the firewall to a hardware multimedia communications control unit, comprising one or more processors, for setting up a call between the first endpoint and the second endpoint;

receiving, at a first logical port of the multimedia communications control unit after setting up the call, an indication of multimedia data streams between the first endpoint and the second endpoint, the multimedia communications control unit communicatively coupling the first and second network with a secure communication path that does not go through the firewall;

selecting a multimedia data stream received at the first logical port that conforms to a multimedia communications protocol;

providing the selected multimedia data stream to a common interface of the multimedia communications control unit, the common interface communicatively coupling the first logical port and a second logical port of the multimedia communications control unit via the secure communication path; and

initiating transfer of the selected conforming multimedia data streams by the multimedia communications control unit via the second logical port to the second endpoint.

2. The method of claim 1, wherein the indication of multimedia data streams is provided by the firewall to the multimedia communications control unit after the firewall processes a call setup.

3. The method of claim 1, wherein the first logical port has a first Internet Protocol address and the second logical port has a second Internet Protocol address that is different than the first Internet Protocol address.

4. The method of claim 1, wherein the multimedia communications protocol comprises H.323.

5. The method of claim 1, wherein the multimedia communications protocol comprises Session Initiation Protocol.

6. The method of claim 1, wherein only multimedia data streams conforming to the multimedia communications protocol are provided to the common interface from either the first logical port or the second logical port.

7. A multimedia communications control unit configured to facilitate multimedia communication to a first endpoint on a first network secured by a firewall, comprising:

a first logical port communicatively coupled to the first network;

a second logical port communicatively coupled to a second network, the second network external to the firewall; and

one or more processors, wherein the one or more processors are configured to;

receive a call setup message from the first endpoint via the firewall;

receive, at the second logical port after call setup, an indication of multimedia data streams between a second endpoint on the second network and the first endpoint on the first network, the multimedia communications control unit communicatively coupling the first and second network with a secure communication path that does not go through the firewall;

select a multimedia data stream received at the second logical port that conforms to a multimedia communications protocol;

provide the selected multimedia data stream to a common interface of the multimedia communications control unit, the common interface communicatively coupling the second logical port and the first logical port of the multimedia communications control unit; and

initiate transfer of the selected multimedia data stream via the first logical port to the first endpoint via the secure communication path.

8. The multimedia communications control unit of claim 7, wherein the indication of multimedia data streams is provided by the firewall to the multimedia communications control unit after the firewall processes a call setup.

9. The multimedia communications control unit of claim 7, wherein the indication of multimedia data streams is provided by the multimedia communications control unit as part of the multimedia communications control unit processing a call setup.

10. The multimedia communications control unit of claim 7, wherein the first logical port has a first Internet Protocol address and the second logical port has a second Internet Protocol address that is different than the first Internet Protocol address.

11. The multimedia communications control unit of claim 7, wherein the multimedia communications protocol comprises H.323.

12. The multimedia communications control unit of claim 7, wherein the multimedia communications protocol comprises Session Initiation Protocol.

13. The multimedia communications control unit of claim 7, wherein only multimedia data streams conforming to the multimedia communications protocol are provided to the common interface from either the first logical port or the second logical port.

14. A non-transitory computer readable medium comprising instructions stored thereon to configure a processor to facilitate multimedia communication between a first endpoint on a first network secured by a firewall and a second endpoint on a second network external to the firewall, wherein the instructions when executed cause the processor to:

receive, at a second logical port communicatively coupled to the second network, an indication of multimedia data streams between the second endpoint and the first endpoint after the firewall processes a call setup;

select a multimedia data stream received at the second logical port that conforms to a multimedia communications protocol;

provide the selected multimedia data stream to a common interface communicatively coupling the second logical port and a first logical port, the first logical port communicatively coupled to the first network; and

initiate transfer of the selected multimedia data stream through the first logical port to the first endpoint via a secure communication path that does not go through the firewall.

15. The non-transitory computer readable medium of claim 14, wherein the indication of multimedia data streams is provided by the processor as part of the processor processing the call setup.

16. The non-transitory computer readable medium of claim 14, wherein the first logical port has a first Internet Protocol address and the second logical port has a second Internet Protocol address that is different than the first Internet Protocol address.

17. The non-transitory computer readable medium of claim 14, wherein the multimedia communications protocol comprises H.323.

18. The non-transitory computer readable medium of claim 14, wherein the multimedia communications protocol comprises Session Initiation Protocol.

19. The non-transitory computer readable medium of claim 14, wherein only multimedia data streams conforming to the multimedia communications protocol are provided to the common interface from either the first logical port or the second logical port.