利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

17 条记录 (耗时 0.027 秒)

    Method and apparatus for in context mediating common channel signaling messages between networks
    10.
    发明授权
    Method and apparatus for in context mediating common channel signaling messages between networks 有权
    用于在上下文中介导网络之间的公共信道信令消息的方法和装置

    公开(公告)号：US07218613B1

    公开(公告)日：2007-05-15

    申请号：US09781922

    申请日：2001-02-05

    申请人： Arthur Doskow ,  Harry A. Hetz ,  Kathleen F. Jarosinski

    发明人： Arthur Doskow ,  Harry A. Hetz ,  Kathleen F. Jarosinski

    IPC分类号： H04L12/22 ,  H04L12/66 ,  H04L12/56

    CPC分类号： H04Q3/0025 ,  H04L43/00 ,  H04L63/1416 ,  H04L63/1425 ,  H04M7/126

    摘要： A communication network includes a SS7 Security Gatekeeper that authenticates and validates network control messages within, transiting, entering and leaving an overlying control fabric such as an SS7 network. The SS7 Security Gatekeeper incorporates several levels of checks to ensure that messages are properly authenticated, valid, and consistent with call progress and system status. In addition to message format, message content is checked to ensure that the originating node has the proper authority to send the message and to invoke the related functions. predefined sets of templates may be used to check the messages, each set of templates being associated with respective originating point codes and/or calling party addresses. The templates may also be associated with various system states such that messages corresponding to a particular template cause a state transition along a particular edge to a next state node at which another set of templates are defined. Thus, system and call state is maintained. The monitor also includes signaling point authentication using digital signatures and timestamps. Timestamps are also used to initiate appropriate timeouts and so that old or improperly sequenced message may be ignored, corrected or otherwise processed appropriately. The SS7 Security Gatekeeper may be located at the edge of a network to be protected so that all messaging to and from the protected network most egress by way of the Gatekeeper. Alternatively, the SS7 Security Gatekeeper may be internal to the protected network and configured as a “pseudo switch” so that ISUP messaging is routed through the Gatekeeper while actual traffic is trunked directly between the associated SSPs, bypassing the Gatekeeper.

    摘要翻译： 通信网络包括SS7安全网守，用于验证和验证网络控制消息，过渡，进入和离开诸如SS7网络的上层控制结构。 SS 7安全网守包含几个级别的检查，以确保消息被正确认证，有效，并与呼叫进度和系统状态一致。 除了消息格式之外，检查消息内容以确保始发节点具有发送消息的适当权限并调用相关功能。 可以使用预定义的模板集合来检查消息，每组模板与相应的起始点代码和/或主叫方地址相关联。 模板还可以与各种系统状态相关联，使得对应于特定模板的消息导致沿着特定边缘的状态转换到另一组模板被定义的下一状态节点。 因此，维持系统和呼叫状态。 监视器还包括使用数字签名和时间戳的信令点认证。 时间戳也用于启动适当的超时，从而可能会忽略，纠正或以其他方式适当地处理旧的或不正确排序的消息。 SS 7安全网守可能位于要保护的网络的边缘，以便所有传送到和受保护网络的消息通过网守出口。 或者，SS7安全网守可能在受保护网络内部，并被配置为“伪交换机”，以便ISUP消息传递通过网守路由，而实际流量直接在关联的SSP之间中继，而不需要网守。