FIREWALL INTERFACE CONFIGURATION TO ENABLE BI-DIRECTIONAL VOIP TRAVERSAL COMMUNICATIONS
    1.
    发明申请
    FIREWALL INTERFACE CONFIGURATION TO ENABLE BI-DIRECTIONAL VOIP TRAVERSAL COMMUNICATIONS 审中-公开
    防火墙接口配置启用双向电话通话

    公开(公告)号:US20170063803A1

    公开(公告)日:2017-03-02

    申请号:US15334971

    申请日:2016-10-26

    申请人: Fortinet, Inc.

    发明人: Michael Xie

    IPC分类号: H04L29/06 H04L29/12

    摘要: Methods and systems for an intelligent network protection gateway (NPG) and network architecture are provided. According to one embodiment, a firewall provides network-layer protection to hosts of a private network against unauthorized access by hosts of an external network by performing network address translation (NAT) processing of Internet Protocol (IP) addresses. The firewall also provides application-layer protection on behalf of the hosts and supports Voice over IP (VoIP) services by processing signaling protocols associated with VoIP sessions. An external VoIP interface of the firewall receives incoming VoIP packets each associated with a VoIP port of the external interface. The packets are directed to an appropriate host by the firewall performing port address forwarding based on a mapping of VoIP ports to private addresses of the hosts.

    摘要翻译: 提供了智能网络保护网关(NPG)和网络架构的方法和系统。 根据一个实施例,防火墙通过执行因特网协议(IP)地址的网络地址转换(NAT)处理,为专用网络的主机提供对外部网络的主机的未经授权的访问的网络层保护。 防火墙还通过处理与VoIP会话相关联的信令协议,代表主机提供应用层保护,并支持IP语音(VoIP)业务。 防火墙的外部VoIP接口接收到与外部接口的VoIP端口相关联的传入VoIP数据包。 防火墙根据VoIP端口映射到主机的私有地址,通过防火墙将数据包导向适当的主机。

    System and method for controlling and managing sessions between endpoints in a communications system
    5.
    发明授权
    System and method for controlling and managing sessions between endpoints in a communications system 有权
    用于控制和管理通信系统中的端点之间的会话的系统和方法

    公开(公告)号:US08412829B2

    公开(公告)日:2013-04-02

    申请号:US12046251

    申请日:2008-03-11

    IPC分类号: G06F15/16

    摘要: In a communications system having at least one service entity and a plurality of endpoints each including a logical entity and a terminal, a method facilitates a session between at least two of the endpoints in the system. The method includes: receiving a first message having information that includes a request for a session between a first endpoint that includes a non-dispatch terminal and at least one other endpoint; detecting that the first endpoint includes a non-dispatch terminal as a function of the first endpoint being unable to perform at least one function; and causing the at least one function to be performed on behalf of the first endpoint by the at least one service entity to facilitate the session between the first endpoint and the at least one other endpoint.

    摘要翻译: 在具有至少一个服务实体和多个端点的通信系统中,每个端点包括逻辑实体和终端,所述方法有助于系统中至少两个端点之间的会话。 该方法包括:接收具有包括在包括非调度终端的第一端点与至少一个其它端点之间的会话请求的信息的第一消息; 检测到所述第一端点包括作为所述第一端点的功能的非调度终端不能执行至少一个功能; 以及使所述至少一个功能由所述至少一个服务实体代表所述第一端点执行,以促进所述第一端点与所述至少一个其他端点之间的会话。

    Contact destination information registration method, network system, node, and contact destination information registration program
    6.
    发明授权
    Contact destination information registration method, network system, node, and contact destination information registration program 失效
    联系目的地信息注册方法,网络系统,节点和联系目的地信息注册程序

    公开(公告)号:US08335852B2

    公开(公告)日:2012-12-18

    申请号:US11982920

    申请日:2007-11-06

    申请人: Akihiro Hokimoto

    发明人: Akihiro Hokimoto

    IPC分类号: G06F15/16

    摘要: Disclosed herein is a contact destination information registration method employed in a network system including nodes and employing a distributed hash table. When registering contact destination information corresponding to a predetermined node address in the table, the node first performs a first operation of looking up a value associated with a key corresponding to the node address in the table, and, if no such value is found, registering provisional contact destination information in the table so as to be associated with the key and acquiring a registration time of the provisional information, but, if any such value is found, acquiring a registration time of that value, and then performs a second operation of registering the true contact destination information in the table, if the registration time of the value associated with the key in the table coincides with the registration time acquired by the first operation.

    摘要翻译: 这里公开了一种在包括节点并采用分布式哈希表的网络系统中采用的联系目的地信息登记方法。 当登记与表中的预定节点地址相对应的接触目的地信息时,节点首先执行查找与表中的节点地址对应的密钥相关联的值的第一操作,并且如果没有找到该值,则注册 临时接触目的地信息,以便与密钥相关联并获取临时信息的注册时间,但是如果发现任何这样的值,则获取该值的注册时间,然后执行注册的第二操作 如果与表中的键相关联的值的注册时间与通过第一操作获取的注册时间一致,则表中的真实的联系目的地信息。

    FIREWALL INTERFACE CONFIGURATION TO ENABLE BI-DIRECTIONAL VOIP TRAVERSAL COMMUNICATIONS
    7.
    发明申请
    FIREWALL INTERFACE CONFIGURATION TO ENABLE BI-DIRECTIONAL VOIP TRAVERSAL COMMUNICATIONS 有权
    防火墙接口配置启用双向电话通话

    公开(公告)号:US20120246712A1

    公开(公告)日:2012-09-27

    申请号:US13491346

    申请日:2012-06-07

    申请人: Michael Xie

    发明人: Michael Xie

    IPC分类号: G06F21/00

    摘要: Methods and systems for an intelligent network protection gateway (NPG) and network architecture are provided. According to one embodiment, a firewall provides network-layer protection to internal hosts against unauthorized access by hosts of an external network by performing network address translation (NAT) processing of Internet Protocol (IP) addresses. The firewall changes data in headers of VoIP packets and corresponding data contents of the VoIP packets, to enable bi-directional VoIP communications. An external VoIP interface of the firewall receives incoming VoIP packets having a user alias (e.g., an email address) and an indication regarding a VoIP port of external interface. The packets are directed to an appropriate internal host by the firewall performing port address forwarding based on the port indication to a Media Gateway Control Protocol (MGCP) media gateway within the internal network that maintains a mapping of user aliases to private addresses of the internal hosts.

    摘要翻译: 提供了智能网络保护网关(NPG)和网络架构的方法和系统。 根据一个实施例,防火墙通过执行因特网协议(IP)地址的网络地址转换(NAT)处理,为内部主机提供网络层保护,防止外部网络的主机的未经授权的访问。 防火墙改变VoIP报文头部的数据和VoIP数据包的相应数据内容,实现双向VoIP通信。 防火墙的外部VoIP接口接收具有用户别名(例如,电子邮件地址)的传入VoIP分组以及关于外部接口的VoIP端口的指示。 数据包被防火墙根据端口指示执行端口地址转发指向适当的内部主机,内部网络中的媒体网关控制协议(MGCP)媒体网关将用户别名映射到内部主机的私有地址 。

    Method and apparatus for communicating data between two hosts
    9.
    发明授权
    Method and apparatus for communicating data between two hosts 有权
    用于在两台主机之间传送数据的方法和装置

    公开(公告)号:US08230079B2

    公开(公告)日:2012-07-24

    申请号:US12979811

    申请日:2010-12-28

    IPC分类号: G06F15/16 G06F3/00 H04L12/28

    摘要: A method for communicating video data between at least a first host and a second host comprises: identifying, at a server, an address of the first host, to which the second host may communicate video data, and a sequence number expected by a network security system coupled between the first host and the server; and communicating, from the second host to the first host, video data using the address of the first host and the sequence number expected. The method may further comprise: identifying, at the server, an address of the second host, to which the first host may communicate video data, and a second sequence number expected by a network security system coupled between the second host and the server; and communicating, from the first host to the second host, video data using the address of the second host and the second expected sequence number. The second host may be adapted to perform the act of communicating without use of an intermediate server. The method may also further comprise communicating periodically, from the first host to the server, through the network security system, so as to maintain an open communication channel through the network security system to the first host at the address of the first host. The address of the first host may include address information and port information.

    摘要翻译: 一种用于在至少第一主机和第二主机之间传送视频数据的方法包括:在服务器处识别第二主机可以传送视频数据的第一主机的地址以及由网络安全性预期的序列号 系统耦合在第一主机和服务器之间; 以及使用第一主机的地址和所期望的序列号从第二主机向第一主机传送视频数据。 该方法还可以包括:在服务器处识别第一主机可以传送视频数据的第二主机的地址,以及耦合在第二主机和服务器之间的网络安全系统预期的第二序列号; 以及使用第二主机的地址和第二预期序列号从第一主机向第二主机传送视频数据。 第二主机可以适于在不使用中间服务器的情况下执行通信动作。 该方法还可以进一步包括通过网络安全系统从第一主机到服务器周期性地通信,以便在第一主机的地址处通过网络安全系统将开放的通信信道维持到第一主机。 第一主机的地址可以包括地址信息和端口信息。