CN100514939C

CN100514939C - Processing system of IP multi-media communication service and the method for IP multi-media communication

Info

Publication number: CN100514939C
Application number: CNB2006101443318A
Authority: CN
Inventors: 李晓明; 朱占军; 吴涛; 孙炳旭; 魏东风
Original assignee: China United Network Communications Group Co Ltd
Current assignee: China United Network Communications Group Co Ltd
Priority date: 2006-12-01
Filing date: 2006-12-01
Publication date: 2009-07-15
Anticipated expiration: 2026-12-01
Also published as: CN1996946A

Abstract

The invention discloses an IP multimedia communication service processing system and a method for realizing IP multimedia communication, which are used for transmitting signaling and media streams in IP multimedia communication based on the H.323 protocol through a firewall or a NAT network, wherein the IP multimedia In addition to H.323 terminals, network address translation or firewalls, and H.323 gatekeepers, the communication service processing system also includes at least a network detection client, a network detection server, a traversal client, and a traversal server. The present invention can support incoming and outgoing calls of multimedia communication, solves the problem of application of H.323 signaling and media flow traversal to network address translation or firewall configuration, supports multi-layer NAT network or firewall nesting, and improves forwarding through servers efficiency.

Description

The method of IP multimedia communication service treatment system and realization IP multimedia communication

Technical field

The present invention relates to H.323 multimedia communication technology, particularly relate to the system and method for a kind of H.323 signaling and Media Stream passing fire wall and web-site address conversion (NAT).

Background technology

Along with the fast development of Internet, VoIP (carrying out audio call by Internet or IP network) technology has attracted numerous users with its cheap price, good speech quality.Employing is saved long-distance cost greatly based on the networking telephone (promptly adopting the IP conversation) of Internet, is example with the international long-distance telephone expenses, and required expense can save 95% at most than traditional international long-distance expense.Visual telephone just is based on the new call mode that the VOIP technical development is got up, and on the basis of voice call, provides the mutual transmission of video image simultaneously, realizes real video call.H.323 protocol suite is can maturation realize one of main agreement of multimedia communication at present.

Usually, Virtual network operator and enterprise all dispose fire compartment wall and protect inner equipment such as computer not attacked by external network.Can limit type of data packet and the flow (this qualification can be simple regular based on source IP address, purpose IP address or port numbers etc.) that enters in the net by fire compartment wall; Dispose NAT device to save network address expense.For based on the large-scale application of the voip technology of agreement H.323, a major obstacle of current existence be exactly can't with some fire compartment wall (Firewall) and network address translater (NAT) coexistence.Because the agreement that voip technology adopts can't be passed through network address translater or fire compartment wall smoothly, thereby causes based on the visual telephone product of VoIP and can't be used in broadband metropolitan area network or enterprise network.

On fire compartment wall,, only need on fire compartment wall, to open 5060 ports and get final product if the setting signaling flow by being to realize easily, passes through as the signaling that will guarantee SIP; For agreement H.323, needing open port is 1718 or 1719 (being sent to gatekeeper's the used port of remote access service (RAS) message), 1720 (the used ports of call-signaling message), but because media stream needs to transmit by Real-time Transport Protocol, and transmit needed source port and destination interface is dynamically to determine, because scope is big and can't predict the IP address and the port status information of inside terminals in advance, fire compartment wall can not be ignored the safety of in-house network, and the packet filtering scope is open too much.

Means of net topology in NAT provides and externally hidden from fail safe, but also bring huge trouble to videophone application.H.323 the protocol message bag generally is embedded IP address and a port numbers in particular section, rather than is placed in the IP packet header, and therefore H.323 packet is by NAT device the time, and wherein IP address and port numbers will might can't be pointed to correct place.

In sum, H.323 multimedia communication service energy firewall-penetrating and NAT device do not reduce security of network system again simultaneously on the one hand, are that multimedia is extensively applied the problem that must solve; And on the other hand, the operation principle difference of dissimilar fire compartment walls, network address translater, its mechanism that realizes safety is also different with the level of security that reaches, and all can not support well based on the H.323 multimedia communication of agreement at present.

Summary of the invention

Main purpose of the present invention provides a kind of IP multimedia communication service system and realizes the method for IP multimedia communication, make H.323 signaling and Media Stream not only can the based traversal network address conversion or fire compartment wall, can also the self-adapting network environment, and reduce because of passing through the QOS that brings as far as possible and lose.

The invention provides a kind of IP multimedia communication service treatment system, comprise H.323 terminal, network address translation or fire compartment wall, H.323 outside the gatekeeper, also comprise network measuring client, network measuring server at least, pass through client, pass through server;

Described network measuring client is positioned at private network, is used for the self-adapting detecting variety of network environments, obtains network environment information;

Described network measuring server is positioned at public network, is used to receive and reply the network environment information from described network measuring client self-adapting detecting;

The described client of passing through is positioned at private network, is used for and described passing through set up data channel, passed through order alternately between the server; Reception replace the address and the port of the H.323 signaling that receives, and package sends to the described server that passes through from the H.323 signaling of terminal and Media Stream in the private network; Reception is from the described data in server bag that passes through, and sends to described H.323 terminal after H.323 the address of signaling and port are replaced after unpacking;

The described server that passes through is positioned at public network, be used to receive and handle the described order of passing through of passing through client, the described server that passes through is not replaced the H.323 address and the port of signaling, from described pass through to separate the packet that client sends contract out H.323 signaling and Media Stream, send to the H.323 gatekeeper in the public network; Issue the described client of passing through after described H.323 gatekeeper issued the H.323 signaling of described H.323 terminal and Media Stream package.

Testing process is based on Internet protocol, User Datagram Protoco (UDP) or transmission control protocol between network measuring client and the network measuring server.

The data channel of passing through client and passing through between the server is based on User Datagram Protoco (UDP) or transmission control protocol.

Pass through client and pass through between the server pass through that bidding protocol has authentication at least, obtains information, the ability of port binding, movable maintenance, key transmission, message encryption.

The present invention also provides a kind of method of the IP of realization multimedia communication, comprises following steps:

Step 1, before H.323 terminal sends signaling, the network measuring client sends network measuring message by network address translation or fire compartment wall to the port of network measuring server, and the network measuring message that described network measuring client is replied according to described network measuring server obtains network address translation or whether fire compartment wall exists the available port information of opening with fire compartment wall;

Step 2 according to the conclusion of network measuring, is passed through client and is set up data channel to the available port that passes through server, and obtains the information of passing through server;

Step 3, pass through client when receiving signaling from described H.323 terminal, the address and the port of described H.323 terminal signaling are replaced to described corresponding address of server and the port of passing through, will send to the described server that passes through by data channel behind the amended signaling package then;

Step 4, the described server that passes through is after receiving that from data channel the described packet that passes through client unpacks, H.323 signaling is issued H.323 gatekeeper; The described server that passes through sends to the described client of passing through behind the H.323 signaling package that H.323 gatekeeper receives by data channel;

Step 5, described passing through after client unpacks the packet of receiving from data channel replaces to described client oneself address and the port accordingly of passing through with address and port information in the signaling H.323, sends to described H.323 terminal then;

Step 6, pass through and the above-mentioned steps difference of Media Stream are the described step that client is omitted address and port replacement of passing through;

Step 7 is describedly passed through client and is describedly passed through between the server action that authenticates, obtains information, port binding, movable maintenance, key transmission, message encryption by passing through order.

Replace described step of passing through corresponding address of server and port in the described step 3 and can be specially following steps:

Step 61, for H.323 remote access service and Q.931 signaling address and port, the described client of passing through is used and to be passed through the described information of passing through server of command request, passes through server info and comprises: the IP address that public network can be used, remote access service port and port Q.931; The described client of passing through replaces to described corresponding public network address of server and the port of passing through to the remote access service that receives from described H.323 terminal and Q.931 signaling address and port;

Step 62, address and port for H.323 H.245 signaling, media stream real-time host-host protocol, media stream real-time transmission control protocol, the described client of passing through is used and to be passed through order and carry out port binding and obtain described available public network address and the port that passes through server-assignment to the described server that passes through, then will H.245 the address and the port of signaling, media stream real-time host-host protocol, media stream real-time transmission control protocol replace to described available public network address and the port that passes through server-assignment.

Among the present invention, utilizing network measuring client and network measuring server to carry out network environment detects, pass through client and set up data channel to passing through server according to the result that network environment detects, client is passed through in utilization and the data channel of passing through between the server is carried out network address translation or Firewall Traversing, pass through client and replace address and port in the signaling H.323, pass through server transparent forwarding H.323 signaling and Media Stream.

Detect by network environment, need not to change the configuration of network address translation or fire compartment wall, even do not need the configuration of awareness network address transition or fire compartment wall, just can the adaptive network environment, solved the application of H.323 passing through to network address translation or firewall configuration.

Pass through flow process by passing through order optimization, H.323 address in the signaling and port are only replaced penetrating client, pass through server and only do transparent forwarding, this design eliminated pass through server parses H.323 the operational efficiency brought of agreement descend, help to improve forward efficiency, load capacity, the QOS quality of passing through server.

Description of drawings

Fig. 1 is the signaling process schematic flow sheet of IP multimedia communication service treatment system of the present invention;

Fig. 2 is the Media Stream handling process schematic diagram of IP multimedia communication service treatment system of the present invention.

Embodiment

As shown in Figure 1, IP multimedia communication service treatment system of the present invention is used for and will transmits based on H.323 protocol signaling and Media Stream passing fire wall or network address translation apparatus, wherein:

H.323 terminal 10, are arranged in the private network, are to receive and send the terminal equipment of H.323 calling out.

Network measuring client 20 is arranged in the private network, receives and transmission network environment detect-message, is used with network measuring server 30.

Network measuring server 30 is arranged in the public network, receives and transmission network environment detect-message, is used with network measuring client 20.

Pass through client 40, be arranged in the private network, according to the result of network measuring with pass through server 60 and set up data channel; Reception is from the H.323 signaling and the Media Stream of terminal 10, and after doing address port and replacing it, package sends to and passes through server 60; Reception unpacks the replacement address port and sends to H.323 terminal 10 afterwards from the packet that passes through server 60.

Pass through server 60, be arranged in the public network, receive, be transmitted to H.323 gatekeeper 70 after unpacking from the packet that passes through client 40; Reception sends to behind the package and passes through client 40 from H.323 gatekeeper 70 signaling and Media Stream.

Network address translation or fire compartment wall 50, effect are to isolate the visit of public network to private network, allow the visit of private network to public network, replace the head source address of private network to the Internet protocol of public network visit, keep the mapping relations of private net address port and public network address port.

H.323 the gatekeeper 70, and effect is to manage the H.323 calling of terminal 10.

Below in conjunction with Fig. 1 the method that realizes the IP multimedia communication among the present invention is described.

Step 101, informing network detection client 20 startup network environments detected before H.323 terminal 10 was set up registration.

Step 102, network measuring client 20 is set up the TCP connection and is sent UDP to the port of network measuring server 30 and detects data, H.323 TCP connection and UDP request from network measuring client 20 that 30 answers of network measuring server receive, network measuring client 20 obtain, and whether the network address translation or the fire compartment wall 50 of terminal 10 network environments of living in exist, the available port of fire compartment wall unlatching.

Step 103, H.323 terminal 10 generals signaling H.323 sends to and passes through client 40, pass through client 40 and set up TCP or UDP message passage to passing through server 60, just produce the map record of this data channel on network address translation or the fire compartment wall 50 according to the result of network measuring.

Step 104 is passed through client 40 and is set up and finish after the data channel, uses and passes through the information that command request is passed through server 60, passes through server 60 information and comprises: the IP address that public network can be used, RAS port and port Q.931.Pass through client 40 H.323 terminal 10 send address in the signaling H.323 and port and replace to and pass through server 60 corresponding address and port, send to by the data channel of setting up in advance behind the package and pass through server 60, and create the H.323 mapping relations of terminal 10 and data channel.

Step 105 is passed through server 60 after packet unpacks in the data channel, directly is transmitted to H.323 gatekeeper 70, and sets up data channel and mapping relations between the gatekeeper 70 H.323.

Step 106, H.323 gatekeeper 70 sends H.323 signaling to passing through server 60, passes through server 60 and H.323 sends to the corresponding client 40 of passing through according to mapping relations by data channel behind the signaling package.

H.245, the address and the port of media stream real-time agreement, media stream real-time control agreement be that dynamic negotiation is come out step 107 is passed through client 40 packets that read from data channel is separated the signaling that is bundled into H.323, in signaling H.323.For issuing H.323 described address port of the gatekeeper 70 from terminal 10 H.323, pass through client 40 to passing through server 60 request bundling ports, pass through client 40 and use and pass through server 60 and distribute available public network address port to replace.For sending to the H.323 described address port of terminal 10, pass through client 40 and use the available address port of own distribution to replace from gatekeeper 70 H.323.Pass through client 40 and when address port is replaced, set up the address port mapping, pass through server 60 and also when bundling port is operated, set up the address port mapping.

Step 108 is passed through the H.323 signaling that client 40 will replace behind the address port and is sent to H.323 terminal 10.

Through above-mentioned steps, H.323 terminal 10 with pass through between the client 40, pass through client 40 and pass through between the server 60, pass through server 60 and H.323 the foundation of the address port mapping relations between the gatekeeper 70 finish.

Passing through of Media Stream is also similar to above-mentioned steps, and different is the described step that client is omitted address and port replacement of passing through, as shown in Figure 2.

Be in the H.323 terminal 10 in the private network and be in the process that the interior H.323 Streaming Media between the terminal 10 ' of private network passes through as follows: H.323 terminal 10 sends to Media Stream and passes through client 40, pass through client 40, pass through server 60 and pass through client 40 ' and be transmitted to the H.323 terminal 10 ' that is positioned at private network, send to the Media Stream of terminal 10 H.323 also according to described mapping relations processing forward from terminal 10 ' H.323 according to address port mapping relation.

Be in the H.323 terminal 10 in the private network and be in H.323 terminal 10 in the public network " between the Streaming Media process of passing through as follows: H.323 terminal 10 sends to Media Stream and passes through client 40; pass through client 40 and pass through server 60 concern according to the address port mapping be transmitted to the H.323 terminal 10 that is positioned at public network ", from terminal 10 H.323 " send to the Media Stream of terminal 10 H.323 also according to described mapping relations processing forward.

In sum, the present invention can support multimedia communication incoming call with exhalation, solved the application of H.323 passing through, supported the NAT network of multilayer or fire compartment wall is nested, improve the forward efficiency that passes through server network address translation or firewall configuration.

Certainly; the present invention also can have other various embodiments; under the situation that does not deviate from spirit of the present invention and essence thereof; those of ordinary skill in the art work as can make various corresponding changes and distortion according to the present invention, but these corresponding changes and distortion all should belong to the protection range of the appended claim of the present invention.

Claims

1, a kind of IP multimedia communication service processing system, comprises H.323 terminal, network address translation or firewall, outside H.323 gatekeeper, it is characterized in that, also comprises at least network detection client, network detection server, traversal client, traversal server;

The network detection client is located in the private network and is used to adaptively detect various network environments and obtain network environment information;

The network detection server is located in the public network, and is used to receive and reply the network environment information from the self-adaptive detection of the network detection client;

The traversal client is located in the private network, and is used to establish a data channel and exchange traversal commands with the traversal server according to the results of network environment detection; receive signaling and media streams from H.323 terminals in the private network, and replace The address and port of the received H.323 signaling, and the packet is sent to the traversal server; the data packet from the traversal server is received, and after unpacking, the address and port of the H.323 signaling are replaced and sent to the The H.323 terminal;

The traversal server is located in the public network and is used to receive and process the traversal command of the traversal client. The traversal server does not replace the address and port of the H.323 signaling, and the data packet sent by the traversal client Unpack the H.323 signaling and media streams, and send them to the H.323 gatekeeper in the public network; send the H.323 signaling and media stream packets of the H.323 terminal to the H.323 gatekeeper Then send it to the traversal client.

2. The IP multimedia communication service processing system according to claim 1, wherein the detection process between the network detection client and the network detection server is based on Internet Protocol, User Datagram Protocol or Transmission Control Protocol.

3. The IP multimedia communication service processing system according to claim 1, wherein the data channel between the traversal client and the traversal server is based on the User Datagram Protocol or Transmission Control Protocol.

4. The IP multimedia communication service processing system according to claim 1, wherein the traversal command protocol between the traversal client and the traversal server has at least authentication, information acquisition, port binding, activity maintenance, key transfer, The ability to encrypt messages.

5, a method for realizing IP multimedia communication, is characterized in that, comprises the following steps:

Step 1, before the H.323 terminal sends signaling, the network detection client sends a network detection message to the port of the network detection server through network address translation or a firewall, and the network detection client sends a network detection message according to the network detection response returned by the network detection server. The message obtains the network address translation or whether the firewall exists and the available port information opened by the firewall;

Step 2, according to the conclusion of the network detection, the traversal client establishes a data channel to the available port of the traversal server, and obtains the information of the traversal server;

Step 3: When the traversal client receives the signaling from the H.323 terminal, replace the address and port of the H.323 terminal signaling with the corresponding address and port of the traversal server, and then replace the modified After the signaling packet is sent to the traversal server through the data channel;

Step 4, after the traversal server unpacks the data packet received from the traversal client from the data channel, and sends the H.323 signaling to the H.323 gatekeeper; After receiving the H.323 signaling packet, send it to the traversal client through the data channel;

Step 5, after the traversal client unpacks the data packet received from the data channel, replace the address and port information in the H.323 signaling with the corresponding address and port of the traversal client, and then send it to said H.323 terminal;

Step 6, the traversal of the media stream is different from the above steps in that the traversal client omits the steps of address and port replacement;

Step 7: Authentication, information acquisition, port binding, activity maintenance, key transfer, and message encryption are performed between the traversal client and the traversal server through traversal commands.

6. The method for realizing IP multimedia communication according to claim 5, characterized in that, the step of replacing the corresponding address and port of the traversal server in the step 3 is specifically the following steps:

Step 61, for the H.323 remote access service and the address and port of Q.931 signaling, the traversal client uses the traversal command to request the information of the traversal server, the traversal server information includes: public network available IP address, Remote access service port and Q.931 port; the traversal client replaces the address and port of the remote access service and Q.931 signaling received from the H.323 terminal with the corresponding public network of the traversal server address and port;

Step 62, for the address and port of H.245 signaling of H.323, media stream real-time transmission protocol, and media stream real-time transmission control protocol, the traversal client uses a traversal command to perform port binding to the traversal server to obtain the The available public network address and port assigned by the traversal server, and then replace the addresses and ports of H.245 signaling, media stream real-time transmission protocol, and media stream real-time transmission control protocol with the available public network address and port assigned by the traversal server .