CN111541691A - SIP call boundary control system based on SIP call - Google Patents
SIP call boundary control system based on SIP call Download PDFInfo
- Publication number
- CN111541691A CN111541691A CN202010321490.0A CN202010321490A CN111541691A CN 111541691 A CN111541691 A CN 111541691A CN 202010321490 A CN202010321490 A CN 202010321490A CN 111541691 A CN111541691 A CN 111541691A
- Authority
- CN
- China
- Prior art keywords
- sip
- call
- session controller
- firewall
- request information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
- H04L65/1066—Session management
- H04L65/1101—Session protocols
- H04L65/1104—Session initiation protocol [SIP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
- H04L65/1066—Session management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
- H04L65/1066—Session management
- H04L65/1073—Registration or de-registration
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M7/00—Arrangements for interconnection between switching centres
- H04M7/006—Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP), including next generation networks with a packet-switched transport layer
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04M—TELEPHONIC COMMUNICATION
- H04M7/00—Arrangements for interconnection between switching centres
- H04M7/006—Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP), including next generation networks with a packet-switched transport layer
- H04M7/0078—Security; Fraud detection; Fraud prevention
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Business, Economics & Management (AREA)
- General Business, Economics & Management (AREA)
- Multimedia (AREA)
- Computer Security & Cryptography (AREA)
- Telephonic Communication Services (AREA)
Abstract
A SIP call boundary control system based on SIP call comprises a first SIP voice server, a first session controller, a second SIP voice server, a second session controller, a firewall and an Internet terminal; the first SIP voice server is in communication connection with the first session controller; the first session controller is in communication connection with the firewall; the firewall is in communication connection with the internet terminal; and the second session controller is in communication connection with the firewall, and the second session controller is in communication connection with the second SIP voice server. The invention realizes the filtration and penetration of the SIP call support to the firewall by adding the session controller, and ensures the safety and reliability of the SIP call.
Description
Technical Field
The invention relates to the technical field of enterprise communication, in particular to an SIP call boundary control system based on SIP call.
Background
At present, more and more voice systems adopt an SIP mode to transmit calls; if the transmission based on the internet is to be realized, the SIP voice system is required to be exposed in a public network, and if the SIP voice system is deployed in an internal network, the SIP voice system of the opposite side cannot be effectively processed and identified after receiving the call due to the fact that address information in the SIP message is inconsistent with internet exit information, and the call is failed; if the SIP voice system is directly deployed in the public network, various potential safety hazards exist; therefore, the application provides a SIP call boundary control system based on SIP call.
Disclosure of Invention
Objects of the invention
In order to solve the technical problems in the background art, the invention provides an SIP call boundary control system based on SIP calls.
(II) technical scheme
In order to solve the above problems, the present invention provides an SIP call boundary control system based on SIP call, which includes a first SIP voice server, a first session controller, a second SIP voice server, a second session controller, a firewall and an internet terminal;
the first SIP voice server is in communication connection with the first session controller and is used for sending call request information A1;
the first session controller is in communication connection with the firewall, the first session controller is used for judging the type of the call request information A to be an external network call or a public network call, and the first session controller is also used for modifying a source address B1 in the call request information A1 of the external network call type into a public network source address B2 of the firewall to obtain call request information A2;
the firewall is in communication connection with the internet terminal; the second session controller is in communication connection with the firewall, the second session controller is in communication connection with the second SIP voice server, the second session controller is used for identifying the public network source address B2 of the firewall, and the second session controller is also used for receiving and identifying the call request information A2 and sending the call request information A2 to the second SIP voice server.
The technical scheme of the invention has the following beneficial technical effects:
in the invention, when in use, the first SIP voice server sends out the call request information A1; the first session controller receives the call request information A1 and judges whether the type of the call request information A1 is an external network call or a public network call; if the type of the call request information A is public network call, the source address in the call request information A1 is a public network source address B2, and finally the call request information A1 is identified by a firewall and then is sent to an Internet terminal; if the type of the call request information A1 is an external network call, the first session controller modifies the source address B1 in the call request information A1 into a public network source address B2 of a firewall to obtain call request information A2, and the call request information A2 is identified by the firewall and then sent to the Internet terminal; the second session controller identifies the public network source address B2 of the firewall, receives and identifies the call request information A2 and sends the call request information A1/A2 to the second SIP voice server, so that a call path between the two SIP voice servers is established, the purpose of external network voice communication between the two SIP voice servers is realized, and filtering and penetration of the firewall are supported;
the invention realizes the filtration and penetration of the SIP call support to the firewall by adding the session controller, and ensures the safety and reliability of the SIP call; because the SIP call adopts a software deployment mode, the SIP call has very high advantages in usability and deployment flexibility, and the session controller supports various functions of calling party translation, called party translation, media coding conversion and the like, thereby being more beneficial to flexible deployment and configuration of a voice interaction system.
Drawings
Fig. 1 is a schematic block diagram of a SIP call border control system based on SIP calls according to the present invention.
Reference numerals: 1001. a first SIP voice server; 1002. a first session controller; 1011. a second SIP voice server; 1012. a second session controller; 21. a firewall; 31. an internet terminal.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail with reference to the accompanying drawings in conjunction with the following detailed description. It should be understood that the description is intended to be exemplary only, and is not intended to limit the scope of the present invention. Moreover, in the following description, descriptions of well-known structures and techniques are omitted so as to not unnecessarily obscure the concepts of the present invention.
As shown in fig. 1, the SIP call boundary control system based on SIP call according to the present invention includes a first SIP voice server 1001, a first session controller 1002, a second SIP voice server 1011, a second session controller 1012, a firewall 21 and an internet terminal 31;
it should be noted that first SIP voice server 1001 and second SIP voice server 1011 are the same type of product, and have the same structure and function, and first SIP voice server 1001 and second SIP voice server 1011 are respectively installed in different enterprises for use; the first session controller 1002 and the second session controller 1012 are the same type of product, and have the same structure and function; the SIP voice server and the session controller are in one-to-one correspondence, the SIP voice server and the session controller form a group of call modules, and in addition, the invention provides an SIP call boundary control system based on SIP calls, which comprises n groups of call modules, wherein n is a positive integer greater than or equal to 1, and the invention describes a first call module (a first SIP voice server 1001 and a first session controller 1002) and a second call module (a second SIP voice server 1011 and a second session controller 1012) only in an exemplary manner;
a first SIP voice server 1001 is in communication connection with the first session controller 1002, and the first SIP voice server 1001 is configured to send call request information a 1;
the first session controller 1002 is communicatively connected to the firewall 21, the first session controller 1002 is configured to determine that the type of the call request information a is an extranet call or a public network call, and the first session controller 1002 is further configured to modify the source address B1 in the call request information a1 of the extranet call type into the public network source address B2 of the firewall 21, so as to obtain call request information a 2; the call request information A2 and the call request information A1 have the same information content, and are different from each other in the type of a source address;
the firewall 21 is in communication connection with the internet terminal 31; the internet terminal 31 is used for receiving the call request information a1 or the call receiving request information a 2;
the second session controller 1012 is in communication connection with the firewall 21, the second session controller 1012 is in communication connection with the second SIP voice server 1011, the second session controller 1012 is used for identifying the public network source address B2 of the firewall 21, the second session controller 1012 is also used for receiving and identifying the call request information a2 and sending the call request information a2 to the second SIP voice server 1011; the first SIP voice server 1001, the first session controller 1002, the second SIP voice server 1011, the second session controller 1012, the firewall 21 and the internet terminal 31 establish a call path between the two SIP voice servers to implement a call.
In the present invention, when in use, the first SIP voice server 1001 issues the call request information a 1; the first session controller 1002 receives the call request information a1, and determines that the type of the call request information a1 is an external network call or a public network call; if the type of the call request information A is public network call, the source address in the call request information A1 is a public network source address B2, and finally the call request information A1 is identified by the firewall 21 and then is sent to the Internet terminal 31; if the type of the call request information a1 is an external network call, the first session controller 1002 modifies the source address B1 in the call request information a1 to a public network source address B2 of the firewall 21 to obtain call request information a2, and the call request information a2 is identified by the firewall 21 and then sent to the internet terminal 31; the second session controller 1012 recognizes the public network source address B2 of the firewall 21, and receives and recognizes the call request information a2 and transmits the call request information a1/a2 to the second SIP voice server 1011, thereby establishing a call path between the two SIP voice servers, achieving the purpose of an outbound voice call between the two SIP voice servers, and supporting filtering and penetration of the firewall 21.
It is to be understood that the above-described embodiments of the present invention are merely illustrative of or explaining the principles of the invention and are not to be construed as limiting the invention. Therefore, any modification, equivalent replacement, improvement and the like made without departing from the spirit and scope of the present invention should be included in the protection scope of the present invention. Further, it is intended that the appended claims cover all such variations and modifications as fall within the scope and boundaries of the appended claims or the equivalents of such scope and boundaries.
Claims (1)
1. An SIP call boundary control system based on an SIP call, comprising a first SIP voice server (1001), a first session controller (1002), a second SIP voice server (1011), a second session controller (1012), a firewall (21) and an Internet terminal (31);
the first SIP voice server (1001) is in communication connection with the first session controller (1002), and the first SIP voice server (1001) is used for sending out call request information A1;
the first session controller (1002) is in communication connection with the firewall (21), the first session controller (1002) is used for judging the type of the call request information A to be an external network call or a public network call, and the first session controller (1002) is further used for modifying a source address B1 in the call request information A1 of the external network call type into a public network source address B2 of the firewall (21) to obtain call request information A2; the firewall (21) is in communication connection with the internet terminal (31);
the second session controller (1012) is in communication connection with the firewall (21), the second session controller (1012) is in communication connection with the second SIP voice server (1011), the second session controller (1012) is used for identifying the public network source address B2 of the firewall (21), and the second session controller (1012) is also used for receiving and identifying the call request information A2 and sending the call request information A2 to the second SIP voice server (1011).
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010321490.0A CN111541691B (en) | 2020-04-22 | 2020-04-22 | SIP call boundary control system based on SIP call |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010321490.0A CN111541691B (en) | 2020-04-22 | 2020-04-22 | SIP call boundary control system based on SIP call |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111541691A true CN111541691A (en) | 2020-08-14 |
| CN111541691B CN111541691B (en) | 2022-04-01 |
Family
ID=71969655
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010321490.0A Active CN111541691B (en) | 2020-04-22 | 2020-04-22 | SIP call boundary control system based on SIP call |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111541691B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115514516A (en) * | 2022-08-09 | 2022-12-23 | 慧之安信息技术股份有限公司 | A SIP session protection method and system based on session copy |
Citations (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1466344A (en) * | 2002-06-21 | 2004-01-07 | 南京北极星软件有限公司 | Method for passing fire wall by VOIP |
| GB0427103D0 (en) * | 2004-12-10 | 2005-01-12 | Ericsson Telefon Ab L M | Session controller and method of operating a session controller |
| CN1604589A (en) * | 2004-10-28 | 2005-04-06 | 无锡三通科技有限公司 | SIP crossing supported firewall implementing method |
| CN1719776A (en) * | 2004-07-10 | 2006-01-11 | 深圳市凌宇创展科技有限公司 | Communication method of passing through NAT and fire wall |
| US20070019623A1 (en) * | 2005-07-20 | 2007-01-25 | Mci, Inc. | Method and system for providing secure media gateways to support interdomain traversal |
| CN101030865A (en) * | 2006-02-28 | 2007-09-05 | 西门子通信技术（北京）有限公司 | Network address conversion and/or firewall spanning platform, system and method |
| CN101116296A (en) * | 2004-12-31 | 2008-01-30 | 奈克斯通通信公司 | VOIP network infrastructure components and methods |
| CN101119270A (en) * | 2007-09-14 | 2008-02-06 | 华中科技大学 | Network boundary processing method |
| CN101335759A (en) * | 2007-06-22 | 2008-12-31 | 埃森哲环球服务有限公司 | Session initiation protocol adaptor |
| US20110231924A1 (en) * | 2010-03-16 | 2011-09-22 | Devdhar Rakendu | Methods, systems, and computer readable media for providing application layer firewall and integrated deep packet inspection functions for providing early intrusion detection and intrusion prevention at an edge networking device |
| CN103067358A (en) * | 2012-12-14 | 2013-04-24 | 北京思特奇信息技术股份有限公司 | System and method for converged communication Internet protocol (IP) - private branch exchange (PBX) internal and external network interconnection |
| CN103179091A (en) * | 2011-12-21 | 2013-06-26 | 上海亿人通信终端有限公司 | Method for session initiation protocol (SIP) terminal to pass through firewall |
| CN103391334A (en) * | 2013-06-28 | 2013-11-13 | 贵阳朗玛信息技术股份有限公司 | Network crossing method, device and system |
| CN103392316A (en) * | 2013-01-11 | 2013-11-13 | 华为技术有限公司 | Method of traversing firewall, client, and media traversing server |
| CN106506711A (en) * | 2015-09-06 | 2017-03-15 | 北京京东尚科信息技术有限公司 | The method and device that the NAT of sip message is passed through in Genesys environment |
-
2020
- 2020-04-22 CN CN202010321490.0A patent/CN111541691B/en active Active
Patent Citations (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1466344A (en) * | 2002-06-21 | 2004-01-07 | 南京北极星软件有限公司 | Method for passing fire wall by VOIP |
| CN1719776A (en) * | 2004-07-10 | 2006-01-11 | 深圳市凌宇创展科技有限公司 | Communication method of passing through NAT and fire wall |
| CN1604589A (en) * | 2004-10-28 | 2005-04-06 | 无锡三通科技有限公司 | SIP crossing supported firewall implementing method |
| GB0427103D0 (en) * | 2004-12-10 | 2005-01-12 | Ericsson Telefon Ab L M | Session controller and method of operating a session controller |
| CN101116296A (en) * | 2004-12-31 | 2008-01-30 | 奈克斯通通信公司 | VOIP network infrastructure components and methods |
| US20070019623A1 (en) * | 2005-07-20 | 2007-01-25 | Mci, Inc. | Method and system for providing secure media gateways to support interdomain traversal |
| CN101030865A (en) * | 2006-02-28 | 2007-09-05 | 西门子通信技术（北京）有限公司 | Network address conversion and/or firewall spanning platform, system and method |
| CN101335759A (en) * | 2007-06-22 | 2008-12-31 | 埃森哲环球服务有限公司 | Session initiation protocol adaptor |
| CN101119270A (en) * | 2007-09-14 | 2008-02-06 | 华中科技大学 | Network boundary processing method |
| US20110231924A1 (en) * | 2010-03-16 | 2011-09-22 | Devdhar Rakendu | Methods, systems, and computer readable media for providing application layer firewall and integrated deep packet inspection functions for providing early intrusion detection and intrusion prevention at an edge networking device |
| CN103179091A (en) * | 2011-12-21 | 2013-06-26 | 上海亿人通信终端有限公司 | Method for session initiation protocol (SIP) terminal to pass through firewall |
| CN103067358A (en) * | 2012-12-14 | 2013-04-24 | 北京思特奇信息技术股份有限公司 | System and method for converged communication Internet protocol (IP) - private branch exchange (PBX) internal and external network interconnection |
| CN103392316A (en) * | 2013-01-11 | 2013-11-13 | 华为技术有限公司 | Method of traversing firewall, client, and media traversing server |
| CN103391334A (en) * | 2013-06-28 | 2013-11-13 | 贵阳朗玛信息技术股份有限公司 | Network crossing method, device and system |
| CN106506711A (en) * | 2015-09-06 | 2017-03-15 | 北京京东尚科信息技术有限公司 | The method and device that the NAT of sip message is passed through in Genesys environment |
Non-Patent Citations (2)
| Title |
|---|
| 王新乐，等: "会话控制器实现VoIP防火墙/ NAT穿越", 《电子产品世界》 * |
| 郭晨: "呼叫中心会话边界控制的一种设计与实现", 《软件》 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115514516A (en) * | 2022-08-09 | 2022-12-23 | 慧之安信息技术股份有限公司 | A SIP session protection method and system based on session copy |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111541691B (en) | 2022-04-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN1175683C (en) | Method and device in a telecommunications network | |
| CA2268564A1 (en) | Method and apparatus for automatic call setup in different network domains | |
| CN113079144B (en) | SIP WebRTC gateway system penetrating DMZ network | |
| CN102790710A (en) | Method and device for audio and video communication between PC (personal computer) terminal and cell phone | |
| US12047532B2 (en) | Method and system for automatic transmission of status information | |
| EP2381617B1 (en) | A method for calling a conference when hard terminals have been bound to pc clients, a login server thereof, a conference server thereof and a pc client thereof | |
| CN111541691B (en) | SIP call boundary control system based on SIP call | |
| US20150116450A1 (en) | Video Data Transmission Method and Apparatus, and Communications Device | |
| CN102263775B (en) | Method and device for controlling local session initiation protocol (SIP) calling | |
| CN106060784B (en) | Voice calling method, system and device of cluster communication system and gateway equipment | |
| CN1997069A (en) | A method and terminal for special service | |
| CN102355713B (en) | Method of calling in voice communication and mobile terminal | |
| CN101984723B (en) | Method and system for scheduling group call across circuit-switch network and soft-switch network. | |
| CN115668903A (en) | Relay device, communication system, relay method, and program | |
| CN1960289A (en) | Method and device for implementing network call after network failure | |
| US12225064B2 (en) | Conference system | |
| CN105472188A (en) | Method and system for realizing telephone scheduling | |
| US10616408B2 (en) | Method for automatic start up of a communication terminal configured for voice communication on a communication terminal configured for text communication | |
| CN106161376B (en) | End-to-end encrypted communication negotiation method and device | |
| CN111163068B (en) | LINUX kernel PX gateway based voice compatibility method and system | |
| WO2001049011A1 (en) | Method and system for call processing using an ss7 gateway | |
| CN114302015B (en) | A system and method for improving the call connection rate based on high-orbit and low-orbit satellite coordinated paging | |
| US20120246328A1 (en) | Protocol interworking device for network telephone system and method for using the same | |
| KR20240043292A (en) | Voice call service method and voice call service system | |
| CN115550148A (en) | VoIP call link recovery method, device and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |