WO2006043061A1

WO2006043061A1 - System and method for providing a secure and efficient communicaton connection

Info

Publication number: WO2006043061A1
Application number: PCT/GB2005/004035
Authority: WO
Inventors: Stephen Mckenzie
Original assignee: Stephen Mckenzie
Priority date: 2004-10-20
Filing date: 2005-10-20
Publication date: 2006-04-27
Also published as: GB0423295D0; GB2434285B; GB0707521D0; GB2434285A

Abstract

A telecommunication system (2), which acts as a rerouting engine between networks of different service providers, comprises at least a minti-point conferencing unit (8), a gatekeeper (6), a switch (14), a radius server (16) and a firewall (4), the minti-point conferencing unit (8) being connected with the firewall (4) through the switch (14) via the gatekeeper (6) and radius server (16). The system further comprises at least one ISDN gateway (10) connected with the switch (14) and a VPN connected with the firewall (4). These interfaces allow a connection to networks of different telephone service providers.

Description

SYSTEM AND METHOD FOR PROVIDING A SECURE AND EFFICIENT COMMUNICATION

CONNECTION

[0001] The present invention relates to a system and a method for providing a secure and efficient communication connection between the networks of different service providers .

[0002] The security and reliability of telecommunication connections play an important role in the provision of telecommunication services. Originally, a telecommunication connection between two end users was provided by the same telecommunication provider having its own network, which was exclusively managed and operated by this provider. The security and reliability of the telecommunication connection established within such a proprietary network is typically ensured. However, as soon as there is a cross-network communication, e.g. when end-users served by different telecommunication providers wish to communicate with each other, the security and reliability are not guaranteed. In addition, there are intermittent or broken links of communications since the telecommunication connection between the respective end-users is established by telecommunication networks of different providers via a public link that typically does not ensure a secure connection.

[0003] Known telecommunication networks such as those described in US 6,426,955, US 6,614,781 and US 6,654,456 only partially address the above described problems.

[0004] These problems occur with respect to any of the modern telecommunication networks such as ISDN (Integrated Service Digital Network) or IP (Internet Protocol) networks. In particular, the problems are of high importance for many telecommunication applications such as VoIP (Voice over IP, telephony over the internet) or VC (Video Conferencing) using the public internet as a link between the networks of different service providers.

[0005] It is therefore an object of the invention to provide a system and a method for providing a secure, efficient and reliable communication connection between the networks of different service providers.

[0006] According to the invention, this problem is solved by a telecommunication system comprising at least a multi-point conferencing unit, a gatekeeper, a switch, an optional radius server and a firewall, the multi-point conferencing unit being connected with the firewall through the switch via the optional radius server and gatekeeper. The telecommunication system may further comprise a VPN (Virtual Private Network) connected with the firewall to allow a secure connection to separate IP networks of different telecommunication service providers. Preferably, the telecommunication system further includes an ISDN gateway connected with the switch to provide an ISDN connection to networks of different telecommunication service providers. The different types of interfaces ensure a maximum flexibility.

[0007] The telecommunication system of the present invention acts as a rerouting engine between networks of different service providers. The security and reliability of established telecommunication connections is ensured by the interaction of the firewall and gatekeeper and/or multi-point conferencing unit. The firewall prevents any unwanted data from entering the system. The gatekeeper and/or the multi¬ point conferencing unit will only reroute any incoming call and will thereby establish a connection between different users if the calling user or party is registered in the gatekeeper. The radius server is used for authentication and accounting of users. Therefore, the radius server and gatekeeper store relevant registry data required to verify the identity of a calling party.

[0008] The system is a multi-functional system and can be used for providing any type of audio, visual and/or video conference communications over ISDN and/or IP as well as telecommunications over ISDN and/or IP.

[0009] A main advantage of the present invention is that it allows a cross-network connection between independently managed and administered networks of different telecommunication service providers without interfering with any of the cross-connected networks. None of the separate networks will become a part of any other network. In fact, a connection between separate networks can be established by the telecommunication system of the present invention which acts like a central switch for these networks.

[0010] For the purpose of the present invention, a user means a service provider which manages and administers its own network and which itself serves end-users or parties, such as individuals. The service providers are registered with the system and can be identified for instance by their IP number.

[0011] A party, who wants to make a call to another party, calls from within a first telecommunication network managed and administered by a first service provider, such as British Telecom. The called party is served by a second service provider managing and administering a second telecommunication network. The telecommunication system of the present invention provides a platform for a cross-network connection between the first and the second telecommunication network to reroute the call from the first to the second telecommunication network. In case of a multi-point call, the call can also be routed to further networks of other service providers depending on the number of called parties. In order to provide the connection requested, the service provider of the calling party must be registered.

[0012] The object of the invention is also solved by a method for providing a secure and efficient communication connection. The method comprises the steps of (a) providing a telecommunication system that comprises at least a multi¬ point conferencing unit, a gatekeeper, a switch, an optional radius server and a firewall, the multi-point conferencing unit being connected with the firewall through the switch via the optional radius server and gatekeeper; (b) receiving a call from a user; (c) directing the call to the gatekeeper; (d) verifying whether the calling user is registered; (e) if the user is identified, redirecting the call to the called user. The incoming call is directly rerouted by the gatekeeper if only a point-to-point connection is requested, i.e. a connection between two users. If a connection between more than two users is requested, such as multi-point conferencing, the gatekeeper directs the incoming call to the multi-point conferencing unit which itself will reroute the incoming call via the gatekeeper to the called parties. The rerouted call can be passed through the firewall or through an ISDN gateway connected with the switch.

[0013] The connection between the firewall and the users can be established via an IP or ISDN network. The IP call will pass through the VPN on to the radius server and gatekeeper, which goes through the firewall and switch. The ISDN call will go through the gateway then onto the gatekeeper, which will also go through the switch. The outgoing call will then go through the switch which determines, depending on whether the service provider of the receiving party is on ISDN or IP, the direction of the call. If the party is on ISDN then the call will be routed to the gateway. If the call is IP then the call will go through the firewall and then onto the VPN.

[0014] Having described some of the main features of the invention, a more detailed description of the invention, from which further features will become apparent, is set forth in the remainder of the specification in conjunction with the accompanying drawing in which:

[0015] Figure 1 is a schematic diagram of a telecommunication system according to the invention.

[0016] Reference will now be made in detail to the presently preferred embodiment of the invention, which is illustrated in the drawing. The example is provided by way of explanation of the invention, and is not meant as a limitation of the invention.

[0017] The telecommunication system 2 shown in Figure 1 comprises a firewall 4, a gatekeeper 6, a switch 14, a radius server 16 and a multi-point conferencing unit 8. The firewall 4 is connected with a VPN and a router 12 to create security over the IP network. Any IP call whether incoming or rerouted and outgoing must pass the firewall, the VPN and then the router 12. Hence, the firewall 4 provides the only connection to an external IP network. An ISDN gateway 10 is connected with the switch 14. The VPN may be provided by the firewall or by a separate device.

[0018] The different types of interfaces ensure that different types of networks can be connected with each other by the inventive telecommunication system. Internally, the telecommunication system 2 is an IP network. A connection to other IP networks 20, 30 is therefore provided by the VPN interface 12, which ensures an encrypted connection between the telecommunication system 2 and other IP networks 20, 30 managed by different service providers. For instance, the VPN creates a direct connection from a party 26 at its office through a first service provider (user) 20 to the telecommunication system 2, which forwards the connection, to a second service provider (user) 30 of the receiving party 36 at the destination. The VPN creates a tunnel effect through the external network as it would with a private network. The network of each service provider 20, 30 may comprise a router 22, 32 and a firewall and VPN client 24, 26.

[0019] The ISDN gateway 10 converts ISDN into IP as well as IP into ISDN. This provides a party on an IP network with the ability of having no restrictions when wanting to dial out on either network. The same applies for a vice-versa scenario, through out the telecommunication system. Although the ISDN gateway 10 is shown in Figure 1 as a part of the multi-point conferencing unit 8, it is a separate device solely connected with the switch 14.

[0020] The switch 14 will route the call to the correct destination within the telecommunication system 2. When a switch port receives video packets, it forwards those packets only to the appropriate port for the intended recipient.

[0021] Each individual user or system will be registered with his own personal identification number on the gatekeeper 6 and radius server 16. This will be the same as if a user had his own personal mobile number or desk telephone number, which will be a unique number to the individual user or the system. When the call comes from the firewall 4, it goes to the gatekeeper 6, radius server 16 and is then rerouted out to the multi-point conferencing unit 8, or back through to the firewall 4. The gatekeeper 6 acts as an intelligent system for directing the call to the required destination. The radius server 16 acts as an intelligent system to only allow users access only if they have paid to use the system.

[0022] The multi-point conferencing unit 8 will be able to connect multi-sites into a video conference. A party 26, 36 served by a service provider 20, 30 which is registered onto the multi-point conferencing unit and creates a meeting will be known as the chair person. The chair person will be able to hold a multi-point conference as well as have full control of the conference shown by means of the screen layout as well as controlling who would be invited into the meeting. The chair person will be able to give the following parties, who would want to participate in the meeting, a password. This will ensure privacy in the meeting.

[0023] To ensure the security and reliability of the telecommunication system 2, the firewall 4 will prevent any unwanted data and thereby stops any IP traffic from entering the telecommunication system 2. The gatekeeper 6 will only connect point-to-point unless the participant establishes a multi-conference, then the call will be directed through to the multi-point conferencing unit 8. The multi-point conferencing unit 8 will enable a chair person or party to create and set the time of a meeting which will be scheduled on the multi-point conferencing unit 8 and to specify a unique password. The chair person will then inform the relevant participants or parties of the password and time of the meeting. This will enable a secure environment for a multi-conference.

[0024] The telecommunication system 2 is preferably monitored and controlled by a computer system (not shown) running software, such as available from MTS, that monitors the calls and bills according to the customers' requirements.

[0025] The functioning of the telecommunication system is now described in more detail. Typically, a party 26, 36, 38 dials out over his IP or ISDN network, i.e. the respective service provider (user) 20, 30, 40 directs the call to the telecommunication system 2. The system thus receives a call from a user. Depending on whether the incoming call is from an IP network 20, 30 or an ISDN network 40, the call is either directly passed through the VPN and router 12 or through the ISDN gateway 10. If the call comes from an ISDN network 40, then the ISDN gateway 10 processes the call so that it can be forwarded within the IP based telecommunication system 2.

[0026] The incoming call is then directed through the firewall 4, switch 14 to the gatekeeper 6 and radius server 16 which verify whether the service provider (user) of the calling party is registered. If the user is known to the system, the gatekeeper 6 will direct the call on to its destination. If only a point-to-point connection is requested the call is rerouted by the gatekeeper 6, radius server 16 through the switch 14, the firewall 4 and on to the VPN and router 12 or through the switch 14 on to the ISDN gateway 10 depending on whether the called party can be reached via an IP or an ISDN network. If the incoming call is an audio call, then the gatekeeper will treat the call as if it was a video call and route it through to its destination.

[0027] If a connection between more than two users is requested, such as multi-conferences, the gatekeeper 6 will direct the incoming call to the multi-point conferencing unit 8, which itself will reroute the incoming call via the gatekeeper 6, radius server 16 and the firewall 4 or the ISDN gateway 10 to the called users.

[0028] If a party 26, 36 served by a service provider 20, 30 on an IP network wants to make a point-to-point video call to a party 38 on an ISDN network 40, then the party 26, 36 dials out over the IP network 20, 30 of his service provider. The call is then directed to the VPN, which directs the video call through the firewall 4, switch 14 and then on to the gatekeeper 6. The gatekeeper 6 directs the video-call back through the switch 14 and on through the ISDN gateway 10, which converts the IP call to an ISDN call and vice-versa. In case of a multi-point call, the multi-point conferencing unit 8 will reroute the call.

[0029] Parts List

2 telecommunication system

4 firewall / VPN client

6 gatekeeper

O multi-point conferencing unit

10 ISDN gateway / interface

12 router

14 switch

16 radius server

20 , 30 service provider / IP network

22 , 32 router

24 , 34 firewall / VPN client

26 , 36 , 3 party

40 service provider / ISDN network

Claims

1. A telecommunication system (20) comprising a multi¬ point conferencing unit (8) , a gatekeeper (6), a switch (14) and a firewall (4) , the multi-point conferencing unit being connected to the firewall through the switch, via the gatekeeper.

2. The telecommunication system claimed in claim 1 including a radius server (16) connected between the switch and the multi-point conferencing unit.

3. The telecommunication system claimed in claim 1 or

2 including a Virtual Private Network (VPN) (12) connected to the firewall (4) to allow secure connection to other networks (20,30) .

4. The telecommunication system claimed in claim 1, 2 or 3, including an Integrated Service Digital Network (ISDN) gateway (10) connected to the switch (14) to provide an ISDN connection to networks (40) .

5. The telecommunication system claimed in claim 3 or 4, wherein the other networks include Internet Protocol (IP) networks (20,30) or telecommunications networks (40) of differing service providers.

6. The telecommunication system claimed in any claim 2 to 5, wherein the radius server (16) is adapted for authentication and accounting of system users.

7. The telecommunication system claimed in claim 6, wherein the radius server (16) and gatekeeper (6) are adapted to store relevant registry data required to verify the identity of a calling party or system user.

8. The telecommunication system claimed in any preceding claim, wherein the system is a multi-functional system and can be used for providing any type of audio, visual and/or video conference communications over ISDN and/or IP as well as telecommunications over ISDN and/or IP.

9. A method for providing a secure and efficient communication connection, comprises the steps of

(a) providing a telecommunication system (2) comprising a multi-point conferencing unit (8) , a gatekeeper (6) , a switch

(14) and a firewall (4) , wherein the multi-point conferencing unit is connected to the firewall through the switch, via the gatekeeper;

(b) receiving a call from a user;

(c) directing the call to the gatekeeper (6) ;

(d) verifying whether the calling user is registered;

(e) if the user is identified, redirecting the call to the called user.

10. The method claimed in claim 9, wherein the telecommunications system includes a radius server (16) connected between the switch (14) and the multi-point conferencing unit (8) .

11. The method as claimed in claim 9 or 10, wherein the incoming call is directly rerouted by the gatekeeper (6) if a point-to-point connection (a connection between two users) is requested.

12. The method claimed in claim 11, wherein if a connection between more than two users is requested, such as a multi-conference connection, the gatekeeper (6) directs the incoming call to the multi-point conferencing unit (8) which, in turn, reroutes the incoming call via the gatekeeper (6) to the users .

13. The method claimed in claim 12, wherein the rerouted call is passed through the firewall (4) or through an ISDN gateway connected to the switch.

14. The method claimed in any claim 9 to 13, wherein the connection between the firewall (4) and the users is established via an IP or ISDN network.

15. The method as claimed in claim 14, wherein an IP call passes through a VPN (12) to the radius server (16), and then through the firewall (4) via the gatekeeper (6) and switch (14) .

16. The method claimed in claim 14, wherein an ISDN call passes through the ISDN gateway (10) and then onto the gatekeeper (6) via the switch (14) .

17. The method claimed in claim 15 or 16, wherein the outgoing call passes through the switch (14) which determines, depending on whether the service provider of a receiving party is on ISDN or IP, the direction of the call.

18. The method claimed in claim 17, wherein if the party is on ISDN, then the call is routed to the gateway (10) and, if the call is IP, then the call goes through the firewall (4) and then onto the VPN (12) .