Network telephone real-time identification and filtering method based on session initiation protocol

Abstract

The invention discloses a network telephone real-time identification and filtering method based on a session initiation protocol. The invention comprises a data acquisition layer, a protocol analysis layer, a flow identification layer, a flow control layer and a presentation layer in sequence according to the data flow direction, wherein the flow identification layer works in an unidirectional flow collection mode, the payload depth detection is performed to received grouping information according to the payload characteristic of an SIP, the SIP session information is transmitted to the flow control layer, and the flow control layer works in a parallel mode and performs filtering to the illegal SIP session by using a signaling masquerading technology. The invention can rapidly and accurately identify the network telephone information stream based on the SIP signaling and also enables the illegal SIP session to be effectively blocked or filtered.

Description

technical field [0001] The invention belongs to the technical field of network communication, and in particular relates to a method for real-time identification and filtering of an Internet phone based on a session initiation protocol. Background technique [0002] VoIP (Voice over Internet Protocol) is a telephone system based on IP voice transmission technology, which can widely use the Internet and the global IP interconnection environment to provide more and better services than traditional services. The price of calls and better voice quality are widely used by the public. VoIP has two common application layer control (signaling) protocols, one is the H.323 protocol, and the other is the Session Initiation Protocol (SIP, Session Initiation Protocol). The SIP protocol is an application-layer control signaling protocol for real-time communication applications in an HTTP-based IP network. [0003] Attracted by huge profits, a large number of illegal VoIP operations are f...

AI Technical Summary

Problems solved by technology

[0003] Attracted by huge profits, a large number of illegal VoIP operations are flooding the formal telecom market, which not only leads to the loss of traffic of legal operators, but also breaks the competition pattern of the original telecom market and brings a huge impact on traditional voice services

At the same time, because illegal VoIP lacks the necessary service quality guarantee, it only relies on low prices to attract users, which also damages the interests of users to a certain extent.

[0004] However, the traditional method of filtering Internet calls based on Session Initiation Protocol (SIP) cannot effectively filter and block the information flow of SIP phones

[0005] For example, in the traditional IP address filtering method, once the user's IP address is filtered, all other services of the user, including normal Internet access, are prohibited. This method is not feasible

[0006] In the traditional port detection method, although the protocol stipulates the default port of SIP signaling, most applications use dynamically allocated ports, so it is impossible to simply identify the VoIP information flow based on SIP from the port.

[0007] Another example is the traditional straight-line series flow control method, which needs to deploy detection devices on the real path of network traffic, which may also form a processing bottleneck and a single point of failure, which will affect the overall network topology and increase the transmission delay of the entire network. It has a certain adverse impact on the original network, but the parallel mode cannot actually touch the real data flow, and cannot directly operate and control the data flow

Images