Session and medium authorization method in IP video telephone system based on session start protocol

Abstract

The present invention relates to computer network management technology, and is one session and medium authorization method in IP video telephone system based on session initialization protocol. Thepresent invention adopts network management technology based on strategy in realizing session authorization, and one strategy server is used in generating management command to inform the session control server to execute management action. The present invention solves the session and medium authorization problem in IP video telephone system and can control effectively the session occupied network resource. The present invention features that during session course, all the network entities exchange authorization message via transmitting authorization token to reduce message exchange times, decrease the mutual independence between the network entities and obtain even more flexibility.

Description

technical field [0001] The invention relates to computer network management technology, in particular to a session initiation protocol (SIP)-based IP telephone system management technology. Background technique [0002] IP video telephony is a rapidly developing business. It transmits voice and video signals through the IP network. Unlike the traditional public telephone network, the IP network is an open network, and it is also an insecure network, which is more vulnerable to attacks. . Therefore, the IP video phone system has higher security requirements than the traditional phone system, and additional mechanisms are needed to ensure the legal use of network resources. In the IP video phone system, the establishment process of each session connection is independent of each other, their security requirements are different from each other, and the network status is also different. Therefore, it is necessary to establish a security mechanism for each session, which needs to...

AI Technical Summary

Problems solved by technology

[0003] Existing authentication and authorization technologies mainly include authorization technologies based on Remote Authentication Dial-in User Service (RADIUS), authentication and authorization technologies based on Kerberos, and public key infrastructure (PKI)-based technologies. Authentication and authorization technologies, etc., but these technologies are mainly used to authenticate users, have little support for authorization, and are not suitable for IP video phone systems, making it difficult to conveniently authorize sessions and media in IP video phones; On the other hand, the authentication and authorization technology in the IP phone system has the disadvantages of cumbersome message exchange and too many pre-trust relationships, and there is no targeted design for video signal transmission. Therefore, it is necessary to solve the problems in the IP video phone system. Authorization issue for

Images