Anonymous GRUU Generation for SIP User Agent Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems using Session Initiation Protocol (SIP) signaling fail to provide user agent anonymity, particularly during call transfers, as the identity of the user agent is ascertainable by the receiving party.
Innovation Solution
The generation and transmission of an anonymous Globally Routable User Agent URI (GRUU), referred to as an Anonymous Globally Routable User Agent URI (AGRUU), which is used in SIP messages to maintain user agent anonymity by encrypting and randomizing the identifier, ensuring that the actual identity of the user agent is not revealed to third parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a globally routable user agent URI (GRUU) is used to enable reliable routing and communication, then routing reliability is improved, but user agent identity privacy deteriorates as the identity becomes ascertainable by third parties
Solution Approach 1:
The solution segments the routing functionality from the identity information. The contact header field is divided into a route set (for reliable routing) and a contact URI (for anonymity). The route set contains the actual routing path through proxies, while the contact URI provides an anonymous identifier that doesn't reveal the user agent's true identity, thus resolving the contradiction between routing reliability and privacy.
Solution Approach 2:
The invention introduces an intermediary mechanism where the contact URI acts as a mediator between the user agent and external parties. Instead of exposing the actual user agent identity directly, the system uses this intermediary contact identifier that can be routed reliably but doesn't reveal the true identity, allowing third parties to communicate without knowing the actual user agent's identity.
2Ease of operation
If the contact header field includes the user agent's actual URI for direct communication, then communication directness is improved, but security deteriorates as the identity is exposed to potential attackers
Solution Approach 1:
The contact header field is segmented into route set and contact URI components. The route set handles the actual communication path securely through proxies, while the contact URI provides an anonymous endpoint. This segmentation allows communication to appear direct through the contact URI while actually being routed securely through the proxy route set, protecting the user agent's true identity from exposure.
3Loss of information
If anonymous identifiers are used to protect user agent privacy, then privacy is improved, but routing precision deteriorates as the identifier must be globally routable
Solution Approach 1:
The contact URI serves as an intermediary that maintains routing precision while protecting privacy. It is a globally routable identifier that can be resolved through the proxy route set to reach the specific user agent. The intermediary contact URI provides enough information for precise routing through the proxy chain while not exposing the actual user agent identity, thus maintaining both privacy and routing precision.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
A method for facilitating a Session Initiation Protocol (SIP) communication by a user agent (12) having a user agent identity while maintaining anonymity of the user agent (12), said method comprising: sending a request comprising a field populated with a value indicating a request for an anonymous globally routable user agent uniform resource identifier; and receiving a response (46) comprising the anonymous globally routable user agent uniform resource identifier (58), wherein the anonymous globally routable user agent uniform resource identifier comprises a network address identifier that does not disclose the user agent identity during subsequent SIP communications.