Media Stream Identifier Negotiation for Port Conservation in IMS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for real-time media stream access in IMS networks face issues such as excessive port occupation, high demand for public network IP addresses, and vulnerability to malicious attacks due to the lack of media stream identifier negotiation and authentication.
Innovation Solution
The implementation of media stream identifier negotiation and authentication in the IMS network architecture, which includes a signaling processing module in the SBC to allocate and verify media stream identifiers, and a media processing module to establish secure media packet transmission paths.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If first packet learning method is used to obtain terminal IP address and port information after NAT, then the SBC can identify terminal information, but excessive ports are occupied and public network IP addresses are heavily demanded
Solution Approach 1:
The patent introduces a media stream identifier as an intermediary element that mediates between the terminal and SBC. Instead of directly using port numbers for identification, the media stream identifier serves as an intermediate reference that reduces the need for port occupation while maintaining reliable terminal information identification.
Solution Approach 2:
The patent changes the identification parameter from port number to media stream identifier. By negotiating and authenticating media stream identifiers in the signaling process, the system transforms the identification mechanism to use a different parameter (media stream identifier) that does not consume port resources, thereby resolving the port occupation issue.
2Device complexity
If conventional media stream access method is used without identifier negotiation, then the system is simpler to implement, but the system is vulnerable to malicious attacks
Solution Approach 1:
The patent applies preliminary action by negotiating and authenticating media stream identifiers before establishing the actual media stream connection. This preliminary identification and authentication process ensures that only authorized media streams can access the system, preventing malicious attacks before they can occur, while keeping the implementation complexity manageable through standardized signaling procedures.
3Reliability
If media stream identifier negotiation and authentication are implemented, then secure access to media streams is enhanced and malicious attacks are prevented, but the system complexity increases
Solution Approach 1:
The patent makes the media stream identifier serve multiple functions: it acts as an identification element, an authentication token, and a reference for media stream routing. This multi-functionality reduces the need for separate mechanisms for each function, thereby enhancing security without proportionally increasing system complexity. The identifier is negotiated once in the signaling phase and then reused throughout the media stream lifecycle.
Data Source
Figure 1~2
Figure 3
Figure 4~5
AI summary
The present disclosure provides a method and apparatus for real-time media stream access, a communication device, and a terminal. The method includes following operations. A communication device determines a media stream identifier corresponding to a real-time media stream in a process of establishing a real-time media stream session. The communication device allocates a local port for the real-time media stream, wherein each local port corresponds to one or more real-time media streams. The communication device forwards a media packet carrying the real-time media stream after the real-time media stream session is established, wherein the media packet carries the media stream identifier.