Network Port Redirection via Intermediary Server for H.323 Signaling

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

H.323 communication systems face issues with secure and efficient communication due to filtering of signaling through well-known ports, requiring manual adjustments that can lead to security risks and high maintenance costs, especially when dealing with large numbers of users. Additionally, manual protocol switching between H.323 and SIP protocols is slow and inflexible.

Innovation Solution

A method for automatically redirecting network communication ports and switching protocols by determining the need for port redirection and sending a redirected address to the transmitting end via a currently communicating port, allowing nodes to continue service on alternative ports and switch between H.323 and SIP protocols without manual intervention.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual adjustment of firewall filtering criteria is performed, then signaling can pass through well-known ports, but security issues arise

Engineering Contradiction:
Improvesignaling transmissionVSAvoidsecurity issues
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary mechanism (alternative port + redirection server) between the node and gatekeeper. When well-known ports are filtered, signaling is redirected through alternative ports via a redirection server, avoiding direct modification of firewall criteria while maintaining security and enabling communication.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If an unknown port is opened in the firewall, then communication can continue, but maintenance workload and cost increase for large numbers of users

Engineering Contradiction:
Improvecommunication continuityVSAvoidmaintenance workload
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent creates a universal redirection mechanism that serves multiple users simultaneously. The redirection server provides a centralized solution that handles port redirection for numerous users through a single system, eliminating the need to manually configure each user's communication path and reducing overall maintenance complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

A redirection server is introduced as an intermediary component that manages alternative port routing for multiple users. This centralized intermediary handles the complexity of port redirection, allowing individual users to communicate through alternative ports without requiring manual configuration for each user, thus reducing maintenance workload.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If manual switching of protocols is performed, then nodes can be directed to SIP proxy server or H.323 gatekeeper, but the switching becomes slow and inflexible

Engineering Contradiction:
Improveprotocol switching capabilityVSAvoidswitching speed
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent implements dynamic protocol switching capability where nodes can automatically switch between H.323 and SIP protocols based on real-time network conditions and gatekeeper availability. The system monitors protocol status and performs automatic switching without manual intervention, making the protocol selection flexible and responsive to changing conditions rather than static and manual.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP2075980B1A method and network communication system for redirecting network communication port
Publication Date: 2013.12.11 HUAWEI TECH CO LTD
  • EP2075980B1 patent drawingFigure 1
  • EP2075980B1 patent drawingFigure 2~3
  • EP2075980B1 patent drawingFigure 4~6

AI summary

A method for redirecting network communication port and a network communication system thereof are disclosed. When a receiving end determines that a communication port needs to be redirected, the receiving end sends a redirected address to a transmitting end via a communication port. The redirected address includes redirected address information of a transport layer. The redirected address may also include address information of a network layer of a receiving end which can be reached via a communication port corresponding to the redirected address information of the transport layer. The address information of the network layer of the receiving end includes the address of a network layer of the original receiving end, the address of a network layer of the new receiving end capable of managing the transmitting end, or the address of the network layer of the receiving end supporting the new protocol. According to the present invention, when the gatekeeper is not able to receive, via a well-known port, some of signaling sent from a node, the gatekeeper can inform the transmitting end to switch the port automatically, allowing thereby the node to continue the previous service. The present invention further allows the node to perform protocol switching automatically.