SIP Proxy Triggering for NAT-Blocked Mobile Terminals
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in allowing IP devices to initiate SIP communication sessions with mobile or private network terminals, particularly due to limited public IP addresses and the presence of Network Address Translators (NAT) and firewalls, which restrict IP connectivity and security.
Innovation Solution
A system and method that utilize a network node, such as a SIP proxy, capable of sending triggers independent of NAT and firewalls to register terminals and establish SIP communication sessions, allowing originating clients to initiate connections without requiring additional public IP addresses while maintaining firewall and gateway functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a NAT is used to translate private IP addresses to public IP addresses, then address conservation and security are improved, but IP devices cannot initiate SIP communication sessions with terminals in private networks
Solution Approach 1:
The terminal initiates a registration message to the SIP proxy server before any communication session is established. This preliminary registration action creates a binding between the terminal's private IP address and a public identifier (SIP URI), enabling the SIP proxy to forward incoming SIP requests to the terminal even though the terminal is behind NAT. The registration occurs in advance, allowing subsequent communication to work through the pre-established mapping.
Solution Approach 2:
The SIP proxy server acts as an intermediary between IP devices in public networks and terminals in private networks. It receives SIP requests from IP devices, translates or redirects them using the registration information, and forwards them to the appropriate terminal behind NAT. This intermediary resolves the connectivity issue by bridging the gap between public and private network domains without requiring changes to the NAT infrastructure.
2Adaptability or versatility
If public IP addresses are allocated to terminals in mobile networks, then IP devices can initiate SIP sessions, but the limited public IP address space is exhausted
Solution Approach 1:
The SIP proxy server serves as an intermediary that eliminates the need for terminals to have public IP addresses. It maintains a mapping database that associates terminal private IP addresses with public SIP URIs, allowing SIP requests to be routed to terminals without consuming public IP address space. The proxy handles the address translation and routing functions that would otherwise require public IP allocation.
Solution Approach 2:
Instead of allocating public IP addresses to terminals, the system creates a virtual copy or representation of the terminal's identity in the form of a SIP URI in the public domain. This SIP URI acts as a proxy identifier that maps to the terminal's actual private IP address, allowing public network entities to reference and communicate with the terminal without needing the terminal's real public IP address.
3Reliability
If firewalls and gateways are deployed to secure private networks, then security is improved, but incoming SIP requests from IP devices are blocked
Solution Approach 1:
The terminal performs a preliminary registration with the SIP proxy server before receiving any incoming SIP requests. This advance registration action creates a pre-approved mapping that allows the firewall to recognize and permit incoming SIP requests destined for the terminal. The firewall can be configured to allow traffic to the SIP proxy for registered terminals, enabling session initiation while maintaining security controls.
Solution Approach 2:
The SIP proxy server acts as an intermediary that receives and validates all incoming SIP requests before forwarding them to terminals behind firewalls. It maintains a registry of authorized terminals and only forwards requests to registered devices. This intermediary layer allows the firewall to maintain strict security policies while still enabling legitimate SIP communication through the proxy.
Data Source
AI summary
A system is provided for establishing a communication session with a terminal (i.e., terminating SIP client). The system includes a network node (e.g., SIP proxy) located in a network across which an originating client is capable of communicating. The network node is capable of sending a trigger to the terminal independent of the network. The network node is also capable of receiving a registration message, in response to the trigger, from the terminal across the network. In this regard, the network node is capable of receiving the registration message to thereby identify the terminal across the network such that a communication session is capable of being established with the terminal based upon the identity of the terminal across the network.