JP2021010148A - Telephone exchange device, telephone exchange system, control method, and program - Google Patents

Abstract

To provide a telephone exchange device capable of preventing unauthorized use, a telephone exchange system, a control method and, a program.SOLUTION: A telephone exchange device 10 includes: a storage unit 11 that stores a blacklist 11a and a temporary blacklist 11b; an authentication unit 12 that receives a registration message for registering an IP phone user and performs a series of authentication processing of the registration message; a registration unit 13 that registers a piece of information of a registration person in the temporary blacklist 11b or the blacklist 11a depending on when the registration message authentication failed and whether the registration person information in the registration message is registered in temporary blacklist 11b; and a response determination unit 14 that determines whether to reply a response message to the registration message depending on whether the registration person information in the registration message is registered in the blacklist 11a.SELECTED DRAWING: Figure 2

Description

The present invention relates to telephone exchange devices, telephone exchange systems, control methods and programs.

In recent years, with the spread of IP (Internet Protocol) networks such as the Internet, IP phones have been widely used, and IP phones are also supported by button phone devices and telephone exchange devices such as IP-PBX (IP Private Branch eXchange). It is being advanced. On the other hand, malicious and unauthorized access via IP networks is increasing, and countermeasures against unauthorized use are required.

As related techniques, for example, Patent Documents 1 and 2 are known. Patent Document 1 describes a technique for rejecting a nuisance call on a telephone terminal based on caller information including a telephone number and a caller's name. Patent Document 2 describes a technique for determining unauthorized communication based on a port number or an IP address in an IP telephone terminal.

Japanese Unexamined Patent Publication No. 2003-134218 Japanese Unexamined Patent Publication No. 2004-320330

As described above, in the related technology, illegal caller information and the like are registered and the corresponding access is denied. However, there is a problem that it may be difficult to prevent unauthorized use because the related technology does not consider attacks such as brute-force attack (brute-force attack).

In view of such problems, it is an object of the present disclosure to provide a telephone exchange device, a telephone exchange system, a control method and a program capable of preventing unauthorized use.

The telephone exchange device according to the present disclosure includes a storage unit that stores a blacklist for registering a blacklist target person and a temporary blacklist for registering a temporary blacklist target person, and registration for registering an IP telephone user. Depending on whether or not the authentication unit that receives the message and performs the authentication process of the registration message and the authentication of the registration message have failed and the registrant information of the registration message is registered in the temporary blacklist. , The registration unit that registers the registrant information in the temporary blacklist or the blacklist, and a response message to the registration message depending on whether or not the registrant information of the registration message is registered in the blacklist. It is provided with a response determination unit for determining whether or not to reply.

The telephone exchange system according to the present disclosure is a telephone exchange system including an IP telephone terminal and a telephone exchange device, and the telephone exchange device is a blacklist for registering a blacklist target person and a temporary blacklist target person. A storage unit that stores a temporary blacklist for registering a blacklist, an authentication unit that receives a registration message for registering an IP telephone user from the IP telephone terminal, and performs an authentication process for the registration message, and a registration message of the registration message. Depending on whether the authentication has failed and the registrant information of the registration message is registered in the temporary blacklist, the registration unit that registers the registrant information in the temporary blacklist or the blacklist, and It is provided with a response determination unit that determines whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.

The control method of the telephone exchange device according to the present disclosure stores a blacklist for registering a blacklist target person and a temporary blacklist for registering a temporary blacklist target person, and registers for registering an IP telephone user. The registration is performed according to whether or not the message is received, the registration message is authenticated, the registration message authentication fails, and the registrant information of the registration message is registered in the temporary blacklist. Whether or not to register the person information in the temporary blacklist or the blacklist and return a response message to the registration message depending on whether or not the registrant information of the registration message is registered in the blacklist. Is to judge.

The program according to the present disclosure stores a blacklist for registering blacklisted persons and a temporary blacklist for registering temporary blacklisted persons, and receives a registration message for registering an IP telephone user. Depending on whether or not the registration message is authenticated, the registration message authentication fails, and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is temporarily used. A process of registering in a blacklist or the blacklist, and determining whether to return a response message to the registered message according to whether or not the registrant information of the registered message is registered in the blacklist. Is a program for causing a telephone exchange device to execute.

According to the present disclosure, it is possible to provide a telephone exchange device, a telephone exchange system, a control method and a program capable of preventing unauthorized use.

It is a block diagram which shows the outline of the telephone exchange system which concerns on embodiment. It is a block diagram which shows the outline of the telephone exchange apparatus which concerns on embodiment. It is a block diagram which shows the structural example of the button telephone system which concerns on Embodiment 1. FIG. It is a figure which shows the example of the blacklist used in the button telephone apparatus which concerns on Embodiment 1. FIG. It is a figure which shows the example of the temporary blacklist used in the button telephone apparatus which concerns on Embodiment 1. FIG. It is a sequence diagram which shows the operation example of the button telephone system which concerns on Embodiment 1. FIG. It is a flowchart which shows the operation example of the button telephone apparatus which concerns on Embodiment 1. FIG. It is a flowchart which shows the operation example of the button telephone apparatus which concerns on Embodiment 1. FIG.

(Examination leading to the embodiment)
SIP (Session Initiation Protocol) is used as a protocol for realizing an IP telephone. Many button telephone devices and IP-PBXs are equipped with a SIP server function, and such products can accommodate a SIP extension telephone. The SIP extension telephone communicates with the SIP server using the SIP protocol, sends a registration (REGISTER) message to the SIP server, and when the registration is successful, the function of the SIP server (button telephone device, IP-PBX) and It becomes possible to use resources.

When a malicious attacker determines that the IP address of the attack target has a SIP server function, it sends a message to impersonate a legitimate SIP extension telephone. For example, by returning an error message to the attacker's SIP message, the corresponding IP address is recognized as having a SIP function.

Generally, in the SIP server, password authentication is performed in order to allow only a legitimate SIP extension telephone to use the system. In response to this authentication, the attacker performs a brute force attack with the ID and password changed until the registration is successful. Brute force attack is an attack method that attempts to decrypt a user account (ID and password) by using a pattern of all possible character combinations. Once the registration is successful due to this attack, the resources and functions in the button telephone device become available, resulting in damage such as international fraudulent calls being made from the button telephone device using an outside line. It has been reported. In addition, the brute force attack itself for hijacking becomes a load on the button telephone device, which hinders normal operation.

As described above, there is a problem that the related technology cannot prevent unauthorized use due to brute force attack or the like in the SIP-compatible button telephone device or IP-PBX. That is, due to brute force attacks, user accounts (IDs and passwords) are decrypted and illegally used, and damages such as being charged a high international call charge are increasing. This issue is due to the difficulty in distinguishing between legitimate phones and attacker phones. That is, since the attacker also communicates using the SIP protocol, the button telephone device cannot distinguish between the legitimate user and the attacker, and has no choice but to respond to the received SIP message. In addition, by replying to the SIP message, it was leaked to the attacker that the corresponding IP address had the SIP function.

Therefore, in the following embodiment, it is possible to provide a countermeasure against malicious attacks such as brute force attack and prevent unauthorized use.

(Outline of Embodiment)
FIG. 1 shows an outline of a telephone exchange system according to an embodiment, and FIG. 2 shows an outline of a telephone exchange device according to an embodiment. As shown in FIG. 1, the telephone exchange system 1 according to the embodiment includes a telephone exchange device 10 and an IP telephone terminal 20 that are communicatively connected to each other.

As shown in FIG. 2, the telephone exchange device 10 includes a storage unit 11, an authentication unit 12, a registration unit 13, and a response determination unit 14. The storage unit 11 stores a blacklist 11a for registering a blacklist target person (an attacker who performs unauthorized use) and a temporary blacklist 11b for registering a temporary blacklist target person. The authentication unit 12 performs an authentication process of a registration message for registering an IP telephone user, which is received from the IP telephone terminal 20. The registration unit 13 sets the registrant information in the temporary blacklist 11b or the blacklist 11a depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist 11b. Register with. The response determination unit 14 determines whether or not to return the response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist 11a.

As described above, in the embodiment, when the authentication of the registration message fails, the registrant information is registered in the temporary blacklist or the blacklist according to the registration status of the temporary blacklist, and further, according to the registration status of the blacklist. To determine whether to reply the response message. This makes it possible to register an attacker such as a brute force attack on a blacklist and prevent unauthorized use by the attack.

(Embodiment 1)
Hereinafter, the first embodiment will be described with reference to the drawings. First, a configuration example of the button telephone system and the button telephone device according to the present embodiment will be described with reference to FIG. As shown in FIG. 3, the button telephone system 2 according to the present embodiment includes a button telephone device 100 and a plurality of SIP terminals 201 and 202. The button telephone system 2 is a system in which the button telephone device 100 accommodates an extension telephone (button telephone) such as a SIP terminal 201 and performs incoming / outgoing call control (call control) to enable an extension call, an outside line call, or the like.

The SIP terminals 201 and 202 are SIP extension telephones (IP telephone terminals), and are communicably connected via the IP network 300, which is a private network. The button telephone device 100 and the SIP terminals 201 and 202 send and receive messages according to the SIP protocol for making an IP call (VOIP). The SIP terminals 201 and 202 have a User-Ant (UA) function of the SIP protocol, and a registration (REGISTER) message is sent to the button telephone device 100 in order to register a user (User-Ant) of an IP call. Send.

Here, the SIP terminals 201 and 202 are the legitimate SIP terminal 201 and the attacker's SIP terminal 202. That is, the legitimate SIP terminal 201 transmits a REGISTER message using a legitimate user ID and password, and the attacker's SIP terminal 202 transmits a REGISTER message using an invalid user ID and password.

The button telephone device 100 is a main device (telephone exchange device) having a SIP server function, and is an extension call between the SIP terminal 201 or the like and another SIP terminal on the IP network 300, or an outside line with an IP telephone of an external network. Controls incoming and outgoing calls for calls. The button telephone device 100 includes a control unit 101, an IP interface 102, a SIP control unit 103, a blacklist database 104, and a temporary database 105. In addition, the button telephone device 100 includes a storage unit and the like for storing authentication information (user ID and password) necessary for performing the operation according to the present embodiment described later. The button telephone device 100 may be an IP-PBX having a SIP server function, or another exchange device, a server device, or the like having a SIP server function.

The control unit 101 is a main control unit that performs the main control of the button telephone device 100, and controls the operation of each unit of the button telephone device 100. The control unit 101 controls the operation of the IP interface 102 and the SIP control unit 103 as main control, and also performs protocol processing other than SIP. For example, the function of the control unit 101 is realized by executing the main control program on the memory with a processor such as a CPU (Central Processing Unit).

The IP interface 102 is an IP communication unit that performs IP communication with the SIP terminal 201 and the like via the IP network 300. The IP interface 102 is also a storage unit for accommodating the SIP terminal 201 or the like, which is a SIP extension telephone. The IP interface 102 transfers a message between the SIP control unit 103 and the IP network 300 when the transmitted / received IP packet is a SIP message, and when the transmitted / received IP packet is another message, the control unit 101 and the IP network 300 Transfer messages between.

The SIP control unit 103 is a control unit that performs control (call control) as a SIP server function according to the SIP protocol. The SIP control unit 103 analyzes and generates a SIP message transmitted to and received from the SIP terminal 201 and the like via the IP interface 102 and the IP network 300. For example, the function of the SIP control unit 103 is realized by executing the SIP control program on the memory with a processor such as a CPU.

The SIP server function includes a proxy server that performs SIP message transfer processing, a redirect server that performs response processing for the SIP message transfer destination, and a registrar that receives REGISTER messages and performs User-Agent registration processing, as defined by the SIP protocol. , A function as a location server that manages the location of the registered User-Agent is included. The function of each server may be realized by a plurality of devices, but the SIP control unit 103 of the button telephone device 100 has at least a function as a registrar because it performs a reception process of a REGISTER message.

Further, the SIP control unit 103 has a function for performing the operation according to the present embodiment described later. That is, the SIP control unit 103 has a function of performing authentication processing (authentication unit) of the received REGISTER message, registration processing (registration unit) of the blacklist database 104 and temporary database 105, response processing (response determination unit) for the REGISTER message, and the like. Has. For example, as a registration process, if the authentication of the REGISTER message fails and the registrant information of the REGISTER message is not registered in the temporary blacklist 105a, the registrant information is registered in the temporary blacklist 105a and the REGISTER message is displayed. If the authentication fails and the registrant information of the REGISTER message is registered in the temporary blacklist 105a, the registrant information is registered in the blacklist 104a. As a response process, when the registrant information of the REGISTER message is not registered in the blacklist 104a, a normal response message or an error response message is returned depending on the authentication result of the REGISTER message, and the registrant information of the REGISTER message is displayed. When registered in the blacklist 104a, the REGISTER message is discarded without returning the response message to the REGISTER message.

The blacklist database 104 is a blacklist storage unit (storage unit) that stores (stores) the blacklist 104a. The temporary database 105 is a temporary blacklist storage unit (storage unit) that stores (stores) the temporary blacklist 105a. The blacklist database 104 and the temporary database 105 are composed of, for example, volatile memory (volatile storage device) such as RAM (Random Access Memory), but may be composed of non-volatile memory (nonvolatile) such as flash memory. Good. Further, either or both of the blacklist database 104 and the temporary database 105 may be used as an external storage device of the button telephone device 100.

FIG. 4 shows an example of the blacklist 104a stored in the blacklist database 104. The blacklist 104a is a list for registering information on a blacklist target person, and registers information for identifying and discarding a REGISTER message from an attacker. Specifically, as shown in FIG. 4, the blacklist 104a has a column for storing an index, an IP address, and a user-agent. That is, in the blacklist 104a, the IP address of the attacker's SIP terminal 202 and the User-Agent information are registered in association with each index. The IP address and User-Agent information are information included in the REGISTER message, the IP address is the IP address of the SIP terminal (IP layer identification information), and the information for identifying the User-Agent on the SIP protocol (session). Layer identification information). In this example, the IP address = "XXX.XXX.XXX.XXX" and the User-Agent = "SIP APP" are associated with each other.

FIG. 5 shows an example of a temporary blacklist 105a stored in the temporary database 105. The temporary blacklist 105a is a list for registering information on a temporary blacklist target person, and temporarily registers attacker information in order to determine an attacker to be registered on the blacklist 104a. Specifically, as shown in FIG. 5, the temporary blacklist 105a has a column for storing an index, an IP address, a User-Agent, and a user ID. That is, in the temporary blacklist 105a, the IP address, User-Agent information, and user ID (extension number) of the attacker's SIP terminal 202 are registered in association with each index. The IP address, User-Agent information, and user ID are information included in the REGISTER message, and the user ID is information used for determining the authentication process together with the password. In this example, the IP address = "XXX.XXX.XXX.XXX", the User-Agent = "SIP APP", and the user ID = "AAA" are associated with each other.

In the present embodiment, when a registration (REGISTER) message specifying another user ID (extension number) is received from a sender having an IP address and User-Agent information registered in the temporary blacklist 105a. Determines that the sender is an attacker because it can be determined that a valid user ID is being searched for by a brute force attack.

In particular, in the present embodiment, the registration message is monitored, and if the user authentication by the account (ID & password) fails for the first time, an error response is returned and the registration requester (IP address, User-Agent header information). Is registered in the temporary blacklist 105a, and if it fails the second time, an error response is returned, the registration requester (IP address, User-Agent header information) is registered in the blacklist 104a, and the registrant of the blacklist 104a For the registration message of, the message is discarded without returning an error response. This makes it possible to deal with brute force attacks. That is, if the user authentication by the account (ID & password) fails twice, the registration message from the same requester (IP address, User-Ant header information) is ignored, so that the user account (ID & password) may be decrypted. It is possible to prevent charges for high international telephone charges due to unauthorized use.

Next, an operation example when ignoring the REGISTER message from the SIP terminal 202 of the attacker to the button telephone device 100 will be described using the sequence of FIG.

When the button telephone device 100 receives the REGISTER message from the attacker's SIP terminal 202 (S101), the button telephone device 100 analyzes the message and authenticates the user ID and password (S102). For example, the REGISTER message contains an IP address = "XXX.XXX.XXX.XXX", a User-Agent = "SIP APP", a user ID = "AAA" and a password, and the button telephone device 100 has this. Determine if the user ID and password are legitimate.

If the user ID and password of the received REGISTER message do not match the correct user ID and password stored in the button telephone device 100, the button telephone device 100 will use the SIP terminal 202 based on the received REGISTER message. The IP address, User-Agent information, and user ID are registered in the temporary blacklist 105a of the temporary database 105 (S103), and an error response is transmitted to the SIP terminal 202 (S104). As shown in FIG. 5, the temporary blacklist 105a is combined with the IP address = "XXX.XXX.XXX.XXX", User-Agent = "SIP APP", and user ID = "AAA" included in the received REGISTER message. To register.

When a REGISTER message is subsequently transmitted from the SIP terminal 202 (S105), the button telephone device 100 analyzes the message and authenticates the user ID and password (S106). For example, the REGISTER message contains an IP address = "XXX.XXX.XXX.XXX", a User-Agent = "SIP APP", a user ID = "BBB" and a password.

If the user ID and password of the received REGISTER message do not match the correct user ID and password stored in the button telephone device 100, the button telephone device 100 acquires the temporary blacklist 105a of the temporary database 105. If the temporary blacklist 105a has the same IP address and User-Agent combination registered as the received REGISTER message and the user IDs are different, the button telephone device 100 determines that the SIP terminal 202 is the attacker's terminal. , The IP address of the SIP terminal 202 and the User-Agent information are registered in the blacklist 104a of the blacklist database 104 (S107), and an error response is transmitted to the SIP terminal 202 (S108).

The received REGISTER message includes the IP address = "XXX.XXX.XXX.XXX", User-Agent = "SIP APP", user ID = "BBB", and the temporary blacklist 105a includes the IP address = ". A combination of "XXX.XXX.XXX.XXX", User-Ant = "SIP APP", and user ID = "AAA" is registered, and there is a combination in which the IP address and User-Agent match and the user ID does not match. Therefore, as shown in FIG. 4, the IP address = "XXX.XXX.XXX.XXX" and the User-Agent = "SIP APP" included in the received REGISTER message are registered in the blacklist 104a in combination.

If the temporary blacklist 105a does not register the same IP address and User-Agent combination as the received REGISTER message, the button telephone device 100 is suspected of being a new attacker, so that the temporary blacklist is the same as in S103. Register with 105a.

When a REGISTER message is subsequently transmitted from the SIP terminal 202 (S109), the button telephone device 100 registers the same IP address and User-Agent combination as the received REGISTER message in the blacklist 104a of the blacklist database 104. Search for the presence (S110). For example, the REGISTER message contains an IP address = "XXX.XXX.XXX.XXX", a User-Agent = "SIP APP", a user ID = "CCC" and a password.

When the blacklist 104a and the information of the REGISTER message match, the button telephone device 100 determines that the sender of the REGISTER message is an attacker and does not return the response of the SIP message (S111). The received REGISTER message contains the IP address = "XXX.XXX.XXX.XXX" and User-Agent = "SIP APP", and the blacklist 104a also contains the IP address = "XXX.XXX.XXX.XXX". , User-Ant = "SIP APP" combination is registered, and the IP address and User-Agent match, so no response is returned.

Next, using the flowchart of FIG. 7, when a REGISTER message is sent from the legitimate SIP terminal 201 or the attacker's SIP terminal 202 to the button telephone device 100, an operation example in which authentication succeeds or fails. explain.

First, when a REGISTER message is received (S201), the SIP control unit 103 analyzes the message, performs an authentication process using the user ID and password in the message (S202), and determines whether or not the authentication is successful (S203). .. For example, when the user ID and password included in the REGISTER message from the SIP terminal 201 match the legitimate user ID and password and the authentication is successful, the SIP control unit 103 registers the SIP terminal 201 as an extension telephone (S204). , Returns a normal response to the SIP terminal 201 (S205).

On the other hand, if the user ID and password included in the REGISTER message from the attacker's SIP terminal 202 do not match the legitimate user ID and password and authentication fails, the SIP control unit 103 of the sender (attacker) As information, the sender's IP address, User-Agent information, and user ID are acquired from the REGISTER message (S206). Next, the SIP control unit 103 searches the temporary database 105 (S207) and determines whether or not there is information corresponding to the temporary blacklist 105a (S208). That is, the combination of the IP address, User-Agent, and user ID of the received REGISTER message and the temporary blacklist 105a is compared, and whether the information of the combination in which the IP address and User-Agent match and the user ID is different is registered. Judge whether or not.

If there is information corresponding to the temporary blacklist 105a, that is, if information of a combination in which the IP address and User-Agent match and the user ID is different is found, the SIP control unit 103 tells the user whose sender is different in the past. It is determined that the attacker is searching by ID, the IP address and User-Agent are registered in the blacklist 104a of the blacklist database 104 (S209), and an error response is returned (S211).

If there is no information corresponding to the temporary blacklist 105a, that is, if the IP address and User-Agent match and no information with a different user ID is found, the SIP control unit 103 considers that the attacker is suspected. The IP address, User-Agent, and user ID are registered in the temporary blacklist 105a of the temporary database 105 (S210), and an error response is returned (S211).

Next, an operation example in which the button telephone device 100 ignores the REGISTER message from the attacker's SIP terminal 202 will be described with reference to the flowchart of FIG.

First, when a REGISTER message is received (S301), the SIP control unit 103 analyzes the message and acquires the User-Agent information in the message and the sender's IP address as sender information (S302). Next, the SIP control unit 103 searches the blacklist database 104 (S303), and determines whether or not information that matches the received REGISTER message with the IP address and User-Agent is registered in the blacklist 104a (S303). S304).

If no information matching the IP address and User-Agent of the received REGISTER message is found in the blacklist 104a, the SIP control unit 103 executes a normal SIP analysis process (S306). For example, the authentication process is performed as shown in FIG.

If information matching the IP address and User-Agent of the received REGISTER message is found in the blacklist 104a, the SIP control unit 103 determines that the sender is an attacker and returns a response to the SIP message. The process is terminated without (S305).

As described above, in the present embodiment, the attacker registration (REGISTER) message is monitored, and the attacker is authenticated using the temporary database. Furthermore, the IP address of the attacker and the User-Agent header information in the SIP message are registered in the blacklist database as a pair, and the attacker's REGISTER message is not replied (ignored).

As a result, a button telephone device equipped with a SIP server can easily block malicious attacks, and the robustness of a telephone exchange system using SIP can be improved. That is, it is possible to stop the system stoppage and resource consumption by a malicious attacker. It can also be expected to improve the performance of the telephone exchange system. In the related technology, the SIP message of a malicious attacker was received, analyzed, and call control processing was executed, resulting in wasted processing time. The processing time increases proportionally with the number of attack packets received. Since the malicious attack packet is ignored at the entrance according to the present embodiment, the effect that the CPU and the like are not consumed in the processing after the analysis can be expected.

The present disclosure is not limited to the above embodiment, and can be appropriately modified without departing from the spirit.

Each configuration in the above-described embodiment is composed of hardware and / or software, and may be composed of one hardware or software, or may be composed of a plurality of hardware or software. The function (processing) of each device may be realized by a computer having a CPU, memory, or the like. For example, a program for performing the method in the embodiment (control method of the telephone exchange device) may be stored in the storage device, and each function may be realized by executing the program stored in the storage device on the CPU.

These programs can be stored and supplied to a computer using various types of non-transitory computer readable media. Non-transitory computer-readable media include various types of tangible storage media. Examples of non-temporary computer-readable media include magnetic recording media (eg flexible disks, magnetic tapes, hard disk drives), optomagnetic recording media (eg optomagnetic disks), CD-ROMs (Read Only Memory), CD-Rs, It includes a CD-R / W and a semiconductor memory (for example, a mask ROM, a PROM (Programmable ROM), an EPROM (Erasable PROM), a flash ROM, and a RAM (random access memory)). The program may also be supplied to the computer by various types of transient computer readable media. Examples of temporary computer-readable media include electrical, optical, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

Some or all of the above embodiments may also be described, but not limited to:
(Appendix 1)
A storage unit that stores a blacklist for registering blacklist targets and a temporary blacklist for registering temporary blacklist targets,
An authentication unit that receives a registration message for registering an IP phone user and performs an authentication process for the registration message.
Depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the temporary blacklist or the blacklist. Registration department and
A response determination unit that determines whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.
A telephone exchange device.
(Appendix 2)
The registration unit
If the authentication of the registration message fails and the registrant information of the registration message is not registered in the temporary blacklist, the registrant information is registered in the temporary blacklist.
When the authentication of the registration message fails and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the blacklist.
The telephone exchange device according to Appendix 1.
(Appendix 3)
The response determination unit
If the registrant information of the registration message is not registered in the blacklist, a normal response message or an error response message is returned according to the authentication result of the registration message.
When the registrant information of the registration message is registered in the blacklist, the registration message is discarded without returning a response message to the registration message.
The telephone exchange device according to Appendix 1 or 2.
(Appendix 4)
The registration message is a REGISTER message specified by the SIP protocol.
The registration unit registers the IP address and the user agent information included in the REGISTER message in the temporary blacklist and the blacklist as the registrant information.
The telephone exchange device according to any one of Appendix 1 to 3.
(Appendix 5)
The registration unit further registers the user ID included in the REGISTER message in the temporary blacklist as the registrant information.
The telephone exchange device according to Appendix 4.
(Appendix 6)
The user ID is information used in the authentication process.
The telephone exchange device according to Appendix 5.
(Appendix 7)
The registration unit searches the temporary blacklist for the IP address, user agent information, and user ID included in the REGISTER message for which the authentication has failed, and the IP address and user agent information match the temporary blacklist. If there is a combination of user IDs that do not match, the registrant information is registered in the blacklist.
The telephone exchange device according to Appendix 5 or 6.
(Appendix 8)
A telephone exchange system equipped with an IP telephone terminal and a telephone exchange device.
The telephone exchange device
A storage unit that stores a blacklist for registering blacklist targets and a temporary blacklist for registering temporary blacklist targets,
An authentication unit that receives a registration message for registering an IP telephone user from the IP telephone terminal and performs an authentication process for the registration message.
Depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the temporary blacklist or the blacklist. Registration department and
A response determination unit that determines whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.
A telephone exchange system equipped with.
(Appendix 9)
The registration unit
If the authentication of the registration message fails and the registrant information of the registration message is not registered in the temporary blacklist, the registrant information is registered in the temporary blacklist.
When the authentication of the registration message fails and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the blacklist.
The telephone exchange system described in Appendix 8.
(Appendix 10)
Register the blacklist target person The blacklist and the temporary blacklist target person are registered.
Receive the registration message for registering the IP phone user, perform the authentication process of the registration message, and perform the authentication process.
Depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the temporary blacklist or the blacklist. ,
It is determined whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.
How to control a telephone operator.
(Appendix 11)
In the above registration
If the authentication of the registration message fails and the registrant information of the registration message is not registered in the temporary blacklist, the registrant information is registered in the temporary blacklist.
When the authentication of the registration message fails and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the blacklist.
The method for controlling a telephone exchange device according to Appendix 10.
(Appendix 12)
Register the blacklist target person The blacklist and the temporary blacklist target person are registered.
Receive the registration message for registering the IP phone user, perform the authentication process of the registration message, and perform the authentication process.
Depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the temporary blacklist or the blacklist. ,
It is determined whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.
A program that causes a telephone operator to perform processing.
(Appendix 13)
In the above registration
If the authentication of the registration message fails and the registrant information of the registration message is not registered in the temporary blacklist, the registrant information is registered in the temporary blacklist.
When the authentication of the registration message fails and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the blacklist.
The program described in Appendix 12.

1 Telephone exchange system 2 Button telephone system 10 Telephone exchange device 11 Storage unit 11a Blacklist 11b Temporary blacklist 12 Authentication unit 13 Registration unit 14 Response judgment unit 20 IP telephone terminal 100 Button telephone device 101 Control unit 102 IP interface 103 SIP control unit 104 Blacklist Database 104a Blacklist 105 Temporary Database 105a Temporary Blacklist 201, 202 SIP Terminal 300 IP Network

Claims (10)

A storage unit that stores a blacklist for registering blacklist targets and a temporary blacklist for registering temporary blacklist targets,
An authentication unit that receives a registration message for registering an IP phone user and performs an authentication process for the registration message.
Depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the temporary blacklist or the blacklist. Registration department and
A response determination unit that determines whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.
A telephone exchange device. The registration unit
If the authentication of the registration message fails and the registrant information of the registration message is not registered in the temporary blacklist, the registrant information is registered in the temporary blacklist.
When the authentication of the registration message fails and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the blacklist.
The telephone exchange device according to claim 1. The response determination unit
If the registrant information of the registration message is not registered in the blacklist, a normal response message or an error response message is returned according to the authentication result of the registration message.
When the registrant information of the registration message is registered in the blacklist, the registration message is discarded without returning a response message to the registration message.
The telephone exchange device according to claim 1 or 2. The registration message is a REGISTER message specified by the SIP protocol.
The registration unit registers the IP address and the user agent information included in the REGISTER message in the temporary blacklist and the blacklist as the registrant information.
The telephone exchange device according to any one of claims 1 to 3. The registration unit further registers the user ID included in the REGISTER message in the temporary blacklist as the registrant information.
The telephone exchange device according to claim 4. The user ID is information used in the authentication process.
The telephone exchange device according to claim 5. The registration unit searches the temporary blacklist for the IP address, user agent information, and user ID included in the REGISTER message for which the authentication has failed, and the IP address and user agent information match the temporary blacklist. If there is a combination of user IDs that do not match, the registrant information is registered in the blacklist.
The telephone exchange device according to claim 5 or 6. A telephone exchange system equipped with an IP telephone terminal and a telephone exchange device.
The telephone exchange device
A storage unit that stores a blacklist for registering blacklist targets and a temporary blacklist for registering temporary blacklist targets,
An authentication unit that receives a registration message for registering an IP telephone user from the IP telephone terminal and performs an authentication process for the registration message.
Depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the temporary blacklist or the blacklist. Registration department and
A response determination unit that determines whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.
A telephone exchange system equipped with. Register the blacklist target person The blacklist and the temporary blacklist target person are registered.
Receive the registration message for registering the IP phone user, perform the authentication process of the registration message, and perform the authentication process.
Depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the temporary blacklist or the blacklist. ,
It is determined whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.
How to control a telephone operator. Register the blacklist target person The blacklist and the temporary blacklist target person are registered.
Receive the registration message for registering the IP phone user, perform the authentication process of the registration message, and perform the authentication process.
Depending on whether the authentication of the registration message has failed and the registrant information of the registration message is registered in the temporary blacklist, the registrant information is registered in the temporary blacklist or the blacklist. ,
It is determined whether or not to return a response message to the registration message according to whether or not the registrant information of the registration message is registered in the blacklist.
A program that causes a telephone operator to perform processing.

Images