KR100451793B1 - Internet voice communication system and method of in private network by media proxy - Google Patents

Abstract

The present invention relates to enabling a voice communication with an external internet network in a private network. An internet voice communication system and method in a private network using a media proxy according to the present invention are connected to a private network and connected to an internal line or an external internet network. Terminal for voice communication of; A call server for managing an internet telephony service such as signal transmission and billing information for voice communication of the terminal; A media proxy for transmitting and receiving relay of media data for voice communication of the terminal with a public IP address; managing a public IP address and a private network IP address information mapping table of the media proxy and transmitting and receiving data between the private network and an external Internet network It characterized in that it comprises a router for the connection.

According to the present invention, by additionally configuring the media proxy in the private network to relay media data, the burden on the call server can be reduced, security can be enhanced, and authentication of calls entered through the media proxy can be facilitated. The effect is expected.

Description

Internet voice communication system and method of private network by media proxy

The present invention relates to Internet voice communication in a private network, and in particular, when an Internet phone user in a private network performs voice communication with an external Internet telephone connected through a public Internet network, Internet call processing messages and Internet voice data are transferred into a private network. The present invention relates to an Internet voice communication system and a method in a private network using a media proxy, by further configuring a deliverable media proxy.

When a user inside a private network wants to make a phone call to an external Internet telephone connected to a public Internet network, the user passes through a router connecting the private network and the public Internet network.

The router delivers call and media data transmitted from an Internet phone in a private network to a designated IP address and delivers call and media data transmitted from an external Internet network using internal Internet phone IP information.

However, in the case of a private network inside an enterprise or building, when a firewall or a network address translation (NAT) function is used in a router for security, it is impossible to transmit externally received call and media data to an internal Internet phone. Do.

In the case of a firewall, the data received from the outside can only receive authenticated data, and the router with NAT function sends the data to the outside by randomly changing the originating IP address when making a call. The phone's IP address is not known exactly.

This problem can be solved by allowing the call server to act as a media proxy for voice communication from the private network to the external public Internet network.

Taking H.323 as an example, the gatekeeper plays the role of an H.323 proxy at the same time, allowing not only the call signal but also the media to be transmitted through the gatekeeper, thereby enabling Internet voice communication.

In more detail, FIG. 1 is a block diagram showing a system configuration for IP voice communication in a conventional private network.

Referring to FIG. 1, an Internet phone 11 in a private network 10, a gatekeeper 12 that transmits and receives call signals and media between an internal phone or an external network between the Internet phone 11, and the private network 10. And a router 13 in charge of data transfer using IP information between the external network and the Internet telephone 20 of the external Internet network.

According to the configuration as described above, if you want voice communication between the Internet phone 11 in the private network and the external Internet phone 20 is connected to the telephone call according to the signal flow diagram as shown in FIG.

In particular, the gatekeeper 12 receives a public IP address and maps the private IP address and the public IP address in the router 13 to transmit and receive data.

2 is a signal flow diagram of a conventional IP voice communication method in a private network.

Referring to FIG. 2, in order to make a call from an Internet phone 11 in a private network to an Internet phone 20 in an external Internet network, a call signal including an opponent IP address is transmitted to the gatekeeper 12 (S11). The keeper 12 transmits an outgoing signal to the router 13 (S12).

The router 13 transmits and receives the call received from the gatekeeper 12 to the external Internet network Internet phone 20 by using the other IP address (S13), and receives the response call through the gatekeeper 12. Transfer to internal network Internet phone (11).

When a call is connected, media data corresponding to voice data are exchanged with each other. In this case, the internal network Internet telephone 11 sets a public IP address defined in the gatekeeper 12 as the originating address, and the external Internet telephone 20 If the IP address is transmitted as a receiving address, the data is transmitted through the gatekeeper 12 and the router 13 (S14, S15, and S16).

In addition, in order to transmit the media data from the external network Internet telephone 20 to the Internet telephone 11 of the internal network, if the media data is transmitted to the router 13 using a public IP address as a reception address, the router 13 Has a mapping table for a public IP address and a private network IP address, searches the mapping table to find a private network IP address, and transmits media data to the gatekeeper 13.

Accordingly, the gatekeeper 13 transmits the media data to the internal network Internet telephone 11 to enable voice communication.

In addition, the gatekeeper 12 transmits and manages both the signal and the media data, and transmits the media data to the gatekeeper 12 first, and the gatekeeper 12 is another Internet telephone. (11). This is because the gatekeeper 12 has a proxy function, and thus plays a role of relaying not only signals but also media data.

However, in the conventional method, since the gatekeeper must relay all media data of the external telephone and the internal telephone, the burden on the gatekeeper increases and the load increases, and the gatekeeper is a device that manages Internet telephone services such as billing. Knowing the public IP address of a private network in the network may result in the gatekeeper being exposed to the Internet network, which may cause security problems.

In addition, since the gatekeeper inside the private network manages only a terminal or a gateway in the private network, authentication with an external terminal received through a router becomes difficult.

In order to solve the above problems, the present invention allows the Internet phone in the private network to function as a media proxy to the call server of the private network to enable voice communication with the external Internet network, by using a public IP call server Increasing the load on the server, and having security problems or authentication difficulties, by providing a proxy device separate from the call server, the media proxy can take charge of the transmission and reception of media data, thereby reducing the load on the call server and external security problems. The purpose of the present invention is to provide a system and method for internet voice communication in a private network using a media proxy, which enables the internal internet phone to communicate with an external internet phone while making it easy to manage authentication.

1 is a block diagram showing a system configuration for Internet voice communication in a conventional private network.

2 is a signal flow diagram of a conventional Internet voice communication method in a private network.

3 is a block diagram showing the configuration of an Internet voice communication system in a private network using a media proxy according to an embodiment of the present invention.

4 is a signal flow diagram of an Internet voice communication method in a private network using a media proxy according to an embodiment of the present invention.

Internet voice communication system in a private network using a media proxy according to the present invention,

A terminal connected to a private network for voice communication with an internal line or an external Internet network;

A call server that manages Internet telephony services such as signal transmission and billing information for voice communication of the terminal; a media proxy for transmitting and receiving relaying media data for voice communication of the terminal with a public IP address;

And a router for managing the public IP address and the private network IP address information mapping table of the media proxy, and a data transmission / reception connection between the private network and the external Internet network.

Preferably, when using the network address translation function in the router,

The common IP address of the media proxy is allocated, and the public IP address and the private network IP address information mapping table are managed by a router.

Preferably, when using the security using a firewall in the private network,

Characterized in that the IP address and the corresponding port for the call processing and media data transmission and reception between the media proxy and the external Internet public network is set to enable authentication.

In addition, the Internet voice communication method in a private network using a media proxy according to the present invention,

Exchanging call setup messages with a call server and a media proxy for voice communication through an external Internet network by an Internet telephone in a private network;

Sending and receiving a call setup message through an external internet telephone and a router connected to an external internet network for a call connection made by the internal internet telephone of the private network in the media proxy;

Setting a channel for transmitting and receiving media data by an internal internet telephone and a media proxy time, and setting a channel for transmitting and receiving media data between the media proxy and an external internet telephone;

And transmitting and receiving media data through a channel connected to the media proxy in the internal internet telephone and the external internet telephone to perform voice communication.

Preferably, the call from the external Internet phone to the public IP address for the call to the internal network Internet phone, and exchanges call setup messages with the media proxy and call server through a router;

Exchanging a call setup message with an internal internet telephone through a call server for a call connection from the external internet telephone at the media proxy;

The call setting is completed, and the media data transmission / reception channel through the media proxy is set during the internal internet telephone and the internal internet telephone.

Preferably, in the case of voice communication between the Internet telephone in the private network,

Call setup between internal Internet phones is completed through a call server, and the media data is transmitted by setting a direct channel in the internal Internet phone period without passing through the media proxy.

Preferably, the call server is characterized in that it further comprises the step of confirming the authentication of the data received from the gateway by registering the media proxy as a gateway.

With reference to the accompanying drawings, the Internet voice communication system and method in a private network using a media proxy according to the present invention configured as described above with reference to the H.323-based communication system in detail as follows.

3 is a block diagram showing the configuration of an Internet voice communication system in a private network using a media proxy according to an embodiment of the present invention.

Referring to FIG. 3, an internal telephone and an external telephone medium between an internet telephone 11, a gatekeeper 12 which is a call server for managing call signals and telephone services, and the internet telephone 11 in the private network 10 It comprises a h.323 proxy 30 which is a media proxy for data relay, a router 13 for connecting the private network 10 and an external internet network, and an internet telephone 20 connected to the external internet network. .

In the communication system configured as described above, in the internal Internet telephone 11, the gatekeeper 12 is responsible for transmitting and receiving signals for the voice call between the external Internet telephone 20 or the internal Internet telephone 11, and the h.323 proxy is used. In step 30, media data transmission and reception are in charge.

In addition, the environment to be set according to the router 13 is slightly different, if the router 13 supports NAT, the h.323 proxy 30 should be assigned a public IP address, the router 13 With the table information for mapping the private IP of the private network and the public IP address of the h.323 proxy (30), it must deliver the transmitted and received media data.

On the other hand, if the firewall (firewall) is installed in the private network (10), the media data can be transmitted and received through the h.323 proxy (30), and only if the communication system is set to enable the voice communication is possible.

The method of making an external call in the above communication system is described in detail as follows.

4 is a signal flow diagram illustrating an internet voice communication method in a private network using a media proxy according to an exemplary embodiment of the present invention.

Referring to FIG. 4, in the case of a telephone call made from the inside of the private network to the outside of the private network, a call must be first made for voice communication with the external internet phone 20 from the internal internet phone 11. Send and receive call signals (S101), and make a call connection, send and receive call signals between the gatekeeper 12 and the h.323 proxy 30 (S102), and make a call connection, h.323 proxy (30) ) Also exchanges a call signal with the router 13 (S103), the router 13 exchanges a call signal with the external Internet telephone 20 (S104), and makes a call connection for voice communication.

In addition, in the case of a telephone call from outside the private network, the public IP address of the h.323 proxy 30 is used as a receiving address for a call from the external internet telephone 20 to the internal internet telephone 11 of the private network. Sending and receiving a call signal with the router 13 (S104), the router sends and receives a call signal with the h.323 proxy 30 using a public IP address (S103).

The h.323 proxy 30 receiving the call signal exchanges a call signal by searching for a private network gatekeeper 12 using a public IP address received from a router (S102), and the gatekeeper 12 receives an internal Internet telephone ( 11) and call signal to send and receive (S101) to connect the call.

When the call is connected, a media channel is connected between the internal Internet phone 11, the h.323 proxy 30, the router 13, and the external internet phone, and the h.323 proxy 30 does not pass through the gatekeeper 12. The external Internet phone 20 allows the internal Internet phone 11 to exchange media data with the internal Internet phone 11, thereby enabling a telephone call (S107, S106, and S105).

As described above, when the call is exchanged between the internal Internet telephone 11, the gatekeeper 12, the h.323 proxy 30, the router 13, and the external Internet telephone 20, respectively, Voice communication is performed through media data transmission and reception, which is voice data. In this case, media data is exchanged through the h.323 proxy 30.

That is, the gatekeeper 12 is not involved in transmitting and receiving media data other than signaling, and registers the h.323 proxy 30 as a gateway, thereby authenticating data received through the h.323 proxy 30. Done.

Looking at the flow of the media data, when voice is input through the internal Internet telephone 11, the media data is transmitted to the h.323 proxy 30 (S105), the public IP address to the h.323 proxy (30) The media data is transmitted to the router 13 by using S as an originating address (S106).

The router 13 receiving the media data transmits the media data to the external internet telephone 20 based on the recipient IP address.

In addition, if the media data input through the external Internet telephone 20 is also transmitted to the router 13 (S107), the recipient IP address has a public IP address of the h.323 proxy 30, the router (13) is to search the mapping table to find the private IP address mapped to the public IP address, and can transmit the media data to the h.323 proxy 30 of the private network 10 using the private IP address (S106). ).

The h.323 proxy 30 transmits the media data to the internal Internet telephone 11 (S105) to enable voice communication.

In addition, the call connection, which is only available for internal call between the internal Internet telephones 11, is responsible for signaling in the gatekeeper 12, as well as the call with the external internet telephones 20, and the media data exchange is performed by the h. The 323 proxy (30) does not go directly through the internal Internet phone period to make a call.

If the media proxy is responsible for media data relay as described above, the call server is less burdened by media data relay, and the call server is not exposed to the outside to enhance security, and the media proxy can be viewed from the point of view of the call server. As it plays the role of gateway that connects to external network, authentication process is easier if only media proxy is registered in call server.

As described above, the Internet voice communication system and method in a private network using a media proxy according to the present invention includes a load that a call server has by acting as a media proxy that relays media data as well as signaling in a call server, Unlike the conventional private network, which has difficulty in external exposure and authentication, by separately configuring the media proxy for media data relay to reduce the load on the call server, voice communication with the external Internet network is possible, and the burden on the call server is reduced. Security can be enhanced, and authentication of calls entered through media proxies can be facilitated.

Claims (7)

A terminal connected to a private network for voice communication with an internal line or an external Internet network; A call server for managing an internet telephony service such as signal transmission and billing information for voice communication of the terminal; A media proxy for transmitting and receiving relaying media data for voice communication of the terminal with a public IP address; Internet voice communication system in a private network using a media proxy, characterized in that it comprises a router for managing the public IP address and private network IP address information mapping table of the media proxy and the data transmission and reception connection between the private network and an external Internet network. . The method of claim 1, The router searches the mapping table to find a private IP address mapped to the public IP address, and transmits media data to the media proxy using the private IP address. Voice communication system. The method of claim 1, wherein in the private network, security using a firewall is used. Internet voice communication system in a private network using a media proxy, characterized in that the IP address and the corresponding port for the call processing and media data transmission and reception between the media proxy and the external Internet public network is set to enable authentication. Exchanging call setup messages with a call server and a media proxy for voice communication through an external Internet network by an Internet telephone in a private network; Sending and receiving a call setup message through an external internet telephone and a router connected to an external internet network for a call connection made by the internal internet telephone of the private network in the media proxy; Setting a channel for transmitting and receiving media data between an internal Internet telephone and a media proxy time and setting a channel for transmitting and receiving media data between the media proxy and an external Internet telephone; And transmitting and receiving media data through a channel connected to the media proxy in the internal internet telephone and the external internet telephone to perform voice communication. 5. The method of claim 4, further comprising the steps of: sending a call to a public IP address for a call with an internal Internet telephone within the private network, and exchanging a call setup message with a media proxy and a call server through a router; Exchanging a call setup message with an internal internet telephone through a call server for a call connection from the external internet telephone at the media proxy; The call setting is completed, and the media proxy is configured to transmit and receive media data by transmitting and receiving media data by setting a media data transmission / reception channel through a media proxy during the internal internet telephone and the internal internet telephone. Internet voice communication method in private network. The method of claim 4, wherein voice communication between Internet telephones in the private network includes: Internet voice communication in a private network using a media proxy, characterized in that call setup is completed through a call server between internal Internet telephones, and the media data is transmitted by setting a direct channel during the internal internet telephone period without passing through the media proxy. Way. 5. The method of claim 4, wherein the call server further comprises registering the media proxy as a gateway to confirm authentication of data received from the gateway. .