WO2002071717A3 - Traversee de pare-feu et de dispositif de traduction d'adresse reseau - Google Patents

Traversee de pare-feu et de dispositif de traduction d'adresse reseau Download PDF

Info

Publication number
WO2002071717A3
WO2002071717A3 PCT/US2001/048551 US0148551W WO02071717A3 WO 2002071717 A3 WO2002071717 A3 WO 2002071717A3 US 0148551 W US0148551 W US 0148551W WO 02071717 A3 WO02071717 A3 WO 02071717A3
Authority
WO
WIPO (PCT)
Prior art keywords
port
address
packet
network
firewall
Prior art date
Application number
PCT/US2001/048551
Other languages
English (en)
Other versions
WO2002071717A2 (fr
Inventor
Gur Kimchi
Original Assignee
Vocaltec Comm Ltd
Gur Kimchi
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US09/867,371 external-priority patent/US20020120760A1/en
Application filed by Vocaltec Comm Ltd, Gur Kimchi filed Critical Vocaltec Comm Ltd
Priority to US10/450,751 priority Critical patent/US20050125532A1/en
Priority to AU2001297602A priority patent/AU2001297602A1/en
Publication of WO2002071717A2 publication Critical patent/WO2002071717A2/fr
Publication of WO2002071717A3 publication Critical patent/WO2002071717A3/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0281—Proxies
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/2521—Translation architectures other than single NAT servers
    • H04L61/2535—Multiple local networks, e.g. resolving potential IP address conflicts
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/256—NAT traversal
    • H04L61/2567—NAT traversal for reachability, e.g. inquiring the address of a correspondent behind a NAT server
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/256—NAT traversal
    • H04L61/2575—NAT traversal using address mapping retrieval, e.g. simple traversal of user datagram protocol through session traversal utilities for NAT [STUN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/09—Mapping addresses
    • H04L61/25—Mapping addresses of the same type
    • H04L61/2503—Translation of Internet protocol [IP] addresses
    • H04L61/256—NAT traversal
    • H04L61/2578—NAT traversal without involvement of the NAT server
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/029—Firewall traversal, e.g. tunnelling or, creating pinholes

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Abstract

L'invention concerne la possibilité pour un paquet UDP entrant de traverser un dispositif de traduction d'adresse réseau ou un pare-feu. Premièrement, une connexion TCP est établie, et une interface de type brut-IP (raw-IP) est utilisée pour l'établissement des paquets du type UDP, sur la base des paramètres de la connexion TCP (par exemple, numéro de session, port, etc.). En outre, lorsqu'un ou deux appareils de communication se trouvent derrière le pare-feu, une connexion est établie entre chaque appareil et un serveur mandataire de réseau public. Le serveur mandataire communique à chaque appareil l'information de port et d'adresse. Pour cela, le serveur mandataire utilise son port et son adresse comme information source de port et d'adresse, ou bien il communique à chaque appareil l'adresse d'un système de (re)transmission de paquets approprié (essentiellement en fonction du critère de la proximité du réseau).
PCT/US2001/048551 2000-05-26 2001-12-13 Traversee de pare-feu et de dispositif de traduction d'adresse reseau WO2002071717A2 (fr)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US10/450,751 US20050125532A1 (en) 2000-05-26 2001-12-13 Traversing firewalls and nats
AU2001297602A AU2001297602A1 (en) 2000-12-14 2001-12-13 Traversing firewalls and nats

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US25542200P 2000-12-14 2000-12-14
US60/255,422 2000-12-14
US09/867,371 US20020120760A1 (en) 2000-05-26 2001-05-29 Communications protocol
US09/867,371 2001-05-29

Publications (2)

Publication Number Publication Date
WO2002071717A2 WO2002071717A2 (fr) 2002-09-12
WO2002071717A3 true WO2002071717A3 (fr) 2003-03-27

Family

ID=26944694

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2001/048551 WO2002071717A2 (fr) 2000-05-26 2001-12-13 Traversee de pare-feu et de dispositif de traduction d'adresse reseau

Country Status (2)

Country Link
AU (1) AU2001297602A1 (fr)
WO (1) WO2002071717A2 (fr)

Families Citing this family (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AT414067B (de) * 2002-12-03 2006-08-15 Loytec Electronics Gmbh Verfahren zum betrieb von cn/ip-knoten hinter nat-routern
US7406533B2 (en) 2003-10-08 2008-07-29 Seiko Epson Corporation Method and apparatus for tunneling data through a single port
WO2005043848A1 (fr) * 2003-11-03 2005-05-12 Immertec Co., Ltd. Procede et systeme de communication par paquets udp pour terminaux ip prives
CN100440850C (zh) * 2003-12-24 2008-12-03 华为技术有限公司 多媒体业务网络地址转换穿越的方法及其系统
JP2005236728A (ja) * 2004-02-20 2005-09-02 Matsushita Electric Ind Co Ltd サーバ装置、要求発行機器、要求受諾機器、通信システム及び通信方法
US7392323B2 (en) 2004-11-16 2008-06-24 Seiko Epson Corporation Method and apparatus for tunneling data using a single simulated stateful TCP connection
JP4599196B2 (ja) * 2005-03-11 2010-12-15 株式会社アドイン研究所 中継装置、通信システム、これらの制御方法及び制御プログラム
CN100571196C (zh) * 2005-03-22 2009-12-16 华为技术有限公司 移动IPv6报文穿越防火墙的实现方法
CN100583814C (zh) * 2005-05-12 2010-01-20 中兴通讯股份有限公司 一种实现多媒体业务nat穿越的方法
CN1870568A (zh) * 2005-05-23 2006-11-29 华为技术有限公司 实现网络地址转换/防火墙穿越的方法
FI119303B (fi) * 2005-06-07 2008-09-30 Teliasonera Ab Liitettävyys tilatietoisten palomuurien välillä
CN100384168C (zh) * 2005-12-30 2008-04-23 四川长虹电器股份有限公司 H.323系统的多媒体会话穿越nat设备的方法
CN101729862B (zh) * 2008-10-21 2011-12-28 中兴通讯股份有限公司 一种视频监控系统实现媒体穿越nat的方法和系统
CN102231763B (zh) * 2011-06-20 2014-04-09 北京思创银联科技股份有限公司 一种基于nat穿透的共享方法
CN104219589B (zh) * 2013-06-03 2017-10-03 福达新创通讯科技(厦门)有限公司 图像传输方法、系统及其记录媒体

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH10303947A (ja) * 1997-04-25 1998-11-13 Hitachi Ltd ネットワーク通信システム
US6052788A (en) * 1996-10-17 2000-04-18 Network Engineering Software, Inc. Firewall providing enhanced network security and user transparency

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6052788A (en) * 1996-10-17 2000-04-18 Network Engineering Software, Inc. Firewall providing enhanced network security and user transparency
JPH10303947A (ja) * 1997-04-25 1998-11-13 Hitachi Ltd ネットワーク通信システム
US6195366B1 (en) * 1997-04-25 2001-02-27 Hitachi, Ltd. Network communication system

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
ESCHENBURG A: "WO LAUFEN SIE DENN? ICQ HAELT VERBINDUNG ZU BEKANNTEN", CT MAGAZIN FUER COMPUTER TECHNIK, VERLAG HEINZ HEISE GMBH., HANNOVER, DE, no. 22, 26 October 1998 (1998-10-26), pages 92 - 95, XP000779803, ISSN: 0724-8679 *
J.ROSENBERG,D.DREW,H.SCHULZRINNE: "<draft-rosenberg-sip-firewalls-00.txt> - Getting SIP through Firewalls and NATs", INTERNET DRAFT, 22 February 2000 (2000-02-22), XP002218607, Retrieved from the Internet <URL:http://www.jdrosen.net/papers/draft-rosenberg-sip-firewalls-00.txt> [retrieved on 20021028] *
NORIFUSA M: "Internet security: difficulties and solutions", INTERNATIONAL JOURNAL OF MEDICAL INFORMATICS, ELSEVIER SCIENTIFIC PUBLISHERS, SHANNON, IR, vol. 49, no. 1, March 1998 (1998-03-01), pages 69 - 74, XP004149463, ISSN: 1386-5056 *
PATENT ABSTRACTS OF JAPAN vol. 1999, no. 02 26 February 1999 (1999-02-26) *

Also Published As

Publication number Publication date
WO2002071717A2 (fr) 2002-09-12
AU2001297602A1 (en) 2002-09-19

Similar Documents

Publication Publication Date Title
US7756983B2 (en) Symmetrical bi-directional communication
WO2002071717A3 (fr) Traversee de pare-feu et de dispositif de traduction d&#39;adresse reseau
US20050125532A1 (en) Traversing firewalls and nats
US7995594B2 (en) Protocol and system for firewall and NAT traversal for TCP connections
CA2401103A1 (fr) Passerelle de traduction d&#39;adresses reseau pour reseaux locaux d&#39;entreprise utilisant des adresses ip locales et des adresses de port non traduisibles
WO2002103460A3 (fr) Traduction d&#39;adresse reseau et/ou de port
CA2248577A1 (fr) Filtre internet protocole
WO2003049445A3 (fr) Services integres de passerelle a protocole internet (ip) dans un reseau cable rf
AU5225000A (en) A method and arrangement for providing security through network address translations using tunneling and compensations
WO2005101747A3 (fr) Systeme et procede pour initier automatiquement et etablir dynamiquement des connexions internet securisees entre un serveur protege par un pare-feu et un client protege par un pare-feu
WO2006102197A3 (fr) Serveur mandataire voip
WO2007041662A3 (fr) Communication par support securise dans une passerelle d&#39;entreprise
WO2002045361A3 (fr) Procede de communication de donnees audio au sein d&#39;un reseau a commutation par paquets
Smith et al. Network security using NAT and NAPT
CA2413942A1 (fr) Methode de signalisation intrabande protegee permettant la gestion de mobilite a travers les pare-feux
Stiemerling et al. NAT and firewall traversal issues of host identity protocol (HIP) communication
Paulsamy et al. Network convergence and the NAT/Firewall problems
CN102984167B (zh) 一种基于Socks5协议的通用防火墙穿越方法
Ylitalo et al. SPINAT: Integrating IPsec into overlay routing
Müller et al. On the applicability of knowledge based NAT-traversal for home networks
Chen et al. NAT traversing solutions for SIP applications
Constantinescu et al. NAT/Firewall traversal for SIP: issues and solutions
US20050177718A1 (en) Systems and methods for video transport service
Topal et al. Secure seamless peer-to-peer (P2P) UDP communication using IPv4 LSRR option and IPv4+ 4 addresses
Topal Design and implementation of a border router for seamless peer-to-peer (P2P) udp communication using IPv4+ 4 addresses

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ OM PH PL PT RO RU SD SE SG SI SK SL TJ TM TN TR TT TZ UA UG US UZ VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
121 Ep: the epo has been informed by wipo that ep was designated in this application
REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

122 Ep: pct application non-entry in european phase
WWE Wipo information: entry into national phase

Ref document number: 10450751

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: JP

WWW Wipo information: withdrawn in national office

Country of ref document: JP