Method and apparatus for supporting communications between a computing device within a network and an external computing device
A network communication bridge establishes communication between a computing system within a protected network and an external computing system. A registrar is positioned outside the protected network and registers authorized users. The registrar determines if the computing device associated with the user is publicly addressable, and for those computing devices that are not publicly addressable, the computing device maintains a persistent communication session with a bridge proxy server. The bridge proxy server employs a reversal or relaying technique to enable communication between two systems that cannot ordinarily establish communication with each other, based on characteristics of the two systems. If at least one party to a communication is publicly addressable, then a reversal technique is employed. If neither party to the communication is publicly addressable, then both parties have a persistent session with their respective bridge proxy server, and the bridge proxy server acts as a “relay service” for communications between the initiator and the recipient. The invention can be implemented as a separate application or as an enhancement to the Session Initiation Protocol (SIP).
1. A method for determining whether a first computing system within a protected network can communicate with an external computing system, said method comprising:
receiving a registration request from at least one of said first and external computing systems;
testing, by a registrar that is positioned outside said protected network, whether at least one of the first computing system and the external computing system is publicly addressable by comparing address information indicated by said at least one of said first and external computing systems with address information indicated in a message received from said at least one of said first and external computing systems in order to determine whether said at least one of said first and external computing systems is behind a network address translator (NAT);
initiating a creation of a persistent connection between said computing system and a proxy server if said computing system is not publicly addressable; and
recording an address of said proxy server for said computing system if said computing system is not publicly addressable.
2. The method of claim 1 , further comprising initiating a reversal of roles between a call initiator and a call recipient if at least one party to a communication is publicly addressable.
3. The method of claim 1 , further comprising providing a relay service between parties to a communication if neither party is publicly addressable.
4. The method of claim 3 , wherein providing a relay service between parties to a communication if neither party is publicly addressable comprises providing a relay service performed by a SIP proxy server.
5. The method of claim 1 , wherein testing whether at least one of the first computing system and the external computing system is publicly addressable further comprises attempting to connect with said computing system.
6. The method of claim 1 , further comprising recording an address of said computing system if said computing system is publicly addressable.
7. The method of claim 1 , wherein receiving a registration request from at least one of said first and external computing systems comprises receiving a registration request that conforms to the SIP protocol.
8. The method of claim 1 , further comprising propagating results of said testing to one or more additional computing systems.
9. The method of claim 8 , wherein propagating results of said testing to one or more additional computing systems comprises propagating results of said testing to one or more additional computing systems are within the same sub-network as said computing system providing said registration request.
10. A system for determining whether a first computing system within a protected network can communicate with an external computing system, said system comprising:
a memory that stores computer-readable code; and
a processor operatively coupled to said memory, said processor configured to implement said computer-readable code, said computer-readable code configured to:
receive a registration request from at least one of said first and external computing systems;
testing, by a registrar that is positioned outside said protected network, whether at least one of the first computing system and the external computing system is publicly addressable by comparing address information indicated by said at least one of said first and external computing systems with address information indicated in a message received from said at least one of said first and external computing systems in order to determine whether said at least one of said first and external computing systems is behind a network address translator (NAT);
initiating a creation of a persistent connection between said computing system and a proxy server if said computing system is not publicly addressable; and
recording an address of said proxy server for said computing system if said computing system is not publicly addressable.
11. The system of claim 10 , wherein said processor is further configured to initiate a reversal of roles between a call initiator and a call recipient if at least one party to a communication is publicly addressable.
12. The system of claim 10 , wherein said processor is further configured to provide a relay service between parties to a communication if neither party is publicly addressable.
13. The system of claim 12 , wherein said relay service is performed by a SIP proxy server.
14. The system of claim 10 , wherein said processor is further configured to compare address information indicated by said computing system with address information indicated in a message received from said computing system.
15. The system of claim 10 , wherein said processor is further configured to attempt to connect with said computing system.
16. The system of claim 10 , wherein said processor is further configured to record an address of said computing system if said computing system is publicly addressable.
17. The system of claim 10 , wherein said registration request conforms to the SIP protocol.
18. An article of manufacture for determining whether a first computing system within a protected network can communicate with an external computing system, said article of manufacture comprising:
computer readable hardware having computer readable code embodied thereon, wherein said computer readable program code instructs a processor to:
receive a registration request from at least one of said first and external computing systems;
test, by a registrar that is positioned outside said protected network, whether at least one of the first computing system and the external computing system is publicly addressable, by comparing address information, indicated by said at least one of the first computing system and the external computing system, with address information indicated in a message received from said at least one of the first computing system and the external computing system in order to determine whether said at least one of said first and external computing systems is behind a network address translator (NAT);
initiate a creation of a persistent connection between said computing system and a proxy server if said computing system is not publicly addressable; and
record an address of said proxy server for said computing system if said computing system is not publicly addressable.