Method and apparatus for end-to-end security in a heterogeneous network
View Patent ↗Methods and apparatus are provided for end-to-end security in heterogeneous networks. Hop-by-hop protection techniques ensure that each hop of a signaling path is satisfying one or more predefined security criteria. An end-to-end path is secured at each node by identifying a next hop in the end-to-end path; determining, in response to a received call setup request, if a vendor associated with the next hop in the end-to-end path has satisfied one or more predefined security criteria; and routing the call to the next hop if the vendor has satisfied the one or more predefined criteria. A look-up table can be used to determine whether a vendor has satisfied the one or more predefined security criteria. The look-up table can identify one or more of: (i) vendors that have achieved a predefined security rating; (ii) members in a predefined consortium or business group; and (iii) signatories to a predefined contract or technical specification.
1. A method for securing an end-to-end path in a network, said end-to-end path including a plurality of hops, said method comprising the steps of:
receiving a call setup request for a call, said call setup request containing a request for end-to-end protection;
identifying a next hop in said end-to-end path;
determining, in response to said received call setup request, if a vendor associated with said next hop in said end-to-end path has satisfied one or more predefined security criteria; and
routing said call to said next hop if said vendor has satisfied said one or more predefined criteria.
2. The method of claim 1 , wherein said determining step is performed by accessing a look-up table.
3. The method of claim 1 , wherein said determining step determines if said vendor has previously indicated an adherence to said one or more predefined security criteria.
4. The method of claim 1 , wherein said routing step is performed in accordance with a Secure SIP protocol.
5. The method of claim 1 , wherein said routing step is only performed if said next hop has satisfied said one or more predefined criteria.
6. The method of claim 1 , wherein said routing step further comprises the steps of routing said call and signaling an indication of a compromised security to a caller associated with said call if said next hop has not satisfied said one or more predefined criteria.
7. The method of claim 1 , further comprising the step of dropping said call if said next hop has not satisfied said one or more predefined criteria.
8. The method of claim 2 , wherein said look-up table lists one or more vendors that have achieved a predefined security rating.
9. The method of claim 2 , wherein said look-up table identifies members in a predefined consortium or business group.
10. The method of claim 2 , wherein said look-up table identifies signatories to a predefined contract or technical specification.
11. An apparatus for securing an end-to-end path in a network, said end-to-end path including a plurality of hops, the apparatus comprising:
a memory; and
at least one processor, coupled to the memory, operative to:
receive a call setup request for a call, said call setup request containing a request for end-to-end protection;
identify a next hop in said end-to-end path;
determine, in response to said received call setup request, if a vendor associated with said next hop in said end-to-end path has satisfied one or more predefined security criteria; and
route said call to said next hop if said vendor has satisfied said one or more predefined criteria.
12. The apparatus of claim 11 , wherein said processor determines if said vendor has satisfied said one or more predefined security criteria by accessing a look-up table.
13. The apparatus of claim 11 , wherein said processor determines if said vendor has satisfied said one or more predefined security criteria by determining if said vendor has previously indicated an adherence to said one or more predefined security criteria.
14. The apparatus of claim 11 , wherein said routing is performed in accordance with a Secure SIP protocol.
15. The apparatus of claim 11 , wherein said routing is only performed if said next hop has satisfied said one or more predefined criteria.
16. The apparatus of claim 11 , wherein said processor is further configured to route said call and signal an indication of a compromised security to a caller associated with said call if said next hop has not satisfied said one or more predefined criteria.
17. The apparatus of claim 11 , wherein said processor is further configured to drop said call if said next hop has not satisfied said one or more predefined criteria.
18. The apparatus of claim 12 , wherein said look-up table identifies one or more of: (i) vendors that have achieved a predefined security rating; (ii) members in a predefined consortium or business group; and (iii) signatories to a predefined contract or technical specification.
19. An article of manufacture for securing an end-to-end path in a network, said end-to-end path including a plurality of hops, comprising a machine readable storage medium containing one or more programs which when executed implement the steps of:
receiving a call setup request for a call, said call setup request containing a request for end-to-end protection;
identifying a next hop in said end-to-end path;
determining, in response to said received call setup request, if a vendor associated with said next hop in said end-to-end path has satisfied one or more predefined security criteria; and
routing said call to said next hop if said vendor has satisfied said one or more predefined criteria.
20. The article of manufacture of claim 19 , wherein said determining step further comprises the step of accessing a look-up table that identifies one or more of: (i) vendors that have achieved a predefined security rating; members in a predefined consortium or business group; and signatories to a predefined contract or technical specification.