Trusted multimedia communications
View Patent ↗A transit domain is a domain in which trusted communications are generally required, and a foreign domain is one in which any number entities are associated. The users within a foreign domain will have a trusted relationship with their foreign domain. In turn, the foreign domain will establish a trusted relationship with the transit domain. The users in the foreign domains need not have a direct relationship with the transit domains. The foreign domains are connected by the transit domains, and session messages used to establish and control communication sessions between entities must pass through the transit domains to travel from one foreign domain to another. These session messages intended for or originating from a foreign domain are processed by edge control nodes in the transit domain, based on a service policy, which has been established for the foreign domain associated with the session message.
1. A method for processing a signaling message associated with a first foreign domain and intended to establish a communication session involving a first entity associated with the first foreign domain, comprising:
receiving the signaling message in a transit domain through which the signaling message must travel to establish the communication session;
accessing a first policy for the first foreign domain; and
in the transit domain, applying the first policy for the first foreign domain to the signaling message to control establishment of the communication session, wherein the first entity is not associated with the transit domain.
2. The method of claim 1 further comprising:
establishing an association between the transit domain and the first foreign domain; and
providing the first policy based on the transit domain's association with the first foreign domain.
3. The method of claim 2 wherein a plurality of entities, including the first entity, are associated with the first foreign domain and not the transit domain.
4. The method of claim 3 wherein the first policy for the first foreign domain is applied in the transit domain to at least one of inbound signaling messages intended for or outbound signaling messages from any of the plurality of entities associated with the first foreign domain.
5. The method of claim 1 further comprising:
providing a second policy for unassociated foreign domains, which do not have an established association with the transit domain; and
in the transit domain, applying the second policy for the unassociated foreign domains to certain signaling messages associated with the unassociated foreign domains.
6. The method of claim 1 further comprising:
establishing an association between the transit domain and a second foreign domain;
providing a second policy based on the transit domain's association with the second foreign domain, the first policy different from the second policy; and
in the transit domain, applying the second policy for the second foreign domain to certain signaling messages associated with the second foreign domain.
7. The method of claim 6 wherein the transit domain comprises first and second transit domains, the first transit domain associated with the first foreign domain and the second transit domain associated with the second foreign domain.
8. The method of claim 1 wherein the signaling message is intended for the first entity and includes an address associated with the first entity.
9. The method of claim 1 wherein the signaling message originates from the first entity and includes an address associated with the first entity.
10. The method of claim 1 wherein the first policy associated with the first foreign domain is applied for all entities associated with the first foreign domain.
11. The method of claim 1 wherein the first policy associated with the first foreign domain further defines specific policies for specific entities associated with the first foreign domain.
12. The method of claim 1 wherein the first policy associated with the first foreign domain provides at least one criterion based on whether the signaling message is an inbound or outbound signaling message.
13. The method of claim 1 wherein the first policy associated with the first foreign domain provides at least one criterion based on an intended destination of the signaling message.
14. The method of claim 1 wherein the first policy associated with the first foreign domain provides at least one criterion based on a source of the signaling message.
15. The method of claim 1 wherein the first policy associated with the first foreign domain provides at least one criterion based on a type of media that the communication session will carry.
16. The method of claim 1 wherein the first policy associated with the first foreign domain provides criterion based on a domain in which a second entity to the communication session is located.
17. The method of claim 1 wherein the first policy associated with the first foreign domain provides criterion based on prior communications sessions involving the first entity.
18. The method of claim 1 wherein the first policy associated with the first foreign domain requires that the signaling message be blocked to avoid establishment of the communication session.
19. The method of claim 1 wherein the first policy associated with the first foreign domain requires that the signaling message be rerouted to a destination other than an originally intended destination.
20. The method of claim 1 wherein the first foreign domain comprises a proxy and the first entity, which is supported by the proxy.
21. The method of claim 1 wherein the transit domain comprises an Internet Protocol Multimedia Subsystem and the first entity, which is supported by the Internet Protocol Multimedia Subsystem.
22. The method of claim 1 wherein the first foreign domain comprises the Internet.
23. The method of claim 1 further comprising authenticating at least one of the group consisting of the source and the source domain of the signaling message.
24. The method of claim 1 further comprising providing protocol adaptation between the first foreign domain and the transit domain.
25. An edge control node associated with a transit domain and adapted to process a signaling message associated with a first foreign domain and intended to establish a communication session involving a first entity associated with the first foreign domain comprising:
at least one communication interface; and
a control system associated with the at least one communication interface and adapted to:
receive the signaling message in the transit domain through which the signaling message must travel to establish the communication session;
access a first policy for the first foreign domain; and
in the transit domain, apply the first policy for the first foreign domain to the signaling message to control establishment of the communication session, wherein the first entity is not associated with the transit domain.
26. The edge control node of claim 25 wherein the control system is further adapted to:
establish an association between the transit domain and the first foreign domain; and
provide the first policy based on the transit domain's association with the first foreign domain.
27. The edge control node of claim 25 wherein a plurality of entities, including the first entity, are associated with the first foreign domain and not the transit domain.