Methods, systems, and computer readable media for media session policy compliance auditing and enforcement using a media relay and session initiation protocol (SIP) signaling

1. A method for providing for media session policy compliance auditing and enforcement using a TURN server and session initiation protocol (SIP) signaling, the method comprising:

at a SIP policy server including one or more processors, receiving SIP signaling from a user agent client (UAC) to determine a media policy for a media session, and, in response:

generating at least one media session correlation token;

communicating the at least one media session correlation token and the media policy from the SIP policy server to the UAC in a manner that forces the UAC to authenticate itself with a TURN server using the at least one media session correlation token and to the TURN server, which is separate from the SIP policy server, at least a portion of the media relay being implemented in hardware, wherein the TURN server relays media packets between the UAC and a second UAC; and

communicating identification information for the TURN server to the user agent client; and

at the TURN server, receiving the at least one media session correlation token from the SIP policy server and using the at least one token to correlate and store usage information for the media session and to monitor compliance with the media policy, wherein correlating and storing usage information includes associating the usage information with the media session and storing the correlated usage information.

2. The method of claim 1 comprising, at the media relay, using the media session correlation token and the media policy to provide for real-time enforcement of the media policy.

3. The method of claim 2 wherein providing for real-time enforcement of the media policy includes freeing resources associated with the media session and blocking packets associated with the media session after termination signaling associated with the media session has been exchanged.

4. The method of claim 2 wherein providing for real-time enforcement of the media policy includes establishing a lawful intercept tap point at the TURN server.

5. The method of claim 1 comprising using the at least one media session correlation token to extract the usage information from the media relay and audit the media session.

6. The method of claim 5 wherein auditing the media session includes determining whether media session parameters conform to the media policy.

7. The method of claim 5 comprising generating charging information based on the auditing.

8. The method of claim 1 wherein the at least one media session correlation token comprises a first media session correlation token that is communicated to the UAC and a second media session correlation token that is communicated to the TURN server.

9. The method of claim 1 wherein the at least one media session correlation token comprises a single media session correlation token that is communicated to the UAC and to the media relay.

10. The method of claim 9 wherein the single media session correlation token comprises the user ID used by the UAC to authenticate itself to the media relay.

11. The method of claim 1 comprising communicating the media session correlation token to a called user agent client to correlate signaling from the called user agent client with the media session.

12. A system for providing for media session policy compliance auditing and enforcement using a TURN server and session initiation protocol (SIP) signaling, the system comprising:

a SIP policy server including one or more processors for receiving SIP signaling from a user agent client (UAC) to determine a media policy for the media session, and, in response:

for generating at least one media session correlation token;

for communicating the at least one media session correlation token and the media policy from the SIP policy server to the UAC in a manner that forces the UAC to authenticate itself with a TURN server using the at least one media session correlation token and to the TURN server, which is separate from the SIP policy server, at least a portion of the TURN server being implemented in hardware, wherein the TURN server relays media packets between the UAC and a second UAC; and

for communicating identification information for the TURN server to the user agent client; and

the TURN server for receiving the at least one media session correlation token from the SIP policy server and using the at least one token to correlate and store usage information for the media session and to monitor compliance with the media policy, wherein correlating and storing usage information includes associating the usage information with the media session and storing the correlated usage information.

13. The system of claim 12 wherein the media relay uses the media session correlation token and the media policy to provide for real-time enforcement of the media policy.

14. The system of claim 13 wherein providing for real-time enforcement of the media policy includes freeing resources associated with the media session and blocking packets associated with the media session after termination signaling associated with the media session has been exchanged.

15. The system of claim 13 wherein providing for real-time enforcement of the media policy includes establishing a lawful intercept tap point at the TURN server.

16. The system of claim 12 wherein the TURN server is configured to use the at least one media session correlation token to extract the usage information from the TURN server and audit the media session.

17. The system of claim 16 wherein auditing the media session includes determining whether media session parameters conform to the media policy.

18. The system of claim 6 comprising generating charging information based on the auditing.

19. The system of claim 12 wherein the at least one media session correlation token comprises a first media session correlation token that is communicated to the UAC and a second media session correlation token that is communicated to the TURN server.

20. The system of claim 12 wherein the at least one media session correlation token comprises a single media session correlation token that is communicated to the UAC and to the TURN server.

21. The system of claim 20 wherein the single media session correlation token comprises the user ID used by the UAC to authenticate itself to the TURN server.

22. The system of claim 12 wherein the SIP proxy/policy server is configured to communicate the media session correlation token to a called user agent client to correlate signaling from the called user agent client with the media session.

23. A non-transitory computer readable medium having stored thereon computer executable instructions that when executed by the processor of a computer controls the computer to perform steps comprising:

at a SIP policy server, receiving SIP signaling from a user agent client (UAC) to determine a media policy for a media session, and, in response:

generating at least one media session correlation token;

communicating the at least one media session correlation token and the media policy from the SIP policy server to the UAC in a manner that forces the UAC to authenticate itself with a TURN server using the at least one media session correlation token and to a the TURN server, which is separate from the SIP policy server, wherein the media relay relays media packets between the UAC and a second UAC; and

communicating identification information for the TURN server to the user agent client; and

at the TURN server, receiving the at least one media session correlation token from the SIP policy server and using the at least one token to correlate and store usage information for the media session and to monitor compliance with the media policy, wherein correlating and storing usage information includes associating the usage information with the media session and storing the correlated usage information.