System and method for enabling a peer-to-peer (P2P) connection
A system and method are provided that enable a registrar or other server or proxy device to be used to provide a path between a pair of endpoint devices for exchanging addressing information, in order to establish a direct P2P connection. Once that connection is established, the connection may be used for any P2P data communications, e.g. SIP establishment of a VoIP call, instant messaging, online gaming, file transfer, multimedia streaming, etc. In this way, each endpoint device possesses a list of candidate addresses to establish a direct P2P connection, which may then be used for any type of communication. By relying on a registrar or other server to enable the candidate lists to be exchanged, control can still be maintained if necessary, since the candidate lists can be modified, e.g. to enable a transparent interception, to impose or remove security restrictions, etc.
1. A method of controlling a peer-to-peer session between a first endpoint and a second endpoint, the method comprising:
a registrar enabling the first and second endpoints to register therewith;
the registrar obtaining a first candidate list from the first endpoint and a second candidate list from the second endpoint, each candidate list comprising one or more reflexive transport internet protocol addresses;
the registrar modifying the first candidate list, the modifying redirecting packets from the second endpoint to the registrar instead of the first endpoint;
the registrar modifying the second candidate list, the modifying redirecting packets from the first endpoint to the registrar instead of the second endpoint;
the registrar sending modified candidate lists to the first and second endpoints; and
the registrar intercepting a first packet from one of the first and second endpoints to perform an action prior to forwarding the first packet to the other of the first and second endpoints.
2. The method of claim 1 , wherein the first packet corresponds to a first address in a corresponding candidate list, the first address having been modified to correspond to a public address for the registrar, the method further comprising sending a connection response to the one of the first and second endpoints.
3. The method of claim 2 , further comprising determining whether or not to perform the forwarding according to any one or more of a policy and a set of rules.
4. The method of claim 2 , further comprising intercepting a second packet from the other of the first and second endpoints, to perform another action prior to forwarding the second packet to the one of the first and second endpoints.
5. The method of claim 1 , wherein the action comprises recording a communication.
6. The method of claim 1 , wherein the action comprises removing at least one security feature.
7. The method of claim 1 , wherein the action comprises adding at least one security feature.
8. The method of claim 1 , the first and second endpoints being registered using a session initiation protocol.
9. The method of claim 8 , wherein the request received by the registrar comprises a session initiation protocol MESSAGE.
10. The method according to claim 1 , wherein the reflexive transport internet protocol addresses are obtained by communicating with a reflexive server using a session traversal utilities for network address translation request.
11. A non-transitory computer readable storage medium comprising computer executable instructions for controlling a peer-to-peer session between a first endpoint and a second endpoint, the computer executable instructions comprising instructions for:
a registrar enabling the first and second endpoints to register therewith;
the registrar obtaining a first candidate list from the first endpoint and a second candidate list from the second endpoint, each candidate list comprising one or more reflexive transport internet protocol addresses;
the registrar modifying the first candidate list, the modifying redirecting packets from the second endpoint to the registrar instead of the first endpoint;
the registrar modifying the second candidate list, the modifying redirecting packets from the first endpoint to the registrar instead of the second endpoint;
the registrar sending modified candidate lists to the first and second endpoints; and
the registrar intercepting a first packet from one of the first and second endpoints to perform an action prior to forwarding the first packet to the other of the first and second endpoints.
12. The non-transitory computer readable storage medium of claim 11 , wherein the first packet corresponds to a first address in a corresponding candidate list, the first address having been modified to correspond to a public address for the registrar, the computer executable instructions further comprising instructions for sending a connection response to the one of the first and second endpoints.
13. The non-transitory computer readable storage medium of claim 12 , further comprising instructions for determining whether or not to perform the forwarding according to any one or more of a policy and a set of rules.
14. The non-transitory computer readable storage medium of claim 12 , further comprising instructions for intercepting a second packet from the other of the first and second endpoints, to perform another action prior to forwarding the second packet to the one of the first and second endpoints.
15. The non-transitory computer readable storage medium of claim 11 , wherein the action comprises recording a communication.
16. The non-transitory computer readable storage medium of claim 11 , wherein the action comprises removing at least one security feature.
17. The non-transitory computer readable storage medium of claim 11 , wherein the action comprises adding at least one security feature.
18. The non-transitory computer readable storage medium of claim 11 , the first and second endpoints being registered using a session initiation protocol.
19. The non-transitory computer readable storage medium of claim 18 , wherein the request received by the registrar comprises a session initiation protocol MESSAGE.
20. The non-transitory computer readable storage medium according to claim 11 , wherein the reflexive transport internet protocol addresses are obtained by communicating with a reflexive server using a session traversal utilities for network address translation request.
21. A registrar device comprising a processor and memory, the memory comprising computer executable instructions for controlling a peer-to-peer session between a first endpoint and a second endpoint, the computer executable instructions comprising instructions for:
enabling the first and second endpoints to register therewith;
obtaining a first candidate list from the first endpoint and a second candidate list from the second endpoint, each candidate list comprising one or more reflexive transport internet protocol addresses;
modifying the first candidate list, the modifying redirecting packets from the second endpoint to the registrar instead of the first endpoint;
modifying the second candidate list, the modifying redirecting packets from the first endpoint to the registrar instead of the second endpoint;
sending modified candidate lists to the first and second endpoints; and
intercepting a first packet from one of the first and second endpoints to perform an action prior to forwarding the first packet to the other of the first and second endpoints.