JP3917454B2 - IP address registration method in IP communication system, gatekeeper and IP terminal device constituting the IP communication system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a method for registering an IP address of an IP terminal device such as an IP telephone in an IP communication system that performs an IP call over an IP network, and a gatekeeper and an IP terminal device that constitute the IP communication system.
[0002]
[Prior art]
In order to make an IP call between IP telephones via the IP network, the telephone number and IP address of each IP telephone are registered in advance in a gatekeeper connected to the IP network, and before the IP connection, This is performed by obtaining an IP address.
[0003]
A procedure for making an IP call between IP telephones via the IP network will be described with reference to FIG. The IP telephone 3 that is to make an IP call registers an IP address in the gatekeeper 1 via the IP network 51 prior to the IP call. That is, the IP telephone 3A transmits a registration request (RRQ) including its own telephone number and a previously acquired IP address to the gatekeeper 1 via the IP network 51 (step S101). Upon receiving the registration request (RRQ), the gatekeeper 1 registers the telephone number and IP address of the IP telephone 3A in the registration table (step S102), and returns a registration confirmation (RCF) to the IP telephone 3A (step S103).
[0004]
Similarly, the IP telephone 3B attempting to make an IP call transmits a registration request (RRQ) including its own telephone number and a previously acquired IP address to the gatekeeper 1 via the IP network 51 (step S104). Upon receiving the registration request (RRQ), the gatekeeper 1 registers the telephone number and IP address of the IP telephone 3B in the registration table (step S102), and returns a registration confirmation (RCF) (step S105).
[0005]
  IP phone 3AUserWhen requesting IP connection (step S106), the IP telephone 3A transmits a call start request (ARQ) including the telephone number of the counterpart IP telephone 3B to the gatekeeper 1 (step S107). The gatekeeper 1 searches the registration table using the telephone number of the partner IP telephone 3B to recognize that the IP address of the IP telephone 3B is registered (step S108), and includes the IP address of the IP telephone 3B An authorization response (ACF) is returned to IP telephone 3A (step S109).
[0006]
The IP telephone 3A that has acquired the IP address of the IP telephone 3B sends a call setting to the IP telephone 3B via the IP network 51 using this IP address (step S110).
[0007]
The IP telephone 3B that has received the call setting returns a call setting acceptance to the IP telephone 3A via the IP network 51 (step S111), and also includes a start request including the telephone number of the originating IP telephone 3A to the gatekeeper 1 (ARQ) is transmitted (step S112).
[0008]
The gatekeeper 1 searches the registration table using the telephone number of the originating IP telephone 3A, recognizes that the IP address of the IP telephone 3A is registered (step S113), and sets the IP address of the IP telephone 3A. The authorization response (ACF) including the response is returned to the IP telephone 3B (step S114).
[0009]
The IP telephone 3B that has acquired the IP address of the IP telephone 3A sends a call to the IP telephone 3A via the IP network 51 (step S115), and then sends a response (step S116). The IP telephone 3A and the IP telephone An IP call is performed with the 3B through the IP network 51 (step S117).
[0010]
As described above, the IP call can be made after a predetermined procedure when the IP addresses of both the IP telephones 3A and 3B are accurately registered in the gatekeeper 1 corresponding to the telephone numbers.
[0011]
In the IP address registration process in steps S101 to S105, since the gatekeeper registers the telephone number and the IP address based on the registration request (RRQ) from the IP telephone in advance, the IP telephone impersonates the other person and sets the telephone number. By registering, so-called “spoofing” of acquiring an IP address is performed, and there is a problem that it is difficult to ensure the reliability of the IP address. That is, at the time of outgoing call, the IP telephone obtains the IP address of the other party by inquiring of the IP network gatekeeper and uses the acquired other party's IP address. An outgoing call operation is performed according to the H.323 signaling procedure to make an IP call. At this time, even if the phone number registered by the IP phone is intentionally wrongly spoofed, the gatekeeper will not know the phone number error and will register it as it is. An IP address based on the registered telephone number is returned to the originating IP telephone.
[0012]
As described above, when registering an IP address, it is necessary to register the IP address using a reliable telephone number, but there is no means for preventing impersonation because the registered telephone number is used as it is.
[0013]
[Problems to be solved by the invention]
An object of the present invention is to prevent fraudulent acts such as impersonation by registering an IP address corresponding to a highly reliable telephone number in an IP address registration process in an IP call.
[0014]
[Means for Solving the Problems]
  In order to solve the above problems, the present invention provides:,To the gatekeeper to register his / her phone number and IP addressPublicThrough the public networkDepartTrustFunction to, With the ability to exchange encryption keys with gatekeepers,A function to encrypt the IP address and send the phone number and the encrypted IP address to the gatekeeper via the IP network.An IP terminal device,IP terminal devicePublicRegister the phone number obtained by incoming number display via the public networkFunction andExchange of encryption key with IP terminal device via public networkFunction toRegister the exchanged encryption key in association with the phone number obtained by incoming number displayFunction to, Judgment whether the telephone number sent from the IP terminal device via the IP network for IP address registration matches the telephone number acquired by the incoming number displayWith the ability toA function is provided for decrypting an IP address sent from an IP terminal device with an encryption key registered in association with a matching telephone number and registering the IP address.An IP address registration method in an IP communication system in which an IP network and a public network are connected to a gatekeeper.,
The IP terminal device sends a number display call to the gatekeeper via the public network in order to register its telephone number and IP address with the gatekeeper,
The gatekeeper registers the telephone number obtained by the number display incoming call from the IP terminal device via the public network,
Via the public network between the IP terminal and the gatekeeperExchange encryption keyAnd
The IP terminal device encrypts the IP address using the exchanged encryption key and transmits the telephone number and the encrypted IP address to the gatekeeper via the IP network.
The gatekeeper registers the exchanged encryption key in association with the telephone number acquired when the number display is received, and the telephone number sent from the IP terminal device via the IP network for IP address registration is acquired when the number display is received. The IP address sent by being encrypted from the IP terminal device with the encryption key registered in association with the matched telephone number, and registering the IP address,
The telephone number, IP address, and encryption key of the IP terminal device are associated with each other and registered in the gatekeeper.
[0015]
  In order to solve the above problems, the present invention provides a gatekeeper constituting an IP communication system to which the above IP address registration method is applied.Because,publicInn with the crowdtoughInterface between IP and IP network,publicTelephone number acquisition means for acquiring a telephone number from a number display incoming from the public network;publicAn encryption key storage means for storing an encryption key exchanged with an IP terminal device via a public network, an encryption / decryption processing unit for decrypting an IP address encrypted using the encryption key,
An IP address registration table for registering the telephone number of the IP terminal device, the encryption key, and the IP address in association with each other;publicRegister the telephone number of the IP terminal device acquired from the number display incoming call via the public network and exchange the encryption key with the IP terminal device by this incoming call,publicThe IP address sent from the IP terminal device is decrypted and registered with the encryption key exchanged via the network.
[0016]
  In order to solve the above-mentioned problems, the present invention provides an IP terminal device constituting an IP communication system to which the above-described IP address registration method is applied.Because,publicInn with the crowdtoughInterface between IP and IP network,publicTo the public networkNumber displayAnalog transmission means for transmitting,An encryption key exchange means for exchanging an encryption key with a gatekeeper via a public network;An encryption key storage means for storing an encryption key exchanged with a gatekeeper via a public network, an encryption / decryption processing unit for encrypting an IP address using the encryption key, andWithThe gatekeeperPublicThrough the public networkNumber displayMake outgoing calls and exchange encryption keys with the gatekeeper,publicThe IP address is encrypted with the encryption key exchanged over the network and sent.RuI did it.
[0017]
In the registration of the telephone number, the reliability of the telephone number can be obtained by making a number display call to the gatekeeper. Further, when registering an IP address, it is possible to perform registration with higher security by encrypting the sequence.
[0018]
Since the IP address cannot be registered unless the telephone number obtained in the encryption key exchange and the number display matches, the IP call cannot be made.
[0019]
DETAILED DESCRIPTION OF THE INVENTION
An outline of a configuration of an IP communication system to which an IP address registration method in an IP call according to the first embodiment of the present invention is applied will be described with reference to FIG. An IP communication system to which the IP address registration method according to the first embodiment of the present invention is applied includes a gatekeeper 1 having an IP address registration function, a plurality of IP telephones 3A and 3B, a gatekeeper 1 and an IP telephone. An IP network 51 that connects 3A and 3B, and an analog public network 55 that connects the gatekeeper 1 and the IP telephones 3A and 3B. In this IP communication system, telephone number registration and encryption key exchange performed between each IP telephone 3 and the gatekeeper 1 are performed using number display reception via the analog public network 55, and IP address registration is This is performed via the IP network 51. As a result, the gatekeeper 1 can acquire the correct telephone number of the IP telephone 3 by receiving the number display, and can prevent spoofing.
[0020]
  Configuration of gatekeeper 1 constituting the IP communication systemExampleWill be described with reference to FIG. The gatekeeper 1 includes a main control unit 10 and H.264. H.323 gatekeeper control unit 11; H.323 control unit 12, TCP / IP control unit 13, encryption / decryption control unit 14, registration table management unit 15, IP address registration table 16, analog line control unit 17, and Ethernet (registered trademark). InntoughIt has a case 18 and a timer processing unit 19.
[0021]
The main control unit 10 is means for controlling the entire apparatus. The main control unit 10 has a function of recognizing a telephone number when a number display is received, a function of exchanging a public key with an IP telephone, and the like. The main control unit 10 manages its own private key and public key. That is, the main control unit 10 has a function of recognizing that an incoming call is received from an IP terminal device registered in advance by an incoming call on the number display, and exchanging an encryption key based on the telephone number. Yes.
[0022]
H. The H.323 gatekeeper control unit 11 is a means for performing protocol control such as IP address exchange of the gatekeeper. That is, H.I. The H.323 gatekeeper control unit 11 is means for resolving the IP address from the IP terminal device. H. The H.323 gatekeeper control unit 11 writes and manages the IP address and telephone number of its own IP terminal device requested for setting from the IP terminal device in the IP address registration table, and for the telephone number requested from the IP terminal device. IP address notification (IP address resolution) function.
[0023]
H. The H.323 control unit 12 is an H.323 controller. It is means for performing H.323 protocol control and call control. That is, H.I. When the IP terminal device performs a connection operation via this gatekeeper, the H.323 control unit 12 It has a function of performing IP signaling processing by the H.323 procedure or the like for the IP terminal device of the connection partner.
[0024]
The TCP / IP control unit 13 is means for performing TCP / UDP / IP protocol control. That is, the TCP / IP control unit 13 is connected to the H.264 standard. H.323 control unit 12 or H.323. It has a function to generate and transmit / receive data sent from the H.323 gatekeeper control unit 11 to a TCP / IP packet.
[0025]
The encryption / decryption control unit 14 is means for performing key exchange procedures and data encryption / decryption. That is, the encryption / decryption control unit 14 performs a function of exchanging an encryption key with an incoming IP terminal device, and encrypts / decrypts in an IP address registration process between the IP terminal device and the gatekeeper 1. It has a function to perform communication.
[0026]
The registration table management unit 15 is a means for registering and managing the telephone number (terminal number) and public key of the IP telephone and the IP address. That is, the IP address management unit 15 has a function of registering and managing the telephone number, IP address, and encryption key of the IP terminal device.
[0027]
  The IP address registration table 16 is a table for registering a telephone number of an IP telephone and a public key of the IP telephone in association with the IP address. The IP address registration table 16 has the configuration shown in FIG. That is, the IP address registration table 16 records the telephone number and IP address for which a registration request has been received from the IP terminal device. Whether the registration table management unit 15 is currently communicating with an IP terminal device that has been registered regularlyTheIf the IP terminal device is not communicating, the IP address is deleted from the information registered in the IP address registration table 16. The telephone number and the public key are registered only once by connection via the analog public network 55. The IP address is registered by connection via the IP network 51.
[0028]
The analog line control unit 17 is means for performing connection processing (for example, PPP connection processing) on an analog line. That is, the analog line control unit 17 has a function of receiving an incoming call from a number display from an IP terminal device and notifying the main control unit 10 of an incoming telephone number and a function of connecting to an IPS for connecting to a network. ing.
[0029]
The Ethernet interface 18 is an interface with Ethernet. That is, the Ethernet interface 18 has an Ethernet interface and has a function of transmitting and receiving IP packets.
[0030]
The timer processing unit 19 is a timer used for terminal confirmation and the like. That is, the timer processing unit 19 has a function of monitoring the IP address registration table 16, and determines whether or not there is an IP terminal device periodically registered in the IP address registration table from the main control unit 10. H. It has a function of monitoring via the H.323 gatekeeper control unit 11.
[0031]
  Configuration of IP terminal apparatus (IP telephone) 3 constituting the IP communication systemExampleWill be described with reference to FIG. The IP terminal device 3 includes a main control unit 30, a key input control unit 31, 323 control unit 32, TCP / IP control unit 33, encryption / decryption control unit 34, voice compression / decompression processing unit 35, IP address registration table 36, analog line control unit 37, Ethernetinterface38 and a handset 39.
[0032]
The main control unit 30 is means for controlling the entire IP terminal device 3. The main control unit 30 has a function of exchanging public keys with the gatekeeper. The main control unit 30 manages its own private key and public key. That is, the main control unit 30 has a function of performing a call operation to a gatekeeper registered in advance when a call operation is instructed from the key input control unit 31.
[0033]
The key input control unit 31 is means for performing key input for performing a call operation.
[0034]
H. The H.323 control unit 32 is an H.323 control unit. It is means for performing H.323 protocol control and call control. That is, H.I. The H.323 control unit 32 registers the IP address with the gatekeeper 1 and acquires the IP address of the IP terminal device to be connected. It has a function of performing IP signaling processing by the H.323 procedure or the like on the counterpart IP terminal device.
[0035]
The TCP / IP control unit 33 is means for performing TCP / UDP / IP protocol control. That is, the TCP / IP control unit 33 is connected to the H.264 standard. H.323 controller 32 or gatekeeper 1 H.323. It has a function to generate and transmit / receive data sent from the H.323 gatekeeper control unit 11 to a TCP / IP packet.
[0036]
The encryption / decryption control unit 34 is means for performing a key exchange procedure and data encryption / decryption. That is, the encryption / decryption control unit 34 has a function of exchanging an encryption key with the gatekeeper 1 for registering its own IP address, and encryption / decryption in an IP address registration process between the gatekeeper 1 and the IP terminal device. It has a function to perform communication.
[0037]
The voice compression / decompression processing unit 35 has a function of converting an analog signal from the handset 39 into a digital signal and performing compression processing, and a function of decompressing compressed voice data received from the IP network. In other words, the audio compression / decompression processing unit 35 includes an audio compression processing unit (encoder) and an expansion processing unit (decoder), converts an analog audio signal into a digital signal, and decodes the digital signal into an analog audio signal. It has a function to do.
[0038]
The IP address registration table 36 is a means for managing its own public key and IP address acquired from the IP network, and is a means for registering the IP address of the connected IP terminal device acquired from the gatekeeper 1.
[0039]
The analog line control unit 37 is a means for performing analog transmission via the analog public network 55. That is, the analog line control unit 37 performs a transmission operation via the analog public network 55 to the gate keeper 1 for registering its own IP address, a function for connecting to the ISP for connecting to the analog public network 55. And a function for exchanging encryption keys with the gatekeeper 1 via the analog public network 55.
[0040]
  The Ethernet interface 38 is an interface with Ethernet.toughThis is a means for transmitting and receiving IP packets via the IP network 51, exchanging IP addresses with the gatekeeper 1, and making an IP call with an opposing IP terminal device.
[0041]
The handset 39 is a handset for making a call, and has a microphone and a speaker for voice calls.
[0042]
  IP call procedure in an IP communication system in which the gatekeeper 1 and the plurality of IP terminal devices (IP telephones) 3A and 3B having the above configuration are accommodated in the IP network 51 and the analog public network 55ExampleWill be described with reference to FIG.
[0043]
  When the user of the IP telephone 3A performs his / her own telephone number registration operation on the gatekeeper 1 (step S1), the IP telephone 3A operates on the gatekeeper 1 via the analog public network 55.Number displayA call is made (step S2).
[0044]
  The gatekeeper 1 recognizes the correct telephone number of the IP telephone 3A by receiving the number display, registers the telephone number in the IP address registration table 16 (step S3), and returns a response indicating that the number display incoming call is connected (step S3). S4). Thereafter, the public encryption key is exchanged between the gatekeeper 1 and the IP telephone 3A (step S5). The gatekeeper 1 uses the acquired public key a of the IP telephone 3A as the IPaddressThe registration is made in the registration table 16 corresponding to the telephone number (step S6), and the IP telephone 3A registers the acquired public key g of the gatekeeper 1 in the IP address registration table 36 (step S7). Thereafter, the gatekeeper 1 disconnects the analog public network 55 with the IP telephone 3A (step S8).
[0045]
Similarly, when the user of the IP telephone 3B performs its own telephone number registration operation on the gatekeeper 1 (step S11), the IP telephone 3B makes a call to the gatekeeper 1 via the analog public network 55 (step S11). S12).
[0046]
  The gatekeeper 1 recognizes the correct telephone number of the IP telephone 3B by receiving the number display, registers the telephone number in the IP address registration table 16 (step S13), and returns a response indicating that the telephone number has been registered (step S14). ). Thereafter, the public encryption key is exchanged between the gatekeeper 1 and the IP telephone 3B (step S15). The gatekeeper 1 uses the acquired public key b of the IP telephone 3B as the IPaddressThe registration is made in the registration table 16 corresponding to the telephone number (step S16), and the IP telephone 3B registers the acquired public key g of the gatekeeper 1 in the IP address registration table 36 (step S17). Thereafter, the gatekeeper 1 disconnects the analog public network 55 with the IP telephone 3B (step S18).
[0047]
Through the above processing, the gatekeeper 1 can accurately register the telephone number of each IP telephone 3. The telephone number registration process for these IP telephones is performed only once for the gatekeeper 1.
[0048]
  After that, the IP telephones 3A and 3B, whose telephone numbers are registered by analog transmission, execute a process of registering the global address or their own IP address acquired from the provider to the gatekeeper 1, respectively. First, the IP telephone 3A sends its own telephone number to the gatekeeper 1.Received from Gatekeeper 1Public keygA registration request (RRQ) consisting of an IP packet with an IP address encrypted using is transmitted (step S21).
[0049]
  The gatekeeper 1 is a private key of the IP telephone 3A registered in the IP address registration table 16aReceived usingIP packetThe IP address is decrypted and registered in the IP address registration table 16 (step S23). When registration is completed, the gatekeeper 1NonPublic keygThe registration confirmation (RCF) encrypted at step S24 is returned to the IP telephone 3A (step S24). The IP telephone 3A has received the registration confirmation (RCF) stored in the encryption / decryption control 34.ofPublic keygTo confirm that the registration of its own IP address is completed (step S26).
[0050]
  Similarly, the IP telephone 3B sends its own telephone number and the public key received from the gatekeeper 1 to the gatekeeper 1.gA registration request (RRQ) consisting of an IP packet loaded with an IP address encrypted using is transmitted (step S22).
[0051]
  The gatekeeper 1 uses the IP telephone 3B registered in the IP address registration table 16ofPrivate keybReceived usingIP packetThe IP address is decrypted and registered in the IP address registration table 16 (step S23). When registration is completed, the gatekeeper 1NonPublic keygThe registration confirmation (RCF) encrypted at step S25 is returned to the IP telephone 3B (step S25). The IP telephone 3B has received the registration confirmation (RCF) stored in the encryption / decryption control 34.ofPublic keygTo confirm that registration of the self IP address is completed (step S27).
[0052]
With the above processing, the IP address of each IP telephone 3 is registered in the gatekeeper 1.
[0053]
Next, when the user of the IP telephone 3A issues a connection request to the IP telephone 3B (step S31), the IP telephone 3A starts inquiring about the IP address of the partner IP telephone 3B having its own IP address and the partner telephone number. A request (ARQ) is transmitted to the gatekeeper 1 (step S32).
[0054]
The gatekeeper 1 refers to the IP address registration table 16 using the other party's telephone number, searches for the IP address of the other party's IP telephone 3B (step S33), and grants the permission (see FIG. ACF) is transmitted to IP telephone 3A (step S34).
[0055]
The IP telephone 3A that has acquired the IP address of the partner IP telephone 3B performs call setting to the partner IP telephone 3B via the IP network 51 (step S35). The partner IP telephone 3B that has received the call setting transmits a call setting acceptance to the IP telephone 3A (step S36), and starts inquiring about the IP address of the partner IP telephone 3A equipped with its own IP address and the partner telephone number. A request (ARQ) is transmitted to the gatekeeper 1 (step S36).
[0056]
The gatekeeper 1 refers to the IP address registration table 16 using the telephone number of the IP telephone 3A, searches for the IP address of the IP telephone 3A (step S38), and grants the permission of mounting the IP address of the found IP telephone 3A ( ACF) is transmitted to IP telephone 3B (step S39).
[0057]
The IP telephone 3B that has acquired the IP address of the IP telephone 3A transmits a call to the counterpart IP telephone 3A via the IP network 51 (step S40) and transmits a response (step S41).
[0058]
In this way, an IP call can be made between the IP telephone 3A and the IP telephone 3B (step S50).
[0059]
The gatekeeper 1 periodically transmits a status request (IRQ) to the IP telephone 3 (steps S61 and 62), and when there is a response (IRR) from the IP telephone 3 (steps S63 and 64), the IP telephone 3 is connected to the IP network 51. When there is no response (IRR) from the IP telephone 3, it is determined that the IP telephone 3 has left the IP network 51, and the IP address of the IP telephone 3 is deleted from the IP address registration table 16.
[0060]
As described above, according to the present invention, the gatekeeper 1 can obtain the correct telephone number of the IP telephone by receiving the number display, and furthermore, the correct IP address of the IP telephone can be obtained by the encryption key already exchanged. Since it is possible to register, it is possible to reliably prevent spoofing calls by a third party.
[0061]
In the above description, the present invention has been described with respect to the IP connection processing method of the IP telephone 3 that performs an IP call. However, the present invention is not limited to an IP telephone, but between a gatekeeper that requires telephone number registration and an IP terminal apparatus. It can be applied to the IP address registration process.
[0062]
The outline of the configuration of the IP communication system to which the IP address registration method in the IP call according to the second embodiment of the present invention is applied will be described below with reference to FIG. The IP communication system to which the IP address registration method according to this embodiment is applied includes a gatekeeper 1 having an IP address registration function, a plurality of analog terminal devices 61A such as analog telephones, and a digital terminal device 62A such as a PC. VoIP adapter 4A, VoIP adapter 4B accommodating a plurality of analog terminal devices 61B such as analog telephones and digital terminal devices 62B such as PCs, and IP network 51 connecting between gatekeeper 1 and VoIP adapters 4A and 4B And an analog public network 55 connecting the gatekeeper 1 and the VoIP adapters 4A and 4B. In this IP communication system, telephone number registration and encryption key exchange performed between each VoIP adapter 4 and the gatekeeper 1 are performed using incoming number display via the public network 55. This is done via the network 51. As a result, the gatekeeper 1 can acquire the correct telephone number of the VoIP adapter 4 when the number display is received, and can prevent spoofing.
[0063]
The gatekeeper 1 has the same configuration as that of the gatekeeper 1 shown in FIG. 2 constituting the first embodiment.
[0064]
  The outline of the configuration of the VoIP adapter 4 according to this embodiment will be described with reference to FIG. The VoIP adapter 4 includes a main control unit 40, an analog call / Internet call switch 41, 323 control unit 42, TCP / IP control unit 43, line side analog line control unit 44T, subscriber side analog line control unit 44S, transmission control unit 45 to the gatekeeper, line side Ethernetinterface46T and subscriber Ethernetinterface46S, ringtone generation unit 57, voice compression / decompression processing unit 48, encryption / decryption control unit 491, and IP address registration table 492.
[0065]
The main control unit 40 is means for controlling the entire VoIP adapter 1. The main control unit 40 has a function of exchanging public keys with the gatekeeper. The main control unit 40 manages its own private key and public key. That is, the main control unit 40 has a function of performing a call operation to a gatekeeper registered in advance when a call operation is instructed from the analog terminal device 61.
[0066]
  The analog call / internet call changeover switch 41 performs an analog call for making a call between the analog terminal device 61 and the analog line 55 via the line side analog line control unit 44T, and a line side Ethernet.interfaceIt has a function of switching to any one of Internet calls performed via 46T. That is, the analog call / Internet call changeover switch 41 has a function of switching an analog call path to an IP call path (Internet call) in response to an instruction from the main control unit 40. In the case of an analog call, a communication path is formed that passes between the subscriber side analog line control unit 44S and the line side analog line control unit 44T. In the case of an IP call, an analog call from the subscriber side analog line control unit 44S. Is compressed by the voice compression / decompression processing unit 48 and digitized, and the circuit side EthernetinterfaceIt has a function of forming a communication path as an IP packet to 46T.
[0067]
H. The H.323 control unit 42 is the H.323 controller. It is means for performing H.323 protocol control and call control. That is, H.I. The H.323 control unit 42 registers the IP address with the gatekeeper 1 and acquires the IP address of the IP terminal device to be connected. It has a function of performing IP signaling processing by the H.323 procedure or the like on the counterpart IP terminal device.
[0068]
The TCP / IP control unit 43 is means for performing TCP / UDP / IP protocol control. That is, the TCP / IP control unit 43 is connected to the H.264 standard. H.323 control unit 42 or gatekeeper 1 H.323. It has a function to generate and transmit / receive data sent from the H.323 gatekeeper control unit 11 to a TCP / IP packet.
[0069]
The line-side analog line control unit 44T is means for making a call via the analog public network 55. That is, the line-side analog line control unit 44T has a function of connecting to an ISP for connecting to the analog public network 55 and a function of exchanging encryption keys with the gatekeeper 1 via the analog public network 55. is doing.
[0070]
  The subscriber-side analog line control unit 44S is connected to the accommodated analog terminal.apparatusAnalog with 61communicationIt has a function to perform.
[0071]
The transmission control unit 45 to the gatekeeper has a function of performing a transmission operation via the analog public network 55 to the gatekeeper 1 that registers its own IP address.
[0072]
  Line side Ethernetinterface46T with EthernetinterfaceAnd ethernetinterfaceIs a means for transmitting and receiving IP packets via the IP network 51 and exchanging IP addresses with the gatekeeper 1.
[0073]
  Subscriber ethernetinterface46S is an interface with Ethernet.interfaceIs a means for sending and receiving IP packets to and from the digital terminal device 62 accommodated therein.
The ring tone generator 57 is a means for generating various ring sounds to be sent to the analog terminal device 61 side.
[0074]
The voice compression / decompression processing unit 48 has a function of converting an analog signal from the analog terminal device 61 into a digital signal and performing a compression process, and a function of decompressing the compressed voice data received from the IP network 51. In other words, the audio compression / decompression processing unit 48 includes an audio compression processing unit (encoder) and an expansion processing unit (decoder), converts an analog audio signal into a digital signal, and decodes the digital signal into an analog audio signal. It has a function to do.
[0075]
The encryption / decryption control unit 491 is a means for performing a key exchange procedure and data encryption / decryption. That is, the encryption / decryption control unit 491 has a function of exchanging an encryption key with the gatekeeper 1 for registering its own IP address, and an encryption / decryption communication in the IP address registration process between the gatekeeper 1 and the VoIP adapter. It has a function to perform.
[0076]
The IP address registration table 492 is a means for managing its own public key acquired from the analog public network 55 and its own IP address acquired from the IP network 51. The IP address of the connection destination IP terminal acquired from the gatekeeper 1 It is a means for registering addresses.
[0077]
  IP communication in which a plurality of VoIP adapters 4A and 4B accommodating the gatekeeper 1 and analog terminal devices (analog telephones) 61A and 61B and digital terminal devices 62A and 62B having the above-described configuration are accommodated in the IP network 51 and the analog public network 55 In the system, the telephone number registration and IP address registration procedure between the VoIP adapter 4 and the gatekeeper 1, the IP connection processing, and the call procedure are the same as those of the IP telephone 3 in the first embodiment shown in FIG. adapter4The detailed description thereof will be omitted.
[0078]
  That is, VoIP adapter4When the subscriber-side analog line control unit 44S receives an off-hook signal from the analog terminal device 61 and a dial signal subsequent thereto, the analog call / internet call switch 41 → the main control unit 40 → the call to the gatekeeper is received by this signal. Control unit 45 → line side analog line control unit 44T → analogpublicA call is sent to the gatekeeper 1 via the network 55.
[0079]
Upon receiving a response from the gatekeeper 1 via the analog network 55, the VoIP adapter 4 causes the line side analog line control unit 44T → analog call / Internet call changeover switch 41 → main control unit 40 → encryption / decryption control unit. The encryption key is acquired through the route 491.
[0080]
By this processing, the VoIP adapter 4 can register its own telephone number in the gatekeeper 1 upon arrival of the number display, and can acquire its own encryption key and the encryption key of the gatekeeper 1.
[0081]
  When registering its own IP address in the gatekeeper 1, 323 control unit 42 → main control unit 40 → encryption / decryption processing unit 491 → TCP / IP control unit 43 → line side EthernetinterfaceThe encrypted IP address is registered on the route of 46T → IP network 51.
[0082]
In this way, as in the first embodiment, the telephone number is registered with the gatekeeper via the VoIP adapter 4 by a procedure using encryption, and between the analog terminal devices accommodated in the opposing VoIP adapter. , IP calls can be made.
[0083]
【The invention's effect】
According to the present invention, the telephone number of the IP telephone is obtained by the incoming number display, the encryption key is exchanged by this connection, and the IP address is registered using the exchanged encryption key. , You can prevent calls that spoof the phone number.
[0084]
Periodically check the IP address between the IP phone and the gatekeeper. If there is no IP phone, delete only the IP address from the IP address registration table and register the IP address by encryption when making a new IP call Therefore, it is possible to cope with a change in the IP address allocated from the IP network.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an outline of a configuration of an IP communication system to which an IP address registration method according to a first embodiment of the present invention is applied.
FIG. 2 is a block diagram for explaining an outline of the configuration of a gatekeeper constituting an IP communication system to which an IP address registration method according to the present invention is applied.
FIG. 3 is a diagram for explaining the configuration of an IP address registration table provided in a gatekeeper constituting an IP communication system to which an IP address registration method according to the present invention is applied.
FIG. 4 is a block diagram for explaining an outline of a configuration of an IP telephone configuring an IP communication system to which the IP address registration method according to the first embodiment of the present invention is applied.
FIG. 5 is a flowchart for explaining an IP address registration procedure according to the first embodiment of the present invention;
FIG. 6 is a diagram illustrating an outline of a configuration of an IP communication system to which an IP address registration method according to a second embodiment of the present invention is applied.
FIG. 7 is a block diagram for explaining an outline of a configuration of a VoIP adapter that constitutes an IP communication system to which an IP address registration method according to a second embodiment of the present invention is applied;
FIG. 8 is a flowchart for explaining a conventional IP address registration procedure;
[Explanation of symbols]
  1 Gatekeeper
  10 Main control unit
  11 H. 323 gatekeeper controller
  12H. 323 control unit
  13 TCP / IP controller
  14 Encryption / Encoding Control Unit
  15 Registration Table Management Department
  16 IP address registration table
  17 Analog line controller
  18 Ethernet interface
  19 Timer processing section
  3 IP phone
  30 Main control unit
  31 Key input controller
  32 H.I. 323 control unit
  33 TCP / IP controller
  34 Encryption / Decryption Control Unit
  35 Voice compressionStretchProcessing part
  36 IP address registration table
  37 Analog line controller
  38 Ethernet interface
  39 Handset
  4 VoIP adapter
  40 Main control unit
  41 Analog call / Internet call switch
  42 H.R. 323 control unit
  43 TCP / IP controller
  44 Analog line controller
  45 Control section for sending to gatekeeper
  46 Internetinterface
  48 Voice compression / decompression processor
  491 Encryption / Decryption Control Unit
  492 IP address registration table
  51 IP network
  55 Analog public network
  61 Analog terminal equipment
  62 Digital terminal equipment

Claims (3)

A function to disseminate through the PSTN and to the gatekeeper to register its own telephone number and IP address to the gatekeeper, and a function to replace the gatekeeper and the encryption key, IP encrypts the IP address function of registering the IP terminal apparatus to have the function of transmitting the telephone number and encrypted IP address via the network to the gatekeeper, the telephone number acquired by number display incoming via the IP terminal apparatus or Racovian Shu network When a function to exchange IP terminal apparatus and the encryption key through the public network, a function of registering in association with the exchange telephone number acquiring the encryption key number display incoming, the IP network for IP address registration a function of performing determination of whether the telephone number sent from the IP terminal apparatus to match the telephone number obtained by the caller ID call through, consistent IP connected between the gatekeeper that have a function for decrypting the IP address sent by the encryption key registered in association with the telephone number from the IP terminal apparatus registers the IP address via the IP network and the PSTN An IP address registration method in a communication system ,
The IP terminal device sends a number display call to the gatekeeper via the public network in order to register its telephone number and IP address with the gatekeeper,
The gatekeeper registers the telephone number obtained by the number display incoming call from the IP terminal device via the public network,
An encryption key is exchanged between the IP terminal device and the gatekeeper via the public network ,
The IP terminal device encrypts the IP address using the exchanged encryption key and transmits the telephone number and the encrypted IP address to the gatekeeper via the IP network.
The gatekeeper registers the exchanged encryption key in association with the telephone number acquired when the number display is received, and the telephone number sent from the IP terminal device via the IP network for IP address registration is acquired when the number display is received. The IP address sent by being encrypted from the IP terminal device with the encryption key registered in association with the matched telephone number, and registering the IP address,
An IP address registration method in an IP communication system, wherein a telephone number, an IP address, and an encryption key of an IP terminal device are registered in association with a gatekeeper. A gatekeeper that constitutes the IP communication system IP address registration method according to claim 1 is applied,
And in-tough Esu of the PSTN,
An interface with an IP network;
And the phone number acquisition means for acquiring a telephone number from the number display incoming call from PSTN,
An encryption key storage means for storing a cryptographic key exchanged with the IP terminal via the PSTN,
An encryption / decryption processing unit for decrypting an IP address encrypted using an encryption key;
An IP address registration table for registering the telephone number of the IP terminal device, the encryption key, and the IP address in association with each other;
Replace the IP terminal apparatus and the encryption key by the incoming registers the telephone number of IP terminal apparatus obtained from the caller ID call was over a PSTN, feeding from the IP terminal apparatus by the encryption key exchanged over the PSTN A gatekeeper that decrypts and registers a registered IP address. An IP terminal apparatus constituting the IP communication system IP address registration method according to claim 1 is applied,
And in-tough Esu of the PSTN,
An interface with an IP network;
And the analog transmission means to number display calling to the PSTN,
An encryption key exchange means for exchanging encryption keys with a gatekeeper via a public network;
An encryption key storage means for storing a cryptographic key exchanged with the gatekeeper through the PSTN,
A encryption and decryption processing unit for encrypting an IP address using an encryption key,
The gatekeeper through the PSTN exchange gatekeeper and the encryption key performs caller ID calling, IP terminal apparatus and transmits encrypted the IP address by the encryption key exchanged over the PSTN .

Images