Apparatus and method to mitigate malicious calls in a wireless network
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorQiwen Zhang
Life of this patent
Estimating the term…
Abstract
Embodiments of invention mitigate stealthy DoS attack and the multiple concurrent ghost calls through enhancing the SIP call procedures. In one embodiment, a first SIP invite message is forwarded from a caller party to a callee party to set up a SIP session, and in response to the first SIP invite message, a timer is started and forwarding one or more session progress messages are forwarded to the caller party. If the caller party is unresponsive upon expiration of the timer, a counter is incremented once and an additional SIP invite message from the caller party is forwarded to the callee party, which responds with session progress messages. When the caller party remains unresponsive and the counter reaches a threshold, the subsequent SIP messages from the caller party are dropped.
Claims20
A method to coordinate session initiation protocol (SIP) calls by an electronic device in a network, comprising:
- forwarding a first SIP invite message from a caller party to a first callee party to set up a SIP session;
- starting, by the electronic device, a timer and forwarding one or more session progress messages to the caller party from the first callee party in response to the first SIP invite message, the timer to measure a time period until the electronic device receiving a provisional response acknowledgement (PRACK) message responsive to the one or more session progress messages forwarded to the caller party, wherein the electronic device comprises a third party node apart from the caller party and the first callee party, the third party node coordinating the SIP session;
- upon the caller party being unresponsive to the one or more session progress messages at expiration of the timer,
- incrementing a counter once and forwarding an additional SIP invite message from the caller party to the first callee party to set up the SIP session,
- restarting the timer and forwarding additional one or more session progress messages from the first callee party to the caller party in response to the additional SIP invite message;
- upon the caller party remaining unresponsive to the additional one or more session progress messages when the timer expires,
- repeating the increment of the counter, the SIP invite message forwarding, the timer restarting, and the session progress messages forwarding,
- until the counter reaches a threshold;
- and
- dropping subsequent SIP messages from the caller party upon the counter reaching the threshold.
An electronic device to coordinate session initiation protocol (SIP) calls in a network, comprising:
- a processor and non-transitory machine-readable storage medium that provides instructions that, when executed by the processor, cause the electronic device to perform:
- forwarding a first SIP invite message from a caller party to a first callee party to set up a SIP session;
- starting a timer and forwarding one or more session progress messages to the caller party from the first callee party in response to the first SIP invite message, the timer to measure a time period until the electronic device receiving a provisional response acknowledgement (PRACK) message responsive to the one or more session progress messages forwarded to the caller party, wherein the electronic device comprises a third party node apart from the caller party and the first callee party, the third party node coordinating the SIP session;
- upon the caller party being unresponsive to the one or more session progress messages upon expiration of the timer,
- incrementing a counter once and forwarding an additional SIP invite message from the caller party to the first callee party to set up the SIP session,
- restarting the timer and forwarding additional one or more session progress messages from the first callee party to the caller party in response to the additional SIP invite message;
- upon the caller party remaining unresponsive to the additional one or more session progress messages when the timer expires,
- repeating the increment of the counter, the SIP invite message forwarding, the timer restarting, and the session progress messages forwarding,
- until the counter reaches a threshold;
- and
- dropping subsequent SIP messages from the caller party upon the counter reaching the threshold.
Dependencies are inferred from the claim text.