US 8,713,302 B1Granted

Firewall-tolerant voice-over-internet-protocol (VoIP) emulating SSL or HTTP sessions embedding voice data in cookies

AssigneeGoogle Inc.

InventorDebra C. Kirchhoff

Life of this patent

Estimating the term…

Loading patent…

Abstract

A voice-over-Internet-Protocol (VoIP) client codes audio data as printable ASCII characters, then embeds the ASCII audio data inside a cookie that is sent over the Internet within an HTTP GET message. The GET message is sent to a server acting as a call proxy or external manager that forwards the audio data to a remote client. Return audio data is sent back to the client in the normal data field of an HTTP response message from the server. When the client receives the HTTP response, it sends another GET message without audio data, allowing the server to send another response. This empty GET allows VoIP to pass through strict firewalls that pair each HTTP response with a GET. For secure-sockets layer (SSL), client and server exchange pseudo-keys in hello and finished messages that establish the SSL session. Audio data is streamed in SSL messages instead of encrypted data.

Claims20

Dependent claims

A method for transmitting audio data over a network comprising:

establishing, by a client, a first secure-sockets layer (SSL) session with a server;
sending, by the client, a call request and call setup information to the server using the first SSL session, wherein the call request is a request to communicate with a remote client and the call setup information includes an identifier for the remote client;
receiving, at the client, a call request response from the server using the first SSL session, wherein the call request response indicates that the remote client is ready to communicate;
in response to receiving the call request response from the server, the client establishing a second SSL session with the server, wherein the second SSL session is dedicated for transmitting audio data between the client and the server;
and
in response to establishing the second SSL session with the server, the client transmitting audio data to the server using the second SSL session, wherein the audio data is contained in a client SSL message in place of encrypted data and the audio data is forwarded by the server to the remote client.

3 more elements

A method for transmitting audio data over a network comprising:

establishing, by a server, a first secure-sockets layer (SSL) session with a first client;
receiving, at the server, a call request and call setup information from the first client using the first SSL session, wherein the call request is a request to communicate with a second client and the call setup information includes an identifier for the second client;
sending, by the server, a call request response to the first client using the first SSL session, wherein the call request response indicates that a connection with the second client has been established;
in response to sending the call request response to the first client, the server establishing a second SSL session with the first client, wherein the second SSL session is dedicated for transmitting audio data between the server and the first client;
receiving, at the server, audio data from the first client using the second SSL session, wherein the audio data is contained in one or more client SSL messages in place of encrypted data;
and
sending, by the server, the audio data received from the first client to the second client.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/093,718Filed 25 Apr 2011 · continuation
Priority: 14 Feb 2003
Granted: 29 Apr 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 9/0838
Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for…:…
H04L 63/0272
For separating internal from external traffic, e.g. firewalls: virtual private networks
H04L 63/029
For separating internal from external traffic, e.g. firewalls: firewall traversal, e.g. tunnelling or, creating pinholes
H04L 63/166
Implementing security features at a particular protocol layer: at the transport layer

Family

Application10/248,762Parent of this division · filed 14 Feb 2003
Application11/713,196Parent of this continuation · filed 1 Mar 2007
US 7,941,841 B2Parent of this continuation
US 7,206,932 B1Parent of this division
Application11/713,196Parent of this division
US 2007/0250702 A1Published application
US 8,713,302 B1This patent

From the US filing history. Foreign family members aren’t listed.