# US 8,789,141 B2 · Method and apparatus for providing security for an internet protocol service

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,789,141 B2
- Document ID: US8789141B2
- Status: Granted
- Kind: B2
- Application number: 13/481,482
- Filed: 2012-05-25
- Published: 2012-09-13
- Granted: 2014-07-22
- Earliest claimed: 2008-12-18
- Assignees: AT&T Intellectual Property I, L.P.
- Applicants: Jae-Sun Chin; Gregory Henderson; Michael Raftelis
- Inventors: Jae-Sun Chin; Gregory Henderson; Michael Raftelis
- Web page: https://patentgrep.com/patent/US8789141B2

## CPC

- H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL}
- H04L 65/1069: Session establishment or de-establishment
- Y10S 379/90: Internet, e.g. Internet phone, webphone, internet-based telephony
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- Y10S: TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS

## Abstract

A method and apparatus for providing security to an endpoint device are disclosed. For example, the method receives a signaling message by the endpoint device. The method processes the signaling message, if the signaling message is received from a device associated with one of one or more Internet Protocol (IP) addresses in an Access Control List (ACL), and discards the signaling message, if the signaling message is received from a device not associated with one of the one or more IP addresses in the ACL.

## Claims

### Claim 1

A method for processing a signaling message at an endpoint device, comprising:
receiving the signaling message by the endpoint device, wherein the endpoint device comprises an internet protocol phone;
processing the signaling message by the endpoint device, when the signaling message is received from a network element associated with one of a group of Internet protocol addresses in an access control list, wherein the network element is a component of a telecommunication service provider network and wherein the signaling message comprises a call setup signaling message for a call to the endpoint device from an another endpoint device; and
discarding the signaling message by the endpoint device, when the signaling message is received from a device not associated with one of the group of internet protocol addresses in the access control list.

### Claim 2 (depends on 1)

The method of claim 1, wherein the signaling message comprises a session initiation protocol signaling message.

### Claim 3 (depends on 1)

The method of claim 1, wherein the group of internet protocol addresses is established by a network service provider.

### Claim 4 (depends on 1)

The method of claim 1, wherein the group of internet protocol addresses is associated with a plurality of call control elements, and wherein each of the plurality of call control elements comprises a session initiation protocol server.

### Claim 5 (depends on 1)

The method of claim 1, wherein the group of internet protocol addresses comprises a range of internet protocol addresses.

### Claim 6 (depends on 1)

The method of claim 1, wherein the endpoint device comprises a terminal adapter.

### Claim 7 (depends on 1)

The method of claim 1, wherein the endpoint device comprises an analog terminal adapter.

### Claim 8 (depends on 1)

The method of claim 1, wherein the group of internet protocol addresses is established by a customer.

### Claim 9 (depends on 1)

The method of claim 1, wherein the group of internet protocol addresses is associated with a plurality of call control elements, and wherein each of the plurality of call control elements comprises a proxy server.

### Claim 10

A non-transitory computer-readable medium storing a plurality of instructions which, when executed by a processor of an endpoint device, cause the processor to perform operations for processing a signaling message at the endpoint device, the operations comprising:
receiving the signaling message, wherein the endpoint device comprises an internet protocol phone;
processing the signaling message, when the signaling message is received from a network element associated with one of a group of internet protocol addresses in an access control list, wherein the network element is a component of a telecommunication service provider network and wherein the signaling message comprises a call setup signaling message for a call to the endpoint device from an another endpoint device; and
discarding the signaling message, when the signaling message is received from a device not associated with one of the group of internet protocol addresses in the access control list.

### Claim 11 (depends on 10)

The non-transitory computer-readable medium of claim 10, wherein the signaling message comprises a session initiation protocol signaling message.

### Claim 12 (depends on 10)

The non-transitory computer-readable medium of claim 10, wherein the group of internet protocol addresses is established by a network service provider.

### Claim 13 (depends on 10)

The non-transitory computer-readable medium of claim 10, wherein the group of internet protocol addresses is associated with a plurality of call control elements, and wherein each of the plurality of call control elements comprises a session initiation protocol server.

### Claim 14 (depends on 10)

The non-transitory computer-readable medium of claim 10, wherein the group of internet protocol addresses comprises a range of internet protocol addresses.

### Claim 15 (depends on 10)

The non-transitory computer-readable medium of claim 10, wherein the endpoint device comprises a terminal adapter.

### Claim 16 (depends on 10)

The non-transitory computer-readable medium of claim 10, wherein the endpoint device comprises an analog terminal adapter.

### Claim 17 (depends on 10)

The non-transitory computer-readable medium of claim 10, wherein the group of internet protocol addresses is established by a customer.

### Claim 18 (depends on 10)

The non-transitory computer-readable medium of claim 10, wherein the group of internet protocol addresses is associated with a plurality of call control elements, and wherein each of the plurality of call control elements comprises a proxy server.

### Claim 19

An apparatus for processing a signaling message, comprising:
a hardware processor of an endpoint device comprising an internet protocol phone;
and
a computer-readable medium storing instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising:
receiving the signaling message; processing the signaling message, when the signaling message is received from a network element associated with one of a group of internet protocol addresses in an access control list, wherein the network element is a component of a telecommunication service provider network and wherein the signaling message comprises a call setup signaling message for a call to the endpoint device from an another endpoint device; and
discarding the signaling message, when the signaling message is received from a device not associated with one of the group of internet protocol addresses in the access control list.

### Claim 20 (depends on 19)

The apparatus of claim 19, wherein the group of internet protocol addresses is associated with a plurality of call control elements, wherein each of the plurality of call control elements comprises a session initiation protocol server.