Extending and re-using an IP multimedia subsystem (IMS)

Patent metadata

Field	Value
Publication number	US-9686284-B2
Application number	US-201313789559-A
Country	US
Kind code	B2
Filing date	Mar 7, 2013
Priority date	Mar 7, 2013
Publication date	Jun 20, 2017
Grant date	Jun 20, 2017

Abstract

Systems and methods for extending and re-using an IP multimedia subsystem (IMS) to extend the trust relationship from a closed group of customers of wireless service providers to users of other ecosystems (e.g., Gmail, Facebook, or Yahoo!) for IMS services. Some embodiments include receiving a request from an initiating device to establish a service connection between the initiating device and an endpoint through an Internet Protocol Multimedia Subsystem (IMS) session. The request may include third-party domain credentials (e.g., maintained by a third-party domain) associated with an end-user. The third-party domain credentials can be extracted from the request. Communications with the third-party domain can be used to verify the third-party domain credentials. The IMS session can be established between the initiating device and the endpoint upon verification of the third-party domain credentials.

First claim

What is claimed is:

1. A method comprising:
receiving, at a gateway, a request from a device to establish a service connection between the device and an endpoint through an Internet Protocol Multimedia Subsystem (IMS) session,
wherein the request includes third-party domain credentials associated with an end-user, and
wherein the third-party domain credentials are maintained by a third-party domain;

determining, at the gateway, whether the request has already been authenticated;
in response to determining the request has already been authenticated:
sending, via the gateway, a session initiation protocol (SIP) message to an IMS network based on the request;
sending, via the gateway, a response to the device based on the request;
in response to determining the request has not already been authenticated:

extracting, at the gateway, the third-party domain credentials from the request received from the device;
establishing, via the gateway, a trust relationship with the third-party domain to enable the third-party credentials to be authenticated,
wherein a trust relationship exists between the gateway and the IMS network;

communicating, via the gateway, the third-party domain credentials to the third-party domain to verify the third-party domain credentials; and,
establishing the IMS session between the initiating device and the endpoint upon verification of the third-party domain credentials based on the end user's third-party domain credentials, authenticated by the third-party domain, to authenticate use of an IMS core network by the end-user, to thereby authenticate use of the IMS core network, without the need for further validation of credentials of the end-user because of the trust relationship between the gateway and the IMS core network,
wherein establishing the IMS session includes the gateway sending a SIP REGISTER message on behalf of the initiating device to a component of the IMS network,
wherein the SIP REGISTER message indicates the message is from a trusted source.

2. The method of claim 1 , wherein the received request is a request to establish a real-time or near real-time service connection, wherein the request to establish the IMS session originates from a generic web front end that allows web browsers to conduct real-time communication, wherein the third-party domain credentials include credentials supplied by the end-user, and wherein the generic web front end is a Web Real Time Communications (WebRTC) client configured to communicate with a WebRTC Interworking Function using HTTPS over the Internet.

3. The method of claim 1 , wherein the received request is a request to establish a real-time or near real-time service connection, and wherein the request to establish the IMS session originates from a generic web front end that allows web browsers to conduct real-time communication.

4. The method of claim 2 , wherein the real-time service includes white board discussions, video conferencing, Push to talk over Cellular (PoC), Voice over IP (VoIP), real-time content sharing, instant messaging, or interactive gaming.

5. The method of claim 1 , wherein the SIP REGISTER message includes private headers that indicate the message is from a trusted source.

6. The method of claim 1 , wherein establishing the IMS session between the initiating device and the endpoint, upon verification of the third-party domain credentials, includes registering the end-user with the IMS and translating WebRTC events into SIP messages.

7. The method of claim 1 , wherein the received registration message originates from a generic web front end that enables web browsers to conduct real-time communication, wherein the third-party domain credentials include credentials supplied by the end-user, and wherein the generic web front end is a Web Real Time Communications (WebRTC) client configured to communicate with a WebRTC Interworking Function using HTTPS over the Internet.

8. A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the processors to:
receive, at a gateway, from a WebRTC client, a registration message to establish a real-time service between a first endpoint and a second endpoint through an Internet Protocol Multimedia Subsystem (IMS) core network,
wherein the registration message includes third-party domain credentials for an end user; and
wherein the end user's third-party domain credentials are maintained and authenticated by the third-party domain;

parse the registration message to determine the third-party domain and the third-party domain credentials;
establish, via the gateway, a trust relationship with the IMS core network via the third-party domain to enable the third-party credentials to be authenticated using the third-party domain, by
submitting, via the gateway, the third-party domain and third-party domain credentials for authentication by the third-party domain; and
receiving an authentication status indicating the third-party domain credentials have been successfully authenticated;

generate, via the gateway, a SIP REGISTER message on behalf of the end user; and
submit, via the gateway, the SIP REGISTER message to the IMS core network to thereby establish a real-time service between the first endpoint and the second endpoint through the IMS core network using the end user's third-party domain credentials, authenticated by the third-party domain, to authenticate use of the IMS core network, and without the need for further validation of credentials of the end-user because of the trust relationship between the gateway and the IMS network.

9. The non-transitory computer-readable medium of claim 8 , wherein the real-time service includes white board discussions, video conferencing, Push to talk over Cellular (PoC), Voice over IP (VoIP), real-time content sharing, instant messaging, or interactive gaming.

10. The non-transitory computer-readable medium of claim 8 , wherein the instructions when executed further cause the one or more processors to submit the SIP REGISTER message to a proxy call session control function (P-CSCF) within the IMS core network to determine if the SIP REGISTER message originates from a trusted source.

11. The non-transitory computer-readable medium of claim 10 , wherein the instructions when executed further cause the P-CSCF to assert that the SIP REGISTER message is from the trusted source by inserting private headers into the SIP REGISTER message before forwarding the message to a serving call session control function (S-CSCF) to create a binding between the first endpoint and the second endpoint.

12. The non-transitory computer-readable medium of claim 8 , wherein the instructions when executed further cause the one or more processors to translate WebRTC events received from the WebRTC client into SIP messages.

13. A method comprising:
receiving, at a gateway, a request from an initiating device to establish a service connection between the initiating device and an endpoint through an Internet Protocol Multimedia Subsystem (IMS) session,
wherein the request includes third-party domain credentials associated with an end-user, and
wherein the user's third-party domain credentials are maintained by a third-party domain;
delegating authentication of the end-user to a gateway;
communicating, via the gateway, with the third-party domain to verify the third-party domain credentials;
establishing, via the gateway, a trust relationship with the third-party domain to enable the third-party credentials to be authenticated using the third-party domain;
establishing the IMS session between the initiating device and the endpoint based on t

Assignees

• T Mobile Usa Inc

Inventors

• Shah Mehul
• Byrne Cameron

Classifications

• H04L63/168

  above the transport layer · CPC title

• H04L63/0884 Primary

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• H04L65/1016

  IP multimedia subsystem [IMS] · CPC title

• H04L65/1073

  Registration or de-registration · CPC title