Patent ID: 7197766
Filing Date: 2007-03-27
Classification: H04L

Abstract:
1. An authentication proxy arrangement in a H.323 telecommunication network for allowing authentication of an end-user operating from an H.323 end-point without H.323v2 or H.235 authentication support and with a Gatekeeper requiring initial end-user authentication according to a first authentication protocol using H.235 and thus being unsupported by the end-point, the first authentication protocol being at least part of H.323v2 or a corresponding first security profile, said authentication proxy being adapted to form a signaling path for authentication of the end-point towards the Gatekeeper, the authentication proxy being arranged: to receive from the end-point of the end-user, authentication data comprising an end-user password and an end-point network location specification, the authentication data being transmitted to the authentication proxy using a second protocol different from said first protocol, to generate a first H.323 RAS (Registration, Admission and Signaling) message using said first protocol, said first H.323 RAS message presenting said obtained authentication data and including an authentication request requesting authentication of the end-user by the Gatekeeper on basis of said presented authentication data, to transmit said first H.323 RAS message to the Gatekeeper, to receive a second H.323 RAS message from the Gatekeeper in response to said first H.323 RAS message, to interpret said second H.323 RAS message from the Gatekeeper for detecting a confirmation or rejection of said authentication request, and to generate and send to said end-point, on detection of said confirmation or rejection of said authentication request, an authentication confirm or reject message, respectively, using the second protocol.