Patent ID: 8533462

Claim:
A method comprising: receiving, by a device associated with a first network, a media initialization message requesting a media session for the exchange of real-time media with a remote endpoint associated with a second network, the media initialization message asserting an identity and comprising a plurality of fields and a signature, the signature formed by encrypting a portion of the fields with a private key associated with a trusted source other than the remote endpoint, the plurality of fields including at least one unsigned field not in the portion of the fields; verifying, by the device associated with the first network, the signature using a public key corresponding to the private key, the public key associated with the trusted source, the verification of the signature confirming that the identity was authenticated by the trusted source; sending an encryption request to the remote endpoint, the encryption request specifying data and requesting that the remote endpoint encrypt the data with the private key; receiving a response from the remote endpoint; decrypting the response with the public key; confirming that the decrypted response is equivalent to the data specified by the encryption request; and in response to confirming the identity, exchanging the real-time media with the remote endpoint.