Application Design

Academic Advisor: Dr. Yuval Elovici Professional Advisor: Yuri Granovsky Team: Yuri Manusov Yevgeny Fishman Boris Umansky

Objectives of the project Supply telecommunication providers with the ability to: Provide a service of call authorization for their clients. Provide a service of secured communication to their clients. Provide the ability for dynamic configuration of call authorization rules by the users of that service.

Telecommunication Provider Server Global Architecture JBOSS Server JSLEE Server SIP Resource Adapter Communication Control Application IP Host 1 SIP ClientEnabler IPSec Module IP Host 2 SIP ClientEnabler IPSec Module Data Storage Control Rules Manager SIP Request SIP Event Pre-shared Key Host 2 IP Configuration HTTP IPSec Communication

Primary Project Requirements Functional Requirements: Communication Control Application (CCA) Authorization rules application Security rules application VoIP session establishment Enabler IPSec configuration RTP sampling GUI Dynamic configuration of rules. Non Functional Requirements: Speed Throughput Reliability

CCA – Communications Control Application The CCA is an event driven application that runs on a JSLEE server. It provides several services for telecommunications clients In order to create an application for which services can be added easily, the following architecture was selected for the CCA:

CCA main classes Authorizatio n SBB Availability SBB Security SBB Security SBB CCA Activity Context Interface Readiness SBB Readiness SBB Redirect SBB Redirect SBB SIP RA Timer Activity Context Interface INFO Termination SBB General Activity Context Interface INVITE Cont. TERMINATE ACK NOT_READY READY START_TIMER REDIRECT CCA Persistence Manager Enabler Facade

CCA classes Description Authorization, Availability and Security SBB's all handle the INVITE event. In order to control the order in which they handle it, their priority is defined. Each of these SBB's can prevent the handling of that message by the following SBB's

CCA classes Description (cont’d) The ReadinessSBB waits for a reply of successful configuration of IPSec from the enablers of the caller and callee. RedirectSBB sends a REDIRECT response to the caller with the callee's IP. For communication with the Enabler, the SIP protocol is used as well.

Enabler main classes Controller EnablerListerner EncryptionTool Protocol IPSecController RTPListener IPSec Module Enabler

User Interface

User Interface (cont’d)

Task List

Questions?