Communication management system for computer network-based telephones

territorially Invention and Background of the Invention

0001The This invention relates to a method and a system for managing communications sessions for the computer network-based telephone communication and in particular for the identification of packets containing audio and / or video data included, for the storage of these packages and for the reconstruction of selected communication sessions for the required, playback of audio and / or video signals.

0002The Integration of the computer in the office communication systems has made it possible numerous functions that previously by separate devices accomplished were, into a single management system by computer is controlled to combine. For example, allow it computerized Voice logging systems a computer voice communication over an receiving hardware connection to the normal telephone network, a call to the at least two parties are involved, or a message from registering at least one party to one or more parties and these recorded conversations or releases as required to reproduce. These voice logging systems can replace mechanical answering machine.

0003The computerized Logging systems have when compared to mechanical answering machines numerous advantages. For example, the voice message on a computerized stored storage medium such as a DAT cassette be that a larger storage capacity than conventional Audiocassettes possesses.

0004Of Furthermore, the stored voice messages are stored in a database, such that the messages, for example, based on time Date, channel, dialed number or Caller ID can be accessed. Such organization is not possible with a mechanical answering machines. Therefore have computerized Logging systems compared to mechanical answering machines numerous advantages.

0005Unfortunately have currently available computerized Logging systems have the disadvantage that they have no telephone communication sessions - were it calls or messages - for voice communication can record, the above a LAN (Local Area Network) or a WAN (Wide Area Network) is performed. Although these logging systems are able, for example, Voice messages to a spatially remote user via a reproduce LAN, can they do not record such a message when a LAN-based transmitted phone is. Such LAN and WAN based telephone communication is recently Time has become increasingly popular because they have a telephone communication between different parties to spatially separate Places allows without having the usual local telephone charges for the regular to pay telephone network, thereby saving money.

0006The the prior art performing signature <patcit><text>US 5,717,879</text></patcit> discloses a system for managing a communication session as a cooperation Audio recordings and a whiteboard session. The activities of all Parties are recorded and logged to retrieve them later to. However, it is not further for network compatibility, connectivity, or used Logs received. Furthermore, in the prior art performing signature <patcit><text>US 5,101,402</text></patcit> the Filtering of network packets in local area networks based on an analysis the packet cell header discussed.

0007Also allows the LAN and WAN-based Telephone communications and the transmission of video and audio information. Video information can quite certainly not of currently available computerized Logging systems are recorded. That computerized logging systems are not capable of telephone communication sessions for telephone communication, the above a LAN or WAN takes place to record, thus this is a great disadvantage Systems.

0008It Therefore a need exists for a system and method for recording of telephone communication sessions such as a computer network For example, LAN or WAN done, so both audio Video information can be recorded, whereby such information can organize and which then Such information can be played back on demand, and it would be highly advantageous to have a to have such a system and method.

Summary the invention

0009It An object of the present invention, a system and A method for recording communication sessions, the computer network via a proceed to provide.

0010It is a further object of the present invention to provide such System and method for analyzing data transmitted over the computer networktransmitted factory were to detect audio and video data for recording to provide.

0011It is a further object of the present invention to provide such System and method for required reproducing recorded provide video and audio data.

0012It is a further object of the present invention to provide such System and method for analyzing, recording and displaying of communication sessions over a LAN-based telephone system proceed to provide.

0013These and other objects of the present invention will be hereinafter reference to the drawings, the description and the claims incoming explained.

0014The present invention provides a system and method for analyzing of data packets in a computer network, for selectively recording audio and video data packets, for organizing this stored Information and for required reproducing the stored Information, such that communication sessions with computer network-based telephone systems can be logged, ready.

0015According to the teachings the present invention is a system for managing a communication session over Computer network provided, the system comprising: (A) a network connector for plugging into the computer network and for receiving data packets from the computer network; (B) a filtering unit for filtering the data packets and for receiving the data packets substantially only if the data packets included, in which it is audio and / or video data, such that the data packets at least a portion of the communication session form, and such that the data packets are selected data packets are; (C) a management unit for receiving the selected data packets and for storing the selected Data packets, such that the selected data packets stored Data packets are; and (d) a storage medium for receiving and Save the stored data packets from the management unit, such that the at least one part of the communication session is stored.

0016The System preferably further comprises (e) a data restore unit for retrieving and displaying the at least a portion of the communication session, wherein the data recovery unit, the data packets via the management unit requesting from the storage medium and wherein the data restoration unit the data packets for displaying said at least part of the communication session reconstructed.

0017Especially preferably, the data restore unit further a communication session reproducing unit for reproducing the at least a portion of the communication session. Most notably preferably, in the communication session display unit a video and / or audio device.

0018According to preferred embodiments of the present invention, the system further comprises (f) a connected to the filtering unit database for storing Filtering information, said filtering information at least contain an IP address of the party, monitors their communications sessions will; wherein the filtering unit, the data packets in accordance with the Filtering information receives, such that the filtering unit the data packets only receives substantially if the data packets the filtering information correspond.

0019Preferably the system further (g) includes a user computer for receiving at least an instruction of a user and for displaying information to the user such that the user formations corresponding Filterungsin the least sets a user's command.

0020Especially preferably, in the computer network to a LAN (Local Area Network) or a WAN (Wide Area Network). Very particularly preferably is it in the computer network is a LAN (Local Area Network).

0021In other Preferred Embodiments the present invention is the LAN in at least two segments divided, said system further comprises: (h) a local management unit for each segment, said local management unit, the filtering unit and the management unit comprises; and (i) a central management unit for controlling the local Administrative units, wherein the central management unit storing controls on the storage medium.

0022at the network connector is preferably a network interface card.

0023According to a another embodiment of the present invention, a method for storing at least a portion of a taking place in a computer network communication session provided wherein the communication session between a Paketquellenort and a packet destination takes place, wherein the steps of the method be performed by a data processor, wherein the process comprising the steps of: (a) receiving a data packet from the Paketquellenort in a computer network; (B) analyzing the Data packet to determine whether the data packet is an IP packet; (C) if the data packet is the IP packet, filtering the IP packet, a type of the IP packet determine; and (d) storing the IP packet in such a way that a stored data packet according to the type produced, such that the stored data packet at least a portion of the communication session forms.

0024Preferably carried out the step of analyzing the data packet by checking a cell head of the data packet.

0025According to a preferred embodiment of the the present invention is carried out the step of filtering the IP packet by checking the Cell header of the IP packet.

0026Preferably comprises the step of filtering the IP packet further comprises the Steps: (i) Check the Cell head of the IP packet to an IP address of the packet source map determine; (Ii) determining whether the IP address is a recorded IP address is; (Iii) forwarding the IP packet such that a forwarded IP packet is formed substantially only if the IP address of the recorded IP address; and (iv) alternatively, re-storing of the IP packet.

0027Especially preferably the step of determining is whether the IP address of the recorded IP address is, by comparing the IP address carried out with a list of IP addresses from packet source locations, such that if the IP address is included in the list, the IP address of the recorded IP address is.

0028Preferably comprises the step of filtering the IP packet further comprises the Steps of: (v) determining whether the passed IP packet is an H.225 packet, a H.245 packet, an RTP packet or an RTCP packet is; (Vi) if the type of the transmitted IP packet is the H.225 packet, determining whether the H.225 packet is a setup packet or a link packet; (Vii) if the H.225 packet is the construction package, setting a status flag on "session start request"; (Viii) alternatively, if the H.225 packet the connection package and the status flag is set to "session start request" Save at least a detail of the communication session; and (ix) Put the status flag to "wait on logical channel ".

0029Especially preferably comprises the step of filtering the IP packet further the steps of: (x) alternatively, if the type of transferred IP packet H.245 package is, determining whether the H.245 packet is a packet with the request for opening a logical channel, a packet with the confirmation of the opening of logical channel or a packet with the confirmation of the terminal ready is; (Xi) if the H.245 packet, the packet containing the request to Open a logical channel, and the status flag to "wait for logic Channel "is, Put the status flag to "wait verification "; (xii) alternatively, if the H.245 packet, the packet with the confirmation of the opening of logical channel and the status flag is set to "Waiting for confirmation", perform the following Steps: (A) setting the status flag to "wait for terminal ready"; and (B) storing a transport address of the destination of the communication session; and (xiii) also alternatively, if the H.245 packet is the packet with the confirmation the terminal readiness is, performing the following steps: (A) Save a willingness of the packet destination of the package confirming the Terminal standby; and (B) setting the status flag to "in the call handling".

0030all is particularly preferred if the status flag to "in Call Completion" is and the type the forwarded IP packet is the RTP packet, the RTP packet is stored. Furthermore, it is very particularly preferred if the status flag is "in the Gesprächsab development" and the type the forwarded IP packet, the RTCP packet is, the RTCP packet stored.

0031According to a further preferred embodiment, of the present invention, the method further comprising Steps of: (e) retrieving the stored data packet such that a retrieved data packet is formed; and (f) reconstructing at least a portion of the communication session in accordance with the retrieved data packet.

0032Preferably contains the step of retrieving the data packet following steps: (i) Receiving a source IP address the package source location, a start time of the communication session and an end of the communication session; and (ii) selecting at least a communication session according to the source IP address, the start time and the end time.

0033Of further includes the step of reconstructing at least a portion of the communication session preferably the playback of audio data.

0034alternative and also preferably contains the Step of reconstructing at least a portion of the communication session playback of video data.

0035Especially preferably the step of reconstructing comprises at least one Part of the communication session further comprises the steps (i) Consult of substantially only RTP packets; (Ii) checking the cell header of the RTP packets, a timestamp for to identify each RTP packet; and (iii) reproducing the RTP packets in an order corresponding to the time stamp.

0036in the the remainder of this text thinks the term "communication session" both a conversation with the at least two parties the exchange of audio and / or Video information in real time, communicate with each other, and a message in which at least one party such audio and / or video records information, so that at least one other Party it later to a Time receives.

0037in the the remainder of this text thinks the term "Internet" in general the global Linked network of thousands of networks, which serves computers on all over the world together. For the purposes of the present Text thinks the term "intranet" other types of Computer networks, such as LAN (Local Area Network) or WAN (Wide Area Network). The term "computer network" means any connection between at least two computers, thereby transferring data allows is, including both the Internet and the Intranet. The term "regular telephone network" means the simple old Telephone system and essentially any other type of telephone network, the services on a regular Phone service provider provides, but with an explicit audio and / or video communications are excluded, the via any there is a kind of computer network.

0038in the the remainder of this text thinks the term "computer" including, for example, Personal Computer (PC) with an operating system such as DOS, Windows^TM, OS / 2^TM or Linux; Mackintosh^TMComputers, computer with JAVA^TM-OS As the operating system; graphic workstations such as the computers of Sun Microsystems^TM and Silicon Graphics^TM and other computer with a version of the UNIX operating system such as AIX or SOLARIS^TM of Sun Microsystems^TM, Or any other known and available Operating Systems. In the further course of the present text says the term "Windows^TM"Including, for example, Windows 95^TM, Windows 3.x^TM. where "x" is an integer such as "1", Windows NT^TM, Windows 98^TM, Windows CE^TM and all modernized versions of these Microsoft operating systems, Inc. (Seattle, Washington, USA).

0039in the the remainder of this text thinks the term "logging" the process of analyzing of data packets in a network for localizing audio and / or video data, and the recording of such data in an organized system. in the the remainder of this text thinks the term "playing" both the visual Reproducing video data and the sound production for audio data.

Short description tHE dRAWINGS

0040The Invention is herein based merely exemplary the accompanying drawings.

0041<figref idrefs="S45">1</figref> is a schematic block diagram of an exemplary communication session monitoring system according to the present Invention.

0042<figref idrefs="S46">2</figref> is a schematic block diagram of the software modules necessary for the operation of the system of <figref idrefs="S45">1</figref> required are.

0043<figref idrefs="S47">3A</figref>-<figref idrefs="S49">3D</figref> are Flowcharts of exemplary filtering and recording methods according to the present Invention.

0044<figref idrefs="S49">4A</figref>-<figref idrefs="S50">4D</figref> are are schematic block diagrams of the cell headers of H.225, H.245, RTP and RTCP packets (<figref idrefs="S49">4A</figref>. <figref idrefs="S50">4B</figref>. <figref idrefs="S50">4C</figref> or. <figref idrefs="S50">4D</figref>) in connection with the present invention.

0045<figref idrefs="S51">5</figref> is a flow diagram of an exemplary communication session playback method according to the present Invention.

0046<figref idrefs="S52">6</figref> is a schematic block diagram of an exemplary first embodiment a basic system, which communication session monitoring system that the <figref idrefs="S45">1</figref> and <figref idrefs="S46">2</figref> according to the present invention used.

0047<figref idrefs="S52">7</figref> is a schematic block diagram of an exemplary second embodiment a zone system according to the present Invention.

description of the prior art

0048The The following section describes specific processes and technologies, representing the state of the art and the optional in the method and system of the present invention be used. The present invention relates specifically not these methods and technologies alone, but they are rather as a means for achieving the object of the present invention, in it is a system and method for analyzing Data packets in a Computernetzwerk, for selectively recording audio and video data packets, for organizing this stored Information and for required reproducing the stored Information, such that communication sessions with computer network-based telephone systems can be logged, concerns.

0049The System and method of the present invention is particularly for the Operation provided with computer networks, which in accordance with ITU-T Recommendation H.323 for Videophone systems and equipment for local Networks (Local Area Networks), which provide a non-guaranteed quality of service, are constructed. The H.323 recommendation is incorporated by reference in included the present text to the hardware requirements and operating records for Such computer networks closer to be described, and is referred to as "H.323" hereinafter.

0050H.323 describes terminals, equipment and services for The multimedia communication over Local Area Networks (LAN) that do not provide guaranteed quality of service. Computer terminals &amp; equipment, comply with the H.323, can Voice, data and video individually or in combination, including videotelephony, communicate in real time.

0051The LAN, via which such terminals communicate can be a single segment or may be a ring or optional multiple segments with complex Topologies include. These terminals are optional in computer integrated or alternatively in separate devices such as Video phones implemented. Support for voice data is necessary, while Support for general Data and video data is optional, but if general data and supports video data are, as is the ability of to use a specific common operating mode required for all terminals that support this particular type of media, together can communicate. The Recommendation H.323 allows to have more than one channel of each type occupies. other Recommendations in the series H.323, which is also incorporated by reference be added, include H.225.0 Packet and synchronization, H.245 control, H.261 and H.263 video codecs, G.711, G.722, G.728, G.729 and G.723 audio codecs and serial T.120 of multimedia communication protocols.

0052The ITU-T Recommendation H.245.0 concerns the definition of Medienstrompacketisierung and synchronization for Videophone systems. The ITU-T Recommendation H.245.0 defines the Control protocol Multimedia Communications and the present in the further course Text referred to as "H.245". H.245 is incorporated by reference as fully set forth herein is.

0053The procedures the signaling on logic channels Recommendation H.245 describe the Content of each logical channel when the channel is opened. There are procedures for the transmission of the functional parameters of receivers and transmitters provided so that transmissions on limited information are used by the recipients can be decoded, and that receiver a certain desired can request mode from the transmitters.

0054A H.245 signaling is established between two endpoints: a Endpoint and a multipoint control or an end point and a Gatekeeper. The endpoint is built exactly one H.245 control channel for each Telephone call, on which the end point is involved. The channel must then in accordance with H.245 work. A support for many Phone calls and thus for multiple H.245 control channels is possible.

0055The RAS signaling function uses H.225.0 messages to registration, Approval, Bandbreitenänderungs-, Status and separation procedures between endpoints and Gatekeepers perform. In LAN environments that do not have Gatekeeper, the RAS signaling channel is not used.

0056In LAN environments that have a gatekeeper, such that the LAN a zone includes at least the RAS signaling channel between is the endpoint and the gatekeeper opens. The RAS signaling channel is in front of the building of other channels opened between H.323 endpoints.

0057The Call signaling function uses H.225.0 call signaling for establishing a connection between H.323 endpoints. The call signaling channel is independent from the RAS Channel and the H.245 control channel. Of the Call signaling channel is opened before the H.245 channel and other logical channels be established between H.323 endpoints. In systems that do not have have Gatekeeper, call signaling channel between the will both ends opened, involved in the call. For systems that a gatekeeper have, the call signaling channel between the endpoint is and the gatekeeper or between the endpoints themselves - depending on Decision of the gatekeeper - opened.

description of the Preferred Embodiments

0058The present invention provides a system and method for analyzing of Datenpaketh in a computer network, for selectively recording audio and video data packets, for organizing this stored Information and for required reproducing the stored Information, such that communication sessions with computer network-based telephone systems can be logged, ready.

0059The Principles and operation of a method and system according to the present Invention can be based on the drawings and the accompanying understand description.

0060turn we the drawings. <figref idrefs="S45">1</figref> is a Block diagram of an exemplary system for logging and Playing audio and / or video data from communication sessions over a Computer network take place. A computerized tracking system<figref>10</figref> contains a user computer <figref>12</figref>, Of a communication session management unit <figref>13</figref> connected is. The communication session management unit<figref>13</figref> is turn on a network interface card (NSK) <figref>16</figref> with an intranet <figref>14</figref> connected.

0061Of the user computer <figref>12</figref> contains a user interface <figref>18</figref>. which is preferably a GBS (graphical user interface) is that on a display unit <figref>20</figref> is shown. The User interface <figref>18</figref> allows preferably a User information such as the definition of the parties enter, monitored their telephone calls and / or should be logged, and preferably allows the Furthermore, a user, at least one command to retrieve and Playing a communication session enter.

0062at the display unit <figref>20</figref> it is preferably a Computer monitor. The user may interact with the user's computer<figref>12</figref> to interact, by transferring data and commands a data input device <figref>22</figref> enters. The data input device<figref>22</figref> preferably contains at least a keyboard or a pointing device such as a mouse and contains more preferably both a keyboard and a pointing device. According to a preferred embodiment, the present invention is at the user's computer <figref>12</figref> around a PC (personal computer). Alternatively and preferably If the user's computer <figref>12</figref> a "thin client" such as a network computer, ie a computer in an IP-based network can communicate. An example of such a network computer is the Java Station^TM (Sun Microsystems).

0063These Network computers have the advantage that they allow the user to to interact with complex, technically advanced software programs, wherein it but generally not over the entire powerful Computing capacity of currently available PC computers have.

0064The intranet <figref>14</figref> could for example, a LAN or a WAN. The connection between the Communication session management unit <figref>13</figref> and the Intranet <figref>14</figref> via the NSK <figref>16</figref>, When NSK <figref>16</figref> it is preferably to a standard, mass produced commercial product which enables that the communication session management unit <figref>13</figref> With can be connected to any suitable computer network (for example, a Etherlink II ISA / PCMCIA adapter, a Etherlink III PCI Bus-Master Adapter (3C590) 3Com^TM, A NE2000 Adapter of Novell^TM or another suitable such Product). As such, appropriate computer networks come under other any standard LAN such as Ethernet (IEEE 802.3), Fast Ethernet (IEEE standard 802.10), Token Ring (IEEE 802.5) and FDDI in question.

0065Of the entire data packet traffic on the intranet <figref>14</figref> is the NSK <figref>16</figref> a filtering module <figref>24</figref> passed. As in <figref>3</figref> clearly demonstrated searches the filtering module <figref>24</figref> the data packets to determine, which data packets meet the following criteria. Briefly, should the data packets IP packets with cell headers in accordance with the standards H.225 and H.245 be indicative of a voice and / or video traffic. As already addressed, these standards define media stream packet construction and Synchronisation for Videophone systems and the control protocol for multimedia communications.

0066The filtering module <figref>24</figref> then passes preferably only those Data packets that meet these criteria, a management module <figref>28</figref> continue. In the Zone Configuration of the system of the present invention as in <figref idrefs="S52">7</figref> shows transmits the filtering module <figref>24</figref> preferably even messages from other communication session management units.

0067The management module <figref>28</figref> receives the data packets from the filtering module <figref>24</figref> were forwarded, and analyzed the received data packets. Optionally and preferably stores a database <figref>26</figref> for example, such as Informa tion logs the IP addresses of parties whose communication sessions should be, and the conversion table that each party at least one IP address assigns. The stored list of IP addresses that are available for those parties whose Calls should be logged, is preferably user-defined. For the purposes of the present text says "party" one or more persons who have a computer network-based Telephone system communicate. The latter preferred requirement significantly reduces the amount of data stored by only those Data is recorded, for the the user of interest. The management module<figref>28</figref> analyzed and manages data in accordance with applicable Specifications H.225 and H.245, including the H.245 control function, the RAS signaling function and call signaling function Essentially as described above in section (Description of the Prior Art ".

0068The management module <figref>28</figref> analyzes the packets to the respective Communication session, which includes the data packets, and to determine the type of data compression (if applicable) used and to determine whether the data packets sent from an IP address were to monitor the is. The management module<figref>28</figref> must complete this analysis, because the filtering module <figref>24</figref> simply forwards all data packets, that meet the criteria described briefly above (further details are the <figref idrefs="S47">3A</figref>-<figref idrefs="S49">3D</figref> to remove). Since these packages regardless of the database<figref>26</figref> saved Information is passed, the management module must <figref>28</figref> the Rules of the database <figref>26</figref> compare with the information, present in the packet cell header of each packet to determine whether the received packet is to be stored.

0069Those received packets, which the rules of the database <figref>26</figref> meet, be then on a storage medium <figref>30</figref> stored, which is - depending on the operational requirements of certain applications - preferably a digital data storage device with high capacity, such as a hard disk magnetic storage device, an optical disk, CD-ROM, a ZIP drive or DVD Laufw ork or a DAT cassette or Combinations of such devices or other suitable storage media concerns.

0070Preferably is the respective communication session or the particular call, of or associated with each data packet is also stored, so this session later can be reconstructed and reproduced.

0071If desired by the user, can the management module <figref>28</figref> then one or more data packets, the one or more associated communication sessions, from the storage medium <figref>30</figref> recall. That or the retrieved Packets are then added to a data recovery module <figref>32</figref> transfer. The data recovery module <figref>32</figref> is preferably in able to process these retrieved packets so that a restored certain communication session using RTP (Real Time Protocol) can be. As shown below in relation to the<figref idrefs="S50">4C</figref> and <figref idrefs="S51">5</figref> still described in more detail will be in the systems that operate in accordance with the RTP, the data packets with a time stamp in the cell header rather than just a serial Number sent. Such a time stamp for audio and video data stream required for the data packets can be reassembled so that the Total timing of the data stream is preserved. Without such a Timestamp would the correct timing remain not respected, and the audio or video streams could not be reconstructed properly.

0072The Communication sessions from the reconstructed data packet flows by of the corresponding audio and / or Video codecs restored. A codec is a non-linear A process for the conversion of analog and digital data. An audio codec allows it thus, the digitized audio data in relevant data packets to to convert analog audio data to, for example, the user as audible Colors more. Appropriate codecs are further down in terms <figref idrefs="S51">5</figref> incoming described.

0073In order to the user instructs the reproduction of the reconstructed communication session can receive, contains the system <figref>10</figref> preferably an audio device <figref>34</figref> and video equipment <figref>36</figref>. which are collectively referred to as a "communication session display unit". More preferably, the audio device <figref>34</figref> and the video device <figref>36</figref> in receiving capable of both audio and video input data as also audio and video output data to reproduce. At a bare Minimum should the audio device <figref>34</figref> and the video device <figref>36</figref> in be able to play back audio or Videoaungangsdaten. For example could the audio device <figref>34</figref> optional a microphone for data input and a speaker or earphones for outputting data included. The video recorder<figref>36</figref> could optional For example, a video monitor or a display screen for data output and a video camera for inputting data included.

0074<figref idrefs="S46">2</figref> is a schematic block diagram of the system <figref>10</figref> from <figref idrefs="S45">1</figref>. which the overall system of software modules of the system <figref>10</figref> in more detail shows. It is also, if applicable, to flowcharts, the operation of these software modules in more detail show (<figref idrefs="S47">3A</figref>-<figref idrefs="S49">3D</figref> and <figref idrefs="S51">5</figref>) and descriptions of the cell headers the different types of data packets (<figref idrefs="S49">4A</figref>-<figref idrefs="S50">4D</figref>) referenced.

0075As shown, the system <figref>10</figref> also connect to the Intranet <figref>14</figref> about the NSK <figref>16</figref>, If the packets through the Intranet<figref>14</figref> be transmitted, captures the NSK <figref>16</figref> these data packets from and forwards them to the filtering module <figref>24</figref> continue.

0076The filtering module <figref>24</figref> has two compoth. A first filtering component <figref>38</figref> checks the cell header the data packet, which is the a package from the IP type must act right cell head as in <figref idrefs="S49">4A</figref> shown.

0077After that directing the first filtering component <figref>38</figref> the data packet to the second filtering component <figref>40</figref> continue. The second filtering component <figref>40</figref> now determines the type of IP data packet, the accordance with the standards H.225, H.245, RTP and RTCP can be constructed.

0078As in <figref idrefs="S47">3A</figref> shown, the first filtering component <figref>38</figref> and the second filtering component <figref>40</figref> following operation. In step 1 receives the filtering module <figref>24</figref> a package. The package is the first filtering component <figref>38</figref> passed, now in step 2 determines whether the packet is a packet from the IP type. Such Determination is made according to the structure of the cell head of Data packet, which in <figref idrefs="S49">4A</figref> one example is shown. A cell head <figref>42</figref> is shown as a plurality of boxes, each of which a portion or "field" of the Zell head represents. The number of bytes used by each section in claim are also shown, it being understood that each Layer of 32 bits. The first section of the cell header, a "verse" section <figref>44</figref>is the protocol version number. It follows a "H.Län" section<figref>46</figref>. of the number of 32-bit quantities displays in the cell header. A "Service Type" section<figref>48</figref> shows on whether the sender wishes that the datagram via a route with minimal delay or a Route is transported with maximum throughput. A "total length" section<figref>50</figref> shows the total number of in eight-bit bytes in the cell header and the data.

0079In the next Layer identifies an "identification" section, the package itself. A "marker" -From cut <figref>54</figref> shows whether the datagram is a fragment or a complete datagram is. A "fragment offset" section<figref>56</figref> features the position of this fragment in the original datagram, if the datagram is fragmented.

0080In the next containing layer a "lifetime" section <figref>58</figref> a positive integer between 1 and 255 who completed at any Route is gradually decreased to. 1

0081If the value becomes 0, the packet is no longer forwarded and is returned to the sender. A "type" section <figref>60</figref> shows the type of the data forwarded. A "Zellkopfprüfsummen" section<figref>62</figref> permits verification of integrity the package by comparing the actual checksum with in section <figref>62</figref> recorded Value.

0082The next Layer of the cell head <figref>42</figref> contains the source IP address <figref>64</figref>. whereupon the next Layer the destination IP address <figref>66</figref> contains. Then followed by an optional "IP Options" section <figref>68</figref> and a Stopfabschnitt (if necessary), and then starts a data section <figref>70</figref> of Packet with the data.

0083The Structure of the cell header of the data packet is the first filtering component <figref>38</figref> checked to determine whether this cell header, the necessary data fields in the contains correct order, so that the cell header of the data packet has a structure of the cell header <figref>42</figref> having.

0084The first filtering component <figref>38</figref> allows only the packets with the correct cell header structure onward, as in step 3A. Otherwise, the packets are re-stored, as in step 3B.

0085The Packets with the correct cell head - or the "IP packets" are now on the second filtering component <figref>40</figref> forwarded. The second filtering component <figref>40</figref> then takes over the rest of the filtering steps. In step 3A checks the second filtering component <figref>40</figref> the IP packets to the data portion by means of the the packet to determine its type, as in <figref idrefs="S49">4A</figref> shown. The packages must in a fall of four categories: H.225, H.245, RTP and RTCP. The steps of the method for H.225 packets are in <figref idrefs="S47">3A</figref> shown, while the procedures the remaining Packet types in the <figref idrefs="S48">3B</figref>-<figref idrefs="S49">3D</figref> shown are.

0086As soon as the type of product was found to be both the package itself as well as the information regarding the packet type to the management module <figref>28</figref> forwarded, as shown in <figref idrefs="S46">2</figref> shown. The Package is now on the relevant component within the management module <figref>28</figref> passed as also in <figref idrefs="S46">2</figref> shown, so that the recording process accomplished can be. The recorded packets are in the memory module<figref>30</figref> stored, as described below with reference to <figref idrefs="S49">3C</figref> and <figref idrefs="S49">3D</figref> incoming described.

0087If identifies the packet based on its cell head as H.225 package was (see <figref idrefs="S50">4B</figref>), So the packet is a H.225 call control module <figref>78</figref> within the management module <figref>28</figref> passed, as in <figref idrefs="S46">2</figref> shown. The steps of the administrative procedure following (see <figref idrefs="S47">3A</figref>). In step 4A of<figref idrefs="S47">3A</figref> becomes the H.225 packet is checked to see if it is a construction package, which according to the structure of the data is found in the package. This structure is described in Recommendation H.225.0 specified and includes at least the following types of information: <ul><li>• Protokollidentifikator (The version of H.225.0 which is supported);</li><li>• h245 address (Specific transport address on which an H.245 signaling by to be set up the calling endpoint or gatekeeper);</li><li>• Source Address (H.323 IDs for the source);</li><li>• Source Info (includes an endpoint type, to allow the called party determine whether the call contains a gateway or not); and</li><li>• destination (This is the address to which the endpoint wants to be connected).</li></ul>

0088It are still other types of data required, as in the Recommendation H.225.0 specified. Using this data structure, the H.225 call control module<figref>78</figref> find if it is the packet is a configuration packet.

0089If it is a construction package in this package, as is the the first branch of the method followed. The source port is a Source Port field <figref>74</figref> an H.225 cell head <figref>72</figref> removed, and the destination port is a destination port field <figref>76</figref> removed (see <figref idrefs="S50">4B</figref>). In Step 5A is now the database <figref>26</figref> from <figref idrefs="S45">1</figref> then checked whether a the corresponding terminals defined as loggers in Terminal , that is, whether communication sessions, by the IP-address this terminal were initiated to be monitored. If so, so in step 6A, the terminal status to "session start request" from the terminal, corresponding to the source port set.

0090alternative the packet in step 4B, then checks whether it is a link packet, which is determined with reference to the structure of the data in the packet. This structure is specified in the H.225.0 recommendation, and includes at least the the following types of information: <ul><li>• Protokollidentifikator (The version of H.225.0 which is supported);</li><li>• h245 address (Specific transport address on which an H.245 signaling by to be set up the calling endpoint or gatekeeper);</li><li>• Target Info (includes an endpoint type to determine to allow the caller whether the Phone includes a Gateway or not); and</li><li>• Conference ID (includes a unique identification number for identifying the respective conference).</li></ul>

0091If If the packet is a link packet, then the second branch of the method followed. In Step 5B is the Flag indicating the terminal status, then checked whether the Terminal status is set to "session start request". In Step 6B are the details of the call signal in a conversation history database <figref>78</figref> of storage medium <figref>30</figref> saved (see <figref idrefs="S46">2</figref>). These details preferably include the source and destination IP address, the source and destination port, the time at which the communication session was introduced, and all other relevant information. In step 7B, the status of the terminal is set to "wait for the logical channel".

0092If the second filtering component <figref>40</figref> the package as a H.245 package has identified the packet is a H.245 call control module <figref>82</figref> within the management module <figref>28</figref> passed, as in <figref idrefs="S46">2</figref> shown. Such H.245 packets are for H.245 signaling necessary. An H.245 signaling is between constructed two endpoints: an endpoint and a multipoint controller or an endpoint and a gatekeeper (for examples and a description Such endpoints see <figref idrefs="S52">6</figref> and <figref idrefs="S52">7</figref>).

0093Each Endpoint can call in a communication session and to be called. The system of the present invention monitors but Such communication sessions only and they do not initiate. Thus the system of the present invention uses the H.245 signaling, to determine when the communication session has started in order to effectively record the necessary data packets to the session store and later to be reconstructed.

0094The Steps of the administrative procedure for H.245 packets are as follows (please refer <figref idrefs="S48">3B</figref>). In step 1A of<figref idrefs="S48">3B</figref> becomes the H.245 packet is checked to see if it is a package with the requirement to open a logical channel concerns. If so, in step 2A of the terminal status is checked to see whether the Status to "Waiting is set to the logical channel ". If that is the case, then in step 3A the terminal status on "Waiting for Confirmation "set.

0095alternative is checked to the H.245 packet, whether it is a package with the confirmation the opening a logical channel is, as shown in step 1B. If yes, it is checked in step 2B of the terminal status to see if the status on "Waiting for is confirmation set ". If the the case, is set in step 3B of the terminal status to "Waiting for Terminal readiness". In step 4B is the transport address of the called or destination terminals stored. This transport address is the destination port field<figref>76</figref> of cell header <figref>82</figref> removed (see <figref idrefs="S50">4B</figref>). It it should be noted that H.225 and H.245 packets identical cell head structures have.

0096Of Further alternatively, the H.245 packet is examined to determine whether it a packet with the confirmation the terminal is ready, as shown in step IC. If so, so in step 2C, the terminalreadiness in a conversation history database <figref>80</figref> saved (please refer <figref idrefs="S46">2</figref>).

0097In Step 3C the terminal status is changed to "in the call processing", such that the communication session has been determined as opened, and such that the management module <figref>28</figref> now RTP data packets can receive.

0098If the second filtering component <figref>40</figref> the packet as an RTP packet has identified the packet is a remote access control module <figref>84</figref> (RAS Registration, Admission and Status) within the management module <figref>28</figref> passed, as in <figref idrefs="S46">2</figref> shown. The steps of the administrative procedure for RTP packets following (see <figref idrefs="S49">3C</figref>). In Step 1 of<figref idrefs="S49">3C</figref> becomes the terminal status is checked to whether he is set to "in the call handling". If Yes, as in step 2, the RTP packets in a RTP database <figref>86</figref> on the storage medium <figref>30</figref> saved (see <figref idrefs="S46">2</figref>). <figref idrefs="S50">4C</figref> shows the structure of the RTP packet cell head, can be used to identify the communication session, was removed the package.

0099And if the second filtering component <figref>40</figref> the package as a RTCP packet has identified the packet is a RTCP control module <figref>88</figref> within the management module <figref>28</figref> passed, as in <figref idrefs="S46">2</figref> shown. The steps of the administrative procedure for RTCP packets are as follows (please refer <figref idrefs="S49">3D</figref>). In Step 1 of<figref idrefs="S49">3D</figref> becomes the terminal status then checked whether ex is set to "in the call handling". If yes, in step 2, the RTCP packets in the call history database <figref>80</figref> on the storage medium <figref>30</figref> saved (see <figref idrefs="S46">2</figref>). <figref idrefs="S50">4D</figref> shows the structure of the RTCP packet cell head which are used to can identify the communication session to which the packet was taken out.

0100In the <figref idrefs="S47">3A</figref>-<figref idrefs="S49">3D</figref> becomes thus the method of the present invention with respect to the Filtering and storage of data packets illustrated which the recorded communication session as the system according to the invention with the was recorded (as in <figref idrefs="S45">1</figref> and <figref idrefs="S46">2</figref> shown), form. In addition to the recording of such communication sessions can the inventive system course Retrieving these communication sessions and play for the user. Consisting of stored data packets stored communication session can be obtained by the data restoring unit <figref>32</figref> from <figref idrefs="S46">2</figref> in connection with the audio device <figref>34</figref> and video equipment <figref>36</figref> accessed and reproduced. The process of retrieving and reproducing of interest in sessions <figref idrefs="S51">5</figref> shown, while certain other relevant portions of the inventive system in <figref idrefs="S46">2</figref> are shown.

0101In Step 1 of <figref idrefs="S51">5</figref> the user enters the information in terms of the communication session that will be accessed and reproduced should. This information preferably includes the terminal number or other designation information regarding at least one of Parties of interest communication session, the time, to who started the session, and the time at which ended the session. Instead of this information may However, other information will be included, as long as sufficient information to disposal stand, which identifies the communication session of interest can be.

0102In Step 2 of <figref idrefs="S51">5</figref> searches the data restoring unit <figref>32</figref> the Conversation history database <figref>80</figref> (please refer <figref idrefs="S46">2</figref>) for the details of the communication sessions) within the specified Time range. These details are then compared with the user entered Information compared to at least one communication session of interest to find in the call area.

0103In Step 3 searches the data restoring unit <figref>32</figref> the RTP database <figref>86</figref> of the storage medium <figref>30</figref> (please refer <figref idrefs="S46">2</figref>) to substantially all data packets from the at least one communication session found within the specified call range. Optional and preferably, in step 4, when the audio portion of the communication session was recorded in stereo, the data packets are divided into different audio channels.

0104In Step 5, the data packets by the data recovery unit <figref>32</figref> by means of an RTP software module <figref>91</figref> (RTP = Real Time Protocol) within the data restoration unit <figref>32</figref> restored. The RTP software module <figref>91</figref> arranges the data packets within each channel corresponding to the time stamp of each packet. As in<figref idrefs="S50">4C</figref> shown, contains an RTP packet cell header <figref>92</figref> several important fields: a timestamp field <figref>94</figref>, A Synchronisationsquellenidentifikatorenfeld <figref>96</figref> (Synchronization Source - SSRC) and a Teilnahmequellenidentifikatorenfeld <figref>98</figref> (Contributing Source - CSRC). The SSRC field <figref>96</figref> is to determine the source of the RTP packets (The sender), which has a unique identifying address (The SSRC identifier). The CSRC identifier in CSRC field<figref>98</figref> becomes used in a conference with multiple parties, and indicates the SSRC identifier to all parties. The timestamp field<figref>94</figref> becomes by RTP software module <figref>91</figref> to the Determining the relative time is used at which the data in each Package are to be reproduced.

0105For example preferably the Audiostromdaten the language of a person with the individual in the video stream lip movements this person synchronized - a Process, which is called "lip sync". Such Synchronization requires more than simply reproducing Audio and video data at certain relative time points, since the Audio and video data packets may not arrive at the same time and therefore slightly different may have timestamps.

0106After this the data packet has been correctly synchronized, the control is the reproduction of the audio data from an audio component <figref>102</figref> the Data Recovery unit <figref>32</figref> corresponding to one or adopted several audio codecs (please refer <figref idrefs="S46">2</figref>). The control playback of the video data is from a video component <figref>104</figref> the data restoration unit <figref>32</figref> correspondingly over one or more video codecs (please refer <figref idrefs="S46">2</figref>).

0107As appropriate codecs are for example in question: an audio codec, of the CCITT Recommendation G.711 (1988), pulse code modulation of voice frequencies, used; an audio codec, the within the CCITT Recommendation G.722 (1988), 7 kHz audio coding of 64 kbit / s, is used; an audio codec, which the ITU-T Recommendation G.723.1 (1996), speech: Doppelratensprachcodierer for Multimedia Communications with transfer rates of 5.3 and 6.3 Kbps, is used; an audio codec, the CCITT recommendation G.728 (1992), speech coding at 16 kbps using low-delayed code-excited linear prediction, used; an audio codec, which the ITU-T Recommendation G.729 (1996), speech coding with 8 Kbps using algebraic code-excited linear prediction with conjugated structure (CS-ACELP) used; a video codec, which the ITU-T Recommendation H.261 (1993), Video codec for audiovisual Services with p × 64 kbit / s, is used; a video codec, the ITU-T Recommendation H.263 (1996) Video codec for communication with low bit rate, is used; and substantially all other similar Coding standards.

0108As in <figref idrefs="S46">2</figref> shown, the audio data by the audio device <figref>34</figref> reproduced, that may contain a speaker, for example. The Video data by the video device <figref>36</figref> reproduced, which could include a display monitor screen, for example. step 5 of <figref idrefs="S51">5</figref> is then preferably repeated, such reproduced the entire communication session that substantially is. As shown in step 6, each data packet of the communication session then checked whether the Call time is over. If the single session is not finished is so preferably step 5 is repeated.

0109alternative and preferably, when the call time is over, the call history database <figref>80</figref> searches, to determine whether further communication sessions within the predetermined period was recorded, as in step 7 shown. If at least one other such communication session is present, then preferably the method of <figref idrefs="S51">5</figref> from repeated step. 2

0110According to preferred embodiments of the present invention are various configurations of the computerized Logging system possible. Examples are in the <figref idrefs="S52">6</figref> and <figref idrefs="S52">7</figref> shown.

0111According to a first embodiment of the system of the present invention, in the <figref idrefs="S52">6</figref> shown is, contains a typical system <figref>104</figref> in the base configuration, single communication session management unit according to the invention <figref>13</figref> essentially in the <figref idrefs="S45">1</figref> and <figref idrefs="S46">2</figref> shown Form. The communication session management unit<figref>13</figref> managed communication in a separate intranet such as a LAN <figref>106</figref>, The LAN<figref>106</figref> is both the communication session management unit <figref>13</figref> as well as with a plurality of terminals <figref>108</figref> connected, referred to as the "T1", "T2", etc. are according to the H.323 protocol and work. Each terminal<figref>108</figref> is an end point of the LAN <figref>106</figref>. the two-way communication in real time with another terminal <figref>108</figref>. a Gateway <figref>110</figref> or a multipoint control unit <figref>112</figref> allows. This communication consists of control, display, audio streams, video streams, and / or Data. The terminal<figref>108</figref> is optionally only capable of such communication only for Audio, Audio and Data, Audio and Video or perform for audio, data and video. As above in the chapter "Be scription the prior art "addressed, could H.323 entity be a terminal, the audio and / or video communications can perform as a "LAN-Phone" However, the H.323 entity could as an independent be audio or video phone.

0112Of the Gateway <figref>110</figref> (GW) is constructed in accordance with H.323 and is an endpoint on the LAN <figref>106</figref>, The two-way communication in real time between terminals <figref>108</figref> in LAN <figref>106</figref> and (Not shown) other suitable terminals on a WAN or allows with one other such (not shown) gateway. Other suitable terminals include those recommendations H.310 (H.320 on B-ISDN), H.320 (ISDN), H.321 (ATM), H.322 (GQOS-LAN) H.324 (GSTN), H.324M (mobile) and V.70 (DSVD) correspond.

0113The Multipoint control unit (MPCE) <figref>112</figref> is an end point in LAN <figref>106</figref>Which enables three or more terminals <figref>108</figref> and gateways <figref>110</figref> at a multipoint conference.

0114Preferably contains the system <figref>104</figref> also a gatekeeper (GK) <figref>114</figref>. of an H.323 entity in LAN <figref>106</figref> is, converts the address and access to the LAN <figref>106</figref> for terminals <figref>108</figref>Which Gateways <figref>110</figref> and MPCEs <figref>112</figref> controls. The Gatekeeper <figref>114</figref> can for terminals <figref>108</figref>. the gateway <figref>110</figref> and MPCEs <figref>112</figref> other services provide, such as bandwidth management and locating gateways <figref>110</figref>,

0115Of the gatekeeper <figref>114</figref> allows Preferably, the determination of the IP address of terminals <figref>108</figref> in the LAN <figref>106</figref>, Such that the correct IP address "on the fly" (right) determined can be.

0116Of Furthermore, the LAN can <figref>106</figref> non-audio / video equipment for regular T.120 data applications support, such as electronic whiteboards, still image transfer, File exchange, database access, etc.

0117at the base system <figref>104</figref> is a single independent communication session management unit <figref>13</figref> for monitoring, Logging and retrieval of all Audio and / or video calls either between two or more terminals <figref>108</figref>That to the LAN <figref>106</figref> affiliated are, or between any phone calls, to which one or more these terminals <figref>108</figref> participate, used. In the preferred embodiment of the system of <figref idrefs="S52">6</figref>That a gatekeeper <figref>114</figref> contains, and in the system of <figref idrefs="S52">7</figref> but runs the remote control module <figref>84</figref> after opening the communication session is also preferably a RAS signaling between the management control module and the NSK <figref>16</figref> by when it requires the configuration of the system. Such signaling uses H.225.0 messages to registration, licensing, bandwidth change status and separation procedures conduct between endpoints and gatekeepers. These messages passed on a RAS signaling channel and the call signaling channel the H.245 control channel independently is. procedures an open logical channel according to H.245 are used to build the RAS signaling channel is not used. In LAN environments, the one have Gatekeeper (Zone), the RAS signaling channel between is the endpoint and the gatekeeper opens. The RAS signaling channel is before the construction of other channels opened between H.323 endpoints.

0118<figref idrefs="S52">7</figref> shows a second embodiment of System of the present invention as a zone configuration system <figref>116</figref>, A zone <figref>118</figref> is the set of all terminals (Tx) <figref>108</figref>. Gateway (GW) <figref>110</figref> and multipoint control units (MPCEs) <figref>112</figref>. of a single gatekeeper (GK) <figref>114</figref> to get managed. The zone <figref>118</figref> contains at least one terminal <figref>108</figref>But not necessarily a or more gateways <figref>110</figref> or MPCEs <figref>112</figref>, The Zone <figref>118</figref> has only one gatekeeper <figref>114</figref>. as shown. In the preferred embodiment shown, however, the zone is<figref>118</figref> preferably of the LAN topology independent and contains preferably multiple LAN segments <figref>120</figref>Which means routers (R) <figref>122</figref>. as shown, or connected by means of other similar devices are.

0119Every monitored LAN segment <figref>120</figref> has an inventive local communication management unit <figref>124</figref>. two of which are shown. An inventive central management unit<figref>126</figref> controls all local communication management units <figref>124</figref>, Next centralized database and control services, the central management unit <figref>126</figref> also for the real-time monitoring and offline recovery of audio and / or video communication sessions be used by a single point. The central management unit<figref>126</figref> is optionally and preferably either a dedicated unit in structure to the local communication management units <figref>124</figref> similar, only without their storage capacity, or the central management unit <figref>126</figref> alternatively and preferably in the local communication management units <figref>124</figref> integrated, such that it functions both local communication management unit <figref>124</figref> as and the central management unit <figref>126</figref> in a single Station offers.

0120The local communication management units <figref>124</figref> preferably either communication management units <figref>13</figref>, essentially as they in <figref idrefs="S45">1</figref> and <figref idrefs="S46">2</figref> described are, or are alternatively and preferably more simple units, which lack the ability have to retrieve and play back a communication session locally.

0121at a further (not shown) preferred embodiment, of the present invention is preferably a multi-user operating based on a client / server architecture for the base system <figref>104</figref> and the zonal system <figref>116</figref> supported. An unlimited Number of client stations be connected anywhere on the LAN, which the User to managing, monitoring and the retrieval condition, as by the power level of each each user is set.

0122It be understood that the above descriptions only as examples are intended and that within the scope of the present Invention numerous other embodiments posLich are.