Protocol for instant messaging

The This invention relates to a method for the transmission of messages in a distributed system, a computer program product for implementing such a method in a network environment and a distributed system for the transfer messages.

The This invention relates generally to the field of electronic Messaging. Electronic news in the form of e-mails or GSM short message texts are known. They are based on a store and forward technology, said the author of the message, the message to a computer node sends. In the node the message is stored, and to other nodes forwarded until a mailbox that desired the User belongs, reached.

Also known from the prior art are certain gateways for transmitting a message from a transmission medium (Z. B. SMS) to another transmission medium (Z. B. Fax). Several GSM network operators and independent Service providers offer functionality like this. The main disadvantage of such systems is that they to a fixed transfer task are directed, that is, from a pre-defined medium into another.

More known devices consist of the prior art in the Using relatively uncomplicated intermediate networks for transmitting messages between different locations. For example, you could Send a document as an attachment in an e-mail. This combined message is sent to a specific gateway, which converts it to a fax is desired and to the receiver is sent.

Out The document US-A-5,608,786 is a unified messaging system known. This known technique uses existing communication channels or Networks. Part of the system is based on a data communication network, forming an intermediate portion of the distribution network. A Telephone communication is typically for the Start or end portions used. Voice messages, e-mails, faxes, and other message types can are received by the system for retrieval by the subscriber. communications may can be centralized, and the retrieval of messages are carried out with the aid of a separate of several different approaches. Thus can Data communication networks, such. As the Internet to a global voice messages be and Faxnachrichtensystemen.

document US Patent No. 5,742,905 discloses a personal communications network (PCI) the provides a network subscriber with the ability to receive and the sending of wireless and wireline voice and remote control text messages. The network operates as an interface between different wireless and wireline networks. If necessary, leads the Network, a media conversion. The PCI system also contains a database that can be used by a subscriber, to specify its Nachrichtenempfangs- and dispatch options.

Of the mentioned PCI server comprises a so-called data messaging peripheral that is a gateway to a wired network. When a wireline e-mail message to the data communication terminal of the PCI server arrives, determines the PCI server, whereas forwarded the email is and what medium is used. Besides the possibility of the reception of messages from a wired network allows the PCI server also means that a device with the wireless network is connected to send a message via the PCI server. Characterized an e-mail message may be a PDA over a wireless network send to the PCI server that the e-mail to the target device via reversed Send wired network with the help of z. B. the SMTP protocol can.

There Messaging systems according to the prior Technology such. As e-mail, a store and forward communications structure have, they have inherent Problems of immediate message delivery (ie almost Real time).

furthermore implies the near real-time transmission Messages a great Number of processing systems for high message throughput.

Therefore it is an object of the present invention provides a technique for transferring of messages in a distributed system is available to filters, which enables a high message throughput and a reduced burden on the processing units of the distributed system causes.

These Object is achieved by means of the features of the independent claims. The dependent claims make advancements is the central idea of ​​the invention.

According to a first aspect of the present invention, a method for transmitting Messages in a distributed system provided. A message is from a sending client by a first message gateway <?page 3?>receive. Meta information extracted from the received message will be transferred from the first message gateway to a message broker. A second message gateway is based on the meta information and the client profile data selected. The message from the first message gateway to the selected second Sending message gateway, to transfer it to a target client.

Of the Message broker, the meta information to provide process of security and authentication and to transmit the first message gateway back.

Of the Message broker can process the meta information and these to the first message gateway so resend the message controlled by the processed meta information to the selected second Gateway can be sent together with the meta information.

The Message itself can be converted by a message processor be before they selected at the second message gateway is sent.

According to a another aspect is the computer program product for implementing such a method in a network environment is provided.

According to a further aspect of the present invention is a distributed system for the transmission messages available posed. The system comprises a first message gateway for the reception messages from sending clients and for the extraction of meta information from the received messages. A message broker receives the Meta information from the first message gateway processes, the meta information and sends it to the first message gateway back. The system further comprises a second message gateway (which may be identical to the first message gateway) for the message controlled by the first message gateway by the processed receiving meta information and to get the message to a target client send.

A Client profile database can be connected to the message broker. The message broker processes the meta information on the basis the client profile database.

Of the Message broker can continue to provide a security and / or authentication functionality.

On Message Processor can to between the first and second message gateway Processing of the content (and not the meta-information) a be arranged message.

More Features, advantages or objects of the present invention are a skilled artisan, when the following detailed description of embodiments of the present invention in conjunction with the figures of the accompanying drawings read.

<figref idrefs="S18">1</figref> shows an example of an instant-messaging system.

<figref idrefs="S19">2</figref> shows a communication structure of a messaging system.

<figref idrefs="S20">3</figref> shows a message and information authentication protocol.

<figref idrefs="S21">4</figref> shows a symmetric representation of the process according to the present invention, and

<figref idrefs="S22">5a</figref> and <figref idrefs="S23">5b</figref> show in detail a message and information authentication protocol.

<figref idrefs="S18">1</figref> shows an example of an instant messaging system. The system essentially consists of instant message brokers <figref>2</figref>. with client profile databases <figref>3</figref> are connected gateways for emails <figref>4</figref>. gateways for GSM / SMS <figref>6</figref>, Gateways for voice messages and faxes <figref>5</figref>That with each other through a network <figref>1</figref> communicate can. At least one message processor <figref>7</figref> may in particular the content of the transmitted process messages. The instant message broker<figref>2</figref> manages the system configuration to the state, user profiles of the client profile database <figref>3</figref>. the routing of messages and services, billing and security.

<figref idrefs="S19">2</figref> shows the communication structure of a messaging system. A configuration comprises a sender (instant message gateway <figref>4</figref>), A receiver (Instant message gateway <figref>5</figref>) And a message broker <figref>2</figref> as additional Units. The various units of such a system can globally be distributed or arranged in a single computation node. In the example of <figref idrefs="S19">2</figref> is the data flow of such a minimal Messaging system is schematically illustrated.

In phase <figref>1</figref> receives the originator gateway <figref>4</figref> a message from a client (Ie a fax from a PSTN) generated (extracted) Meta sends out the received message and &lt;?page 4?&gt;the meta-information to the message broker <figref>2</figref>,

In phase <figref>2</figref> sent the message broker <figref>2</figref> the required message conversion and the communication path according to a State of the messaging system and client profiles (transmitter and receiver profiles) connected in the database <figref>3</figref> stored. additionally can the message broker <figref>2</figref> message security produce and also an indication. The modified meta information then of the instant message broker <figref>2</figref> to the originator gateway <figref>4</figref> returned.

In phase <figref>3</figref> transmits the sender gateway <figref>4</figref>. controlled by the meta information, the instant message (the consisting of meta information and message content) to the Receiver gateway <figref>5</figref>, In the case in which an additional News service or message conversion is required, can instant message through an additional message processor <figref>7</figref> be routed.

In phase <figref>4</figref> transmits the receiver gateway <figref>5</figref> the (Already converted) message to the client. After transfer sends the receiver gateway <figref>5</figref> a confirmation (Z. B. over extradition, on the receipt by the client or on the exemption) to the message broker <figref>2</figref>Wherein the confirmation the Message flow controls.

<figref idrefs="S20">3</figref> shows in detail the message and information authentication protocol. First, transfers in a setting phase <figref>1</figref> the originator gateway <figref>4</figref> metainformation to the message broker <figref>2</figref>Wherein the meta information can be signed.

In a release phase <figref>2</figref> is the message broker <figref>2</figref> transmission management information (Signed) back.

In a transmission phase <figref>3</figref> transmits the originator gateway <figref>4</figref> the signed instant message to the receiver gateway <figref>5</figref> (Optional through message processors <figref>7</figref>).

In an authentication and accounting phase <figref>4</figref> give that Receiver gateway <figref>5</figref> a signed confirmation to the message broker <figref>2</figref> back.

With Related to <figref idrefs="S21">4</figref> is the message transmission according to the present Invention using the graphical representation explained.

In receiving step S1 the originator gateway a message from a sending client. In a step S2 the originator gateway extracts meta information, by performing a predetermined processing. In a step S3 a communication between a sender gateway and the message broker set, and in a step S4 the meta information, which are extracted in step S2 is transmitted. modified in step S5 the message broker, the meta information by client profile data used by the connected client profile database. In step S6 the modified meta information (managing information) transmitted from the message broker to the originator gateway. In step S7, a communication setting between the Originator gateway and a destination gateway performed. In step S8 the message content be and the meta information from the originator gateway to the second (Destination) gateway transmitted. In step S9, the message from the destination gateway is transmitted to the target client. In the step S10 is the destination gateway a communication gateway back to the message broker. In step S11 sends the Message broker a confirmation to the originator gateway.

With in reference to <figref idrefs="S21">4</figref> is the notification and information authentication protocol described in detail.

the Originator gateway sends a time-synchronized Kommunikationsvoreinstellungs- (TSCS-) login key to the instant message broker. The communication is through the transmission the TSCS login key C and its extractions (digests) HMAC (K1, C) preset. The instant message broker checks the TSCS Login-Key and is a TSCS acknowledgment key a session key includes back. The TSCS acknowledgment key to accidentally generated session key C_ack contains, is on the IM Gateway (Sender) sent. It is noted that the different session key generated randomly and are each Communication step in which they are used, are unique.

the Originator gateway depends the session key to the AN message and sends instant message meta information (IMI), with the key K1 signed. to the message broker The instant message meta information (IMI) will be with the appended session key C_ack and its extractions HMAC (K1, IMI + C_ack) transfer. Of the Message broker checks the instant message meta information (IMI) and adds a Information in the IMI using user profile tables and database information and modified them. The session key is the message attached. The message is then the key KZ and key K1 signed. The broker IMI is the ID of the inner extraction the broker (equivalent to &lt;?page 5?&gt;the HMAC (K2, IMI + C_ack)) transfer. The IMI in the extraction of the broker is again with key K1 signed (outer extraction HMAC (K1, IMI + C_ack + HMRC (K2, IMI + C_ack))

the Originator gateway checks the outer extraction and sends an acknowledgment process broker IMI to the message broker.

Then sets the originator gateway communication by transferring the TSCS login key C and its extraction HMAC (K1, C) to the message gateway (destination) firmly. The destination gateway checks the TSCS Login-Key and is a TSCS acknowledgment key a session key contains, back. Thereby, the TSCS acknowledgment key the session key C_ack contains, to the originator gateway Posted.

the Originator gateway depends the session key to the on message and sends an instant message that the key K1 is signed, to the destination gateway. This is an instant message (IM) (Ie, message data and IMI) containing the message N to which Destination gateway sent.

the Destination gateway checks the instant message, converts the instant message and sends a Confirmation, that is signed. to the originator gateway The meeting then for the Originator gateway terminated.

The Message is then transmitted from the destination gateway to the target client (customer) delivered.

the Destination gateway then sends a TSCS login key for a communication preliminary adjustment to the message broker.

Of the Message broker checks the TSCS login key and is a TSCS acknowledgment key a session key contains, on the back destination gateway. In the step of confirming are the destination gateway, the broker ID (previously by the message broker generated) and a news Surrender read receipt back and signed this with the key K1.

the Destination gateway sends a broker IMI, a Nachrichtenauslieferungs- / read receipt and signed this with K1.

Of the Message broker checks the exterior derivative, which is generated by the destination gateway with the key K1, checks the returned ID by these previously generated with its own (stored) ID, that is sent to the destination gateway, processes the acknowledgment, terminates the transaction and returns the acknowledgment to the destination gateway back.

The integrity and the origin of the instant message meta information is through the generation the ID of the inner extraction of meta information (by means of the Message broker key K2) and by comparing it with the ID of the inner extraction of the destination gateway is received, assured. This allows the message broker positively correct transfer the ID of the inner extraction from the sending gateway to the destination gateway control. Furthermore it can be assured that no communication between the sending gateway and the destination gateway without intervention the Message Brokers possible is.

Of the Message broker then sends a TSCS login key for a Communication preliminary adjustment to the originator gateway.

the Originator gateway checks the derivative, processes the acknowledgment, notifies the sending client and returns an acknowledgment to the message broker back.

Of the Nachrichtigen broker then transmits a broadcast message delivery confirmation, that is signed with the K1,. to the originator gateway

the Originator gateway checks the TSCS login key and is a TSCS acknowledgment key the session key contains, on the back instant message broker.

The Invention therefore provides a technique for (almost) real-time main flow control Instant Message ago in a distributed messaging system.

Of the Purpose of instant messaging is high priority messages in (almost) real-time between Clients (man and machine) to be transmitted. Unified signaling combines analog and digital broadcast Messages such. As faxes, voice mail, e-mail, Web and mobile phone short message service (GSM / SMS) to unified instant messages. A unified instant messaging system (UIMS: Unified Instant Messaging System) corresponds to a (global) distributed System which consists of four main components to each other via an IP network communicate: distributed gateways, message processors, message brokers and a client directory database. News of any Form are converted by the IM Gateway into unified instant messages and vice versa. The instant message broker (INB) to control the flow of messages, the &lt;?page 6?&gt;Cancel and message conversion of additional messages must ensure the authentication and security of instant messages, to the distributed system to protect against unauthorized access.

The This invention is an efficient data transmission protocol for transmitting of messages in nearly real time. In a UIMS manages a relatively small number of message brokers, the message transmission, Processing and security. Thus, the communication protocol be and unified message structure for a high message throughput and a minimum broker load optimized. Instead of complete message transmission and processing process IMBs message meta information.

The present invention describes an apparatus and a method for controlling a message flow and processing in a distributed instant (Ie nearly real-time) communication systems. Because the meta much more compact than the message itself, a higher throughput is with achieved a reduced data transfer. The (meta) message content and control flow is transmitted with authentication which means that it the communicating parties (gateway processors and brokers) allows to verify that the received messages (as well as the true and alleged originator) are authentic. In MIAP be for message authentication Information using a time-synchronized communication setting by a message authentication with encrypted Verification code (Time Synchronised communication set-up by keyedhashing method authentication) (TSCS) authenticated.

Authenticated devices and method (protocol) for a communication in distributed direct communication systems with high throughput are proposed. The message flow control be and the further notification process of such a system managed by one of several instances of message brokers. For the Message authentication is a time synchronized communication setting by a message authentication with encrypted Verification code (TSCS) used.