Firewall traversal for web real-time communications

摘要

The system and method monitor a secure Web Real Time Communication (WebRTC) session between browsers. To do so, a WebRTC application receives a first WebRTC offer with a fingerprint of a first browser to establish a secure communication session. The WebRTC application sends session information and the fingerprint of the first browser to a media relay. The WebRTC application receives a fingerprint of a media relay. A second WebRTC offer with a fingerprint of the media relay is sent to a second browser. An answer to the second WebRTC offer is received. Session information and the fingerprint of the second browser are sent to the media relay so the media relay can decrypt the secure communication session. The first WebRTC offer is answered. A secure communication session is established via the media relay using the fingerprints. The media relay, based on the fingerprints, can monitor the secure communication session.

主权项

1. A method comprising:
receiving, at a Web Real Time Communication (WebRTC) application, a first WebRTC offer with a fingerprint of a first browser, wherein the WebRTC offer is to establish a secure communication session between the first browser and a second browser; sending, by the WebRTC application, to a media relay, first session information and the fingerprint of the first browser; in response to sending the first session information and the fingerprint of the first browser, receiving the first session information, second session information, and a fingerprint of a media relay; sending a second WebRTC offer with the second session information and the fingerprint of the media relay to the second browser; receiving an answer to the second WebRTC offer with the second session information and a fingerprint of the second browser; sending, to the media relay, the second session information and the fingerprint of the second browser; answering the first WebRTC offer with the second session information and the fingerprint of the media relay; and establishing the secure communication session between the first browser and the second browser via the media relay, wherein the first browser and the media relay use the fingerprint of the media relay and the fingerprint of the first browser to establish the secure communication session and wherein the second browser and the media relay use the fingerprint of the media relay and the fingerprint of the second browser to establish the secure communication session.