© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1

Cisco IntercompanyMedia Engine

Cullen Jennings, Ph.D.

fluffy@cisco.com

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 2

Communities, Not Just Companies: Business Processes Extending Beyond the Enterprise

2

Need for secure, inter-company collaboration driven byglobalization, free agency, customer intimacy

TemporaryWorker

HQBranchOffice

VendorCustomerConsultant

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 3

Current State for UC: Islands of Productivity Interconnected by the PSTN

Voice Video Wideband Audio

Insidethe

Organization:

CiscoUnified CM PSTN

Gateway

Rich Caller ID Presence Alert on Available

Company A

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 4

Current State for UC: Islands of Productivity Interconnected by the PSTN

Insidethe

Organization:

Video Voice Wideband Audio

Rich Caller ID Presence Alert on Available

BetweenOrganizations:

Voice ONLY

CiscoUnified CM PSTN

GatewayPSTN

Gateway

Company A Company B

Session Manager

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 5

Enterprise Public

time

BASIC VOICE BASIC VOICE

Joe123

CALLING NAME/NUM

Joe123

CALLING NAME/NUM

ALERT ON AVAILABLECOLLAB

Unified CommunicationsIs landlockedby the PSTN

The Growing Disparity ……

Video

Rich Caller IDRoster

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 6

Cisco Intercompany Media Engine

The Cisco Intercompany Media Engine (IME) represents the first time that companies can conduct secure, high-quality, voice and video telephone calls across the internet - using their existing telephone numbers - without the need to re-provision or replace currently deployed infrastructure.

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 7

Cisco Intercompany Media Engine

Submitted to IETF: Accelerating business value through standardization

Enterprise video telephony and high fidelity wideband audio across companies

Enables innovative collaboration capabilities and applications to be shared among partners

Secure, efficient network utilization with reduced costs

Utilizes SIP and PSTN coexistence

Multiple levels of security plus voice spam blocking

Effortless for users and administratorsEasy to use: Self learning

Consistent user experience

Intercompany Boundary-Less Communications Among Business Partners and Customers

AtoZ, Inc.

Borderline, Inc.

Company B

Company A

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 8

PSTN

CiscoUnified CM

PSTNGateway

PSTNGateway

CiscoUnified CM

Supports Existing Phones & Numbers

Saves Costs

Works with or without Service Provider

Brings Full UC Experience

Low Provisioning – Self Learning

Secure

Automated Spam Blocking

QoS Insurance via PSTN

Moves Calls from PSTN to Direct SIP Trunks Automatically

Internet or Extranet

Worldwide Unlimited Scale

InternetExtranet

Enterprise A Enterprise B

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 9

How It Works - Cisco IME High-Level Call Flow

EnterpriseA

EnterpriseB

Internet/Extranet

PSTN

• All participating enterprise configure Cisco IME and their phone numbers

• Enterprise IME Servers then:•Form worldwide P2P network•Publish phone numbers they “own” to P2P network

• First call to a number goes over the PSTN

• PBX in both enterprises send call info with start and stop time to their IME Servers. This forms a shared secret

• Later, the IME Servers performs call validation to servers in P2P network that claim to “own” the number

•Provides proof of that previous PSTN call went to the IME server that claims to “own” the number

IME

IME

IME

IME

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 10

How It Works Cisco IME Call Flow

• Upon successful validation, the originating side IME Server securely pushes learned route to the PBX

• The next call placed to that phone number is a Secure Business to Business call over the IME SIP Trunk instead of PSTN.

• Seamless Fallback to PSTN if QoS problems detected

EnterpriseB

PSTN

EnterpriseA

Internet/ExtranetIME

IME

IME

IME

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 12

Cisco IME Security built-in from ground-up

All IME traffic is encrypted - media and signaling (TLS+SRTP)

Encryption at perimeter firewall - no need to turn on security in your entire enterprise

End to end secure media if both phones are in secure mode

Dial plan information in the Cisco IME network is hashed. 128 bit node id’s stored not numbers.

False number advertisement prevention Spam protection - blocks unwanted calls right

at the firewall Protection against Denial of Service Attacks on

CPU, memory. and bandwidthSpam

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 13

Combining Three Powerful Technologies

To provide the first mechanism to move calls from the PSTN and securely send them over any IP network

DHT:

For Scale (testimony of Scale is Skype with > 500 Mill Users and > 50 Mill users online at a time)

PSTN:

For validation of phone number ownership

SIP:

For its flexibility and feature delivery

© 2009 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 15

ViPR Standardization Efforts

IETF Submissions:

draft-rosenberg-dispatch-vipr-overview

draft-rosenberg-dispatch-vipr-pvp

draft-rosenberg-dispatch-vipr-reload-usage

draft-rosenberg-dispatch-vipr-sip-antispam

draft-rosenberg-dispatch-vipr-vap

draft-ietf-p2psip-reload

ViPR: Verification Involving PSTN Reachability

Encouraging Industry-Wide Interoperability from the Start