H.235 Encryption

Following the ITU-T H.235 encryption standard, the Oracle® Enterprise Session Border Controller allows media (audio, video, and data) media that has already been encrypted by endpoints to pass through it, thereby supporting videoconferencing applications where media confidentiality is key. The ITU-T standard provides a profile with key management using Diffie-Hellman keys and the specification of an encryption algorithm.

Specifically, the Oracle® Enterprise Session Border Controller permits the following:

• H.225 Setup and connect—The tokens parameter and its subfields in H.225 Setup and Connect message to pass transparently through the Oracle® Enterprise Session Border Controller
• H.245Teminal CapabilitySet—The H.245 TerminalCapabilitySet messages to pass transparently through the Oracle® Enterprise Session Border Controller, including:
  • Audio, video, and data capabilities
  • The h235SecurityCapability capability
• H.245 OpenLogicalChannel and OpenLogicalChannelAck—OLC messages with dataType h235Media to pass transparently through the Oracle® Enterprise Session Border Controller; to accomplish this, the Oracle® Enterprise Session Border Controller uses the mediaType subfield instead of the dataType field when the dataType is h235Media. The encryptionSync parameter and its subfields found in OLC and OLCAck messages to pass transparently through the Oracle® Enterprise Session Border Controller.
  

  You do not need to follow special configuration steps to enable this functionality; it works automatically.