Network Working Group                                  T. Melanchuk, Ed.
Request for Comments: 5567                    Rain Willow Communications
Category: Informational                                        June 2009


         An Architectural Framework for Media Server Control

Status of This Memo

  This memo provides information for the Internet community.  It does
  not specify an Internet standard of any kind.  Distribution of this
  memo is unlimited.

Copyright Notice

  Copyright (c) 2009 IETF Trust and the persons identified as the
  document authors.  All rights reserved.

  This document is subject to BCP 78 and the IETF Trust's Legal
  Provisions Relating to IETF Documents in effect on the date of
  publication of this document (http://trustee.ietf.org/license-info).
  Please review these documents carefully, as they describe your rights
  and restrictions with respect to this document.

  This document may contain material from IETF Documents or IETF
  Contributions published or made publicly available before November
  10, 2008.  The person(s) controlling the copyright in some of this
  material may not have granted the IETF Trust the right to allow
  modifications of such material outside the IETF Standards Process.
  Without obtaining an adequate license from the person(s) controlling
  the copyright in such materials, this document may not be modified
  outside the IETF Standards Process, and derivative works of it may
  not be created outside the IETF Standards Process, except to format
  it for publication as an RFC or to translate it into languages other
  than English.

Abstract

  This document describes an architectural framework for Media Server
  control.  The primary focus will be to define logical entities that
  exist within the context of Media Server control, and define the
  appropriate naming conventions and interactions between them.









Melanchuk                    Informational                      [Page 1]

RFC 5567                 Mediactrl Architecture                June 2009


Table of Contents

  1. Introduction ....................................................2
  2. Terminology .....................................................3
  3. Architecture Overview ...........................................4
  4. SIP Usage .......................................................7
  5. Media Control for IVR Services .................................10
     5.1. Basic IVR Services ........................................11
     5.2. IVR Services with Mid-Call Controls .......................11
     5.3. Advanced IVR Services .....................................11
  6. Media Control for Conferencing Services ........................12
     6.1. Creating a New Conference .................................14
     6.2. Adding a Participant to a Conference ......................14
     6.3. Media Controls ............................................15
     6.4. Floor Control .............................................16
  7. Security Considerations ........................................21
  8. Acknowledgments ................................................22
  9. Contributors ...................................................22
  10. Informative References ........................................23

1.  Introduction

  Application Servers host one or more instances of a communications
  application.  Media Servers provide real-time media processing
  functions.  This document presents the core architectural framework
  to allow Application Servers to control Media Servers.  An overview
  of the architecture describing the core logical entities and their
  interactions is presented in Section 3.  The requirements for Media
  Server control are defined in [RFC5167].

  The Session Initiation Protocol (SIP) [RFC3261] is used as the
  session establishment protocol within this architecture.  Application
  Servers use it both to terminate media streams on Media Servers and
  to create and manage control channels for Media Server control
  between themselves and Media Servers.  The detailed model for Media
  Server control together with a description of SIP usage is presented
  in Section 4.

  Several services are described using the framework defined in this
  document.  Use cases for Interactive Voice Response (IVR) services
  are described in Section 5, and conferencing use cases are described
  in Section 6.









Melanchuk                    Informational                      [Page 2]

RFC 5567                 Mediactrl Architecture                June 2009


2.  Terminology

  The following terms are defined for use in this document in the
  context of Media Server control:

  Application Server (AS):  A functional entity that hosts one or more
     instances of a communication application.  The application server
     may include the conference policy server, the focus, and the
     conference notification server, as defined in [RFC4353].  Also, it
     may include communication applications that use IVR or
     announcement services.

  Media Functions:  Functions available on a Media Server that are used
     to supply media services to the AS.  Some examples are Dual-Tone
     Multi-Frequency (DTMF) detection, mixing, transcoding, playing
     announcement, recording, etc.

  Media Resource Broker (MRB):  A logical entity that is responsible
     for both the collection of appropriate published Media Server (MS)
     information and supplying of appropriate MS information to
     consuming entities.  The MRB is an optional entity and will be
     discussed in a separate document.

  Media Server (MS):  The media server includes the mixer as defined in
     [RFC4353].  The media server plays announcements, it processes
     media streams for functions like DTMF detection and transcoding.
     The media server may also record media streams for supporting IVR
     functions like announcing conference participants.  In the
     architecture for the 3GPP IP Multimedia Subsystem (IMS) a Media
     Server is referred to as a Media Resource Function (MRF).

  Media Services:  Application service requiring media functions such
     as Interactive Voice Response (IVR) or media conferencing.

  Media Session:  From the Session Description Protocol (SDP)
     specification [RFC4566]: "A multimedia session is a set of
     multimedia senders and receivers and the data streams flowing from
     senders to receivers.  A multimedia conference is an example of a
     multimedia session."

  MS Control Channel:  A reliable transport connection between the AS
     and MS used to exchange MS Control PDUs.  Implementations must
     support the Transport Control Protocol (TCP) [RFC0793] and may
     support the Stream Control Transmission Protocol (SCTP) [RFC4960].
     Implementations must support TLS [RFC5246] as a transport-level
     security mechanism although its use in deployments is optional.





Melanchuk                    Informational                      [Page 3]

RFC 5567                 Mediactrl Architecture                June 2009


  MS Control Dialog:  A SIP dialog that is used for establishing a
     control channel between the user agent (UA) and the MS.

  MS Control Protocol:  The protocol used for by an AS to control an
     MS.  The MS Control Protocol assumes a reliable underlying
     transport protocol for the MS Control Channel.

  MS Media Dialog:  A SIP dialog between the AS and MS that is used for
     establishing media sessions between a user device such as a SIP
     phone and the MS.

  The definitions for AS, MS, and MRB above are taken from [RFC5167].

3.  Architecture Overview

  A Media Server (MS) is a network device that processes media streams.
  Examples of media processing functionality may include:

  o  Control of the Real-Time Protocol (RTP) [RFC3550] streams using
     the Extended RTP Profile for Real-time Transport Control Protocol
     (RTCP)-Based Feedback (RTP/AVPF) [RFC4585].

  o  Mixing of incoming media streams.

  o  Media stream source (for multimedia announcements).

  o  Media stream processing (e.g., transcoding, DTMF detection).

  o  Media stream sink (for multimedia recordings).

  An MS supplies one or more media processing functionalities, which
  may include others than those illustrated above, to an Application
  Server (AS).  An AS is able to send a particular call to a suitable
  MS, either through discovery of the capabilities that a specific MS
  provides or through the use of a Media Resource Broker.

  The type of processing that a Media Server performs on media streams
  is specified and controlled by an Application Server.  Application
  Servers are logical entities that are capable of running one or more
  instances of a communications application.  Examples of Application
  Servers that may interact with a Media Server are an AS acting as a
  Conference 'Focus' as defined in [RFC4353], or an IVR application
  using a Media Server to play announcements and detect DTMF key
  presses.

  Application servers use SIP to establish control channels between
  themselves and MSs.  An MS Control Channel implements a reliable
  transport protocol that is used to carry the MS Control Protocol.  A



Melanchuk                    Informational                      [Page 4]

RFC 5567                 Mediactrl Architecture                June 2009


  SIP dialog used to establish a control channel is referred to as an
  MS Control Dialog.

  Application Servers terminate SIP [RFC3261] signaling from SIP User
  Agents and may terminate other signaling outside the scope of this
  document.  They use SIP Third Party Call Control [RFC3725] (3PCC) to
  establish, maintain, and tear down media streams from those SIP UAs
  to a Media Server.  A SIP dialog used by an AS to establish a media
  session on an MS is referred to as an MS Media Dialog.

  Media streams go directly between SIP User Agents and Media Servers.
  Media Servers support multiple types of media.  Common supported RTP
  media types include audio and video, but others such as text and the
  Binary Floor Control Protocol (BFCP) [RFC4583] are also possible.
  This basic architecture, showing session establishment signaling
  between a single AS and MS is shown in Figure 1 below.

          +-------------+                         +--------------+
          |             | SIP (MS Control Dialog) |              |
          | Application |<----------------------->|     Media    |
          |   Server    |                         |    Server    |
          |             |<----------------------->|              |
          +-------------+ SIP (MS Media Dialog)   +--------------+
                      ^                               ^
                       \                              | RTP/SRTP
                        \                             |  audio/
                         \                            | video/etc)
                          \                           |
                           \                          v
                            \                 +--------------+
                             \     SIP        |              |
                              +-------------->|      SIP     |
                                              |  User Agent  |
                                              |              |
                                              +--------------+

                 Figure 1: Basic Signaling Architecture

  The architecture must support a many-to-many relationship between
  Application Servers and Media Servers.  In real world deployments, an
  Application Server may interact with multiple Media Servers and/or a
  Media Server may be controlled by more than one Application Server.

  Application Servers can use the SIP URI as described in [RFC4240] to
  request basic functions from Media Servers.  Basic functions are
  characterized as requiring no mid-call interactions between the AS
  and MS.  Examples of these functions are simple announcement-playing




Melanchuk                    Informational                      [Page 5]

RFC 5567                 Mediactrl Architecture                June 2009


  or basic conference-mixing where the AS does not need to explicitly
  control the mixing.

  Most services however have interactions between the AS and MS during
  a call or conference.  The type of interactions can be generalized as
  follows:

  o  commands from an AS to an MS to request the application or
     configuration of a function.  The request may apply to a single
     media stream, multiple media streams associated with multiple SIP
     dialogs, or to properties of a conference mix.

  o  responses from an MS to an AS reporting on the status of
     particular commands.

  o  notifications from an MS to an AS that report results from
     commands or notify changes to subscribed status.

  Commands, responses, and notifications are transported using one or
  more dedicated control channels between the Application Server and
  the Media Server.  Dedicated control channels provide reliable,
  sequenced, peer-to-peer transport for Media Server control
  interactions.  Implementations must support the Transport Control
  Protocol (TCP) [RFC0793] and may support the Stream Control
  Transmission Protocol (SCTP) [RFC4960].  Because MS control requires
  sequenced reliable delivery of messages, unreliable protocols such as
  the User Datagram Protocol (UDP) are not suitable.  Implementations
  must support TLS [RFC5246] as a transport-level security mechanism
  although its use in deployments is optional.  A dedicated control
  channel is shown in Figure 2 below.





















Melanchuk                    Informational                      [Page 6]

RFC 5567                 Mediactrl Architecture                June 2009


            +-------------+                     +--------------+
            |             |                     |              |
            | Application |   MS ctrl channel   |     Media    |
            |   Server    |<------------------->|    Server    |
            |             |                     |              |
            +-------------+                     +--------------+
                                                        ^ ^ ^
                                               RTP/SRTP | | |
                                               (audio/  | | |
                                             video/etc) | | |
                                                        | | v
                                                    +---|-v-------+
                                                  +-|---v-------+ |
                                                +-|-----------+ | |
                                                |             | | |
                                                |     SIP     | | |
                                                | User Agent  | |-+
                                                |             |-+
                                                +-------------+

               Figure 2: Media Server Control Architecture

  Both Application Servers and Media Servers may interact with other
  servers for specific purposes beyond the scope of this document.  For
  example, Application Servers will often communicate with other
  infrastructure components that are usually based on deployment
  requirements with links to back-office data stores and applications.
  Media Servers will often retrieve announcements from external file
  servers.  Also, many Media Servers support IVR dialog services using
  VoiceXML [W3C.REC-voicexml20-20040316].  In this case, the MS
  interacts with other servers using HTTP during standard VoiceXML
  processing.  VoiceXML Media Servers may also interact with speech
  engines (for example, using the Media Resource Control Protocol
  version 2 (MRCPv2)) for speech recognition and generation purposes.

  Some specific types of interactions between Application and Media
  servers are also out of scope for this document.  MS resource
  reservation is one such interaction.  Also, any interactions between
  Application Servers, or between Media Servers, are also out of scope.

4.  SIP Usage

  The Session Initiation Protocol (SIP) [RFC3261] was developed by the
  IETF for the purposes of initiating, managing, and terminating
  multimedia sessions.  The popularity of SIP has grown dramatically
  since its inception and is now the primary Voice over IP (VoIP)
  protocol.  This includes being selected as the basis for
  architectures such as the IP Multimedia Subsystem (IMS) in 3GPP and



Melanchuk                    Informational                      [Page 7]

RFC 5567                 Mediactrl Architecture                June 2009


  included in many of the early live deployments of VoIP-related
  systems.  Media servers are not a new concept in IP telephony
  networks and there have been numerous signaling protocols and
  techniques proposed for their control.  The most popular techniques
  to date have used a combination of SIP and various markup languages
  to convey media service requests and responses.

  As discussed in Section 3 and illustrated in Figure 1, the logical
  architecture described by this document involves interactions between
  an Application Server (AS) and a Media Server (MS).  The SIP
  interactions can be broken into "MS media dialogs" that are used
  between an AS and an MS to establish media sessions between an
  endpoint and a Media Server, and "MS control dialogs" that are used
  to establish and maintain MS control channels.

  SIP is the primary signaling protocol for session signaling and is
  used for all media sessions directed towards a Media Server as
  described in this document.  Media Servers may support other
  signaling protocols but this type of interaction is not considered
  here.  Application Servers may terminate non-SIP signaling protocols
  but must gateway those requests to SIP when interacting with a Media
  Server.

  SIP will also be used for the creation, management, and termination
  of the dedicated MS control channel(s).  Control channel(s) provide
  reliable sequenced delivery of MS Control Protocol messages.  The
  Application and Media Servers use the SDP attributes defined in
  [RFC4145] to allow SIP negotiation of the control channel.  A control
  channel is closed when SIP terminates the corresponding MS control
  dialog.  Further details and example flows are provided in the SIP
  Control Framework [SIP-CTRL-FW].  The SIP Control Framework also
  includes basic control message semantics corresponding to the types
  of interactions identified in Section 3.  It uses the concept of
  "packages" to allow domain-specific protocols to be defined using the
  Extensible Markup Language (XML) [W3C.REC-xml-20060816] format.  The
  MS Control Protocol is made up of one or more packages for the SIP
  Control Framework.

  Using SIP for both media and control dialogs provides a number of
  inherent benefits over other potential techniques.  These include:

  1.  The use of SIP location and rendezvous capabilities, as defined
      in [RFC3263].  This provides core mechanisms for routing a SIP
      request based on techniques such as DNS SRV and NAPTR records.
      The SIP infrastructure makes heavy use of such techniques.

  2.  The security and identity properties of SIP; for example, using
      TLS for reliably and securely connecting to another SIP-based



Melanchuk                    Informational                      [Page 8]

RFC 5567                 Mediactrl Architecture                June 2009


      entity.  The SIP protocol has a number of identity mechanisms
      that can be used.  [RFC3261] provides an intra-domain digest-
      based mechanism and [RFC4474] defines a certificate-based inter-
      domain identity mechanism.  SIP with S/MIME provides the ability
      to secure payloads using encrypted and signed certificate
      techniques.

  3.  SIP has extremely powerful and dynamic media-negotiation
      properties as defined in [RFC3261] and [RFC3264].

  4.  The ability to select an appropriate SIP entity based on
      capability sets as discussed in [RFC3840].  This provides a
      powerful function that allows Media Servers to convey a specific
      capability set.  An AS is then free to select an appropriate MS
      based on its requirements.

  5.  Using SIP also provides consistency with IETF protocols and
      usages.  SIP was intended to be used for the creation and
      management of media sessions, and this provides a correct usage
      of the protocol.

  As mentioned previously in this section, media services using SIP are
  fairly well understood.  Some previous proposals suggested using the
  SIP INFO [RFC2976] method as the transport vehicle between the AS and
  MS.  Using SIP INFO in this way is not advised for a number of
  reasons, which include:

  o  INFO is an opaque request with no specific semantics.  A SIP
     endpoint that receives an INFO request does not know what to do
     with it based on SIP signaling.

  o  SIP INFO was not created to carry generic session control
     information along the signaling path, and it should only really be
     used for optional application information, e.g., carrying mid-call
     Public Switched Telephone Network (PSTN) signaling messages
     between PSTN gateways.

  o  SIP INFO traverses the signaling path, which is an inefficient use
     for control messages that can be routed directly between the AS
     and MS.

  o  [RFC3261] contains rules when using an unreliable protocol such as
     UDP.  When a packet reaches a size close to the Maximum
     Transmission Unit (MTU), the protocol should be changed to TCP.
     This type of operation is not ideal when constantly dealing with
     large payloads such as XML-formatted MS control messages.





Melanchuk                    Informational                      [Page 9]

RFC 5567                 Mediactrl Architecture                June 2009


5.  Media Control for IVR Services

  One of the functions of a Media Server is to assist an Application
  Server that is implementing IVR services by performing media
  processing functions on media streams.  Although "IVR" is somewhat
  generic terminology, the scope of media functions provided by an MS
  addresses the needs for user interaction dialogs.  These functions
  include media transcoding, basic announcements, user input detection
  (via DTMF or speech), and media recording.

  A particular IVR or user dialog application typically requires the
  use of several specific media functions, as described above.  The
  range and complexity of IVR dialogs can vary significantly, from a
  simple single announcement play-back to complex voice mail
  applications.

  As previously discussed, an AS uses SIP [RFC3261] and SDP [RFC4566]
  to establish and configure media sessions to a Media Server.  An AS
  uses the MS control channel, established using SIP, to invoke IVR
  requests and to receive responses and notifications.  This topology
  is shown in Figure 3 below.

     +-------------+             SIP              +-------------+
     | Application |<---------------------------->|   Media     |
     |    Server   | (media & MS Control dialogs) |   Server    |
     |             |                              |             |
     |             |  MS Control Protocol (IVR)   |             |
     |             |<---------------------------->| (IVR media  |
     | (App logic) |       (CtrlChannel)          | functions)  |
     +-------------+                              +-------------+
            ^                                            ^^
             \                                           ||  R
              \                                          ||  T
               \                                         ||  P
                \                                        ||  /
                 \                                       ||  S
                  \                                      ||  R
                   \                                     ||  T
                    \                                    ||  P
                     \                                   vv
                      \    call signaling           +-----------+
                       ---------------------------->|   User    |
                             (e.g., SIP)            | Equipment |
                                                    +-----------+

                         Figure 3: IVR Topology





Melanchuk                    Informational                     [Page 10]

RFC 5567                 Mediactrl Architecture                June 2009


  The variety in complexity of Application Server IVR services requires
  support for different levels of media functions from the Media Server
  as described in the following sub-sections.

5.1.  Basic IVR Services

  For simple basic announcement requests, the MS control channel, as
  depicted in Figure 3 above, is not required.  Simple announcement
  requests may be invoked on the Media Server using the SIP URI
  mechanism defined in [RFC4240].  This interface allows no digit
  detection or collection of user input and no mid-call dialog control.
  However, many applications only require basic media services, and the
  processing burden on the Media Server to support more complex
  interactions with the AS would not be needed in that case.

5.2.  IVR Services with Mid-Call Controls

  For more complex IVR dialogs, which require mid-call interaction and
  control between the Application Server and the Media Server, the MS
  control channel (as shown in Figure 3 above) is used to invoke
  specific media functions on the Media Server.  These functions
  include, but are not limited to, complex announcements with barge-in
  facility, user-input detection and reporting (e.g., DTMF) to an
  Application Server, DTMF and voice-activity controlled recordings,
  etc.  Composite services, such as play-collect and play-record, are
  also addressed by this model.

  Mid-call control also allows Application Servers to subscribe to IVR-
  related events and for the Media Server to notify the AS when these
  events occur.  Examples of such events are announcement completion
  events, record completion events, and reporting of collected DTMF
  digits.

5.3.  Advanced IVR Services

  Although IVR services with mid-call control, as described above,
  provide a comprehensive set of media functions expected from a Media
  Server, the advanced IVR services model allows a higher level of
  abstraction describing application logic, as provided by VoiceXML, to
  be executed on the Media Server.  Invocation of VoiceXML IVR dialogs
  may be via the "Prompt and Collect" mechanism of [RFC4240].
  Additionally, the IVR control protocol can be extended to allow
  VoiceXML requests to also be invoked over the MS control channel.
  VoiceXML IVR services invoked on the Media Server may require an HTTP
  interface (not shown in Figure 3) between the Media Server and one or
  more back-end servers that host or generate VoiceXML documents.  The
  back-end server(s) may or may not be physically separate from the
  Application Server.



Melanchuk                    Informational                     [Page 11]

RFC 5567                 Mediactrl Architecture                June 2009


6.  Media Control for Conferencing Services

  [RFC4353] describes the overall architecture and protocol components
  needed for multipoint conferencing using SIP.  The framework for
  centralized conferencing [RFC5239] extends the framework to include a
  protocol between the user and the conferencing server.  [RFC4353]
  describes the conferencing server decomposition but leaves the
  specifics open.

  This section describes the decomposition and discusses the
  functionality of the decomposed functional units.  The conferencing
  factory and the conference focus are part of the Application Server
  described in this document.

  An Application Server uses SIP Third Party Call Control [RFC3725] to
  establish media sessions from SIP user agents to a Media Server.  The
  same mechanism is used by the Application Server as described in this
  section to add/remove participants to/from a conference, as well as
  to handle the involved media streams set up on a per-user basis.
  Since the XCON framework has been conceived as protocol-agnostic when
  talking about the Call Signaling Protocol used by users to join a
  conference, an XCON-compliant Application Server will have to take
  care of gatewaying non-SIP signaling negotiations.  This is in order
  to set up and make available valid SIP media sessions between itself
  and the Media Server, while still keeping the non-SIP interaction
  with the user in a transparent way.

























Melanchuk                    Informational                     [Page 12]

RFC 5567                 Mediactrl Architecture                June 2009


               +------------+             +------------+
               |            | SIP (2m+1c) |            |
               | Application|-------------|   Media    |
               |   Server   |             |   Server   |
               |  (Focus)   |-------------|  (Mixer)   |
               |            | CtrlChannel |            |
               +------------+             +------------+
                   |      \                    .. .
                   |       \\            RTP...   .
                   |         \\           ..      .
                   |     H.323  \\      ...       .
               SIP |             \\ ...           .RTP
                   |              ..\             .
                   |           ...   \\           .
                   |        ...        \\         .
                   |      ..             \\       .
                   |   ...                 \\     .
                   | ..                      \    .
              +-----------+              +-----------+
              |Participant|              |Participant|
              +-----------+              +-----------+

                      Figure 4: Conference Topology

  To complement the functionality provided by 3PCC and by the XCON
  control protocol, the Application Server makes use of a dedicated
  Media Server control channel in order to set up and manage media
  conferences on the Media Server.  Figure 4 shows the signaling and
  media paths for a two-participant conference.  The three SIP dialogs
  between the AS and MS establish one control session (1c) and two
  media sessions (2m) from the participants (one originally signaled
  using H.323 and then gatewayed into SIP and one signaled directly in
  SIP).

  As a conference focus, the Application Server is responsible for
  setting up and managing a media conference on the Media Servers, in
  order to make sure that all the media streams provided in a
  conference are available to its participants.  This is achieved by
  using the services of one or more mixer entities (as described in RFC
  4353), whose role as part of the Media Server is described in this
  section.  Services required by the Application Server include, but
  are not limited to, means to set up, handle, and destroy a new media
  conference, adding and removing participants from a conference,
  managing media streams in a conference, controlling the layout and
  the mixing configuration for each involved media, allowing per-user
  custom media profiles, and so on.





Melanchuk                    Informational                     [Page 13]

RFC 5567                 Mediactrl Architecture                June 2009


  As a mixer entity, in such a multimedia conferencing scenario, the
  Media Server receives a set of media streams of the same type (after
  transcoding if needed) and then takes care of combining the received
  media in a type-specific manner, redistributing the result to each
  authorized participant.  The way each media stream is combined, as
  well as the media-related policies, is properly configured and
  handled by the Application Server by means of a dedicated MS control
  channel.

  To summarize, the AS needs to be able to manage Media Servers at a
  conference and participant level.

6.1.  Creating a New Conference

  When a new conference is created, as a result of a previous
  conference scheduling or of the first participant dialing in to a
  specified URI, the Application Server must take care of appropriately
  creating a media conference on the Media Server.  It does so by
  sending an explicit request to the Media Server.  This can be by
  means of an MS control channel message.  This request may contain
  detailed information upon the desired settings and policies for the
  conference (e.g., the media to involve, the mixing configuration for
  them, the relevant identifiers, etc.).  The Media Server validates
  such a request and takes care of allocating the needed resources to
  set up the media conference.

  Application Servers may use mechanisms other than sending requests
  over the control channel to establish conferences on a Media Server,
  and then subsequently use the control channel to control the
  conference.  Examples of other mechanisms to create a conference
  include using the Request-URI mechanism of [RFC4240] or the
  procedures defined in [RFC4579].

  Once done, the MS informs the Application Server about the result of
  the request.  Each conference will be referred to by a specific
  identifier, which both the Application Server and the Media Server
  will include in subsequent transactions related to the same
  conference (e.g., to modify the settings of an extant conference).

6.2.  Adding a Participant to a Conference

  As stated before, an Application Server uses SIP 3PCC to establish
  media sessions from SIP user agents to a Media Server.  The URI that
  the AS uses in the INVITE to the MS may be one associated with the
  conference on the MS.  More likely however, the media sessions are
  first established to the Media Server using a URI for the Media
  Server and then subsequently joined to the conference using the MS




Melanchuk                    Informational                     [Page 14]

RFC 5567                 Mediactrl Architecture                June 2009


  Control Protocol.  This allows IVR dialogs to be performed prior to
  joining the conference.

  The AS as a 3PCC correlates the media session negotiation between the
  UA and the MS, in order to appropriately establish all the needed
  media streams based on the conference policies.

6.3.  Media Controls

  The XCON Common Data Model [XCON-DM] currently defines some basic
  media-related controls, which conference-aware participants can take
  advantage of in several ways, e.g., by means of an XCON conference
  control protocol or IVR dialogs.  These controls include the
  possibility to modify the participants' own volume for audio in the
  conference, configure the desired layout for incoming video streams,
  mute/unmute oneself, and pause/unpause one's own video stream.  Such
  controls are exploited by conference-aware participants through the
  use of dedicated conference control protocol requests to the
  Application Server.  The Application Server takes care of validating
  such requests and translates them into the Media Server Control
  Protocol, before forwarding them over the MS Control Channel to the
  MS.  According to the directives provided by the Application Server,
  the Media Server manipulates the involved media streams accordingly.

                 +------------+                  +------------+
                 |            | 'Include audio   |            |
                 | Application|  sent by user X  |   Media    |
                 |   Server   |  in conf Y mix'  |   Server   |
                 |  (Focus)   |----------------->|  (Mixer)   |
                 |            |   (MS CtrlChn)   |            |
                 +------^-----+                  +------------+
                        |                          ..
                        |                       ...
                        | 'Unmute me'        ... RTP
                        |   (XCON)        ...
                        |              ...
                        |           ...
                 +-----------+   ...
                 |Participant|...
                 +-----------+

         Figure 5: Conferencing Example: Unmuting A Participant

  The Media Server may need to inform the AS of events like in-band
  DTMF tones during the conference.






Melanchuk                    Informational                     [Page 15]

RFC 5567                 Mediactrl Architecture                June 2009


6.4.  Floor Control

  The XCON framework introduces "floor control" functionality as an
  enhancement upon [RFC4575].  Floor control is a means to manage joint
  or exclusive access to shared resources in a (multiparty)
  conferencing environment.  Floor control is not a mandatory mechanism
  for a conferencing system implementation, but it provides advanced
  media input control features for conference-aware participants.  Such
  a mechanism allows for coordinated and moderated access to any set of
  resources provided by the conferencing system.  To do so, a so-called
  floor is associated to a set of resources, thus representing for
  participants the right to access and manipulate the related resources
  themselves.  In order to take advantage of the floor control
  functionality, a specific protocol, the Binary Floor Control
  Protocol, has been specified [RFC4582].  [RFC4583] provides a way for
  SIP UAs to set up a BFCP connection towards the Floor Control Server
  and exploit floor control by means of a Connection-Oriented Media
  (COMEDIA) [RFC4145] negotiation.

  In the context of the AS-MS interaction, floor control constitutes a
  further means to control participants' media streams.  A typical
  example is a floor associated with the right to access the shared
  audio channel in a conference.  A participant who is granted such a
  floor is granted by the conferencing system the right to talk, which
  means that its audio frames are included by the MS in the overall
  audio conference mix.  Similarly, when the floor is revoked, the
  participant is muted in the conference, and its audio is excluded
  from the final mix.

  The BFCP defines a Floor Control Server (FCS) and the floor chair.
  It is clear that the floor chair making decisions about floor
  requests is part of the application logic.  This implies that when
  the role of floor chair in a conference is automated, it will
  normally be part of the AS.

  The example makes it clear that there can be a direct or indirect
  interaction between the Floor Control Server and the Media Server, in
  order to correctly bind each floor to its related set of media
  resources.  Besides, a similar interaction is needed between the
  Floor Control Server and the Application Server as well, since the
  latter must be aware of all the associations between floors and
  resources, in order to opportunely orchestrate the related bindings
  with the element responsible for such resources (e.g., the Media
  Server when talking about audio and/or video streams) and the
  operations upon them (e.g., mute/unmute a participant in a
  conference).  For this reason, the Floor Control Server can be co-





Melanchuk                    Informational                     [Page 16]

RFC 5567                 Mediactrl Architecture                June 2009


  located with either the Media Server or the Application Server, as
  long as both elements are allowed to interact with the Floor Control
  Server by means of some kind of protocol.

  In the following text, both the approaches will be described in order
  to better explain the interactions between the involved components in
  both the topologies.

  When the AS and the FCS are co-located, the scenario is quite
  straightforward.  In fact, it can be considered as a variation of the
  case depicted in Figure 5.  The only relevant difference is that in
  this case the action the AS commands on the control channel is
  triggered by a change in the floor control status instead of a
  specific control requested by a participant himself.  The sequence
  diagram in Figure 6 describes the interaction between the involved
  parties in a typical scenario.  It assumes that a BFCP connection
  between the UA and the FCS (which we assume is co-located with the
  AS) has already been negotiated and established, and that the UA has
  been made aware of all the relevant identifiers and floors-resources-
  associations (e.g., by means of [RFC4583]).  It also assumes that the
  AS has previously configured the media mixing on the MS using the MS
  control channel.  Every frame the UA might be sending on the related
  media stream is currently being dropped by the MS, since the UA still
  isn't authorized to use the resource.  For a SIP UA, this state could
  be consequent to a 'sendonly' field associated to the media stream in
  a re-INVITE originated by the MS.  It is worth pointing out that the
  AS has to make sure that no user media control mechanisms, such as
  mentioned in the previous sub-section, can override the floor
  control.






















Melanchuk                    Informational                     [Page 17]

RFC 5567                 Mediactrl Architecture                June 2009


    UA                                   AS                         MS
    (Floor Participant)                 (FCS)
    |                                     |                          |
    |<===================== One-way RTP stream ======================|
    |                                     |                          |
    | FloorRequest(BFCP)                  |                          |
    |------------------------------------>|                          |
    |                                     |                          |
    |   FloorRequestStatus[PENDING](BFCP) |                          |
    |<------------------------------------|                          |
    |                                     |--+ apply                 |
    |                                     |  | policies              |
    |                                     |<-+ to request            |
    |                                     |                          |
    |  FloorRequestStatus[ACCEPTED](BFCP) |                          |
    |<------------------------------------|                          |
    |                                     |                          |
    .                                     .                          .
    .                                     .                          .
    |                                     |                          |
    |   FloorRequestStatus[GRANTED](BFCP) |                          |
    |<------------------------------------|                          |
    |                                     | 'Unmute UA' (CtrlChn)    |
    |                                     |------------------------->|
    |                                     |                          |
    |<==================== Bidirectional RTP stream ================>|
    |                                     |                          |
    .                                     .                          .
    .                                     .                          .

         Figure 6: Conferencing Example: Floor Control Call Flow

  A UA, which also acts as a floor participant, sends a "FloorRequest"
  to the floor control server (FCS, which is co-located with the AS),
  stating his will to be granted the floor associated with the audio
  stream in the conference.  The AS answers the UA with a
  "FloorRequestStatus" message with a PENDING status, meaning that a
  decision on the request has not been made yet.  The AS, according to
  the BFCP policies for this conference, makes a decision on the
  request, i.e., accepting it.  Note that this decision might be
  relayed to another participant in case he has previously been
  assigned as chair of the floor.  Assuming the request has been
  accepted, the AS notifies the UA about the decision with a new
  "FloorRequestStatus", this time with an ACCEPTED status in it.  The
  ACCEPTED status of course only means that the request has been
  accepted, which doesn't mean the floor has been granted yet.  Once
  the queue management in the FCS, according to the specified
  algorithms for scheduling, states that the floor request previously



Melanchuk                    Informational                     [Page 18]

RFC 5567                 Mediactrl Architecture                June 2009


  made by the UA can be granted, the AS sends a new
  "FloorRequestStatus" to the UA with a GRANTED status, and takes care
  of unmuting the participant in the conference by sending a directive
  to the MS through the control channel.  Once the UA receives the
  notification stating his request has been granted, he can start
  sending its media, aware of the fact that now his media stream won't
  be dropped by the MS.  In case the session has been previously
  updated with a 'sendonly' associated to the media stream, the MS must
  originate a further re-INVITE stating that the media stream flow is
  now bidirectional ('sendrecv').

  As mentioned before, this scenario envisages an automated floor chair
  role, where it's the AS, according to some policies, which makes
  decisions on floor requests.  The case of a chair role performed by a
  real person is exactly the same, with the difference that the
  incoming request is not directly handled by the AS according to its
  policies, but it is instead forwarded to the floor control
  participant that the chair UA is exploiting.  The decision on the
  request is then communicated by the chair UA to the AS-FCS by means
  of a 'ChairAction' message.

  The rest of this section will instead explore the other scenario,
  which assumes that the interaction between AS-FCS happens through the
  MS control channel.  This scenario is compliant with the H.248.19
  document related to conferencing in 3GPP.  The following sequence
  diagram describes the interaction between the involved parties in the
  same use-case scenario that has been explored for the previous
  topology: consequently, the diagram makes exactly the same
  assumptions that have been made for the previously described
  scenario.  This means that the scenario again assumes that a BFCP
  connection between the UA and the FCS has already been negotiated and
  established, and that the UA has been made aware of all the relevant
  identifiers and floors-resources-associations.  It also assumes that
  the AS has previously configured the media mixing on the MS using the
  MS control channel.  This time it includes identifying the BFCP-
  moderated resources, establishing basic policies and instructions
  about chair identifiers for each resource, and subscribing to events
  of interest, because the FCS is not co-located with the AS anymore.
  Additionally, a BFCP session has been established between the AS
  (which in this scenario acts as a floor chair) and the FCS (MS).
  Every frame the UA might be sending on the related media stream is
  currently being dropped by the MS, since the UA still isn't
  authorized to use the resource.  For a SIP UA, this state could be
  consequent to a 'sendonly' field associated to the media stream in a
  re-INVITE originated by the MS.  Again, it is worth pointing out that
  the AS has to make sure that no user media control mechanisms, such
  as mentioned in the previous sub-section, can override the floor
  control.



Melanchuk                    Informational                     [Page 19]

RFC 5567                 Mediactrl Architecture                June 2009


    UA                          AS                                  MS
    (Floor Participant)   (Floor Chair)                          (FCS)
    |                           |                                    |
    |<===================== One-way RTP stream ======================|
    |                           |                                    |
    | FloorRequest(BFCP)        |                                    |
    |--------------------------------------------------------------->|
    |                           |                                    |
    |                           |  FloorRequestStatus[PENDING](BFCP) |
    |<---------------------------------------------------------------|
    |                           |  FloorRequestStatus[PENDING](BFCP) |
    |                           |<-----------------------------------|
    |                           |                                    |
    |                           | ChairAction[ACCEPTED] (BFCP)       |
    |                           |----------------------------------->|
    |                           |       ChairActionAck (BFCP)        |
    |                           |<-----------------------------------|
    |                           |                                    |
    |                           | FloorRequestStatus[ACCEPTED](BFCP) |
    |<---------------------------------------------------------------|
    |                           |                                    |
    .                           .                                    .
    .                           .                                    .
    |                           |                                    |
    |                           |  FloorRequestStatus[GRANTED](BFCP) |
    |<---------------------------------------------------------------|
    |                           | 'Floor has been granted' (CtrlChn) |
    |                           |<-----------------------------------|
    |                           |                                    |
    |<==================== Bidirectional RTP stream ================>|
    |                           |                                    |
    .                           .                                    .
    .                           .                                    .

         Figure 7: Conferencing Example: Floor Control Call Flow

  A UA, which also acts as a floor participant, sends a "FloorRequest"
  to the floor control server (FCS, which is co-located with the MS),
  stating his will to be granted the floor associated with the audio
  stream in the conference.  The MS answers the UA with a
  "FloorRequestStatus" message with a PENDING status, meaning that a
  decision on the request has not been made yet.  It then notifies the
  AS, which in this example handles the floor chair role, about the new
  request by forwarding there the received request.  The AS, according
  to the BFCP policies for this conference, makes a decision on the
  request, i.e., accepting it.  It informs the MS about its decision
  through a BFCP "ChairAction" message.  The MS then acknowledges the
  'ChairAction' message and then notifies the UA about the decision



Melanchuk                    Informational                     [Page 20]

RFC 5567                 Mediactrl Architecture                June 2009


  with a new "FloorRequestStatus", this time with an ACCEPTED status in
  it.  The ACCEPTED status of course only means that the request has
  been accepted, which doesn't mean the floor has been granted yet.
  Once the queue management in the MS, according to the specified
  algorithms for scheduling, states that the floor request previously
  made by the UA can be granted, the MS sends a new
  "FloorRequestStatus" to the UA with a GRANTED status, and takes care
  of unmuting the participant in the conference.  Once the UA receives
  the notification stating his request has been granted, he can start
  sending its media, aware of the fact that now his media stream won't
  be dropped by the MS.  In case the session has been previously
  updated with a 'sendonly' associated to the media stream, the MS must
  originate a further re-INVITE stating that the media stream flow is
  now bidirectional ('sendrecv').

  This scenario envisages an automated floor chair role, where it's the
  AS, according to some policies, which makes decisions on floor
  requests.  Again, the case of a chair role performed by a real person
  is exactly the same, with the difference that the incoming request is
  not forwarded to the AS but to the floor control participant that the
  chair UA is exploiting.  The decision on the request is communicated
  by means of a 'ChairAction' message in the same way.

  Another typical scenario is a BFCP-moderated conference with no chair
  to manage floor requests.  In such a scenario, the MS has to take
  care of incoming requests according to some predefined policies,
  e.g., always accepting new requests.  In this case, no decisions are
  required by external entities, since all are instantly decided by
  means of policies in the MS.

  As stated before, the case of the FCS co-located with the AS is much
  simpler to understand and exploit.  When the AS has full control upon
  the FCS, including its queue management, the AS directly instructs
  the MS according to the floor status changes, e.g., by instructing
  the MS through the control channel to unmute a participant who has
  been granted the floor associated to the audio media stream.

7.  Security Considerations

  This document describes the architectural framework to be used for
  Media Server control.  Its focus is the interactions between
  Application Servers and Media Servers.  User agents interact with
  Application Servers by means of signaling protocols such as SIP.
  These interactions are beyond the scope of this document.
  Application Servers are responsible for utilizing the security
  mechanisms of their signaling protocols, combined with application-
  specific policy, to ensure they grant service only to authorized
  users.  Media interactions between user agents and Media Servers are



Melanchuk                    Informational                     [Page 21]

RFC 5567                 Mediactrl Architecture                June 2009


  also outside the scope of this document.  Those interactions are at
  the behest of Application Servers, which must ensure that appropriate
  security mechanisms are used.  For example, if the MS is acting as
  the FCS, then the BFCP connection between the user agent and the MS
  is established to the MS by the AS using SIP and the SDP mechanisms
  described in [RFC4583].  BFCP [RFC4582] strongly imposes the use of
  TLS for BFCP.

  Media Servers are valuable network resources and need to be protected
  against unauthorized access.  Application Servers use SIP and related
  standards both to establish control channels to Media Servers and to
  establish media sessions, including BFCP sessions, between an MS and
  end users.  Media servers use the security mechanisms of SIP to
  authenticate requests from Application servers and to ensure the
  integrity of those requests.  Leveraging the security mechanisms of
  SIP ensures that only authorized Application Servers are allowed to
  establish sessions to an MS and to access MS resources through those
  sessions.

  Control channels between an AS and MS carry the MS control protocol,
  which affects both the service seen by end users and the resources
  used on a Media Server.  TLS [RFC5246] must be implemented as the
  transport-level security mechanism for control channels to guarantee
  the integrity of MS control interactions.

  The resources of an MS can be shared by more than one AS.  Media
  Servers must prevent one AS from accessing and manipulating the
  resources that have been assigned to another AS.  This may be
  achieved by an MS associating ownership of a resource to the AS that
  originally allocates it, and then insuring that future requests
  involving that resource correlate to the AS that owns and is
  responsible for it.

8.  Acknowledgments

  The authors would like to thank Spencer Dawkins for detailed reviews
  and comments, Gary Munson for suggestions, and Xiao Wang for review
  and feedback.

9.  Contributors

  This document is a product of the Media Control Architecture Design
  Team.  In addition to the editor, the following individuals
  constituted the design team and made substantial textual
  contributions to this document:






Melanchuk                    Informational                     [Page 22]

RFC 5567                 Mediactrl Architecture                June 2009


     Chris Boulton: [email protected]

     Martin Dolly: [email protected]

     Roni Even: [email protected]

     Lorenzo Miniero: [email protected]

     Adnan Saleem: [email protected]

10.  Informative References

  [RFC0793]  Postel, J., "Transmission Control Protocol", STD 7,
             RFC 793, September 1981.

  [RFC2976]  Donovan, S., "The SIP INFO Method", RFC 2976,
             October 2000.

  [RFC3261]  Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston,
             A., Peterson, J., Sparks, R., Handley, M., and E.
             Schooler, "SIP: Session Initiation Protocol", RFC 3261,
             June 2002.

  [RFC3263]  Rosenberg, J. and H. Schulzrinne, "Session Initiation
             Protocol (SIP): Locating SIP Servers", RFC 3263,
             June 2002.

  [RFC3264]  Rosenberg, J. and H. Schulzrinne, "An Offer/Answer Model
             with Session Description Protocol (SDP)", RFC 3264,
             June 2002.

  [RFC3550]  Schulzrinne, H., Casner, S., Frederick, R., and V.
             Jacobson, "RTP: A Transport Protocol for Real-Time
             Applications", STD 64, RFC 3550, July 2003.

  [RFC3725]  Rosenberg, J., Peterson, J., Schulzrinne, H., and G.
             Camarillo, "Best Current Practices for Third Party Call
             Control (3pcc) in the Session Initiation Protocol (SIP)",
             BCP 85, RFC 3725, April 2004.

  [RFC3840]  Rosenberg, J., Schulzrinne, H., and P. Kyzivat,
             "Indicating User Agent Capabilities in the Session
             Initiation Protocol (SIP)", RFC 3840, August 2004.

  [RFC4145]  Yon, D. and G. Camarillo, "TCP-Based Media Transport in
             the Session Description Protocol (SDP)", RFC 4145,
             September 2005.




Melanchuk                    Informational                     [Page 23]

RFC 5567                 Mediactrl Architecture                June 2009


  [RFC4240]  Burger, E., Van Dyke, J., and A. Spitzer, "Basic Network
             Media Services with SIP", RFC 4240, December 2005.

  [RFC4353]  Rosenberg, J., "A Framework for Conferencing with the
             Session Initiation Protocol (SIP)", RFC 4353,
             February 2006.

  [RFC4474]  Peterson, J. and C. Jennings, "Enhancements for
             Authenticated Identity Management in the Session
             Initiation Protocol (SIP)", RFC 4474, August 2006.

  [RFC4566]  Handley, M., Jacobson, V., and C. Perkins, "SDP: Session
             Description Protocol", RFC 4566, July 2006.

  [RFC4575]  Rosenberg, J., Schulzrinne, H., and O. Levin, "A Session
             Initiation Protocol (SIP) Event Package for Conference
             State", RFC 4575, August 2006.

  [RFC4579]  Johnston, A. and O. Levin, "Session Initiation Protocol
             (SIP) Call Control - Conferencing for User Agents",
             BCP 119, RFC 4579, August 2006.

  [RFC4582]  Camarillo, G., Ott, J., and K. Drage, "The Binary Floor
             Control Protocol (BFCP)", RFC 4582, November 2006.

  [RFC4583]  Camarillo, G., "Session Description Protocol (SDP) Format
             for Binary Floor Control Protocol (BFCP) Streams",
             RFC 4583, November 2006.

  [RFC4585]  Ott, J., Wenger, S., Sato, N., Burmeister, C., and J. Rey,
             "Extended RTP Profile for Real-time Transport Control
             Protocol (RTCP)-Based Feedback (RTP/AVPF)", RFC 4585,
             July 2006.

  [RFC4960]  Stewart, R., "Stream Control Transmission Protocol",
             RFC 4960, September 2007.

  [RFC5167]  Dolly, M. and R. Even, "Media Server Control Protocol
             Requirements", RFC 5167, March 2008.

  [RFC5239]  Barnes, M., Boulton, C., and O. Levin, "A Framework for
             Centralized Conferencing", RFC 5239, June 2008.

  [RFC5246]  Dierks, T. and E. Rescorla, "The Transport Layer Security
             (TLS) Protocol Version 1.2", RFC 5246, August 2008.






Melanchuk                    Informational                     [Page 24]

RFC 5567                 Mediactrl Architecture                June 2009


  [SIP-CTRL-FW]
             Boulton, C., Melanchuk, T., and S. McGlashan, "Media
             Control Channel Framework", Work in Progress,
             February 2009.

  [W3C.REC-voicexml20-20040316]
             Carter, J., Tryphonas, S., Danielsen, P., Burnett, D.,
             Rehor, K., McGlashan, S., Ferrans, J., Porter, B., Lucas,
             B., and A. Hunt, "Voice Extensible Markup Language
             (VoiceXML) Version 2.0", World Wide Web Consortium
             Recommendation REC-voicexml20-20040316, March 2004,
             <http://www.w3.org/TR/2004/REC-voicexml20-20040316>.

  [W3C.REC-xml-20060816]
             Sperberg-McQueen, C., Paoli, J., Bray, T., Maler, E., and
             F. Yergeau, "Extensible Markup Language (XML) 1.0 (Fourth
             Edition)", World Wide Web Consortium Recommendation REC-
             xml-20060816, August 2006,
             <http://www.w3.org/TR/2006/REC-xml-20060816>.

  [XCON-DM]  Novo, O., Camarillo, G., Morgan, D., and J. Urpalainen,
             "Conference Information Data Model for Centralized
             Conferencing (XCON)", Work in Progress, April 2009.

Author's Address

  Tim Melanchuk (editor)
  Rain Willow Communications

  EMail: [email protected]





















Melanchuk                    Informational                     [Page 25]