Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a private domain name system (DNS) receives a DNS lookup request from a computing system of a plurality of computing systems associated with a private communication group, and forwards the DNS lookup request to a public DNS. The private DNS further receives a public address associated with the DNS lookup request from the public DNS, translates the public address to a private address, and transfers the private address to the requesting computing system.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request from an application on the computing system to transfer data to a second application on a second computing system. In response to the communication request, the communication service identifies a communication group of a plurality of communication groups associated with the application and the second application. Once the communication group is identified, the communication service identifies a communication quality of service based on the identified communication group, and transfers the data associated with the communication request to the second computing system in accordance with the communication quality of service.

Abstract: Described herein are systems, methods, and software to enhance gateway security for multiple communication groups. In one implementation, a method of operating a gateway service includes identifying a data packet received from a first computing system, wherein the data packet comprises a first destination port value. The method further includes, identifying a group identifier within the data packet, wherein the group identifier associated with a communication group of the plurality of communication groups, translating the first destination port value to a second destination port value based on the group identifier, and forwarding the data packet with the translated second destination port value.

Abstract: Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a communication service identifies a communication request for a first application on a first computing system to transfer data to a second application on a second computing system. In response to the request, the communication service generates a packet, wherein the packet includes an encrypted portion for the data and private addressing associated with the first and second applications, and an unencrypted portion for group identifier information and public addressing information. Once the packet is generated, the packet is transferred to the second computing system.

Abstract: The present disclosure envisages establishing a virtual overlay network between the source computer and the destination computer (in addition to a typical, unsecured, public computer network already connecting the source computer and the destination computer), and designating the source computer and destination computer to be identified on the virtual overlay network only by the corresponding source private IP address and destination private IP address. The present disclosure envisages an intermediary server for creating and subsequently managing the virtual overlay network. The intermediary server renders the virtual overlay network accessible only to the source computer and the destination computer to communicate with one another and to exchange data packets using the source private IP address and destination private address and the corresponding private ports, while ensuring that the virtual overlay network remains inaccessible to any other computer on the underlying public computer network.

Abstract: A method and apparatus for routing billing request and response messages to a billing server for serving calls by a particular subscriber. When the subscriber originates a call, an original billing request message is transmitted to an agent server. The agent server determines which billing server serves that subscriber and forwards the billing message to the selected billing server. The billing server responds to the request message with billing request data. Advantageously, this arrangement minimizes the problems of updating a large number of subscriber identification/billing server identification databases.

Abstract: This invention relates to a method and apparatus for charging and billing of Circuit Switch, Packet Switch, and IP Multimedia Subsystems in third generation telecommunication systems. The charges for a call are computed by a rating engine, a software system comprising data tables and a program for calculating charges from the parameters of the call, such as the calling and called numbers, the length of the call, and special charge items such as priority service. For calls whose billing cannot be deferred, referred to as on-line billing calls, the rating engine is accessed immediately. For calls whose billing can be deferred, referred to as off-line billing calls, the rating engine performs its function only when the rating engine is not busy rating on-line billing calls, for example, during periods outside the busy hour. Advantageously, only a single rating engine is required, and the capacity of that single rating engine is determined only by the busy-hour volume of on-line billing calls.

Abstract: This invention relates to a method and apparatus for charging and billing of Circuit Switch, Packet Switch, and IP Multimedia Subsystems in third generation telecommunication systems. The charges for a call are computed by a rating engine, a software system comprising data tables and a program for calculating charges from the parameters of the call, such as the calling and called numbers, the length of the call, and special charge items such as priority service. For calls whose billing cannot be deferred, referred to as on-line billing calls, the rating engine is accessed immediately. For calls whose billing can be deferred, referred to as off-line billing calls, the rating engine performs its function only when the rating engine is not busy rating on-line billing calls, for example, during periods outside the busy hour. Advantageously, only a single rating engine is required, and the capacity of that single rating engine is determined only by the busy-hour volume of on-line billing calls.

Abstract: A method and apparatus for routing billing request and response messages to a billing server for serving calls by a particular subscriber. When the subscriber originates a call, an original billing request message is transmitted to an agent server. The agent server determines which billing server serves that subscriber and forwards the billing message to the selected billing server. The billing server responds to the request message with billing request data. Advantageously, this arrangement minimizes the problems of updating a large number of subscriber identification/billing server identification databases.

Abstract: A method and apparatus for providing wireless intelligent network services to mobile stations currently being served by a mobile switching center (S-MSC) that is not wireless intelligent network capable. The call is routed through a wireless intelligent network capable MSC (O-MSC). When the O-MSC receives the call, it requests instructions from a service control point (SCP) which provides a list of triggers for call states requiring further SCP instructions. Advantageously, this arrangement avoids the use of a double connection, using a loop-around trunk, in the O-MSC, as is required in the prior art.

Abstract: A method and apparatus for providing wireless intelligent network services to mobile stations currently being served by a mobile switching center (S-MSC) that is not wireless intelligent network capable. The call is routed through a wireless intelligent network capable MSC (O-MSC). When the O-MSC receives the call, it requests instructions from a service control point (SCP) which provides a list of triggers for call states requiring further SCP instructions. Advantageously, this arrangement avoids the use of a double connection, using a loop-around trunk, in the O-MSC, as is required in the prior art.