Abstract: A method and system for facilitating a controlled wireless communication relationship between a first device and a second device is provided. The wireless communication relationship is established at least in part via a portion of licensed radio spectrum. A remote validation server is contacted to obtain a validated authorization to use the portion of licensed radio spectrum for radio communication. Proof of the authorization between the first device and the second device is communicated. The first device and the second device subsequently enter into an authorized wireless communication relationship.

Abstract: Methods, apparatus and articles of manufacture (e.g., physical storage media) to perform centralized route determination in communication networks (e.g., such as software defined networks) are disclosed. Example methods for route determination disclosed herein include accessing, with a controller of a software defined network, a first set of constraints specifying whether route splitting is permissible for respective ones of a set of flows in the software defined network. Such disclosed example methods also include accessing, with the controller, a second set of constraints specifying respective bandwidth demands for the respective ones of the set of flows in the software defined network. Such disclosed example methods further include determining, with a linear programming model implemented by the controller, a set of routes based on the first and second sets of constraints, wherein the set of routes is to route the set of flows in the software defined network.

Abstract: Described in an example embodiment herein is a Multiple Application Container. Various embodiments of the Multiple Application Container may include, but are not limited to: (1) managed intranet access via a dedicated Virtual Private Network (VPN) tunnel shared amongst applications within the container, (2) managed file/data encryption, (3) native look and feel applications for the base Operating System (OS), (4) isolation from any non-OS based services on the device, and/or (5) Mobile Device Management (MDM) based capabilities, such as policy enforcement.

Abstract: An integrated, multi-service network client for cellular mobile devices is described. The multi-service network client can be deployed as a single software package on cellular mobile network devices to provide integrated services including secure enterprise virtual private network (VPN) connectivity, acceleration, security management including monitored and enforced endpoint compliance, and collaboration services. Once installed on the cellular mobile device, the multi-service client integrates with an operating system of the device to provide a single entry point for user authentication for secure enterprise connectivity, endpoint security services including endpoint compliance with respect to anti-virus and spyware software, and comprehensive integrity checks.

Abstract: There is provided a load distribution function that enables an application of a user to be freely allocated to a machine even if an address of a terminal or the application used by the user is duplicated between VPNs for each user. An access detector of a machine allocation device detects a start packet from received communication packets, and determines the type of the start packet and the type of the application used by the terminal. A machine allocation manager determines a machine on which the determined application operates, and operates the machine. A network manager configures a user virtual network on a second virtual network between the determined machine and the machine allocation device.

Abstract: A system and method can support a virtual private network based on a public telecommunication infrastructure. The virtual private network can receive a request from a caller for place a call to a callee via the virtual private network. The virtual private network can obtain at least one of presence status and location information of the callee. Then, the virtual private network can allow the caller to make a decision on whether or not to proceed with the call. The public telecommunication infrastructure can be based on a legacy network and an Internet Protocol Multimedia Subsystem (IMS) network, and the virtual private network can obtain information from both the legacy network and the IMS network via a service broker.

Abstract: Systems and methods for providing a user with virtual computing services are disclosed. In one embodiment, a method for providing virtual computing services to a specific user, may comprising: detecting a request generated from a user device of the specific user to access data; in which the data is not accessible by applications installed on the user device; identifying a file type of the data; and providing the specific user access to a remote application or a virtual desktop, in which the remote application or the virtual desktop is configured to allow the specific user to open, execute, edit, and/or access the data.

Abstract: A virtual local area network switching device and an associated computer system and method are provided to permit operation in accordance with a plurality of different security classifications. The computer system includes a computer, a virtual local area network switching device and a plurality of peripheral units having different security classifications. The virtual local area network switching device may include a computing device that includes the plurality of ports and that is configured to control communications with the peripheral units in accordance with the respective security classifications. The virtual local area network switching device may also include a memory device configured to store information associating the plurality of the ports with the security classification of the respective peripheral unit. The memory device may also store information associating each port with both a logical address and a physical address of the respective peripheral units.

Abstract: A method is disclosed that provides the sharing of a station-mapping description with a first private-branch exchange, where the description has been initialized and maintained at a second private-branch exchange. Such a description describes a logical association between a station extension of an enterprise deskset and a telephone number of an off-premises terminal, such as a cell phone. As a result of the sharing across private-branch exchanges, an incoming call from a second employee's cell phone can be recognized, by a first employee being called, as coming from the calling second employee. This is because the incoming call is identified with the telephone extension of the calling employee's deskset terminal in spite of the call being placed from the cell phone, or other telephone number at large. This is particularly important where a large company engineers its enterprise's telecommunications system across multiple private-branch exchanges.

Abstract: A method and apparatus for reducing the cost of long distance phone calls is disclosed. Accordingly, an originating phone network is operatively connected to a first intermediate point, and a receiving phone network is operatively connected to a second intermediate point. Each intermediate point is operatively connected to communicate via a data network. Users on the originating and destination phone networks may communicate based on virtual numbers. The virtual number is preferably within the local calling area of the originating phone network. The first and second intermediate points route calls to any geographic location, regardless of distance, over the data network based on the virtual number. This provides the advantage of allowing a user on the originating phone network to access a user at a distant location for a price that is substantially similar to the price of a local call.

Abstract: The SSL VPN session failover solution of the appliance and/or client agent described herein provides an environment for handling IP address assignment and end point re-authorization upon failover. The appliances may be deployed to provide a session failover environment in which a second appliance is a backup to a first appliance when a failover condition is detected, such as failure in operation of the first appliance. The backup appliance takes over responsibility for SSL VPN sessions provided by the first appliance. In the failover environment, the first appliance propagates SSL VPN session information including user IP address assignment and end point authorization information to the backup appliance. The backup appliance maintains this information. Upon detection of failover of the first appliance, the backup appliance activates the transferred SSL VPN session and maintains the user assigned IP addresses. The backup appliance may also re-authorize the client for the transferred SSL VPN session.

Abstract: An integrated, multi-service network client for cellular mobile devices is described. The multi-service network client can be deployed as a single software package on cellular mobile network devices to provide integrated services including secure enterprise virtual private network (VPN) connectivity, acceleration, security management including monitored and enforced endpoint compliance, and collaboration services. Once installed on the cellular mobile device, the multi-service client integrates with an operating system of the device to provide a single entry point for user authentication for secure enterprise connectivity, endpoint security services including endpoint compliance with respect to anti-virus and spyware software, and comprehensive integrity checks.

Abstract: The presently disclosed architecture enables a service provider to support public voice VPN services over an IP VPN network. The architecture utilizes a customer VPN, a designated gateway for the customer VPN, an IP VPN transport network, and a Call Control Element/router Complex which uses IP technology to map between the IP VPN and the voice VPN. With such an arrangement, the customer VPN is extended to the gatekeeper of the Call Control Element/router Complex, thereby enabling the provision of voice VPN services over an IP network.

Abstract: A method and system include routing telephone calls from multiple private networks via public lines and trunks in a public switched telephone network (PSTN) to a host switch, at which the connections would begin to run parallel. The host switch routes the telephone calls via a private trunk group to a private facility, such as an electronic tandem network (ETN) node or an asynchronous transfer mode (ATM) switch. If the private trunk group is full or unavailable, the host switch routes the telephone calls over alternate private or public trunk groups and selected carriers.

Abstract: A mobile or other device connects to a server via a publicly accessible network such as the Internet. After installation upon the device, a virtual private network (VPN) client connects to the server and downloads a VPN profile. In one embodiment the device creates public/private key pairs and requests enrollment of a digital certificate. In another embodiment a digital certificate and public/private key pairs are provided. The device also receives a digital certificate from the server and verifies the server certificate by requesting the user to supply a portion of a fingerprint for the certificate. The invention further includes an automatic content updating (ACU) client that downloads a user profile for the VPN, requests certificate enrollment, and updates the VPN client and other applications when new content is available. A security service manager (SSM) server includes, or is in communication with, a Web server, multiple databases, an enrollment gateway and an internal certification authority (CA).

Abstract: A method of operating a virtual private network includes the steps of: (a) dialing a custom number; (b) receiving the custom number at a switch (20) of a first carrier; (c) routing the call to a switch (18) of a second carrier based on having received the custom number; and (d) when the call to the switch (18) of the second carrier includes a plain old telephone number translation of the customer number, routing the call over the second carrier to a service switching point (26) of a third carrier.

Abstract: A method, computer-program product, and user interface are provided for verifying correct translations data network elements. Translation-verification commands are executed in batch to receive a group of data sets, which are stored in a capture file. A benchmark file is provided that contains correct translations data. Both files, or derivatives thereof, are synchronizing and automatically comparing to each other to identify any data mismatches. Entities associated with the network elements of interest are automatically notified of the mismatches as well as details related to the mismatches. Erroneous routing information is automatically identified in the network elements. Persons are notified automatically of errors or network anomalies.

Abstract: A method and system include routing telephone calls from multiple private networks via public lines and trunks in a public switched telephone network (PSTN) to a host switch, at which the connections would begin to run parallel. The host switch routes the telephone calls via a private trunk group to a private facility, such as an electronic tandem network (ETN) node or an asynchronous transfer mode (ATM) switch. If the private trunk group is full or unavailable, the host switch routes the telephone calls over alternate private or public trunk groups and selected carriers.

Abstract: An enterprise network opens a virtual private network tunnel with a data center by sending the data center a data request that includes a uniform resource identifier. The data center responds by sending the enterprise network ongoing reply data. A user wishing to access network data of the enterprise network transmits an access request to the data center. The data center authenticates the identity of the user and transmits the access request to the enterprise network. The enterprise network responds to the access request by performing acts upon the network data and/or by returning network data to the data center such that the user is enabled access to the network data. In an alternative embodiment, the data center caches a copy of network data to be retrieved by a remote user when the same network data is disconnected from the enterprise network.

Abstract: Call management techniques are implemented using a call routing engine. In the invention the routing engine centrally controls a public network to facilitate implementation of post-routing call processing of a call. The call routing engine provides switching which makes the public network appear as under the control of a virtual switch. Control of the public network by the call routing engine appearing as a virtual switch may implement post-routing call processing of telephone calls.

Abstract: The invention relates to a method for transmitting information such as fax, voice or data to a destination information device via a dynamic transmission network. The dynamic transmission network includes one or more transmission control servers (TCSs) and one or more transmission client nodes (TCNs). The TCS is always connected to the computer network, while the TCN is dynamically connected with the computer network. When connected to the computer network, the TCN checks its system status and then registers to the TCS. After getting the information from the TCN, the TCS stores said information into a dynamic transmission route table, wherein the information includes the country code, area code, Client ID, IP address, etc. of the TCN. Once any user requests the TCS to send a information to a destination site, the TCS will locate an available TCN physically nearest to the same country code and area code as those of the destination site, and then transmits the information to the TCN through the computer network.

Abstract: A communication system includes a tenant with multiple physical locations that include a number of packet enabled telecommunications devices managed by one or more call managers. To generate a route plan for use by a call manager in managing calls from these devices, a route plan wizard determines routing options, location information for the tenant, and gateway information for gateways available to the tenant and then automatically generates a route plan for use in routing telephone calls originating from the managed packet enabled telecommunications devices based on this information.

Abstract: A virtual private network includes an internet protocol (IP) network and a public switched telephone network (PSTN). An enterprise gateway is operably connected to the IP network. The enterprise gateway is operably connected to a switch of the PSTN through a direct access line (DAL). The set-up signaling for virtual private network calls and the calls themselves are transported across the internet protocol network and the public switched telephone network through the direct access line.

Abstract: Method for operating a private telecommunications network which is connected via at least one multichannel private branch exchange or a comparable device, in particular a call server or a voice-over IP Gateway, with a plurality of real call numbers to a public telecommunications network, the private branch exchange or comparable device for a multiplicity of real call numbers being assigned a common virtual call number for access from the public network to which a call via a free real call number to the internal terminal of the direct dialing number is switched through.

Abstract: A virtual private line connection method allowing efficient and economical virtual private line service in the public ISDN is disclosed. When a SS7 (common channel signalling system No. 7) message is generated in response to a call originated by a terminal accommodated in a PBX, the SS7 message is encapsulated in an ISDN message and the ISDN message is sent to the destination PBX on a D channel. When the destination PBX receives the ISDN message, the SS7 message is read from the received ISDN message to establish the virtual private line between the PBXs.

Abstract: Call management techniques implemented using a call routing engine are disclosed. In the techniques of the present invention, a public network is centrally controlled so as to facilitate implementation of call processing features, and local switching resources and the public network may be thought of as a single virtual switch for purposes of implementing such features.

Abstract: A system for emulating a local are network on top of a global communication network (4), the system comprising clients units (LEC) and a server (LES) which are connected to said global network (4), and a broadcast functionality (BUS) for relaying messages to all clients in the emulated local area network. The system is characterized in that said broadcast functionality is distributed and implemented in more than one network unit node in the emulated local area network. The global network is preferably an IP network, such as the Internet, and act as a backbone for the emulated local area network.

Abstract: A telephone user sets up a “personalized” menu identifying a set of information options from which he or she desires to select when placed on-hold in a telephone system. The user's personal preferences are then saved. When the party later makes a call to a telephone system or is called, and then is placed on-hold, the party's telephone service provider or local equipment accesses the user's personalized menu and offers the one or more information options as defined in the menu. In an illustrative embodiment, the personalized menu options are voiced over the telephone line and the user then makes selections using keypad (i.e. DTMF signaling) or voice input. A response may be interrupted to make another menu selection, or to repeat the current response. If the response being played has not completed when the other party returns, that response is suspended and may be completed when the user is placed back on hold or the call is completed.

Abstract: A network server for the provision of services in a telephone network has a database for storing data according to subscriber-specific hierarchical data structures. The network server allows subscribers of the telephone network, via a terminal, to specify a respective subscriber-specific hierarchical data structure in the database. The network server stores data in the database received by a terminal of a subscriber, in accordance with the respective subscriber-specific hierarchical data structure of this subscriber. On a data request by a terminal of the telephone network, the network server determines the subscriber of the terminal, allows the terminal to read out the data in the database stored in accordance with the subscriber-specific hierarchical data structure of the detected subscriber.

Abstract: A system and method provide a call service features in response to call control information conveyed by a monitored bearer channel in a telecommunications network. A bearer channel monitor captures the call control information and relays the information to a call control application server. The call control application server analyzes the call control information, and provides call control instructions to a call control node that operates in the telecommunications network to effect the call service. The call control node serves as one or more virtual switching points in the network to directly control call routing without disconnecting a called or calling party, unless required as part of a service feature. Control from a center of the telecommunications network provides rapid and efficient call control without use of edge devices or duplication of bearer channels in the network.

Abstract: The invention concerns a method and a system for implementing a centralized intermediary service in a telecommunication system comprising a telephone network, which comprises one or more telephone exchanges; a private numbering plan provided in the telephone network; a telephone exchange belonging to the telephone network and implementing the private numbering plan; and an intermediary. In the method, one or more virtual private networks are established in the telecommunication system and the private numbering plan established is used for internal calls within the virtual private network. Further, the intermediary is connected to the telephone exchange; and the signalling of the virtual private network is used for the production of intermediary services. The signalling used for the production of intermediary services is e.g. QSIG signalling.

Abstract: A communication system includes a tenant with multiple physical locations that include a number of packet enabled telecommunications devices managed by one or more call managers. To generate a route plan for use by a call manager in managing calls from these devices, a route plan wizard determines routing options, location information for the tenant, and gateway information for gateways available to the tenant and then automatically generates a route plan for use in routing telephone calls originating from the managed packet enabled telecommunications devices based on this information.

Abstract: A Multicast-Enabled Address Resolution Protocol (ME-ARP) is disclosed. This ME-ARP allows the building of independent IP based Virtual Private LAN segments (VPLS) over a multicast enabled IP backbone using stateless tunnels and optimal VPLS traffic forwarding. Each VPLS has an associated IP subnet which is completely independent from other VPLS or the underlying IP backbone itself. Each Customer Premises Equipment (CPE) device needs only to be configured with a VPLS identifier and its serving IP subnet per VPLS designated interface.

Abstract: A method and a system for signaling used in a call setup in a telecommunication system comprising a telephone network, a Centrex exchange belonging to the telephone network and implementing a private number plan, a first telecommunication terminal, which is connected via a first Centrex subscription to the Central exchange, and a second telecommunication terminal, which is connected to the telephone network with a number comprised in the private numbering plan. In the method, a connection is set up between the first and second telecommunication terminals by using the number comprised in the private numbering plan. In the invention, the same APP parameter is used in the Centrex exchange, both for communication with another Centrex exchange and for communication with a VPN exchange, as is used by a OSIG VPN network in VPN ISUP signaling.

Abstract: A method for setting a number plan and providing a service for an advanced intelligent network (AIN), includes the steps of searching a first trigger which corresponds to a detected AIN call, judging whether the first trigger is a second trigger for a subscriber group, searching subscriber group information of the first trigger when the first trigger is the second rigger and detecting an identification number of a PNP(Private Numbering Plan), searching a PNP corresponding to the identification number from a NTT(Number Translation Table) of the first trigger, and gathering an additional number based on number gathering information of the searched PNP and performing a number translation based on corresponding PNP, thereby setting a certain number plan by the subscriber group and providing a subscriber-based advanced intelligent network service.

Abstract: A method and system include routing telephone calls from multiple private networks via public lines and trunks in a public switched telephone network (PSTN) to a host switch, at which the connections would begin to run parallel. The host switch routes the telephone calls via a private trunk group to a private facility, such as an electronic tandem network (ETN) node or an asynchronous transfer mode (ATM) switch. If the private trunk group is full or unavailable, the host switch routes the telephone calls over alternate private or public trunk groups and selected carriers.

Abstract: A request is received to establish a VPN session with a server-side system from at least one client computer out of a plurality of client computers coupled to a modem within a client-side system. The request contains login details for a user of the at least one client computer. A network address, such as an IP (Internet Protocol) or MAC (Media Access Control) address of the at least one client computer is then determined. The user is authenticated based on the user login details, and a VPN tunnel is established over the modem between the at least one client computer having the network address and the server-side system. The same method is then used for the remainder of the plurality of client computers coupled to the modem within the client-side system.

Abstract: Managing a virtual private network includes receiving information describing at least one virtual private network attribute from multiple computers providing at least one virtual private network function, preparing a report by organizing the received information into a table that lists each of the multiple computers and the corresponding virtual private network attribute received from each of the multiple computers, and displaying the prepared report to a user.

Abstract: An authentication system is applied for a voice network in order to provide the same security as that attained by a data network. Provided is a voice network access system wherein a one-time password system, which is used as an access authentication system, is applied for a voice network that is constituted by an private automatic branch exchange that includes an external interface; wherein the private automatic branch exchange is connected to a computer telephony server across the external interface for the exchange of sender number information that is received from a public network; and wherein the private automatic branch exchange is also connected via the external interface to an authentication system server, which receives a user's name from the computer telephony server and performs a personal authentication process using the user's name.

Abstract: A network can be organized for providing virtual private network services to customers into two regions. A network core for providing layer 2 transport and an associated number of logical provider edges. Each logical provider edge is partitioned into first and second portions. The first portion provides virtual private network services to customers. The second portion works with the core network to communicate with any other logical provider edge within the network. The first portion designated as the PE-Edge includes a group of functions such as a function for configuring optical Ethernet layer 2 virtual private network service, a function for service labeling, a function for ingress traffic management, and a function for information exchange between local VPN and core VPN.

Abstract: A method of updating routing information related to a virtual private network in a communications network is provided. Routing information is exchanged between a site included in a virtual private network and forwarded to a provider equipment node coupled to a customer equipment node. The routing information is provided to a provider equipment node maintaining a route reflector that distributes the routing information to one or more provider equipment nodes respectively coupled to a customer equipment node that interfaces with a site of the virtual private network.

Abstract: When a leased line is incorporated in a virtual private network forming a composite communication network together with a public network, a service control point searches a data base to see what private branch exchanger is the closest to a caller, and establishes a communication path including the leased line in the composite communication network so that high quality economical communication is offered between the subscribers.

Abstract: A virtual private network includes an internet protocol (IP) network and a public switched telephone network (PSTN). An enterprise gateway is operably connected to the IP network. The enterprise gateway is operably connected to a switch of the PSTN through a direct access line (DAL). The set-up signaling for virtual private network calls and the calls themselves are transported across the internet protocol network and the public switched telephone network through the direct access line.

Abstract: The present invention discloses a communication system including a communications network, a multiplicity of communications terminals which are connectable to the communications network and which can be employed by users to communicate via the communications network, the user not necessarily being identified with a given communications terminal, apparatus for monitoring whether or not a user is connected to the communications network irrespective of which of the multiplicity of communications terminals that user is employing, and apparatus for annunciating to a seeking user, currently connected to the communications network via any of the multiplicity of communications terminals, network connection status information relating to other users who are in a set of sought users, which set is definable by the seeking user, and for providing the seeking user connection address information relating to those sought users who are currently connected to the communications network.

Abstract: A method and apparatus establishes through the public switch telephone network, a multimedia communications session between first and second telecommunications infrastructure. Each infrastructure is located on a separate private data network and comprises logic to automatically establish an integrated voice and data session initiated by a single telephone call from one infrastructure to the other.

Abstract: An enterprise network opens a virtual private network tunnel with a data center by sending the data center a data request that includes a uniform resource identifier. The data center responds by sending the enterprise network ongoing reply data. A user wishing to access network data of the enterprise network transmits an access request to the data center. The data center authenticates the identity of the user and transmits the access request to the enterprise network. The enterprise network responds to the access request by performing acts upon the network data and/or by returning network data to the data center such that the user is enabled access to the network data. In an alternative embodiment, the data center caches a copy of network data to be retrieved by a remote user when the same network data is disconnected from the enterprise network.

Abstract: A system and apparatus for enabling supplementary service functions, such as directed call pickup, to be implemented in a communications network having more than one server. The multi-server call pickup system is adapted to enable a user to pick up another user's call from a selected destination anywhere within the network, including outside the local server in a multi-server network. The directed call pickup system includes a pickup request unit that is used for initiating the call pickup feature from a specified location in the network. A remote determination unit and a local determination unit to determine whether to establish local or remote connections to a call pickup user may also be provided. A call establishing unit with a negotiation process for connection establishment is provided to establish a connection between the call and the call pickup user. A notification unit may be provided to notify the system of the completed connection.

Abstract: A method is disclosed for establishing communication between an originating station and a destination station over a computer network such as the Internet, for example. In accordance with the invention, at least one service attribute requested by the originating station is received over a signaling path. A communication path is then established between the originating and destination stations in conformance with the requested service attribute. The signaling path is an out-of-band signaling path with respect to the communication path.

Abstract: The invention provides an apparatus for transmitting calls generated by a first communication network over a second communication network to a third communication network, the first communication network operating in accordance with a first communication protocol which enables call services, the third communication network operating in accordance with a communication protocol which enables at least one of the call services enabled by the first communication protocol and the second communication network operating according to a second communication protocol different to the first. The apparatus includes means to produce a data message compatible with the second communication protocol indicative of the required service and means to transmit the call and data message over the second communication network to the third communication network, where the data message is read by further apparatus and an appropriate call service established to the third communication network.

Abstract: For external terminals, telephone number information is provided internally in a private branch exchange. Upon call setup, signalling information is checked to determine if telephone number information is internally present in the private branch exchange to a user of a B-channel in an ISDN system. As warranted, dialing of the telephone number is initiated by a system controller in the private branch exchange.