Abstract: Key processing times (such as call setup delay, call failure rate, call success rate, etc.) and other relevant metrics are measured in their respective networks (i.e., in LTE or 3G/2G networks) from raw signaling by various time-synchronized probes in real-time. Raw signaling data are collected from such probes in run-time, and various KPIs such as the end-to-end call setup times, success rates or causes of failure from call initiation in the LTE network to call completion in a 2G/3G network by correlating various raw signaling data collected by the probes in real-time.

Abstract: When network function virtualization (NFV) is overlaid on top of a SDN, a convergence gateway mediates between the orchestrator and the SDN controller. The convergence gateway collects from the orchestrator the information on the location, capacity, status, and usage information of all virtualized functions that run on SDN's physical platforms, and passes that information to the controller. The controller decides to optimally route a data flow for service chaining by obeying traffic engineering and quality of service policies of that data flow, choosing from available virtualized functions along that route. An information model based approach is also presented for information sharing across the orchestrator, convergence gateway and controller.

Abstract: A novel technique is shown for throttling control traffic in a Software Defined Network (SDN) between a controller and network switches when the controller and/or one or more control channels are congested. In this technique, the controller's processing power and the limited control channel bandwidth are more efficiently managed by drastically cutting down the control traffic during times of congestion.

Abstract: A novel system and a new data communication method are invented in a software-defined (SDN) network to provide delivery of certain types of critical data flows with certain QoS and/or extra security requirements in a congested network. The method of invention allows such critical data not to traverse the data plane, as it normally would, but instead to go from the ingress switch directly to the egress switch, thereby always in two hops using the control channels. By shortcutting all other switches along the traditional data path computed by normal routing, it potentially provides guaranteed throughput, lower latency/jitter or higher level of security.

Abstract: An ingress forwarder receives the IP packet and strips off the entire packet header and replaces it with the simple flow header assigned by the controller, and looks up its flow-table to determine from which port to forward the packet. All other forwarders along the path up to the egress forwarder perform the forwarding action simply by inspecting the flow header. The egress forwarder, before forwarding to the egress port, replaces the flow header with the original layer-2/3/4 header. Doing so, the host behavior remains unchanged while the routing/forwarding within the cloud of SDN is performed based on only the flow header.

Abstract: An adaptive network-based approach for reducing congestion on certain select-group of flows within a programmable network wherein switches dynamically adjust the receive window size (rwnd) and/or the ACK pace of other TCP flows by interfering their ACK packets, those flows sharing network resources causing congestion on the select-group of flows. The TCP flow rate is reduced to make more network resources available to the group of select-flows. The system of invention further comprises a centralized controller detecting so called a ‘bad queue’ causing persistent traffic slow-down due to TCP behavior. The bad queue detection is performed by (i) monitoring switch ports' transmit and receive queues, (ii) calculating minimum packet sojourn times on queues, (iii) determining which flows to slow down to clear detected bad queues, and (iv) sending messages to certain switches to execute changes to a group of ACK packets.

Abstract: A special data splitter and data combiner is shown for low latency emergency and data intensive services so that multiple broadband and wireless networks can be utilized along with public safety networks. Any data session, multimedia or non-multimedia, is split into multiple packet streams with each stream having an identifier wherein some packet streams are sent via the secure public safety network and other streams are sent via other networks of varying characteristics and performance, and a combiner at the other end receiving multiple streams from different networks combines them into a single session.

Abstract: Sensitive data is sent through insecure network regions across different software defined networks (SDNs) over an encrypted path without requiring encryption applications at the source or destination hosts. One or more special-purpose encryptors are strategically placed within each SDN, which can act as an encryptor or decryptor, of both the data packet content and the header. Using the controller and a special encryption service application, the encrypted IP packets are forwarded from an encryptor, closest to the source, towards a decryptor, closest to the destination, utilizing a tagging method. Each encryptor has a static and globally unique tag. Each controller advertises to other controllers its encryptor information: IP of the encryptor, the IP block of the users the encryptor is responsible for and the unique encryptor tag(s). Each forwarder along the flow path is instructed by its respective controller how to forward packets towards the destination according to the tag.

Abstract: The present invention is related to a wireless network node for deployment at the intersection points of a plurality of electromagnetically shielded regions, and methods for its configuration and placement to provide wireless access and transmission using minimal amount of network data cables.

Abstract: IP packets are routed across mesh and relay nodes in a wireless network via an IP tunnel that is established between a pair of mesh nodes terminating on the disclosed system, also referred to as Mesh App. The Mesh App has several key functions beyond terminating IP tunnels, such as: (1) collecting local wireless user equipment IP addresses from the local Core Network, (2) remote IP addresses and routing information from its neighbor Mesh Apps, and (3) routing user's data packets according to its routing table across the IP tunnel. This tunnel is simultaneously used as a control channel to allocate frequency sub-bands to backhaul and radio access user equipment across neighbor mesh nodes to minimize self-backhaul interference.

Abstract: A system and method that rely on a centralized and trusted control mechanism for a software-defined network (SDN) to dynamically assign routes between two end points, and to simultaneously change their real IP addresses to fake IP addresses to establish short-lived obfuscated communications paths with a goal of preserving anonymity. The SDN controller determines the short-lived routes from a feasible route-set and new fake IP addresses from a reserved address pool for the source and destination hosts. It provisions only the switches along the route with rules so that a switch can forward packets of the data flow to another switch without needing to know the actual IP addresses of the communicating endpoints, and hence, providing strict anonymity even when the switches are compromised.

Abstract: A novel (software defined network) SDN control plane is introduced having new system capabilities to activate and deactivate controllers in real-time upon automatic measurement of network control traffic and service requirements, and proper controller interactions with network switches as control plane topology changes. Also introduced is a control flow table, which defines the assignment of certain control flows (by originator, location, service type, etc.) to different controllers within the SDN.

Abstract: A novel system and a new data communication method are invented in a software-defined (SDN) network to provide delivery of certain types of critical data flows with certain QoS and/or extra security requirements in a congested network. The method of invention allows such critical data not to traverse the data plane, as it normally would, but instead to go from the ingress switch directly to the egress switch, thereby always in two hops using the control channels. By shortcutting all other switches along the traditional data path computed by normal routing, it potentially provides guaranteed throughput, lower latency/jitter or higher level of security.

Abstract: A system and method that rely on a centralized and trusted control mechanism for a software-defined network (SDN) to dynamically assign routes between two end points, and to simultaneously change their real IP addresses to fake IP addresses to establish short-lived obfuscated communications paths with a goal of preserving anonymity. The SDN controller determines the short-lived routes from a feasible route-set and new fake IP addresses from a reserved address pool for the source and destination hosts. It provisions only the switches along the route with rules so that a switch can forward packets of the data flow to another switch without needing to know the actual IP addresses of the communicating endpoints, and hence, providing strict anonymity even when the switches are compromised.

Abstract: A novel method and system is introduced leveraging the data collected by a network probe to enhance cellular network capabilities to detect a man in the middle attack without using any software on the 3G mobile terminal. The new capabilities compile and process the data of call records collected from SS7 and location update messages in real time to determine the active 3G subscribers and to tag cells as 2G within a 3G coverage area to instantly identify an unknown cell generated by a fake base station. The system also has a component to notify authorities or to terminate the call once the fraud is identified.

Abstract: A novel (software defined network) SDN control plane is introduced having new system capabilities to activate and deactivate controllers in real-time upon automatic measurement of network control traffic and service requirements, and proper controller interactions with network switches as control plane topology changes. Also introduced is a control flow table, which defines the assignment of certain control flows (by originator, location, service type, etc.) to different controllers within the SDN.

Abstract: This invention is an apparatus an methods which integrates users' avatars into IP-based calling and messaging telecommunication services in such a way that avatar can be animated in real-time according to spoken words, anticipated gestures and pre-set and stored emotions. The invention includes an online editor to generate and customize users avatars.

Abstract: A description of an interface and a system/method is provided to combine frequency, time and power domain resource partitioning between neighbor small cells whereby these cells can execute the resource partitioning, without resorting to a centralized management system, simply by periodically sharing topology-related and interference related information with one another. Such a scheme allows resource partitioning to be executed in real-time as more small cells are deployed into the network.

Abstract: A method to check health of automatically discovered controllers comprises the steps of: (a) a first controller generating a first Controller-Advertisement message carrying the information required to identify and access the first controller when a new switch port becomes active; (b) the first controller sending the generated first Controller-Advertisement to a first switch having the newly activated port; (c) the first controller receiving at least a second Controller-Advertisement message from at least a second controller; (d) the first controller generating a third unsolicited Controller-Advertisement message with its access information to check health of the second controller; (e) the first controller receiving at least a fourth Controller-Advertisement message from the second controller indicating health information of the second controller, wherein the health information is stored in first controller's Controller Information Base (CIB).

Abstract: Controllers in a Software Defined Network (SDN) automatically discover and authenticate each other as part of the control plane operations, without any need for manual configuration of other controllers. The new capability of such controllers is based on Controller-Advertisement messages transferred between controllers in the same or different SDNs. In doing so, multiple controllers can be used for load sharing, improved reliability under failure of a controller by enabling seamless take over and recovery. Moreover, controllers can cooperate to enable end-to-end services to work across multiple SDNs. Controller-Advertisement messages are also used to check the health statuses of discovered controllers in the same or different SDNs.