Abstract: Systems and methods for user device registration are disclosed. In certain embodiments, at least a first edge device in a group of edge devices enters a mass-restart mode. The first edge device receives a request for registration from a user device and determines whether the user device is currently registered through the first edge device. The first edge device generates a notification associated with the user device if the user device is not currently registered through the first edge device. A second edge device in the group of edge devices receives the notification and determines whether the user device is currently registered through the second edge device based on the notification. Registration information about the user device is deleted from the second edge device if the user device is currently registered through the second edge device.

Abstract: Methods and apparatuses, including computer program products, are described for identifying an application server in a plurality of application servers associated with a shared identifier in an Internet Protocol Multimedia Subsystem (IMS) network. The method includes receiving, from a Signaling System 7 (SS7) network, a message including a mobile device identifier associated with a mobile device connected to the IMS network and determining the identity of an application server in the plurality of application servers associated with the shared identifier. The determining step includes extracting the mobile device identifier from the message and retrieving, from a data storage module, an application server identifier associated with an application server based on the extracted mobile device identifier. The application server associated with the retrieved identifier provides service to the mobile device.

Abstract: Systems and methods for user device registration are disclosed. In certain embodiments, at least a first edge device in a group of edge devices enters a mass-restart mode. The first edge device receives a request for registration from a user device and determines whether the user device is currently registered through the first edge device. The first edge device generates a notification associated with the user device if the user device is not currently registered through the first edge device. A second edge device in the group of edge devices receives the notification and determines whether the user device is currently registered through the second edge device based on the notification. Registration information about the user device is deleted from the second edge device if the user device is currently registered through the second edge device.

Abstract: The invention features systems and methods for detecting and mitigating network attacks in a Voice-Over-IP (VoIP) network. A server is configured to receive information related to a mitigation action for a call. The information can include a complexity level for administering an audio challenge-response test to the call and an identification of the call. The server also generates i) a routing label based on the identification of the call, and ii) a script defining a plurality of variables that store identifications of a plurality of altered sound files for the audio challenge-response test. Each altered sound file is randomly selected by the server subject to one or more constraints associated with the complexity level. The server is further configured to transmit the script to a guardian module and the routing label to a gateway.

Abstract: Described are methods and apparatuses, including computer program products, for limiting server overload via client control. A first set of a plurality of requests are transmitted to a server at a first transmission rate during a first period of time. The first transmission rate is limited to be less than or equal to a first transmission limit rate. An overload value is determined based on whether at least two or more requests of the first set of requests for service satisfy an overload criterion. A second transmission limit rate is determined based on the overload value and the first transmission limit rate. A second set of a plurality of requests is transmitted to the server at a second transmission rate during a second period of time. The second transmission rate is limited to be less than or equal to the second transmission limit rate.

Abstract: Methods and apparatuses, including computer program products, are described for establishing secure communications sessions between computing devices located behind network security devices. The method includes receiving, from a first client computing device, a request for a secure connection with a second client computing device, the request including a first transport protocol role and a first security protocol role associated with the first device. The method includes transmitting the request to the second device. The method includes receiving, from the second device, a response to the request including a second transport protocol role and a second security protocol role associated with the second device, transmitting the response to the first device, and establishing the secure connection between the first device and the second device, where the first and second security protocol roles are determined independently from the first and second transport protocol roles.

Abstract: A computer-implemented method for inserting an out-of-band signaling packet into a real-time protocol (RTP) stream is provided. The method includes receiving the out-of-band signaling packet intended for transmission to a user device and forming a synthesized packet based on payload information from the out-of-band signaling packet and header information stored in a data structure describing the RTP stream. The method also includes inserting the synthesized packet into the RTP stream. The method further includes receiving an RTP packet intended for transmission to the user device via the RTP stream, analyzing an insertion sequence number and an insertion flag maintained in the data structure, and discarding or forwarding the RTP packet via the RTP stream based on the analyzing.

Abstract: A method for control of real-time traffic entry of a managed packet network includes the step of receiving, from a border element processor, a first message indicative of a new active registration request associated with a client. The border element processor is one of a plurality of border element processors at an edge of a managed packet network controlling packets (e.g., relating to real-time multimedia traffic) entering the managed packet network. The method also includes the step of load balancing, by a load balancing engine, the new active registration request across the plurality of border element processors and assigning the client to a designated border element processor. A second message is generated in response to the new activation registration request. The second message includes a parameter identifying the designated border element processor assigned to the client.

Abstract: Described are methods and apparatuses, including computer program products for utilizing emergency procedures to determine location information for a Voice Over Internet Protocol (VOIP) device. A wireless access gateway (WAG) determines location information of the VOIP device and stores the location information. A request for a location of the VOIP device from a Mobile Switching Center (MSC) is received by the WAG. The WAG translates the stored location information into a format used by the MSC to receive location information from a Radio Access Network (RAN). The WAG provides the translated location information to the MSC.

Abstract: Methods and apparatuses, including computer program products, are described for applying service based on classification and grouping of traffic flows. The method includes receiving a traffic flow, and matching the traffic flow to classification groups. The matching includes determining a first event associated with the traffic flow, comparing attributes of the first event with entry criteria of the classification groups, and assigning the first event to one or more classification groups where the first event meets the entry criteria of the one or more classification groups. The method includes identifying one or more service definitions for the traffic flow based on the classification groups assigned to the traffic flow, reconciling the one or more service definitions for the traffic flow, and providing a service to the traffic flow based on the reconciled service definitions.

Abstract: Described are methods and apparatus, including computer program products, for using a single point code to represent multiple switching devices. A first software node and a second software node are associated to the single point code. The first software node is assigned to a first switch and the second software node is assigned to a PSTN. Signaling data associated with the point code is received via signaling links associated with the first switch. The signaling data is routed to the first software node or a second switch based on a criterion.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for parameterized telecommunication intercept. A parameterized intercept request comprises (i) a set of intercept events for identifying a candidate telecommunication message for intercept, the set of intercept events comprising at least two of the following types of intercept events: an internet protocol event, a media event, or a signaling event, (ii) a criterion associated with the set of intercept events, and (iii) a set of intercept actions for processing the candidate telecommunication message. A first telecommunication message is received. The first telecommunication message is determined to match the set of intercept events based on the criterion. The set of intercept actions is executed based on the matched first telecommunication message.

Abstract: Methods and apparatuses, including computer program products, are described for establishing M3UA linksets and routes. The method includes generating, at a signaling gateway, a linkset that includes a plurality of M3UA links between two or more IP hosts on the signaling gateway and a single IP host on a signal transfer point. The method also includes configuring, at the signaling gateway, a route based on the linkset to direct messages from the signaling gateway to a single destination node.

Abstract: Methods and apparatuses, including computer program products, are described for applying service based on classification and grouping of traffic flows. The method includes receiving a traffic flow, and matching the traffic flow to classification groups. The matching includes determining a first event associated with the traffic flow, comparing attributes of the first event with entry criteria of the classification groups, and assigning the first event to one or more classification groups where the first event meets the entry criteria of the one or more classification groups. The method includes identifying one or more service definitions for the traffic flow based on the classification groups assigned to the traffic flow, reconciling the one or more service definitions for the traffic flow, and providing a service to the traffic flow based on the reconciled service definitions.

Abstract: Described are methods and apparatuses, including computer program products, for controlling server resources. An occupancy value of a buffer and a first utilization value of a first processor are measured. The buffer is configured to store one or more requests for service from at least a first client. The first processor is configured to receive and process the one or more requests from the buffer. A buffer size value is determined based on a processor throughput calculation, and a first service request limit for the first client is determined based on the occupancy value, the first utilization value, and the buffer size value.

Abstract: Methods and apparatuses, including computer program products, are described for transparent recovery of transport connections. The method includes collecting a state associated with a first connection between a first server and a remote server via a first network socket and transmitting the state from a first networking module to a second networking module. The method includes storing the state, opening a second network socket based on failure of the first networking module, intercepting outbound packets associated with a request to initiate a second connection between the first server and the remote server via the second socket, modifying the intercepted packets based on the state, and transmitting the modified packets to the remote server to elicit an acknowledgement to maintain the first connection. The method includes receiving packets associated with the acknowledgment from the remote server, and modifying the received packets to acknowledge the request to initiate the second connection.

Abstract: Described are methods and apparatuses, for selectively terminated custom application in a telecommunications network. A Gateway Mobile Switching Center (GMSC) receives a request to initiate a call session to a subscriber device in a service area of a first Mobile Switching Center (MSC). The GMSC established a dialogue to implement the custom application on the subscriber device. The GMSC receives a message indicating that the subscriber device is moving from the first MSC to a second MSC. The GMSC analyzes a service key of the custom application to determine if the dialogue should be terminated and determines that the dialogue should be terminated so that the custom application is continued on the subscriber device.

Abstract: A method, server and computer program product is provided for transferring a session from a femtocell to a macromobile network. A request to transfer the session from the femtocell to a macromobile network is received. The request is translated into a format used by the macromobile network to receive session set-up requests and the translated request is provided to the macromobile network.

Abstract: Methods and apparatuses, including computer program products, are described for identifying an application server in a plurality of application servers associated with a shared identifier in an Internet Protocol Multimedia Subsystem (IMS) network. The method includes receiving, from a Signaling System 7 (SS7) network, a message including a mobile device identifier associated with a mobile device connected to the IMS network and determining the identity of an application server in the plurality of application servers associated with the shared identifier. The determining step includes extracting the mobile device identifier from the message and retrieving, from a data storage module, an application server identifier associated with an application server based on the extracted mobile device identifier. The application server associated with the retrieved identifier provides service to the mobile device.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for parameterized telecommunication intercept. A parameterized intercept request comprises (i) a set of intercept events for identifying a candidate telecommunication message for intercept, the set of intercept events comprising at least two of the following types of intercept events: an internet protocol event, a media event, or a signaling event, (ii) a criterion associated with the set of intercept events, and (iii) a set of intercept actions for processing the candidate telecommunication message. A first telecommunication message is received. The first telecommunication message is determined to match the set of intercept events based on the criterion. The set of intercept actions is executed based on the matched first telecommunication message.