Abstract: Methods and systems for detecting intrusion events, such as war dialing events are disclosed. According to one method, signaling messages associated with calls being made or attempted in a telecommunications network are analyzed. Based on the signaling messages, it is determined whether a war dialing event has occurred or is in progress. In response to determining that a war dialing event has occurred or is in progress, a war dialing event mitigating action is performed.

Abstract: A flexible routing node for re-directing signaling messages in a communications network is disclosed. Re-direction or re-routing of signaling message packets is accomplished through the use of a range or block-based database in conjunction with an exception-based database. The range-based routing instruction databases incorporates a data structure that maps ranges or blocks of mobile identification numbers (MINs) to a single destination network address, while the exceptions database stores any exceptions to these range or block-based rules. The pair of routing databases is implemented such that, when a signaling message is received that requires re-direction, the exception-based database is queried first. If a match is found in the exceptions database, the signaling message is modified using the returned routing instructions and transmitted into an associated communication network. If no match is found in the exception-based database, a default query is performed against the range-based database.

Abstract: Methods and systems for transmitting user part messages between signaling system seven (SS7) signaling points over an internet protocol (IP) network include receiving, at a signal transfer point, a first SS7 user part message. The first SS7 user part message can be received from a first SS7 signaling point, such as a service switching point (SSP). The first SS7 signaling point is encapsulated in a first IP packet. The first IP packet is transmitted to a second SS7 signaling point over an IP network.

Abstract: Methods and apparatus for transparently switching a local instance of a UMTS protocol-based call from a first card or module of a media gateway to a second card or module of the media gateway, such that the remote end of the call is not aware that the call has been switched between the first and second cards or modules. Moreover, initially establishing call media flow may include implementing two timers of different duration during which call-initialization is retried if no Positive-Acknowledgement of call initialization is received, where a shorter-duration timer is relied upon to attempt retries if a Negative-Acknowledgement is received, and a longer-duration timer is relied upon to attempt retries if neither a Positive-Acknowledgement nor a Negative-Acknowledgement is received.

Abstract: A scalable, reliable session initiation protocol (SIP) signaling router includes cluster nodes for performing SIP services. A location server replicates its database of SIP location information to each of the cluster nodes. Because each cluster node maintains its own local copy of the SIP location database, the time for routing SIP signaling messages is decreased. Load sharing is also performed among the cluster nodes by Ethernet switches that connect the cluster nodes to external networks. One Ethernet switch periodically sends messages to each of the cluster nodes to monitor the operational status of the cluster nodes. The Ethernet switch also maintains a connection tuple table containing information regarding active connections to each of the cluster nodes. Load sharing is performed based on the operational status and the connection tuple table.

Abstract: A transport adapter layer interface (TALI) includes messages, processes, and packet structures for sending and receiving SS7 information over a stream-oriented connection, such as a TCP/IP connection. For example, the TALI interface includes test messages for testing the status of a connection and allow and prohibit messages for enabling and disabling service data communications without invoking a TCP handshaking procedure. The TALI interface also includes SYNC and LENGTH fields for facilitating extraction of individual message packets over a stream-oriented connection.

Abstract: An auto-provisioning routing node including a mobile services node network address translation database and an auto-provisioning function for automatically provisioning the database is disclosed. The auto-provisioning routing node receives signaling messages that require network address translation services. The auto-provisioning routing node routes messages for which no translations exist to a default mobile services node and adds entries for the corresponding IMSIs in its mobile services node network address translation database. The default mobile services node determines whether it has records for these messages. If the default mobile services node does not have records for these messages, the default mobile services node routes the messages to a second mobile services node via the routing node. The routing node updates entries for IMSIs in the mobile services node network address translation database based on the information inserted by the default mobile services node.

Abstract: Methods and systems for mobile application part (MAP) screening include a signaling gateway having a MAP screening module. The MAP screening module includes a MAP screening process and a signalling connection control part (SCCP) screening process. The SCCP screening process determines whether the message is a candidate for MAP screening. The MAP screening process determines whether the message is a candidate for SCCP authorization.

Abstract: A routing node for receiving, processing, and subsequently transmitting Signaling System 7 (SS7) signaling messages destined for a Media Gateway Controller (MGC) type network element is disclosed. A Circuit Identification Code (CIC) routing node is adapted to receive an ISUP message from an associated SS7 network and determine the routing destination of the message based, at least in part, on a CIC parameter value contained within the message. The ISUP message is subsequently encapsulated in an Internet Protocol (IP) envelope and transmitted to a destination node via an IP communication link. Such a CIC routing node also provides network service providers with a method of generally eliminating the need for the assignment of unique SS7 network point codes to each MGC node in a network. That is, a CIC routing node allows multiple MGC nodes to effectively correspond to a single SS7 network point code.

Abstract: Methods and systems for intelligent signaling-router-based surveillance are disclosed. A surveillance and signaling router receives call signaling messages, identifies call signaling messages associated with users under surveillance and determines a surveillance type for the call signaling messages. If the surveillance type is content-related, the surveillance and signaling router forwards the message to a call server. The call server replaces parameters in the message and in subsequent messages so that the call is transparently set up through a media proxy server. The media proxy server copies the media stream to a delivery function. If the surveillance type is non-content-related, the surveillance and signaling router sends a copy of the message or information extracted from the message to an external device.

Abstract: Methods and systems for providing SIP trunk groups are disclosed. A SIP call processor identifies an incoming SIP trunk group based on one or more parameters associated with an incoming SIP message. The SIP call processor selects per-trunk-group call processing data based on the incoming SIP trunk group. The SIP call processor selectively processes the call based on the per-trunk-group call processing data selected for the incoming SIP trunk group.

Abstract: Methods and systems for identifying calls connected without answer supervision and for automatically generating billing information for these calls are disclosed. A monitoring device copies signaling messages associated with calls. The signaling messages are correlated into call detail records. The call detail records are analyzed to identify calls connected without answer supervision. In one implementation, calls that exceed a predetermined duration and for which no answer message was returned from the terminating end office are identified as calls without answer supervision. For these calls, billing records may be generated and forwarded to a network billing center.

Abstract: A method and system for generating and providing existing and new message accounting records in a standard format using call data obtained from switching and/or signaling networks is disclosed. A system for providing augmented billing messages includes a message accounting record creation apparatus being in communication with a signaling network and a switching network. The message accounting record creation apparatus receives call records from the signaling network and message accounting records from the switching network and outputs augmented message accounting records. Each of the augmented message accounting records is generated using one of the signaling network call records and one of the switching network message accounting records.

Abstract: A network element that is capable facilitating the routing and accounting of messages between a plurality of network elements that do not share a common signaling application protocol nor a common transport protocol suite. In one embodiment of the present invention, a Multi-Protocol Gateway (MPG) is adapted to receive a signaling message and subsequently translate both the signaling and transport protocol suite prior to message routing. The MPG node is also configured to create and maintain usage and measurements data that may subsequently be used to produce billing records.

Abstract: A distributed gateway includes distributed gateway routing elements co-located with SS7 network elements. Each distributed gateway routing element performs an SS7 routing function, such an MTP level 3 routing function. The distributed gateway routing elements communicate with each other over a virtual bus that guarantees quality of service for SS7 message packets. Accordingly, the distributed gateway routing elements set quality of service parameters in the SS7 message packets that are forwarded over the virtual bus.

Abstract: Method and systems for providing triggerless screening services include a triggerless screening service routing node and a message processing platform. The triggerless screening service routing node identifies call setup messages that require one or more call screening services and diverts the messages to a message processing platform. The message processing platform performs at least one screening action on the call setup messages and modifies the messages to include the type and result of the screening action.

Abstract: A network element for routing a calling name (CNAM) query message through a communications network includes a communication module capable of receiving a CNAM query message from and transmitting the CNAM query message to a communications network. A CNAM query routing information database stores CNAM query routing information for at least one CNAM database. A CNAM query routing address translation process performs a lookup in the CNAM query routing information database based on information contained in the query message and determines whether to route the query message to a national CNAM database based on results from the database lookup.

Abstract: Methods and systems for exchanging reachability information and for switching between redundant interfaces in a network cluster are disclosed. Nodes in the network cluster are connected via redundant links and exchange reachability messages at periodic intervals. Each node includes a kernel routing table used to route messages and a reachability application routing table for storing reachability information used to update entries in the kernel routing table. Each node executes a predetermined algorithm for selecting entries in the reachability application routing table to be written to the kernel routing table.

Abstract: A network element provides service control point or database node front end processing functionality, as well as routing functionality for routing data packets through a network. The network element includes a first communication module for receiving data packets from a first communication network. A second communication module transmits data packets over a second communications network. A database access control (DAC) process queries a DAC database and modifies received packets to include information returned by the database lookup.

Abstract: Methods and systems for interconnecting SS7 signaling points include connecting an edge device to a plurality of SS7 service switching points using fixed-bandwidth SS7 links. The edge device is connected to an SS7/IP gateway using a variable-bandwidth signaling link. The edge device multiplexes SS7 messages received over the fixed-bandwidth signaling links and transmits the message over the variable-bandwidth signaling link.