Abstract: Embodiments disclosed herein provide systems, methods, and computer readable media for collaborating on the use of an application executing on a user system. In a particular embodiment, a method provides determining a first view presented to a first user of the user system by the application. The method further provides generating first view information that describes the view such that the view can be represented at a remote user system and transferring the first view information to the remote user system.

Abstract: Embodiments disclosed herein provide systems and methods for quarantining communications at a network edge by routing traffic through a specialized network edge system. In a particular embodiment a method provides, identifying criteria indicating whether certain network traffic should be handled by the specialized network edge system. The method further provides receiving first information about first network traffic received at a first network edge system for a communication network. In response to determining, based on the first information, that the first network traffic satisfies the criteria, the method provides routing the first network traffic through the specialized network edge system.

Abstract: Embodiments disclosed herein provide systems and methods for controlling bandwidth across a network address translation (NAT) system. In a particular embodiment a method provides, identifying a first endpoint and a second endpoint to a communication session. The first endpoint is located within a domain of the NAT system and the second endpoint is located outside to the domain. The method further provides determining a bandwidth limitation for the communication session and, in response to a request for a network address of the second endpoint, providing the network address and the bandwidth limitation to the first endpoint.

Abstract: Embodiments disclosed herein provide systems and methods for controlling bandwidth across a network address translation (NAT) system. In a particular embodiment a method provides, identifying a first endpoint and a second endpoint to a communication session. The first endpoint is located within a domain of the NAT system and the second endpoint is located outside to the domain. The method further provides determining a bandwidth limitation for the communication session and exchanging communications between the first and second endpoints in accordance with the bandwidth limitation.

Abstract: Embodiments disclosed herein provide systems and methods for mitigating attacks on a WebRTC system at the edge of an enterprise network. In a particular embodiment a method provides obtaining access criteria regarding access to a WebRTC system in the enterprise network, wherein the access criteria comprise instructions for allowing WebRTC connections with the WebRTC system. The method further provides receiving WebRTC signaling associated with WebRTC connections between the WebRTC system and endpoints having network addresses outside the enterprise network and blocking at least one connection associated with the WebRTC signaling from participating in WebRTC communications with the WebRTC system based on the access criteria.

Abstract: A request to establish an encrypted media stream is received, by an edge server, for a Web Real-Time Communication (WebRTC) communication session between a first browser, and a second browser or gateway. The edge server is a boundary device between a first network and a second network. The edge server retrieves a tenant identifier for the encrypted media stream. The tenant identifier can identify a specific company or enterprise. In response to receiving the tenant identifier for the encrypted media stream for the WebRTC communication session, a list of one or more Quality-of-Service (QoS) parameters associated with the tenant is retrieved. For example, the list of QoS parameters may be based on a Service Level Agreement (SLA). The edge server dynamically sends a message to configure the second network to support the list of one or more QoS parameters associated with the tenant.

Abstract: Embodiments described herein provide systems and method for implementing privacy control in a co-browsing environment. In a particular embodiment, a method provides receiving an instruction in a co-browsing server to initiate a co-browsing session for a website with a first client and a second client. The method further provides receiving first privacy settings from the first client, wherein the first privacy settings indicate how the website should be presented at the second client. The method further provides presenting the website at the first client and presenting the website at the second client based on the first privacy settings.

Abstract: In order to provide compatibility between WebRTC communication endpoints and legacy communication endpoints that use BFCP, a web media gateways is used to establish a conference call between the communication endpoints that use WebRTC and the legacy communication endpoints that use BFCP. A floor command is received to control the floor of the conference call from a first communication endpoint. The floor command is translated from WebRTC into BFCP or from BFCP to WebRTC. The floor command is sent to the second communication endpoint. This allows a conference call where communication endpoints support both WebRTC and BFCP.

Abstract: Embodiments disclosed herein provide systems and methods for quarantining communications at a network edge by routing traffic through a specialized network edge system. In a particular embodiment a method provides, identifying criteria indicating whether certain network traffic should be handled by the specialized network edge system. The method further provides receiving first information about first network traffic received at a first network edge system for a communication network. In response to determining, based on the first information, that the first network traffic satisfies the criteria, the method provides routing the first network traffic through the specialized network edge system.

Abstract: Embodiments disclosed herein provide systems and methods for recording WebRTC communications at a network edge. In a particular embodiment a method provides, in an edge system of a communication network, receiving identification information that identifies a first endpoint and a second endpoint between which a first WebRTC communication will be established. The method further provides establishing the first WebRTC communication between the first and second endpoints through the edge system using the identification information. Also, the method provides identifying packets for the first WebRTC communication and recording the packets to a storage system.

Abstract: Embodiments disclosed herein provide systems and methods for recording for analyzing traffic at an edge of a communication network. In a particular embodiment, a method provides processing a first portion of data packets directed into the communication network from outside of the communication network to determine whether a first sampling policy adequately assesses risk to the communication network. Upon determining that the first sampling policy does not adequately assess the risk to the communication network, the method provides adjusting the first sampling policy. The method further provides identifying a second portion of the data packets based on the first sampling policy. An amount of data packets included in the first portion of the data packets is larger than or equal to an amount of data packets included in the second portion of the data packets.

Abstract: An electronic communication is received from a first communication device by a multi-tasking operating system. For example, a customer has entered a service request at a web site, which is received by the multi-tasking operating system. The electronic communication comprises a plurality of items of information associated with a service request. An accuracy level for the plurality of items of information is determined. The accuracy level for the plurality of items is based on a history of prior electronic communications. In response to determining the accuracy level for the plurality of items of information associated with the service request, a communication system associated with a contact center and/or a contact center agent is identified. In response to identifying the communication system associated with the contact center and/or contact center agent, the electronic communication is routed to the communication system associated with the contact center and/or contact center agent.

Abstract: Embodiments disclosed herein provide systems and methods for controlling bandwidth across a network address translation (NAT) system. In a particular embodiment a method provides, identifying a first endpoint and a second endpoint to a communication session. The first endpoint is located within a domain of the NAT system and the second endpoint is located outside to the domain. The method further provides determining a bandwidth limitation for the communication session and exchanging communications between the first and second endpoints in accordance with the bandwidth limitation.

Abstract: To determine the correct media stream to latch onto, the system and method uses a hashing algorithm to uniquely identify a legitimate media stream. A first invite message is received at a Session Border Controller (SBC) to establish a communication session. For example a Session Initiation Protocol (SIP) INVITE is received. The first invite message comprises a first hash of a fingerprint. For example, the hash may be a hashed session key. A media message is received that contains the fingerprint to establish a media stream for the communication session. A second hash is created using the fingerprint in the media message. The first hash is compared to the second hash. In response to the first hash matching the second hash, a Network Address Translator (NAT) latches to an address and/or a port in the media message. Thus, the correct media stream is associated with the communication session.

Abstract: Embodiments disclosed herein provide systems, methods, and computer readable media for collaborating on the use of an application executing on a user system. In a particular embodiment, a method provides determining a first view presented to a first user of the user system by the application. The method further provides generating first view information that describes the view such that the view can be represented at a remote user system and transferring the first view information to the remote user system.

Abstract: A request to establish an encrypted media stream is received, by an edge server, for a Web Real-Time Communication (WebRTC) communication session between a first browser, and a second browser or gateway. The edge server is a boundary device between a first network and a second network. The edge server retrieves a tenant identifier for the encrypted media stream. The tenant identifier can identify a specific company or enterprise. In response to receiving the tenant identifier for the encrypted media stream for the WebRTC communication session, a list of one or more Quality-of-Service (QoS) parameters associated with the tenant is retrieved. For example, the list of QoS parameters may be based on a Service Level Agreement (SLA). The edge server dynamically sends a message to configure the second network to support the list of one or more QoS parameters associated with the tenant.

Abstract: An electronic communication is received from a first communication device by a multi-tasking operating system. For example, a customer has entered a service request at a web site, which is received by the multi-tasking operating system. The electronic communication comprises a plurality of items of information associated with a service request. An accuracy level for the plurality of items of information is determined. The accuracy level for the plurality of items is based on a history of prior electronic communications. In response to determining the accuracy level for the plurality of items of information associated with the service request, a communication system associated with a contact center and/or a contact center agent is identified. In response to identifying the communication system associated with the contact center and/or contact center agent, the electronic communication is routed to the communication system associated with the contact center and/or contact center agent.

Abstract: Embodiments disclosed herein provide systems and methods for recording for analyzing traffic at an edge of a communication network. In a particular embodiment, a method provides processing a first portion of data packets directed into the communication network from outside of the communication network to determine whether a first sampling policy adequately assesses risk to the communication network. Upon determining that the first sampling policy does not adequately assess the risk to the communication network, the method provides adjusting the first sampling policy. The method further provides identifying a second portion of the data packets based on the first sampling policy. An amount of data packets included in the first portion of the data packets is larger than or equal to an amount of data packets included in the second portion of the data packets.

Abstract: Embodiments disclosed herein provide systems and methods for recording WebRTC communications at a network edge. In a particular embodiment a method provides, in an edge system of a communication network, receiving identification information that identifies a first endpoint and a second endpoint between which a first WebRTC communication will be established. The method further provides establishing the first WebRTC communication between the first and second endpoints through the edge system using the identification information. Also, the method provides identifying packets for the first WebRTC communication and recording the packets to a storage system.

Abstract: To determine the correct media stream to latch onto, the system and method uses a hashing algorithm to uniquely identify a legitimate media stream. A first invite message is received at a Session Border Controller (SBC) to establish a communication session. For example a Session Initiation Protocol (SIP) INVITE is received. The first invite message comprises a first hash of a fingerprint. For example, the hash may be a hashed session key. A media message is received that contains the fingerprint to establish a media stream for the communication session. A second hash is created using the fingerprint in the media message. The first hash is compared to the second hash. In response to the first hash matching the second hash, a Network Address Translator (NAT) latches to an address and/or a port in the media message. Thus, the correct media stream is associated with the communication session.