Abstract: Using a Radio Access Network (RAN) capacity exchange (or RANxChange), mobile operators can advertise slices/partitions of available unused base station capacity, and auction and lease it. A member-operator can advertise their unused base station capacity availability or lease capacity from another member-operator for a specific time period. The bidding operators can bid for the full auctioned capacity or portion of the auctioned capacity. The users start attaching the leased slice transparently without any configuration changes on their mobile devices.

Abstract: Using a Radio Access Network (RAN) capacity exchange (or RANxChange), mobile operators can advertise slices/partitions of available unused base station capacity, and auction and lease it. A member-operator can advertise their unused base station capacity availability or lease capacity from another member-operator for a specific time period. The bidding operators can bid for the full auctioned capacity or portion of the auctioned capacity. The users start attaching the leased slice transparently without any configuration changes on their mobile devices.

Abstract: Using a Radio Access Network (RAN) capacity exchange (or RANxChange), mobile operators can advertise slices/partitions of available unused base station capacity, and auction and lease it. A member-operator can advertise their unused base station capacity availability or lease capacity from another member-operator for a specific time period. The bidding operators can bid for the full auctioned capacity or portion of the auctioned capacity. The users start attaching the leased slice transparently without any configuration changes on their mobile devices.

Abstract: Using a Radio Access Network (RAN) capacity exchange (or RANxChange), mobile operators can advertise slices/partitions of available unused base station capacity, and auction and lease it. A member-operator can advertise their unused base station capacity availability or lease capacity from another member-operator for a specific time period. The bidding operators can bid for the full auctioned capacity or portion of the auctioned capacity. The users start attaching the leased slice transparently without any configuration changes on their mobile devices.

Abstract: A novel system and a new data communication method are invented in a software-defined (SDN) network to provide delivery of certain types of critical data flows with certain QoS and/or extra security requirements in a congested network. The method of invention allows such critical data not to traverse the data plane, as it normally would, but instead to go from the ingress switch directly to the egress switch, thereby always in two hops using the control channels. By shortcutting all other switches along the traditional data path computed by normal routing, it potentially provides guaranteed throughput, lower latency/jitter or higher level of security.

Abstract: Using a Radio Access Network (RAN) capacity exchange (or RANxChange), mobile operators can advertise slices/partitions of available unused base station capacity, and auction and lease it. A member-operator can advertise their unused base station capacity availability or lease capacity from another member-operator for a specific time period. The bidding operators can bid for the full auctioned capacity or portion of the auctioned capacity. The users start attaching the leased slice transparently without any configuration changes on their mobile devices.

Abstract: A special data splitter and data combiner is shown for low latency emergency and data intensive services so that multiple broadband and wireless networks can be utilized along with public safety networks. Any data session, multimedia or non-multimedia, is split into multiple packet streams with each stream having an identifier wherein some packet streams are sent via the secure public safety network and other streams are sent via other networks of varying characteristics and performance, and a combiner at the other end receiving multiple streams from different networks combines them into a single session.

Abstract: Sensitive data is sent through insecure network regions across different software defined networks (SDNs) over an encrypted path without requiring encryption applications at the source or destination hosts. One or more special-purpose encryptors are strategically placed within each SDN, which can act as an encryptor or decryptor, of both the data packet content and the header. Using the controller and a special encryption service application, the encrypted IP packets are forwarded from an encryptor, closest to the source, towards a decryptor, closest to the destination, utilizing a tagging method. Each encryptor has a static and globally unique tag. Each controller advertises to other controllers its encryptor information: IP of the encryptor, the IP block of the users the encryptor is responsible for and the unique encryptor tag(s). Each forwarder along the flow path is instructed by its respective controller how to forward packets towards the destination according to the tag.

Abstract: A system and method that rely on a centralized and trusted control mechanism for a software-defined network (SDN) to dynamically assign routes between two end points, and to simultaneously change their real IP addresses to fake IP addresses to establish short-lived obfuscated communications paths with a goal of preserving anonymity. The SDN controller determines the short-lived routes from a feasible route-set and new fake IP addresses from a reserved address pool for the source and destination hosts. It provisions only the switches along the route with rules so that a switch can forward packets of the data flow to another switch without needing to know the actual IP addresses of the communicating endpoints, and hence, providing strict anonymity even when the switches are compromised.

Abstract: Random route hopping in a Software Defined Network (SDN) allows traffic flows to change routes frequently to obfuscate data paths or to meet specific performance requirements. Using the route hopping method and additional capabilities built into an SDN controller according to this invention, the controller determines multiple feasible routes for specific flows, called jumper flows, so that the active flow can randomly be assigned to different routes after a switch-over time period expires, or by a special randomization logic within the switch managed by the controller, or manually programmed by a system administrator.

Abstract: Controller(s) in a software defined network (SDN) are able to determine a control path towards each network switch by performing a switch-originated discovery and using an in-band control network that is an overlay on the data network. A topology tree is maintained, where each controller being the root of the tree, and where messages from the root to any switch may pass through neighboring switches to reach that switch (and vice-versa). Each switch in the SDN attempts to connect to the controller when it does not have a readily configured control connection towards the controller. Once the controller learns about the presence of a new switch and at least one or more paths to reach that switch through a novel discovery process, it can select, adjust and even optimize the control path's route towards that switch.

Abstract: Controller(s) can determine a control path towards each network switch using a novel controller-originated discovery process based on an in-band control network that is an overlay on the data network. The controller attempts to connect to each switch when it does not have a readily configured control connection towards the switch. Once the controller learns about the presence of a new switch and at least one or more paths to reach that switch through aforementioned discovery process, it can select, adjust and even optimize the control path's route towards that switch. During the controller-originated control network discovery process, the controller also learns about the to connectivity between all switches. Thereby, as a by-product of the discovery process, it uncovers the entire data network topology in parallel.

Abstract: A special data splitter and data combiner is shown for low latency emergency and data intensive services so that multiple broadband and wireless networks can be utilized along with public safety networks. Any data session, multimedia or non-multimedia, is split into multiple packet streams with each stream having an identifier wherein some packet streams are sent via the secure public safety network and other streams are sent via other networks of varying characteristics and performance, and a combiner at the other end receiving multiple streams from different networks combines them into a single session.

Abstract: Sensitive data is sent through insecure network regions across different software defined networks (SDNs) over an encrypted path without requiring encryption applications at the source or destination hosts. One or more special-purpose encryptors are strategically placed within each SDN, which can act as an encryptor or decryptor, of both the data packet content and the header. Using the controller and a special encryption service application, the encrypted IP packets are forwarded from an encryptor, closest to the source, towards a decryptor, closest to the destination, utilizing a tagging method. Each encryptor has a static and globally unique tag. Each controller advertises to other controllers its encryptor information: IP of the encryptor, the IP block of the users the encryptor is responsible for and the unique encryptor tag(s). Each forwarder along the flow path is instructed by its respective controller how to forward packets towards the destination according to the tag.

Abstract: A novel system and a new data communication method are invented in a software-defined (SDN) network to provide delivery of certain types of critical data flows with certain QoS and/or extra security requirements in a congested network. The method of invention allows such critical data not to traverse the data plane, as it normally would, but instead to go from the ingress switch directly to the egress switch, thereby always in two hops using the control channels. By shortcutting all other switches along the traditional data path computed by normal routing, it potentially provides guaranteed throughput, lower latency/jitter or higher level of security.

Abstract: A system and method that rely on a centralized and trusted control mechanism for a software-defined network (SDN) to dynamically assign routes between two end points, and to simultaneously change their real IP addresses to fake IP addresses to establish short-lived obfuscated communications paths with a goal of preserving anonymity. The SDN controller determines the short-lived routes from a feasible route-set and new fake IP addresses from a reserved address pool for the source and destination hosts. It provisions only the switches along the route with rules so that a switch can forward packets of the data flow to another switch without needing to know the actual IP addresses of the communicating endpoints, and hence, providing strict anonymity even when the switches are compromised.

Abstract: A method to check health of automatically discovered controllers comprises the steps of: (a) a first controller generating a first Controller-Advertisement message carrying the information required to identify and access the first controller when a new switch port becomes active; (b) the first controller sending the generated first Controller-Advertisement to a first switch having the newly activated port; (c) the first controller receiving at least a second Controller-Advertisement message from at least a second controller; (d) the first controller generating a third unsolicited Controller-Advertisement message with its access information to check health of the second controller; (e) the first controller receiving at least a fourth Controller-Advertisement message from the second controller indicating health information of the second controller, wherein the health information is stored in first controller's Controller Information Base (CIB).

Abstract: Systems and methods are described to dynamically set up and tear down service-enabled flow-paths across multiple SDN domains. An SDN controller of a domain periodically shares with other SDN controllers (of other domains) availability of service-enabled paths (aka, a summarized topology) of its respective network as well as associated service parameters of each path segment using a global nomenclature (aka, a dictionary) with other SDN controllers so as to enable each controller to understand and interpret the shared data in the same manner. Hence, each SDN controller can autonomously construct a complete network graph of available service-enabled paths across many domains. Another feature is the use of summarized (internal) topology of each domain as opposed to just using the peering-link related service information to compute desirable path alternatives.

Abstract: This invention is an apparatus an methods which integrates users' avatars into IP-based calling and messaging telecommunication services in such a way that avatar can be animated in real-time according to spoken words, anticipated gestures and pre-set and stored emotions. The invention includes an online editor to generate and customize users avatars.

Abstract: A method to check health of automatically discovered controllers comprises the steps of: (a) a first controller generating a first Controller-Advertisement message carrying the information required to identify and access the first controller when a new switch port becomes active; (b) the first controller sending the generated first Controller-Advertisement to a first switch having the newly activated port; (c) the first controller receiving at least a second Controller-Advertisement message from at least a second controller; (d) the first controller generating a third unsolicited Controller-Advertisement message with its access information to check health of the second controller; (e) the first controller receiving at least a fourth Controller-Advertisement message from the second controller indicating health information of the second controller, wherein the health information is stored in first controller's Controller Information Base (CIB).