Abstract: Secure communication network user mobility apparatus and methods are disclosed. A mobile user that is locally connected to a first communication network in which a service is provided, but is associated with an independently controlled second secure communication network, may be authenticated for access to the service by the second communication network. This allows seamless user mobility between networks in a partner extranet or other collection of trusted networks based on existing inter-network user mobility relationships. Access control, monitoring, and reporting, for example, and possibly other functions, may also be provided.

Abstract: Network service version management techniques are disclosed. Service access information, which is associated with access to a network service by a network service user, may be destined for a particular version of the network service. A determination is made as to whether a different version of the network service is accessible by the network service user. If so, then a further determination is made as to whether to select the different version of the network service to process the service access information. Any inconsistency between versions of the network service, such as different information requirements, can be handled by transforming received service access information. A replay function may also be provided, to have service access information again processed by the same or a different version of a network service. This function may be useful, for example, where a version of a service is rolled back or for debugging.

Abstract: Methods and systems are presented for controlling application layer message traffic at a central web services resource in which a web services gateway associated with the central resource sends a backoff message to a gateway associated with a remote web service client, which in turn slows the application layer message traffic to the central resource.

Abstract: Network service performance monitoring apparatus and methods are disclosed. Performance information associated with a network service is collected from multiple service monitoring points. The service monitoring points include at least a service monitoring point in a first communication network and a service monitoring second communication network that is controlled independently of the first communication network. The first communication network could be a network in which a service provider system that provides the network service is located, and the second communication network could be a communication network through which the network service is accessible by a network service consumer. In this case, the collected performance information may be integrated to create an inter-network view of performance of the service. Historical performance information associated with a network service may be used to establish a performance baseline for the service.

Abstract: Methods and systems are presented for controlling application layer message traffic at a central web services resource in which a web services gateway associated with the central resource sends a backoff message to a gateway associated with a remote web service client, which in turn slows the application layer message traffic to the central resource.

Abstract: Various exemplary embodiments are a system and related method for application sensitive forwarding of a request for a web service including a broker that manages the forwarding of the request, a metric table that stores statistics for the web service, and a database storing the metric table and least one load balancing policy. Various exemplary embodiments include an optimization policy manager that manages forwarding of the request, a class of services table that stores information, and a database storing the class of services table and at least one optimization policy. Various exemplary embodiments include a database storing a security-based policy and a location-based policy defining trust environments, a request processor that receives the request from the client and determines a current environment of the client based on the at least one location-based policy, and a quarantining subsystem that drops the request when the request violates the security-based policy.

Abstract: Network service version management techniques are disclosed. Service access information, which is associated with access to a network service by a network service user, may be destined for a particular version of the network service. A determination is made as to whether a different version of the network service is accessible by the network service user. If so, then a further determination is made as to whether to select the different version of the network service to process the service access information. Any inconsistency between versions of the network service, such as different information requirements, can be handled by transforming received service access information. A replay function may also be provided, to have service access information again processed by the same or a different version of a network service. This function may be useful, for example, where a version of a service is rolled back or for debugging.

Abstract: Communication network application activity monitoring and control apparatus, methods, and data structures are disclosed. A communication network user that initiates access to an application provided in a communication network is identified. Records are dynamically created and maintained to reflect accesses by the user to the application and other applications that are provided in the communication network. The records track application activity by the user. Policies may be established and enforced to control application activity that the user may conduct in the communication network. Conformance with application access restrictions and regulations may be verified or demonstrated by reporting the records, and ensured through policy enforcement.

Abstract: Secure communication network user mobility apparatus and methods are disclosed. A mobile user that is locally connected to a first communication network in which a service is provided, but is associated with an independently controlled second secure communication network, may be authenticated for access to the service by the second communication network. This allows seamless user mobility between networks in a partner extranet or other collection of trusted networks based on existing inter-network user mobility relationships. Access control, monitoring, and reporting, for example, and possibly other functions, may also be provided.

Abstract: Network service performance monitoring apparatus and methods are disclosed. Performance information associated with a network service is collected from multiple service monitoring points. The service monitoring points include at least a service monitoring point in a first communication network and a service monitoring second communication network that is controlled independently of the first communication network. The first communication network could be a network in which a service provider system that provides the network service is located, and the second communication network could be a communication network through which the network service is accessible by a network service consumer. In this case, the collected performance information may be integrated to create an inter-network view of performance of the service. Historical performance information associated with a network service may be used to establish a performance baseline for the service.

Abstract: A collaboration services suite is adapted to support a plurality of integrated telecommunications services accessed by geographically dispersed team members using a virtual team environment (VTE) client that generates a graphical user interface (GUI) for each of the respective team members. Communications sessions are automatically set up by the collaboration services suite in response to request messages generated by the VTE client when a team member initiates a communications session request using the GUI. Team members require no knowledge of another team member's communications device address in order to initiate a communications session. The collaboration services suite includes a VTE server that communicates with the VTE clients, a presence engine that collects and maintains a status of communications devices specified in a current profile of the team member; and, a call server for handling setup and control of a voice component of each communications session completed.

Abstract: A collaboration services suite is adapted to support a plurality of integrated telecommunications services accessed by geographically dispersed team members using a virtual team environment (VTE) client that generates a graphical user interface (GUI) for each of the respective team members. Communications sessions are automatically set up by the collaboration services suite in response to request messages generated by the VTE client when a team member initiates a communications session request using the GUI. Team members require no knowledge of another team member's communications device address in order to initiate a communications session. The collaboration services suite includes a VTE server that communicates with the VTE clients, a presence engine that collects and maintains a status of communications devices specified in a current profile of the team member; and, a call server for handling setup and control of a voice component of each communications session completed.

Abstract: A collaboration services suite is adapted to support a plurality of integrated telecommunications services accessed by geographically dispersed team members using a virtual team environment (VTE) client that generates a graphical user interface (GUI) for each of the respective team members. Communications sessions are automatically set up by the collaboration services suite in response to request messages generated by the VTE client when a team member initiates a communications session request using the GUI. Team members require no knowledge of another team member's communications device address in order to initiate a communications session. The collaboration services suite includes a VTE server that communicates with the VTE clients, a presence engine that collects and maintains a status of communications devices specified in a current profile of the team member; and, a call server for handling setup and control of a voice component of each communications session completed.

Abstract: A collaboration services suite is adapted to support a plurality of integrated telecommunications services accessed by geographically dispersed team members using a virtual team environment (VTE) client that generates a graphical user interface (GUI) for each of the respective team members. Communications sessions are automatically set up by the collaboration services suite in response to request messages generated by the VTE client when a team member initiates a communications session request using the GUI. Team members require no knowledge of another team member's communications device address in order to initiate a communications session. The collaboration services suite includes a VTE server that communicates with the VTE clients, a presence engine that collects and maintains a status of communications devices specified in a current profile of the team member; and, a call server for handling setup and control of a voice component of each communications session completed.

Abstract: A collaboration services suite is adapted to support a plurality of integrated telecommunications services accessed by geographically dispersed team members using a virtual team environment (VTE) client that generates a graphical user interface (GUI) for each of the respective team members. Communications sessions are automatically set up by the collaboration services suite in response to request messages generated by the VTE client when a team member initiates a communications session request using the GUI. Team members require no knowledge of another team member's communications device address in order to initiate a communications session. The collaboration services suite includes a VTE server that communicates with the VTE clients, a presence engine that collects and maintains a status of communications devices specified in a current profile of the team member; and, a call server for handling setup and control of a voice component of each communications session completed.