Abstract: Methods and systems for routing connections between federated enterprises are provided. More particularly, user location information is stored as part of a first directory accessible to a federation broker. Location information obtained in association with a requested connection is used by the federation broker to access a second directory containing the locations of points of presence within the enterprise that includes the target communication device.

Abstract: A communication broker and methods of administering the same are provided. The communication broker is adapted to direct various enterprises to set up a media channel directly therebetween while remaining in the control signaling path for the communication session. The broker may enable the enterprises to use standard authentication techniques and the Datagram Transport Layer Security (DTLS) protocol to establish the media channel.

Abstract: Methods and systems for providing a cache of federated routing information on a dynamic domain name server are provided. More particularly, information obtained from a federation broker can be stored in a dynamic domain name server associated with an enterprise for use in connection with requests for communication links originating from communication endpoints included in the enterprise. By providing this cache of information, requests for federated routing information made to the federation broker can be reduced.

Abstract: Methods and systems for facilitating sign-on procedures in connection with a converged system are provided. An authentication plug-in operates to receive authentication credentials in connection with a request to access an application by a client. The authentication plug-in is capable of operating in different contexts in a converged system. After an initial sign-on, subsequent sign-on requests can be fulfilled by accessing authentication credentials stored in a cache.

Abstract: A communication broker and methods of administering the same are provided. The communication broker is adapted to direct various enterprises to set up a media channel directly therebetween while remaining in the control signaling path for the communication session. The broker may enable the enterprises to use standard authentication techniques and the Datagram Transport Layer Security (DTLS) protocol to establish the media channel.

Abstract: Methods and systems for facilitating sign-on procedures in connection with a converged system are provided. An authentication plug-in operates to receive authentication credentials in connection with a request to access an application by a client. The authentication plug-in is capable of operating in different contexts in a converged system. After an initial sign-on, subsequent sign-on requests can be fulfilled by accessing authentication credentials stored in a cache.

Abstract: Methods and systems for routing connections between federated enterprises are provided. More particularly, user location information is stored as part of a first directory accessible to a federation broker. Location information obtained in association with a requested connection is used by the federation broker to access a second directory containing the locations of points of presence within the enterprise that includes the target communication device.

Abstract: Methods and systems for providing a cache of federated routing information on a dynamic domain name server are provided. More particularly, information obtained from a federation broker can be stored in a dynamic domain name server associated with an enterprise for use in connection with requests for communication links originating from communication endpoints included in the enterprise. By providing this cache of information, requests for federated routing information made to the federation broker can be reduced.

Abstract: Methods, devices, and systems for creating and using a trusted host list for Transport Layer Security (TLS) sessions are provided. The proposed solutions described herein provide a mechanism of specifying authorization policy for TLS sessions where such authorization was traditionally implied by the possession of a certificate issued by a mutually trusted third party. The proposed solutions also provide for wildcard use and regular expression matching to simplify administration of the trusted host list.

Abstract: The present invention is directed to an intrusion detection/prevention system that uses application layer event information to identify potential intrusions and notifies remote trusted peers in other enterprise networks of potential intrusions emanating therefrom.

Abstract: In one embodiment, a communication device 204 includes a voice communication module 152 to effect packet-switched voice communications over an untrusted network 140; a secure communication module 228 to create a secured pathway 258 with a selected remote secure communication module 124; and a VPN topology client 232 to contact a VPN topology server 240 to receive VPN topology information 236 that enables the secure communication module to create the secured pathway with the selected remote secure communication module. The VPN topology information includes IP addresses associated with remote secure communication modules, with each of the IP addresses having a corresponding range of node addresses serviced by the respective secure communication module.

Abstract: Methods, devices, and systems for controlling access to a password protected resource are provided. More specifically, different communication profiles can be mapped to a single user and that user can utilize a single password to gain access to the password protected resource using any one of his/her communication profiles. Each communication profile may have a unique authentication value associated therewith, but each unique authentication value may be determined based on the single password, thereby eliminating the need for a user to remember multiple passwords for each of his/her communication profiles.

Abstract: The present invention is directed to the use of a multi-tiered security architecture that includes vendor-operated global security services and policy servers able to exchange security events and mitigation measures.