Abstract: A method for ascertaining the use of resources on a network having multiple paths across which data can pass. Each alternative path across the network is provided with a different address or port at a server or anchor point, such that, when a data packet is sent to a particular address it will travel across a certain path. As each path is associated with its own individual port or address a server can deduce from the port or address at which a data packet arrives which path it has traversed. The server can then use its knowledge of network topology and bandwidth availability to make policy enforcement decisions. These decisions may include whether to allow the call to proceed if the initial packet received is a call set up packet or, alternatively, a decision as to which path should be used for all transmissions from the terminal during the session.

Abstract: A signaling method for use in a communication network, in particular a unified network, for supporting a communication along a communication path (12) via a plurality of in-path network infrastructure elements (6, 8, 10) of the network. A service element (26, 28) of the network which is located off the communication path triggers an in-path network infrastructure element (6) and the triggered in-path network infrastructure element initiates in-path signaling along the communication path. In particular, the service element may send a message to a terminating end point of the communication, which message is intercepted by the network infrastructure element (6) closest to the terminating end point, which closest network infrastructure element initiates the in-path signaling.

Abstract: An Application Server entity in an IP Multimedia Subsystem (IMS) network comprises an interface for interfacing with an application and control logic which is arranged to inspect signalling information received from the application via the interface in the form of Extensible Markup Language (XML). The received signalling information is compared with stored rule data which specifies a relationship between an element in the signalling information and an action that should be taken and output data is generated based on the comparison. The Application Server can output operational measurements and/or charging information which more accurately reflect usage made of the Application Server resources. The need for a separate OSA/Parlay-X gateway can be avoided.

Abstract: An interface for a private IP network interfaces flows of packets between gateway controllers and external media gateways. It has a network address translator and an IPsec device for maintaining secure paths to the external devices. A path identifier records which of the packet flows corresponds to which path. It is incorporated in the packet header, and means that the same interface can be used to couple many different external gateways, and interface them with many of the gateway controllers. Widespread deployment of such interfaces in anonymisers to achieve hiding of device addresses and network topology, as well as the reduction in use of expensive registered addresses is facilitated. By sending the path identifier in the packet, the IPsec device and the address translator can be loosely coupled devices, so standard readily available devices can be used.

Abstract: There is an increasing need for many media gateway nodes to be used in enterprise networks. These media gateway nodes are typically connected behind a network address translator (NAT) which connects the enterprise network to a public communications network. Communication between the access nodes and a service provider network, which is also connected to the public network, is needed to provide communications services to end users. However, as the number of media gateways increases problems arise associated with increased traffic, complexity and use of resources at the NAT and at the service provider network. A solution is presented whereby a node is used to represent the media gateway nodes in the enterprise network.

Abstract: A packet-based communication system comprises first and second endpoints, an application manager and a policy server. When establishing a connection between the endpoints the application manager sends, to the policy server, application control related information about the required connection. The policy server then selects at least one application control parameter, such as a codec to be used by the endpoints, and returns this information to the application manager. The application control information can be carried between the application manager and policy server by an application control protocol, such as the Session Initiation Protocol (SIP), or by modified forms of policy control protocols such as the Common Open Policy Service (COPS), Diameter, SOAP/XML or Parlay.

Abstract: The present invention relates to methods of, computer software for and apparatus for enabling network management in a network arrangement in which a first network is separated from a second network by a network address translator or firewall. More particularly, but not exclusively, the present invention enables, in a carrier hosted solution, a) operational information relating to a device or equipment in a customer network and for use in a network management system of a carrier network and b) control information to be provided to the device or equipment by the network management system to traverse the network address translator or firewall separating the carrier and customer networks.

Abstract: An interface for a private IP network interfaces flows of packets between gateway controllers and external media gateways. It has a network address translator and an IPsec device for maintaining secure paths to the external devices. A path identifier records which of the packet flows corresponds to which path. It is incorporated in the packet header, and means that the same interface can be used to couple many different external gateways, and interface them with many of the gateway controllers. Widespread deployment of such interfaces in anonymisers to achieve hiding of device addresses and network topology, as well as the reduction in use of expensive registered addresses is facilitated. By sending the path identifier in the packet, the IPsec device and the address translator can be loosely coupled devices, so standard readily available devices can be used.

Abstract: To create and maintain a NAT bind, data packets need to flow from a private network to the public network, therefore the device in the private network that will use the NAT bind has to send data packets. This is not always convenient, and the device may not send data packets frequently enough. The invention provides methods for creating, maintaining and discovering NAT binds, and a dedicated device therefor called an Internet Protocol faker that sends packets through the NAT, whereby the source fields of the packets have been edited to be the IP address and port of the real device. When the packets are received by the NAT and their headers analysed, the NAT is fooled into determining that the packets are being sent by the real device, thereby allowing the IP faker to open a NAT bind and maintain the NAT bind on behalf of the real device.

Abstract: In order for a voice call or other communication session to be provided between entities in two different address domains, at least one of which is private, then a media proxy has previously been used to forward media packets. The present invention provides a way in which such a media proxy can be eliminated from a call flow after the initial stages of the call. This is achieved in the case that a network address translator involved in the call has a particular characteristic, such as being a cone network address translator.

Abstract: There is an increasing need for many media gateway nodes to be used in enterprise networks. These media gateway nodes are typically connected behind a network address translator (NAT) which connects the enterprise network to a public communications network. Communication between the access nodes and a service provider network, which is also connected to the public network, is needed to provide communications services to end users. However, as the number of media gateways increases problems arise associated with increased traffic, complexity and use of resources at the NAT and at the service provider network. A solution is presented whereby a node is used to represent the media gateway nodes in the enterprise network.

Abstract: In order to carry out actions such as setting up a call from an entity in the address realm of one middlebox to an entity in the address realm of another middlebox, then a middlebox control node such as a call server is used. Previously, the middlebox control node has needed to have pre-configured information about all the middleboxes and which address realms they are associated with. The present invention provides one or more middlebox-identity-providing nodes which are separate from the middlebox control node, and which are more directly connected to the end users of the service than the middlebox control node. This provides greater flexibility in network design and removes the need for middlebox information to be pre-configured at the middlebox control node. Instead, this information is sent to the middlebox control node, as part of signalling messages, from middlebox-identity-providing nodes.