Abstract: The present invention relates to systems, apparatus and methods for the computation and use of session, device and/or user signatures for determining communications session types, device types, and/or user signatures. An exemplary system in accordance with an embodiment of the invention includes: a first device, the first device including: a receiver that receives a first set of session control messages belonging to a first communications session, said first set of session control messages including at least one session control message; a feature extractor that extracts a first set of device features from the first set of session control messages; and a first neural network that determines a device signature from the first set of session control messages based on said set of device features.

Abstract: The present invention relates to systems, apparatus and methods for the computation and use of session, device and/or user signatures for determining communications session types, device types, and/or user signatures. An exemplary method in accordance with an embodiment of the invention includes: receiving a first set of session control messages belonging to a first communications session, the first set of session control messages including at least one session control message; extracting a first set of features from the first set of session control messages; operating one or more neural networks to identify a group session signature to which the first set of session control messages corresponds based on the first set of features, the identified group session signature being one of a plurality of group session signatures.

Abstract: The present invention relates to communications methods, apparatus and systems for providing media micro flow services in a scalable manner using SDN principles. In an exemplary method embodiment a session border controller in a SDN network is operated to receive first signaling information for establishing a first media session, the first media session including a first media packet flow that passes through a first programmable switch of the SDN network; generate instructions to implement a media micro flow service on the first programmable switch through which the first media packet flow passes; and send the instructions to a SDN controller which controls the first programmable switch.

Abstract: The present invention relates to communications methods and apparatus for determining whether a received call originated from an artificial intelligence system and the call handling procedures to be used on the received call based on whether or not the call was determined to have been originated from an artificial intelligence system. An exemplary method embodiment includes the steps of: receiving a first call at a communications device including a first artificial intelligence system; determining whether said first call originated from a second artificial intelligence system; and when said first call is determined to have originated from a second artificial intelligence system performing one or more artificial intelligence call handling operations.

Abstract: The present invention relates to communications methods, apparatus and systems for providing media micro flow services in a scalable manner using SDN principles. In an exemplary method embodiment a session border controller in a SDN network is operated to receive first signaling information for establishing a first media session, the first media session including a first media packet flow that passes through a first programmable switch of the SDN network; generate instructions to implement a media micro flow service on the first programmable switch through which the first media packet flow passes; and send the instructions to a SDN controller which controls the first programmable switch.

Abstract: The present invention relates to methods and apparatus for dynamically detecting and/or mitigating threats in communications systems. Exemplary methods and apparatus of the present invention allow for a combination of automated and operator controlled responses to threats. While an operator is provided an opportunity to provide input on how to respond to a threat, after one or more threats of a given type are identified, the system will automatically take corrective action without waiting for operator input and/or in the absence of operator input following notification of a threat.

Abstract: The present invention relates to methods, systems and apparatus for mitigating denial of service attacks. One exemplary embodiment in accordance with the invention is a method of operating a communication system including the steps of receiving at a first device packets of a first packet flow; sending, from the first device, control information to a switch through which packets of the first packet flow pass or to a control device which controls the switch, the control information including a mask corresponding to a range of expected packet values to be used for determining which packets in the first packet flow should be dropped.

Abstract: Methods and apparatus for providing load balancing in a Software Defined Network (SDN). An exemplary embodiment includes the steps of: receiving by a Session Border Controller (SBC) cluster leader a first SIP invite message including a source IP address, assigning responsibility for processing the received message to a first SBC in a cluster of SBCs, and initiating by the first SBC installation of a first flow table entry into SDN switches used to control packet routing in an SDN network, the first flow table entry controlling SDN switches into which the first flow table entry is installed to replace a destination IP address in received packets which satisfy matching criteria of the first flow table entry with a first SBC IP ingress address of the first SBC and to route received packets matching the criteria of the first flow table entry based on the first SBC IP ingress address.

Abstract: Communications methods, apparatus and systems for detecting a status condition indicative of a failure of a media processing entity and providing media redirection to increase media resource function availability. One embodiment of the present invention is a method that includes directing, by a first Session Border Controller (SBC), a first media call flow of a first call through a first media content processing entity to a second SBC, detecting, at one of said first or second SBCs, a status condition indicative of a failure condition for the first media content processing entity, and redirecting, by the SBC that detects the status condition indicative of a failure condition, the first media call flow for the first call so that the first media call flow passes through a second media content processing entity instead of through the first media content processing entity without terminating the first call.

Abstract: Communications methods, apparatus and systems for detecting a status condition indicative of a failure of a media processing entity and providing media redirection to increase media resource function availability. One embodiment of the present invention is a method that includes directing, by a first Session Border Controller (SBC), a first media call flow of a first call through a first media content processing entity to a second SBC, detecting, at one of said first or second SBCs, a status condition indicative of a failure condition for the first media content processing entity, and redirecting, by the SBC that detects the status condition indicative of a failure condition, the first media call flow for the first call so that the first media call flow passes through a second media content processing entity instead of through the first media content processing entity without terminating the first call.

Abstract: The present invention relates to communications methods, apparatus and systems for providing media micro flow services in a scalable manner using SDN principles. In an exemplary method embodiment a session border controller in a SDN network is operated to receive first signaling information for establishing a first media session, the first media session including a first media packet flow that passes through a first programmable switch of the SDN network; generate instructions to implement a media micro flow service on the first programmable switch through which the first media packet flow passes; and send the instructions to a SDN controller which controls the first programmable switch.

Abstract: The present invention relates to methods, systems and apparatus for mitigating denial of service attacks. One exemplary embodiment in accordance with the invention is a method of operating a communication system including the steps of receiving at a first device packets of a first packet flow; sending, from the first device, control information to a switch through which packets of the first packet flow pass or to a control device which controls the switch, the control information including a mask corresponding to a range of expected packet values to be used for determining which packets in the first packet flow should be dropped.

Abstract: The present invention relates to methods, systems and apparatus for mitigating denial of service attacks. One exemplary embodiment in accordance with the invention is a method of operating a communication system including the steps of receiving at a first device packets of a first packet flow; sending, from the first device, control information to a switch through which packets of the first packet flow pass or to a control device which controls the switch, the control information including a mask corresponding to a range of expected packet values to be used for determining which packets in the first packet flow should be dropped.

Abstract: Methods and apparatus for providing load balancing in a Software Defined Network (SDN). An exemplary embodiment includes the steps of: receiving by a Session Border Controller (SBC) cluster leader a first SIP invite message including a source IP address, assigning responsibility for processing the received message to a first SBC in a cluster of SBCs, and initiating by the first SBC installation of a first flow table entry into SDN switches used to control packet routing in an SDN network, the first flow table entry controlling SDN switches into which the first flow table entry is installed to replace a destination IP address in received packets which satisfy matching criteria of the first flow table entry with a first SBC IP ingress address of the first SBC and to route received packets matching the criteria of the first flow table entry based on the first SBC IP ingress address.

Abstract: Communications methods, apparatus and systems for detecting a status condition indicative of a failure of a media processing entity and providing media redirection to increase media resource function availability. One embodiment of the present invention is a method that includes directing, by a first Session Border Controller (SBC), a first media call flow of a first call through a first media content processing entity to a second SBC, detecting, at one of said first or second SBCs, a status condition indicative of a failure condition for the first media content processing entity, and redirecting, by the SBC that detects the status condition indicative of a failure condition, the first media call flow for the first call so that the first media call flow passes through a second media content processing entity instead of through the first media content processing entity without terminating the first call.

Abstract: Independent IMS and WebRTC communications networks are integrated via an applications server including IMS and WebRTC functionality. A user equipment device including IMS and WebRTC capability is registered via the same application server with both the IMS and WebRTC networks. The application server is configured to make a routing determination whether to route a communications session over an IMS communications path or an RTC communications path when it is determined that parallel independent paths are available.

Abstract: Independent IMS and WebRTC communications networks are integrated via an applications server including IMS and WebRTC functionality. A user equipment device including IMS and WebRTC capability is registered via the same application server with both the IMS and WebRTC networks. The application server is configured to make a routing determination whether to route a communications session over an IMS communications path or an RTC communications path when it is determined that parallel independent paths are available.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for load balancing among VOIP servers. An identity table includes an identity entry for a plurality of servers, each identity entry comprising a FQDN and load balancing information. A persistence table stores persistence entries indicative of a persistent connection between a client and a server. Updated load balancing information determined by the first server is received. The identity table is updated based on the updated load balancing information. A service request is received from a client. If the client is not associated with a persistence entry, a second server is selected from the plurality of servers based on load balancing information for each identity entry in the identity table. A persistence entry is stored indicative of a persistent connection between the client and the selected second server, the persistence entry comprising a FQDN and an identifier for the client.

Abstract: A system and method is provided for accounting and authentication that communicates via RADIUS protocol. Multiple RADIUS clients are associated with multiple sets of RADIUS protocol identifiers, such that the number of available RADIUS protocol identifiers available for services request is increased.

Abstract: A composition for eliciting an immune response to an immunogen comprises an immunogen in combination with a mast cell membrane activator such as compound 48/80. Any suitable immunogen may be employed, such as an antibody-inducing determinant, a lipid, a peptide (e.g., an antibody-inducing peptide), a carbohydrate, an immunogen derived from a virus or cancer cell, etc. Methods of use are also described.