Abstract: Network services infrastructure systems and methods are disclosed. Policies for client access to a services network and network services available in the services network are enforced at client gateways. Once authenticated and authorized at a client gateway, a client of the services network may make its own network service(s) available in the services network, use network services provided by other clients of the services network, or both. The policies are centrally managed within a services network and distributed to the client gateways. Various registries which store policies, information associated with network services, and possibly other information may also be provided.

Abstract: Network services infrastructure systems and methods are disclosed. Policies for client access to a services network and network services available in the services network are enforced at client gateways. Once authenticated and authorized at a client gateway, a client of the services network may make its own network service(s) available in the services network, use network services provided by other clients of the services network, or both. The policies are centrally managed within a services network and distributed to the client gateways. Various registries which store policies, information associated with network services, and possibly other information may also be provided.

Abstract: Service-centric communication network monitoring apparatus and methods are provided. Service traffic, associated with a third-party service provided by an external service provider that is controlled independently of a communication network, is identified in communication traffic that is being transferred through that communication network. The identified service traffic is monitored, for example, to compile service usage statistics, to police usage of the service, to generate billing records for usage of the service, and/or to mirror the identified service traffic. A registry in which the service is registered may interact with a monitoring system of the communication network so as to establish monitoring for the service traffic.

Abstract: Secure communication network user mobility apparatus and methods are disclosed. A mobile user that is locally connected to a first communication network in which a service is provided, but is associated with an independently controlled second secure communication network, may be authenticated for access to the service by the second communication network. This allows seamless user mobility between networks in a partner extranet or other collection of trusted networks based on existing inter-network user mobility relationships. Access control, monitoring, and reporting, for example, and possibly other functions, may also be provided.

Abstract: Service-centric communication network monitoring apparatus and methods are provided. Service traffic, associated with a third-party service provided by an external service provider that is controlled independently of a communication network, is identified in communication traffic that is being transferred through that communication network. The identified service traffic is monitored, for example, to compile service usage statistics, to police usage of the service, to generate billing records for usage of the service, and/or to mirror the identified service traffic. A registry in which the service is registered may interact with a monitoring system of the communication network so as to establish monitoring for the service traffic.

Abstract: Service-centric communication network monitoring apparatus and methods are provided. Service traffic, associated with a third-party service provided by an external service provider that is controlled independently of a communication network, is identified in communication traffic that is being transferred through that communication network. The identified service traffic is monitored, for example, to compile service usage statistics, to police usage of the service, to generate billing records for usage of the service, and/or to mirror the identified service traffic. A registry in which the service is registered may interact with a monitoring system of the communication network so as to establish monitoring for the service traffic.

Abstract: Network service version management techniques are disclosed. Service access information, which is associated with access to a network service by a network service user, may be destined for a particular version of the network service. A determination is made as to whether a different version of the network service is accessible by the network service user. If so, then a further determination is made as to whether to select the different version of the network service to process the service access information. Any inconsistency between versions of the network service, such as different information requirements, can be handled by transforming received service access information. A replay function may also be provided, to have service access information again processed by the same or a different version of a network service. This function may be useful, for example, where a version of a service is rolled back or for debugging.

Abstract: The WS-Mobile Gateway is the interworking gateway between users of a mobile network and a WS extranet. The mobile gateway comprises a mobile end-user interface on the side of the mobile network, for user authentication and for separating the web services (WS) traffic from the non-WS traffic. A logic unit performs protocol conversion, address resolution, policy enforcement/definition and publishing operations on the WS traffic. An extranet interface processor routes the WS packets carrying control messages between the gateway and a WS controller which maintains the services registry, while the WS packets carrying data are routed between the mobile gateway and the WS provider.

Abstract: Systems and methods for managing network services between private networks are disclosed. Advertisement of network services which are available in a services network is controlled in accordance with a policy associated with each network service. Network service information is advertised to an external services network only for those network services which have associated policies permitting distribution of the network services through external networks. External network services may also or instead be advertised to a services network from one or more external services networks and subsequently made available in the services network.

Abstract: Public and private network service management systems and methods are disclosed. Rules for accessing a private services network in which network services are available are enforced so as to restrict access to the services network through a public network in accordance with policies of the services network. Use of network services by a client of the private services network through the public network is controlled according to network service access policies associated with the network services. Network services provided by clients of the services network which access the services network through a public network may also be offered to other clients of the services network through the services network and the public network.

Abstract: Network service version management techniques are disclosed. Service access information, which is associated with access to a network service by a network service user, may be destined for a particular version of the network service. A determination is made as to whether a different version of the network service is accessible by the network service user. If so, then a further determination is made as to whether to select the different version of the network service to process the service access information. Any inconsistency between versions of the network service, such as different information requirements, can be handled by transforming received service access information. A replay function may also be provided, to have service access information again processed by the same or a different version of a network service. This function may be useful, for example, where a version of a service is rolled back or for debugging.

Abstract: Network service usage management systems and methods are disclosed. Associations between network services and network service user groups are used to enable usage of network services by members of the network service user groups. The network service user groups are independently and separately manageable, to form respective virtual extranets for instance. Actual usage of the network services may be controlled in accordance with the associations, and possibly also in accordance with respective group policies for the network service user groups. Network service user groups may be self-managed within an administrative domain in which service provider systems supporting the network services are located, or externally managed. Group and service information for externally managed groups may be exchanged between equipment that is within and outside an administrative domain.

Abstract: Publication subscription service apparatus and methods are disclosed. Restricted forwarding of an electronic publication that is made available to a publication subscription service by a publishing entity may be provided by determining, based on a forwarding restriction established for the electronic publication by the publishing entity, whether the electronic publication is to be forwarded to subscriber systems that are associated with respective subscriptions to the publication subscription service. In a distributed publication subscription service, electronic publication forwarding decisions are independently made at gateway devices or access points that provide access to the service for subscriber systems.

Abstract: Service-centric communication network monitoring apparatus and methods are provided. Service traffic, associated with a third-party service provided by an external service provider that is controlled independently of a communication network, is identified in communication traffic that is being transferred through that communication network. The identified service traffic is monitored, for example, to compile service usage statistics, to police usage of the service, to generate billing records for usage of the service, and/or to mirror the identified service traffic. A registry in which the service is registered may interact with a monitoring system of the communication network so as to establish monitoring for the service traffic.

Abstract: Secure communication network user mobility apparatus and methods are disclosed. A mobile user that is locally connected to a first communication network in which a service is provided, but is associated with an independently controlled second secure communication network, may be authenticated for access to the service by the second communication network. This allows seamless user mobility between networks in a partner extranet or other collection of trusted networks based on existing inter-network user mobility relationships. Access control, monitoring, and reporting, for example, and possibly other functions, may also be provided.