Abstract: A method and apparatus for allowing telephony or other types of media communications and services to be provided for a device (24) having a private network address that resides behind a firewall and network address and port translation (NAPT) module (which is unaware of the underlying protocol for the communications and services). Examples of the underlying protocol includes the Session Initiation Protocol (SIP) and Real-Time Protocol (RTP). A path through the firewall and NAPT module is defined by use of keep-alive messages communicated through the firewall and NAPT module. Addresses that are allocated by the firewall and NAPT module are associated with the device (24) for both signaling and media communications. A feature of the firewall that enables the provision of telephony and media communications through the firewall that is protocol-unaware is that the firewall allows responses to messages initiated by the device back through the firewall.

Abstract: A system to dynamically protect access to a first network receives a data unit containing a source address indicating a source of the data unit. The source address is matched with information stored in the system, and entry of the data unit to the first network is enabled or denied based on the matching. It is determined whether the data unit contains an identifier of a codec type that matches a stored codec type, and occurrence of an attack of the first network is indicated in response to determining that the identifier is of a codec type that does not match the stored codec type.

Abstract: A method and apparatus for allowing telephony or other types of media communications and services to be provided for a device (24) having a private network address that resides behind a firewall and network address and port translation (NAPT) module (which is unaware of the underlying protocol for the communications and services). Examples of the underlying protocol includes the Session Initiation Protocol (SIP) and Real-Time Protocol (RTP). A path through the firewall and NAPT module is defined by use of keep-alive messages communicated through the firewall and NAPT module. Addresses that are allocated by the firewall and NAPT module are associated with the device (24) for both signaling and media communications. A feature of the firewall that enables the provision of telephony and media communications through the firewall that is protocol-unaware is that the firewall allows responses to messages initiated by the device back through the firewall.

Abstract: A method and apparatus is provided to allow telephony or other types of media communications and services to be provided for a device (24) having a private network address that resides behind a firewall and network address and port translation (NAPT) module (which is not aware of the underlying protocol for the communications and services). Examples of the underlying protocol includes the Session Initiation Protocol (SIP) and Real-Time Protocol (RTP). A path through the firewall and NAPT module is defined by use of keep-alive messages communicated through the firewall and NAPT module. Addresses that are allocated by the firewall and NAPT module are associated with the device (24) for both signaling and media communications. A feature of the firewall that enables the provision of telephony and media communications through the firewall that is protocol-unaware is that the firewall allows responses to messages initiated by the device back through the firewall.

Abstract: A method and apparatus is provided to allow telephony or other types of media communications and services to be provided for a device having a private network address that resides behind a firewall and network address and port translation (NAPT) module (which is not aware of the underlying protocol for the communications and services). Examples of the underlying protocol includes the Session Initiation Protocol (SIP) and Real-Time Protocol (RTP). A path through the firewall and NAPT module is defined by use of keep-alive messages communicated through the firewall and network address translator. Addresses that are allocated by the firewall and NATP module are associated with the device for both signaling and media communications. A feature of the firewall that enables the provision of telephony and media communications through the firewall that is protocol-unaware is that the firewall allows responses to messages initiated by the device back through the firewall.

Abstract: A method and apparatus of communicating over a data network includes providing a user interface in a control system for call control and to display information relating to a call session. The control system communicates one or more control messages (e.g., Session Initiation Protocol or SIP messages) over the data network to establish a call session with a remote device in response to receipt of a request through the user interface. One or more commands are transmitted to a voice device associated with the control system to establish the call session between the voice device and the remote device over the data network. A Real-Time Protocol (RTP) link may be established between the voice device and the remote device.

Abstract: A method and apparatus of protecting a first network from unauthorized access includes storing profile information for each call session, and determining if an unauthorized access of the first network is occurring based on the profile information. The profile information includes a predetermined threshold indicating a maximum acceptable rate of incoming data units from an external network to the first network. If the incoming data unit rate exceeds the predetermined threshold, then a security action is taken, such as generating an alarm or preventing further transport of data units from the external network to the first network.

Abstract: A system to dynamically protect access to a first network receives a data unit containing a source address indicating a source of the data unit. The source address is matched with information stored in the system, and entry of the data unit to the first network is enabled or denied based on the matching. It is determined whether the data unit contains an identifier of a codec type that matches a stored codec type, and occurrence of an attack of the first network is indicated in response to determining that the identifier is of a codec type that does not match the stored codec type.

Abstract: A method and apparatus of protecting a first network from unauthorized access includes storing profile information for each call session, and determining if an unauthorized access of the first network is occurring based on the profile information. The profile information includes a predetermined threshold indicating a maximum acceptable rate of incoming data units from an external network to the first network. If the incoming data unit rate exceeds the predetermined threshold, then a security action is taken, such as generating an alarm or preventing further transport of data units from the external network to the first network.

Abstract: A method and apparatus for communicating data units (e.g., Internet Protocol or IP packets) between devices on one or more networks includes storing address and/or port translation information, and receiving a data unit having a source address and port and a destination address and port. Both the source and destination addresses and/or ports are translated, with the data unit containing the translated source and destination addresses and/or ports transmitted to a destination.

Abstract: A method and apparatus comprises a controller to establish a call session between a first endpoint and a second endpoint. Without exchanging call setup signaling with the first endpoint, the controller is able to pivot the call session from the second endpoint to another endpoint so that media communication can occur between the first and other endpoints. The first endpoint remains “anchored” in the call session. The pivot is accomplished by sending a call request to the other endpoint and exchanging messages with a media portal that controls the communication of packets between endpoints. The media portal contains a network address and translation module that performs translation of addresses and/or ports of media packets communicated from one endpoint to another.

Abstract: A method and apparatus of communicating over a data network includes providing a user interface in a control system for call control and to display information relating to a call session. The control system communicates one or more control messages (e.g., Session Initiation Protocol or SIP messages) over the data network to establish a call session with a remote device in response to receipt of a request through the user interface. One or more commands are transmitted to a voice device associated with the control system to establish the call session between the voice device and the remote device over the data network. A Real-Time Protocol (RTP) link may be established between the voice device and the remote device.

Abstract: A communications system (10) includes a packet-based data network (12) that is coupled to various network elements (14, 16, 18, 20, 22, and 34) that are capable of participating in audio-based call sessions over the data network (12). The audio-based call sessions may be defined according to a Session Initiation Protocol (SIP) or to another type of protocol (e.g., H. 323). The network elements (14, 18, 22, and 34) are also capable of participating in text-based chat sessions. Text messages exchanged in such text-based chat sessions are earned in messages that are defined according to the protocol for audio-based call sessions. In one example, such messages may be SIP Info messages. The SIP Info messages carrying the text messages may be communicated either during an established audio-based call session or outside of an audio-based call session. Using SIP (or another signal protocol) messages to carry the text messages allows such messages to be conveniently transported through a firewall system.

Abstract: A method and apparatus of protecting a first network from unauthorized access includes storing profile information for each call session, and determining if an unauthorized access of the first network is occurring based on the profile information. The profile information includes a predetermined threshold indicating a maximum acceptable rate of incoming data units from an external network to the first network. If the incoming data unit rate exceeds the predetermined threshold, then a security action is taken, such as generating an alarm or preventing further transport of data units from the external network to the first network.

Abstract: A method and apparatus comprises a controller to establish a call session between a first endpoint and a second endpoint. Without exchanging call setup signaling with the first endpoint, the controller is able to pivot the call session from the second endpoint to another endpoint so that media communication can occur between the first and other endpoints. The first endpoint remains “anchored” in the call session. The pivot is accomplished by sending a call request to the other endpoint and exchanging messages with a media portal that controls the communication of packets between endpoints. The media portal contains a network address and translation module that performs translation of addresses and/or ports of media packets communicated from one endpoint to another.

Abstract: A method and apparatus for communicating data units (e.g., Internet Protocol or IP packets) between devices on one or more networks includes storing address and/or port translation information, and receiving a data unit having a source address and port and a destination address and port. Both the source and destination addresses and/or ports are translated, with the data unit containing the translated source and destination addresses and/or ports transmitted to a destination.

Abstract: A method and apparatus is provided to allow telephony or other types of media communications and services to be provided for a device having a private network address that resides behind a firewall and network address and port translation (NAPT) module (which is not aware of the underlying protocol for the communications and services). Examples of the underlying protocol includes the Session Initiation Protocol (SIP) and Real-Time Protocol (RTP). A path through the firewall and NAPT module is defined by use of keep-alive messages communicated through the firewall and network address translator. Addresses that are allocated by the firewall and NATP module are associated with the device for both signaling and media communications. A feature of the firewall that enables the provision of telephony and media communications through the firewall that is protocol-unaware is that the firewall allows responses to messages initiated by the device back through the firewall.

Abstract: A method of establishing call termination to a mobile station of a called subscriber in a fixed wireless communication network which can be only allowed to receive call terminations in one of its HomeZones. The identification and location of the MS is ascertained prior to routing a call to the switching center serving the MS. The radio link between the serving switching center and the MS is maintained and used to terminate a call if the MS is determined to be within a HomeZone. The present invention eliminates the need to page a MS twice thereby speeding up the call termination. The MS provides its location area code and Cell ID to the serving/visited mobile switching center to facilitate the SCP identifying the MS's location prior to routing the call termination to the MS. The HomeZone call may be routed to a mobile station voicemail if it is determined to be outside its HomeZones, or, terminated to the mobile station but at a higher wireless billing rate.

Abstract: A method for messaging during Inter-VLR location updates wherein a mobile station (MS) sends to a Visitor Location Register (VLR) a Location Update message having a Temporary Mobile Subscriber Identity (TMSI) number embedded therein. The VLR records the TMSI and sends to the MS a Location Update Accept message void of a TMSI number.

Abstract: A system and method for increasing capacity of a cellular system by reducing call overhead processing and transmission congestion previously required in updating a subscriber's mobile station data position as the subscriber moves among locations within a geographic area served by a network service provider is presented. A predetermined N number of copies of mobile station subscriber data is distributed among multiple Visiting Location Registers (VLRs) within the area served by a cellular system. Unlike previous systems, when mobile stations traverse location boundaries, the current VLR corresponding to the current location does not need to update the subscriber data if that data has not changed since the subscriber was last in that location.