Abstract: In one embodiment, a method includes receiving a selected communication session of a transaction associated with a prepaid end user, such that the transaction comprises a plurality of communication sessions. The method includes associating the selected communication session with the transaction and extracting data from the selected communication session associated with the transaction. The method includes generating a single advice of charge request for the transaction before the selected communication session is completed, the single advice of charge request comprising the extracted data from the selected communication session associated with the transaction.

Abstract: In one embodiment, a method includes receiving one or more packets of a communication session from one or more interfaces, such that the interface is a subscriber interface or a network interface. The method further includes associating the communication session to an end user with a source Internet Protocol (IP) address of the packet if the packet is received from the subscriber interface or to an end user with a destination IP address of the packet if the packet is received from the network interface.

Abstract: A method for billing end users in a peer-to-peer transaction in a network environment is provided that includes a client services packet gateway operable to communicate with a first end user and a second end user in order to facilitate the peer-to-peer transaction and a flow manager element operable to receive one or more packets of the peer-to-peer transaction from one or more interfaces, such that the interface is a subscriber interface or a network interface. The flow manager is further operable to associate a first session object with the first user and associate a second session object with the second user.

Abstract: An information service provider network includes a content gateway to process requests for information from a client terminal. The content gateway includes a router for receiving a request for information from the client terminal. The request includes a domain name and additional content. The router forwards the request according to the domain name to a selected one of a plurality of processors to further process the request. The selected one of the plurality of processors identifies an information source to satisfy the request in response to the additional content of the request.

Abstract: Maintaining a content category cache includes storing the content category cache at a gateway. The content category cache includes content category mappings, where a content category mapping associates content with one or more categories describing the content. A request requesting content for a user is received. One or more categories associated with the requested content are determined from a content category mapping of the content category cache. The requested content is filtered in accordance with the categories.

Abstract: Filtering content according to a filter plan includes receiving a request at a gateway on a data path between a client and a content server. The request requests content from the content server. One or more filter plans are obtained. The filter plans include a user filter plan of a user associated with the client. The requested content is filtered according to the filter plans.

Abstract: A computer network includes an inside network and an external network. The inside network may communicate with the external network over a first path through a first inner load balancer, a first set of firewalls, and a second outer load balancer. The inside network may also communicate with the external network over a second path through a second inner load balancer, a second set of firewalls, and a second outer load balancer. In normal operating conditions, traffic is flowing on both the first and second paths. Probes are passed over each path to monitor the operating status of the path. If a failure occurs in the first inner load balancer, its operating status is changed to standby and the second inner load balancer becomes active for the traffic previously handled by the first inner load balancer.

Abstract: A method for protecting firewall load balancers from a denial of service attack is provided. Packets are received by the firewall load balancer. Each packet has a source and a destination. The firewall load balancer is equipped with a connection database that can contain entries about the packets. Upon receipt of a packet, the connection database is queried to determine whether or not there is an entry for the received packet. If an entry is found in the database, the packet is forwarded to its destination. Otherwise, if the packet was received from a firewall, then a new connection entry for the packet is built and is saved to the connection database and the packet is forwarded on to its destination. If the packet does not have an entry (match) in the connection database and the packet was not received from a firewall, then the packet is forwarded to a firewall.

Abstract: A network includes a service selection gateway that receives information from a network user having a network locator address in order to establish a communications session and an identity of the network user. A client service gateway can receive a request from the network user upon establishment of the communications session. In response to the request, the client service gateway determines if there is an association in a local memory for the network locator address and an identity of the network user, obtains additional information associated with the network user, and processes the request according to the additional information. If an association is not stored in the local memory, the client service gateway sends a query for the identity of the network user to the service selection gateway.

Abstract: A method for communicating in a network environment is provided that includes receiving a request packet and positioning an identifier into the request packet. The identifier may be identified and correlated to a source that generated the request packet. An internet protocol (IP) address associated with the source may be positioned in the request packet before communicating the request packet to a next destination.

Abstract: A method for protecting firewall load balancers from a denial of service attack is provided. Packets are received by the firewall load balancer. Each packet has a source and a destination. The firewall load balancer is equipped with a connection database that can contain entries about the packets. Upon receipt of a packet, the connection database is queried to determine whether or not there is an entry for the received packet. If an entry is found in the database, the packet is forwarded to its destination. Otherwise, if the packet was received from a firewall, then a new connection entry for the packet is built and is saved to the connection database and the packet is forwarded on to its destination. If the packet does not have an entry (match) in the connection database and the packet was not received from a firewall, then the packet is forwarded to a firewall.

Abstract: A method for communicating in a wireless application protocol (WAP) network environment is provided that includes receiving a request packet at a WAP gateway and positioning an identifier into the request packet. A content switch then identifies the identifier and correlates the identifier to a source that generated the request packet. An internet protocol (IP) address associated with the source is positioned in the request packet before communicating the request packet to a next destination.

Abstract: An improved client network address translation (“NAT”) system is provided. A memory allocation scheme is provided for initializing connection control blocks with the client NAT addresses when a storage pool of connection control blocks are allocated. This avoids the costly overhead as connections are created and destroyed. Unlike the prior art solutions, once the connection control blocks of the present invention are allocated, they remain in effect until the storage subpool is deleted. Secondly, the allocation scheme enables a large pool of client NAT addresses and reclaim client NAT addresses as subpools are allocated and freed.

Abstract: An improved client network address translation (“NAT”) system is provided. Methods are provided for initializing connection control blocks with the client NAT addresses when a storage pool of connection control blocks are allocated. This avoids the costly overhead as connections are created and destroyed. Unlike the prior art solutions, once the connection control blocks of the present invention are allocated, they remain in effect until the storage subpool is deleted. Secondly, in order to provide as large a pool of client NAT addresses as possible, methods are provided for using intervals to allocate and reclaim client NAT addresses as subpools are allocated and freed.

Abstract: An information service provider network includes a content gateway to process requests for information from a client terminal. The content gateway includes a router for receiving a request for information from the client terminal. The request includes a domain name and additional content. The router forwards the request according to the domain name to a selected one of a plurality of processors to further process the request. The selected one of the plurality of processors identifies an information source to satisfy the request in response to the additional content of the request.

Abstract: An information service provider network includes a content gateway to process requests for information from a client terminal. The content gateway includes a router for receiving a domain name server query from an originator associated with a request for information. The router including a database defining a relationship between domain names and addresses associated with accelerated servicing of requests. The router determines whether the domain name of the domain name server query is indexed in the database. The domain name is qualified in response to the domain name being in the database. If qualified, the router sends an address to the originator of the query corresponding in the database to the domain name. The address is to a processor associated with the router that performs accelerated services on the request.

Abstract: An ALPS tunneling protocol (ATP) is used to transport airline reservation data over ATP virtual circuits extending between branch and data center resources of an air-line reservation internetwork system. The resources include branch and data center routers, along with AX.25/EMTOX virtual circuits, bordering a TCP/IP network cloud of the internetwork system. The ATP protocol includes a set of primitives used to establish ATP virtual circuits for transporting ATP-encapsulated frames between the branch and data center routers. The frames are encapsulated in accordance with an encapsulation technique of the ATP protocol that enables maintenance of airline reservation data frame boundaries over the TCP/IP network and correlation between ATP virtual circuit end-points in the routers.