Abstract: The invention relates to a protection unit (15) for protecting a packet-based network from attacks, comprising: a signature analyzer (5) for analyzing a packet stream (6) received in a security border node (2a) of the packet-based network (1) and for detecting attacks by comparing signatures of the packet stream (6) with a set of signatures of previously identified attacks, an anomaly detector, in particular a statistical analyzer (7), for detecting anomalies in the packet stream (6), and a signature interference unit (9) for updating the set of signatures when anomalies in the packet stream (6) are detected, the updated set of signatures (12) being subsequently used for performing the signature analysis. A distribution unit (13) distributes at least one signature of the updated set of signatures (12) to at least one further, preferably to each further security border node of the packet-based network (1).

Abstract: A requested communication session on a user terminal of a subscriber in a communication network via one of a plurality of access networks. The proposed method comprises the steps of checking for available network resources on all active access networks of the plurality of access networks usable by the subscriber; freeing network resources in one or a plurality of the active access networks by transferring at least one already established communication session from a first access network of the plurality of access networks to a second access network of the plurality of access networks; allocating freed network resources of the first access network for the requested communication session; and establishing the requested communication session using the allocated resources. In this way, utilization of available network resources is optimized for a given subscriber while obviating the need for complex technical decisions as to setting up or terminating communication sessions by the user.

Abstract: In LMDS systems the downlink bandwidth is continuously varying in time because each downlink burst uses a network termination individual modulation and coding (Physical layer) scheme, the higher layer (IP) functions cannot perform service priority respecting traffic shaping. The invention proposes mainly to combine both framing and IP layer functions within one inter-layer framer. The combination of both information ensures QoS provisioning in case of multi-modulation and multi-coding environment. The QoS queue server gets always informed on the actual amount of available data frame bits from the downlink framer and therefore, the QoS queue server is able to decide on the next IP packet or packet fraction to transport. This decision is always based on service priority aspects. As soon as the downlink frame is filled—supposing that the maximum downlink frame rate is always lower than the internal processing in the inter-layer framer—the QoS server stops the data delivery.

Abstract: A method of performing a handover of a real time communication session, as well as a call signaling server for performing the handover of the real time communication session. The real time communication session is established between a first terminal of a subscriber and a terminal of a communication partner of the subscriber through a packet network. The handover is performed from the first terminal of the subscriber to a second terminal of the subscriber, whereby the first terminal of the subscriber is associated with a first access network of the packet network and the second terminal of the subscriber is associated with a second access network of the packet network. A call signaling server generates, in response to a trigger, control messages regarding the processing of the handover. The control messages are received and processed at a network node. A communication session with the second terminal of the subscriber is established.

Abstract: A method of evaluating an additional service for a device (11) of a user of a telecommunication system is described. The device (11) supports one or more basic services. The kind of basic service/s being provided by the device (11) is examined. An additional service that could be combined with the basic service/s already supported by the device (11) is searched.

Abstract: A method for supporting mobility of at least one mobile telecommunications terminal (5.1-5.3) in operative connection with a telecommunications network (2) having a plurality of telecommunications resources (3.1-3.6) accessible via a plurality of access networks (4.1-4.3) and associated access technologies (4.1a,b-4.3a,b) in operative connection with the telecommunications network (2), wherein the mobile telecommunications terminal (5.1-5.3) is provided with information about access networks (4.1-4.3) and access technologies (4.1a,b-4.3a,b) available at least at its present geographic location for choosing an access to the telecommunications network (2) via one of the respective access networks (4.1-4.3) and associated access technologies (4.1a,b-4.3a,b) in accordance with specifications of at least one telecommunications resource (3.1-3.6) requested by the mobile telecommunications terminal (5.1-5.3), and wherein the information are provided independently of the access networks (4.1-4.

Abstract: In a multiple access system, transmit authorizations are transmitted at a high rate in order to fulfil the requirements relating to the delay jitter. However, the transmit authorizations are transmitted only as long as is necessary. Following the reception of a data packet of a terminal, the transmission of further transmit authorizations for the same terminal is interrupted. Only after a specific time period, i.e. shortly before the expected transmission of a data packet of the same terminal, are transmit authorizations again sent to this terminal at a high data rate. In this way short time periods, in which transmit authorizations are sent to a terminal at a high rate, alternate with long time periods in which no transmit authorizations are sent to this terminal. In the long time periods, for example, transmit authorizations can be sent consecutively, in each case in short time periods, to one, two or more further terminals. In this way the bandwidth utilization is optimised.

Abstract: The invention concerns a method of providing a Push-to-Talk (=PTT) service within one or more telecommunication networks (1, 2, 3, 4) by means of a gateway-server (5) which sets up a virtual connection per PTT connection. The virtual connection provides information about the participating terminals (10, 20, 30, 40) of the PTT connection, the service type to reach each terminal (10, 20, 30, 40), and the connection status of each terminal (10, 20, 30, 40). Thus, the gateway-server (5) is capable of providing the PTT service within and/or across different telecommunication networks comprising radio access telecommunication networks (1), fixed wire-line telecommunication networks (2), circuit-switched telecommunication networks (3), and packet-switched telecommunication networks (4).

Abstract: The invention concerns a method for providing features to the user of a telephone (HSA1, . . . HSAn, HSS1, . . . HSSm) that is connected to a central unit (CU) whereby, if said telephone (HSA1, . . . HSAn, HSS1, . . . HSSm) is currently not interconnected via the central unit (CU), said telephone (HSA1, . . . HSAn, HSS1, . . . HSSm) notifies the central unit (CU) at least about certain kinds of user activities, in case of such notification the central unit (CU) checks whether it is currently interconnected to another telephone assigned to the same subscriber as said notifying telephone (HSA1, . . . HSAn, HSS1, . . . HSSm) and in case of the existence of such interconnection, the notifying telephone (HSA1, . . . HSAn, HSS1, . . . HSSm) is interconnected in parallel to this interconnection, and if said notifying telephone (HSA1, . . . HSAn, HSS1, . . . HSSm) is not a telephone for digital communication, the other telephone is a telephone for digital communication.

Abstract: A method to establish an Internet connection between a first (1) and a second (2) user agent is described, wherein a NAT-table entry in a controllable NAT (7) located in the Internet (3) is generated, wherein said NAT-table entry comprises public IP-address:Port pairs that are communicated to the user agents (1, 2), wherein the user agents (1, 2) use said public IP-address:port pairs for establishing an Internet connection between each other via the controllable NAT (7).

Abstract: The invention relates to a method for exchanging messages between an end subscriber and a text message server in a telecommunication network via even a conventional telephone device, which is connected to the text message server via a gateway with browser, which has means for voice recognition and for converting text into speech, and a service computer, wherein according to the end subscriber's instructions given by speech and/or via the keypad of the telephone device the gateway with browser contacts the service computer and from there downloads an electronic document, the gateway with browser converts indications, instructions and/or text messages from text into speech by means of the electronic document and outputs them on the telephone device and the gateway with browser receives instructions and/or messages which the end subscriber has input by speech and/or via the keypad of the telephone device, voice messages being converted into text messages in the gateway with browser, and also a telecommunication

Abstract: The present invention concerns a server and a method for transferring a message originating in a telecommunication network to an addressed subscriber. A telecommunication terminal sends a message to a server. The server inserts an address allocated to a TV set of the address subscriber to the message or encrypts the message by means of an encryption key allocated to a TV set of the address subscriber. In the following, a headend node of a TV broadcast network inserts the message into a TV signal and broadcasts the TV signal via a TV broadcast channel. A receiver unit assigned to the TV set of the addressed subscriber filters out the message and outputs the message on the TV set.

Abstract: The present invention relates to a method and devices for allocating transmission capacity of a shared medium in a multipoint-to-point network, in which the shared medium is provided for a plurality of terminating devices for transmitting data to one point and a network-side medium access controller is provided for allocating transmission capacity of the medium to the terminating devices, comprising the steps of: grouping of data to be transmitted on the medium in a first and in a second data category if the data conform or do not conform, respectively, to a specified criterion, allocation of transmission capacity of the medium for the first data category by the medium access controller, transmitting the data of the first data category on the medium with account being taken of the allocated transmission capacity, and transmitting the data of the second data category on the medium.

Abstract: A method for assigning transmitting grants to terminals of a communications network serving the bi-directional transfer of packet-orientated data with a management system and a central station is cited. In the central station there is an access control unit regulating the data traffic from the terminals to the central station, to which access control unit information on data ready for transmitting transmitted by the terminals is fed and by which transmitting grants are transferred to the terminals according to a defined, standardised protocol. For a generally valid method irrespective of the type of communications network the access control unit is equipped with a first adaptation module, a processor and a second adaptation module. The information from the terminals is fed to the first adaptation module. This feeds to the processor identifiers of the individual terminals and the number of bits or bytes reported as ready for transmitting.

Abstract: The object of the invention is to provide a simplified QoS guarantee in bidirectional point-to-multipoint access networks, such as LMDS. This object is attained by a QoS controller containing at least one software module which is adapted to perform at least one QoS processing step for both the uplink and the downlink. In the case of the QoS controller according to the invention, the same QoS controller and the same software module are used for at least a major part of the connection both in the uplink and the downlink. This has the advantage, inter alia, that a nearly symmetrical behavior is achieved for the uplink and downlink.

Abstract: In LMDS systems the downlink bandwidth is continuously varying in time because each downlink burst uses a network termination individual modulation and coding (Physical layer) scheme, the higher layer (IP) functions cannot perform service priority respecting traffic shaping. The invention proposes mainly to combine both framing and IP layer functions within one inter-layer framer. The combination of both information ensures QoS provisioning in case of multi-modulation and multi-coding environment. The QoS queue server gets always informed on the actual amount of available data frame bits from the downlink framer and therefore, the QoS queue server is able to decide on the next IP packet or packet fraction to transport. This decision is always based on service priority aspects. As soon as the downlink frame is filled—supposing that the maximum downlink frame rate is always lower than the internal processing in the inter-layer framer—the QoS server stops the data delivery.

Abstract: A method is disclosed for assigning time slots in a system comprising a plurality of subscriber facilities (NT) connected to a center (HUB) via a common medium, the common medium being divided into a plurality of frequency or wavelength channels which are subdivided into time slots. The center assigns time slots to at least part of the subscriber facilities by specifying one channel and one time-slot number for each assigned time slot. After each time slot used, each subscriber facility involved changes to the next allocated channel. Each subscriber facility involved sends information in the time slot with the next assigned time-slot number. Also disclosed are a system, a center, and a subscriber facility for carrying out this method.

Abstract: A procedure for operating a server (SERV) that supplies subscribers with data streams of different contents (CONT1 to CONT3), as well as a server and a control unit for executing the procedure. The contents (CONT1 to CONT3) are each stored in a memory unit or in several memory units of the server, and in order to supply a subscriber (SUB1 to SUB8) with a data stream of a particular content, the particular content is read out from the memory unit or from one of the memory units in which the content is stored, and sent to the subscriber as a data stream. A Busy list is set up for each of the contents (CONT1 to CONT3) stored in the memory units (DSD1 to DSD5) of the server (SERV). Each memory unit (DSD1 to DSD4) in which a content is stored, is allocated to the Busy list of the content stored in it. Each memory unit (DSD5) that is not at that time needed for supplying a subscriber, is allocated to a Free list.

Abstract: An access control unit to interface one ATM core network and at least one bidirectional access network is provided, which includes means to perform ATM signalling and resource management to provide dynamically adjustable ATM switched virtual connections (SVC) for subscribers connected to the access network. The central access control unit processes ATM signalling and resource management to enable e.g. switched virtual connection over HFC. During the ATM signalling phase the applications negotiate the required resources which the central access control unit of HFC extracts. The central access control unit has the ability to allow or reject a connection (SVC) setup. As soon as the a new SVC is established the access control unit performs on the ATM layer the installation of the negotiated ATM connection values (VPI (virtual path identifier), VCI (virtual channel identifier), . . . ) at the different involved HFC network elements.

Abstract: In a communications system the allocation of available resources is done by means of time frames of variable length. Adaptive reserving of resources is carried out in cycles. Calculation of the current time frame length is based, for example, on the current amount of traffic. In a communications system with low traffic volume short time frames are used for short access delays and short access times. In a communications system with high traffic volume long time frames are used taking into account a predetermined maximum time frame length, in order on the one hand to increase fairness and on the other hand to increase the system performance. A resources allocating or assigning algorithm is used, which carries out dynamic allocation or assignment of resources by suitable choice of time frame lengths. A time slot of a predetermined length, for example, acts as basic unit.