Abstract: A method for remote authentication dial-in user service (RADIUS) topology hiding includes, at a RADIUS signaling router including at least one message processor, receiving a RADIUS message. The method further includes determining whether RADIUS topology hiding is indicated for the RADIUS message. The method further includes, in response to determining that RADIUS topology hiding is indicated for the message, performing RADIUS topology hiding for the message. The method further includes forwarding the message to an intended recipient.

Abstract: A method for access network signaling protocol interworking for user authentication includes receiving, from a node in an access network, a message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol. The method further includes, in response to receiving the message, formulating a message formatted according to a signaling protocol of a cellular network, the message including the authentication payload formatted according to the authentication protocol. The method further includes forwarding the message formatted according to the signaling protocol of the cellular network to a node in the cellular network that implements the authentication protocol, the message including the authentication payload formatted according to the authentication protocol.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for access network protocol interworking and authentication proxying. One method includes receiving an authentication request from a node in an access network for authenticating a user using cellular network authentication. The method further includes, in response to the request, using a native protocol of the cellular network to obtain an authentication challenge from a node in the cellular network. The method further includes communicating the authentication challenge to the node in the access network. The method further includes receiving a response to the authentication challenge from the node in the access network. The method further includes determining whether the response matches an expected response. The method further includes, in response to determining that the response matches the expected response, communicating an indication of successful authentication to the node in the access network.

Abstract: According to one aspect, the subject matter described herein includes a system for Diameter routing and firewall filtering. The system includes a Diameter signaling router comprising a network interface for receiving, from a first Diameter node, a first Diameter message having Diameter information. The Diameter signaling router also includes a firewall module for determining whether the first Diameter message satisfies a firewall policy. The firewall policy is based on at least a portion of the Diameter information in the first Diameter message. The Diameter signaling router further includes a routing module for forwarding at least a portion of the first Diameter message towards a second Diameter node in response to the first Diameter message satisfying the firewall policy.

Abstract: Methods, systems, and computer readable media for remote authentication dial in user service (RADIUS) message loop detection and mitigation are disclosed. One method includes receiving, at a RADIUS proxy node, a RADIUS signaling message. The method further includes determining whether the RADIUS signaling message includes an attribute with a host identifier corresponding to the RADIUS proxy node. In response to determining that the RADIUS signaling message includes the attribute that includes the host identifier corresponding to the RADIUS proxy node, performing a RADIUS loop mitigation action for the RADIUS signaling message.

Abstract: A method for utilizing a Diameter proxy agent to communicate short message service (SMS) messages in a Diameter network includes receiving, from an SMS service center via a Diameter interface, a mobile subscriber location information request message directed to a home subscriber server (HSS), wherein mobile subscriber location information request message is associated with a recipient mobile subscriber. The method further includes querying a number portability database to determine whether the recipient mobile subscriber has been ported to a foreign network and forwarding the mobile subscriber location information request message toward a gateway associated with the foreign network In response to determining the recipient mobile subscriber has been ported to the foreign network. The method also includes, in response to determining the recipient mobile subscriber has not been ported to the foreign network, forwarding the request message to the HSS in the first network or the foreign network.

Abstract: A method for access network session correlation for policy control includes detecting a remote authentication dial in user service (RADIUS) access session for a user device, including binding the RADIUS access session to a policy node. The method includes detecting a Diameter session for the user device. The method further includes correlating the RADIUS access session with the Diameter session, including binding the Diameter session to the policy node.

Abstract: A method for access network signaling protocol interworking for user authentication includes receiving, from a node in an access network, a message formatted according to a signaling protocol of the access network and containing an authentication payload formatted according to an authentication protocol. The method further includes, in response to receiving the message, formulating a message formatted according to a signaling protocol of a cellular network, the message including the authentication payload formatted according to the authentication protocol. The method further includes forwarding the message formatted according to the signaling protocol of the cellular network to a node in the cellular network that implements the authentication protocol, the message including the authentication payload formatted according to the authentication protocol.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for access network protocol interworking and authentication proxying. One method includes receiving an authentication request from a node in an access network for authenticating a user using cellular network authentication. The method further includes, in response to the request, using a native protocol of the cellular network to obtain an authentication challenge from a node in the cellular network. The method further includes communicating the authentication challenge to the node in the access network. The method further includes receiving a response to the authentication challenge from the node in the access network. The method further includes determining whether the response matches an expected response. The method further includes, in response to determining that the response matches the expected response, communicating an indication of successful authentication to the node in the access network.

Abstract: A method for RADIUS proxy or Diameter agent address resolution is disclosed. The method may be implemented in a network node including a plurality of message processors. The method includes receiving an inbound RADIUS or Diameter message. The method further includes determining whether address resolution is required for the inbound message. The method further includes, in response to determining that address resolution is required for the inbound message, performing the address resolution. The method further includes routing an outbound message to a destination based on a result of the address resolution, where at least one of the inbound message and the outbound message comprises a RADIUS message.

Abstract: The subject matter described herein includes methods, systems and computer readable media for using a Diameter routing agent (DRA) to obtain mappings between mobile subscriber identification information and dynamically assigned Internet protocol (IP) addresses and for making the mappings accessible to applications. One exemplary method includes, at a DRA, receiving a Diameter message containing a dynamically assigned IP address and mobile subscriber identification information. The method further includes routing the received Diameter signaling message. The method further includes copying, by the DRA, the IP address and the mobile subscriber identifier from the message. The method further includes making a mapping between the dynamically assigned IP address and the subscriber identification information accessible to applications.

Abstract: The subject matter described herein includes methods, systems, and computer readable media for providing triggerless EIR service in a Diameter network. One method includes steps performed at a Diameter routing agent (DRA). The steps include, receiving a registration or authentication information request at the DRA. The steps further include performing, by the DRA, an EIR lookup in response to the registration or authentication information request message. The method further includes, relaying the registration or authentication information request message to a home subscriber server (HSS) or a home location register (HLR) or responding on behalf of the HSS or HLR based on results of the EIR lookup.

Abstract: Methods, systems, and computer readable media for performing Diameter answer message-based network management at a Diameter signaling router (DSR) are disclosed. According to one method, a Diameter answer message that includes error indicator information is received from a first Diameter node at a DSR. The error indicator information included in the Diameter answer message is examined, at the DSR, and information based on the error indicator information is used to update status information for routes maintained by the DSR to the first Diameter node.

Abstract: Methods, systems, and computer readable media for answer-based routing of Diameter request messages are disclosed. According to one method, a Diameter request message is received from a first Diameter node at a. A copy of at least a portion of the Diameter request message is cached at the DSR and the Diameter request message is routed to a second Diameter node. The DSR determines whether a predetermined condition associated with an answer to the first Diameter request message exists. In response to determining that the predetermined condition exists, the cached portion of the Diameter request message is retrieved, a Diameter request that includes the cached portion of the Diameter request message is generated, and the generated Diameter request message is routed.

Abstract: According to one aspect, the subject matter described herein includes a method for Diameter-based steering of mobile device network access. The method includes receiving a Diameter message associated with a mobile device. The method also includes determining, based on the Diameter message, whether the mobile device should be steered to access a radio access network or a radio access network type that is different from a radio access network or radio access network type currently supporting network access of the mobile device. The method further includes, in response to determining that the mobile device should access the different radio access network or radio access network type, steering the mobile device to access the different radio access network or radio access network type.

Abstract: Methods, systems, and computer readable media for performing stateful Diameter routing with Diameter routing agents (DRAs) using different mechanisms to achieve stateful routing are disclosed. According to one aspect, a system for performing stateful Diameter routing with DRAs that use different mechanisms to achieve stateful routing includes a set of Diameter signaling routing nodes. Each node has access to at least one database for maintaining state information. The nodes are configured to be members of a first group, where each member of the first group is configured to use a first mechanism to achieve stateful routing with other members of the first group, and to use a second mechanism to achieve stateful routing with nodes that are not members of the first group. Members of the first group include signaling nodes provided by a same vendor, and members not in the group include signaling nodes provided by a different vendor.

Abstract: A method for utilizing a Diameter proxy agent to communicate short message service (SMS) messages in a Diameter network includes receiving, from an SMS service center via a Diameter interface, a mobile subscriber location information request message directed to a home subscriber server (HSS), wherein mobile subscriber location information request message is associated with a recipient mobile subscriber. The method further includes querying a number portability database to determine whether the recipient mobile subscriber has been ported to a foreign network and forwarding the mobile subscriber location information request message toward a gateway associated with the foreign network In response to determining the recipient mobile subscriber has been ported to the foreign network. The method also includes, in response to determining the recipient mobile subscriber has not been ported to the foreign network, forwarding the request message to the HSS in the first network or the foreign network.

Abstract: Methods, systems, and computer readable media for dynamically learning Diameter binding information are disclosed. According to one method, the method comprises receiving one or more response messages associated with the one or more Diameter signaling messages, determining, based on information contained in the one or more response messages, whether at least one of the one or more network service nodes was able to successfully process the one or more Diameter signaling messages, and generating, in response to determining that at least one of the one or more network service nodes was able to successfully process at least one of the one or more Diameter request messages, a Diameter binding record that associates the identification information and the at least one of the one or more network service nodes.

Abstract: Methods, systems, and computer readable media for performing Diameter answer message-based network management at a Diameter signaling router (DSR) are disclosed. According to one method, a Diameter answer message that includes error indicator information is received from a first Diameter node at a DSR. The error indicator information included in the Diameter answer message is examined, at the DSR, and information based on the error indicator information is used to update status information for routes maintained by the DSR to the first Diameter node.

Abstract: The subject matter described herein includes methods, systems and computer readable media for using a Diameter routing agent (DRA) to obtain mappings between mobile subscriber identification information and dynamically assigned Internet protocol (IP) addresses and for making the mappings accessible to applications. One exemplary method includes, at a DRA, receiving a Diameter message containing a dynamically assigned IP address and mobile subscriber identification information. The method further includes routing the received Diameter signaling message. The method further includes copying, by the DRA, the IP address and the mobile subscriber identifier from the message. The method further includes making a mapping between the dynamically assigned IP address and the subscriber identification information accessible to applications.