Abstract: A front end module supporting a plurality of frequency bands and an electronic device includes a plurality of duplexers, a first switch configured to connect any one of the plurality of duplexers to an antenna, a second switch configured to connect a first port, to which a Tx signal of a first communication or a Tx signal of a second communication is input, to any one of Tx ports of the plurality of duplexers, and to connect a second port, from which a Rx signal of the second communication is output, to one of the Tx ports of the plurality of duplexers. According to certain embodiments, the number of switches occupying a large space can be minimized, and thus a space occupied by the front end module supporting device to device (D2D) communication can be reduced.

Abstract: A packet processing method, apparatus, and system are provided. A policy library is deployed on a gateway control device in a centralized manner, and packet identification and policy execution are deployed on each gateway forwarding device. The solution includes: receiving, by a gateway control device, packet characteristic information that is of a first packet and that is sent by a gateway forwarding device, where the packet characteristic information is obtained after the gateway forwarding device performs packet inspection on the first packet; searching, by the gateway control device according to the packet characteristic information of the first packet, a prestored policy library for a first processing policy corresponding to the packet characteristic information; and sending, by the gateway control device, the first processing policy to the gateway forwarding device, so that the gateway forwarding device executes a packet processing action in the first processing policy.

Abstract: A method for predicting network-traffic bursts includes identifying, in data received by a networking device, a plurality of network-traffic bursts, each of the plurality of network-traffic bursts occurring at a respective one of plurality of burst-times {tN, tN-1, . . . , t0}. The method includes determining a time-interval ?n of a next burst occurring at ?n after burst-time t1 by determining respective values of ?n, a parameter ?, and a parameter ?, that minimize, to within a tolerance, a quantity (fk (?, ?, k)?(?n?tk)) for at least three values of a integer k. Parameters ? and ? are, respectively, a real and imaginary part of a power-law exponent of a power law relating predicted time-interval ?n to any of the plurality of burst-times. The method includes determining, from a cumulative distribution function of a normal distribution of previously-identified network-traffic bursts, a time-duration during which the networking device may reallocate bandwidth.

Abstract: Precoding matrix computations for a large number of antenna arrays can be used to generate efficiencies within a wireless network. Utilizing network topology and context data in conjunction with known available network resources and mobile device measurements can facilitate gains in power and spectral efficiency and reduction in computation complexity posed by current procedures. To take advantage of multiple paths, the precoding matrix can be known at the radio units for each mobile device.

Abstract: Aspects of the present disclosure provide techniques for efficient ranging. According to certain aspects, techniques are provided to signal the use of different resolutions of time units for parameters to be used in a ranging procedure, such as a fine timing measurement (FTM) procedure.

Abstract: Airtime usage may be used as a factor in controlling network traffic flow to and from client devices via a wireless network interface. Received packets or other data are assigned to a quality of service profile. Additionally, a cost value for communicating the received data is determined at least in part based on an actual or estimated airtime usage for the received packet. The cost value is used to allocate wireless network airtime to data. The allocation of wireless network airtime may be varied dynamically based on operating conditions. The cost value may be based on factors including the airtime used to communicate data; whether the data is a retransmission; and wireless network overhead. The cost value of data may also be different depending on whether the data is being sent from a client device or to a client device.

Abstract: Disclosed are various embodiments that facilitate sending input commands to an application over a network that may have variable latency characteristics. A first computing device sends a request to initiate a remote session with the application being executed by a second computing device. Upon initiation of the remote session, the first computing device receives application output data associated with the application for display via the first computing device. The first computing device may capture an input command associated with a video frame of the application output data being displayed. The input command is transmitted to the second computing device. To account for latency characteristics associated with the network, the second computing device provides the input command to the application after a delay.

Abstract: Internet protocol packets are statelessly identified as associated with a particular session-instance by identifying a key, or session-instance identifier, within the data (or payload) portion of a user plane packet. This identifier is specific to the session-instance and remains constant throughout the session-instance. Using this stateless identification, transmitted user plane packets are automatically routed at the transmission speed of the transmission link using a method that automatically balances the analysis processing load between network probes. The load is balanced by routing the user plane packet to a network probe that is either already analyzing the session-instance or by routing the user plane packet to a system that has processing capacity to analyze a new session-instance. The network probe then analyzes the user plane packet and the session-instance to measure the quality of the user experience of the session-instance and performance of the network.

Abstract: According to aspects of the invention there is provided a remote unit comprising a processor and one or more terminal interfaces, the processor being connected to the one or more terminal interfaces, the terminal interfaces configured for coupling with a set of terminals, wherein the processor is configured to perform quality of service network testing using one or more of the set of terminals over one or more communication networks.

Abstract: Various embodiments provide an approach to detect intrusion of connected IoT devices. In operation, features associated with behavioral attributes as well as volumetric attributes of network data patterns of different IoT devices is analyzed by means of statistical analysis to determine deviation from normal operation data traffic patterns to detect anomalous operations and possible intrusions. Data from multiple networks and devices is combined in the cloud to provide for improved base models for statistical analysis.

Abstract: An uplink information processing method and an apparatus, the method including receiving, by a terminal device, first control information sent by a base station device in a first downlink transmission time interval, determining, by the terminal device, a time domain resource based on the first control information, where the time domain resource includes at least one uplink transmission time interval, where a start time unit of the time domain resource is later than the first downlink transmission time interval, and wherein the start time unit is a first uplink transmission time interval of the at least one uplink transmission time interval, and sending, by the terminal device, data information on an uplink data channel, where the uplink data channel corresponds to the at least one uplink transmission time interval in the time domain resource.

Abstract: A method and a server for dynamic work transfer are provided. The method includes following steps: regularly collecting and recording network resources of multiple nodes including a cloud node and multiple edge nodes in a network; receiving a request of a first job at a first time point, calculating a cost for configuring the first job to each node according to the network resource of each node at the first time point, and configuring the first job to a first target node; receiving a request of a second job at a second time point, calculating a cost for configuring the second job to each node according to the network resource of each node at the first time point, and determining a second target node suitable for configuring the second job and whether to transfer the first job; and accordingly configuring the second job and maintaining or transferring the first job.

Abstract: Technologies for streaming device role reversal include a source computing device and a destination computing device coupled via a communication channel. The source computing device and destination computing device are each configured to support role reversal. In other words, the source computing device and the destination computing device are each capable of switching between receiving and transmitting digital media content over the established communication channel. The source computing device is configured to initiate the role reversal, pause transmit functionality of the source computing device, and enable receive functionality of the source computing device. The destination computing device is configured to receive a role reversal indication from the source computing device, locally process the content, transmit a content stream to the source computing device, and display the content stream on an output device of the source computing device. Other embodiments are described and claimed herein.

Abstract: A data management method includes allocating a buffer for an application based on request information associated with data requested by the application, storing sensor data corresponding to the request information in the buffer, and transferring the sensor data stored in the buffer to the application.

Abstract: Methods and systems of identifying and remediating at-risk resources in a computing environment are provided. A method includes periodically determining respective infrastructure topologies of a computing environment that changes over time, wherein the determining is performed by a computer system communicating with the computing environment. The method also includes: identifying, by the computer system, an intrusion event in the computing environment; determining, by the computer system, at-risk resources in the computing environment based on the determined intrusion event and a corresponding one of the infrastructure topologies; and performing, by the computer system, remediation action for the at-risk resources.

Abstract: According to one aspect of the present disclosure a system and technique for dynamic system level agreement provisioning includes: a computing environment configured with allocatable computing resources; and a host having a processor unit operable to execute a service level agreement (SLA) module. The SLA module is configured to: identify service level criteria for a customer of computing services of the computing environment; determine characteristics of the computing environment; identify a time period for providing the computing services; evaluate one or more utility functions defining service level variables; and automatically determine a service level agreement (SLA) provision for the customer based on the one or more utility functions.

Abstract: A network node, a wireless device and methods for use in a Random Access, RA, procedure with wireless devices in a cell of the network node. The method of the network node comprises receiving, from at least two wireless devices, a RA message having an RA preamble; transmitting an RA Response, RAR, to the wireless devices, the RAR having a TC-RNTI and an RA preamble identifier identifying the received RA preamble; and receiving, from each of wireless the devices, a connection request message having a respective S-TMSI. For a wireless device previously connected to the network node in the same cell, a connection setup message addressed to a C-RNTI previously assigned to the wireless device is transmitted. For a wireless device not previously connected to the network node in the same cell, a connection setup message addressed to the TC-RNTI is transmitted.

Abstract: Embodiments of the present disclosure provide a reference signal information feedback method, apparatus and terminal. The method includes: a terminal determines a reference signal parameter of an uplink measurement reference signal and/or a downlink measurement reference signal, and the terminal feeds the determined reference signal parameter back to a base station.

Abstract: Embodiments of systems and methods for fast input/output (IO) on PCIE devices are described. Such methods include receiving an IO request from a user or application, the IO request comprising instructions for communicating data with a host system, the host system comprising a processing device and a memory device, analyzing information from the IO request in an IO block analyzer to select one of a plurality of communication paths for communicating the data with the host system, defining a routing instruction in a transfer routing information transmitter in response to the selected communication path, communicating the routing instruction in a Transaction Layer Packet (TLP) to an integrated IO (IIO) module of the host system routing the data from the peripheral device to either the processing device or the memory device according to the routing instruction with a data transfer router.

Abstract: According to one aspect of the present disclosure a method and technique for dynamic system level agreement provisioning is disclosed. The method includes: identifying, by a data processing system of a computing environment service provider, service level criteria for a customer of computing services; determining characteristics of the computing environment; identifying a time period for providing the computing services; evaluating one or more utility functions defining service level variables; and automatically determining, by the data processing system, a service level agreement (SLA) provision for the customer based on the one or more utility functions.

Abstract: A network element includes circuitry and multiple ports. The multiple ports are configured to connect to a communication network. The circuitry is configured to receive multiple packets from the communication network via one or more input ports, and store the received packets in a buffer of the network element, to schedule transmission of the packets stored in the buffer to the communication network via one or more output ports, and in response to a request to provide a snapshot of at least a portion of the buffer, to mirror for transmission, via one or more dedicated ports, only a part of the portion that was received in the network element prior to the request.

Abstract: In one embodiment, the system identifies geographic areas covered by a communication network. The system determines, for each identified geographic area, a network performance metric for the identified geographic area based on a difference between: (1) a first average network speed of the communication network in the identified geographic area during prior time periods in which the communication network is busy, and (2) a second average network speed of the communication network in the identified geographic area during second prior time periods in which the communication network is not busy. The system compares the respective performance metrics of the geographic areas to a threshold network performance metric, which is determined by a congestion-analysis machine learning (ML) model. The system identifies traffic congestions in one or more of the identified geographic areas having a determined network performance metric below the threshold network performance metric.

Abstract: A method for channel signaling is described. The method includes determining (e.g., by a UE) whether at least one DL subframe is a valid reference resource. If the at least one DL subframe is not a valid reference resource, reporting measurements of a DL channel measured during the at least one DL subframe is inhibited. The method may include determining (e.g., by an eNB) whether reporting of the at least one DL subframe of a DL channel is required. If reporting is not required, a message configured to cause the at least one UE to inhibit reporting measurements of the DL channel (e.g., CQI measurements) measured during the at least one DL subframe is sent to the UE. Determining whether the at least one downlink subframe is a valid reference resource is based at least in part on the message. Apparatus and computer readable media are also described.

Abstract: This application provides a packet transmission method, an apparatus, and a system in an overlay network. Network address translation and reverse network address translation are implemented at a demarcation point: an IP tunnel end point, between the logical network and the physical network, an IP option is expanded to carry a source-end network element identifier and a destination-end network element identifier, and a virtual machine in an upper-layer logical network is interconnected with a peer-end virtual machine through a lower-layer physical network by using an IP tunnel.

Abstract: The systems and methods of the present disclosure are directed towards a dynamic system that is configured to identify and map networked traffic, such as that of video, voice, file transfer, and web based applications to predetermined Quality of Service (QoS) classes. The different QoS classes can be associated with different traffic priorities. The networked traffic can be encrypted, which can prevent an intermediate device from processing or otherwise reading the packet headers of the traffic. The systems and methods of the present disclosure can predict QoS classes for encrypted traffic based on traffic patterns and other characteristics of the encrypted traffic.

Abstract: A stream manager for managing the distribution of instructions to a plurality of processing devices includes a dispatcher module configured to: receive multiple instruction streams, wherein each instruction stream includes a plurality of requested computations for processing perception data from a perception data source; partition each instruction stream into a plurality of partitions based on type of device to perform a requested computation from the instruction stream; assign a release time and deadline to each partition, and dispatch partition computations to a plurality of scheduling queues to distribute processing of the partition computations amongst the plurality of processing devices. The plurality of scheduling queues include: a plurality of CPU schedulers, wherein each CPU scheduler is assigned to a specific CPU and a specific scheduling queue; and a plurality of accelerator schedulers, wherein each accelerator scheduler is assigned to a specific scheduling queue and a specific type of accelerator.

Abstract: Systems, methods, and software described herein provide enhancements for managing quality of service for data communications on a satellite of a satellite platform. In one implementation, a satellite obtains a plurality of packets to be transmitted to a second system of the satellite platform. Once obtained, the satellite prioritizes the transmission of the plurality of packets based on a quality of service associated with each of the packets, and transmits the plurality of packets based on the prioritization.

Abstract: A method for managing a telecommunication network comprising the steps of identification, by the central controller, of an updated condition of availability of resources of the network, and association of a plurality of updated sequences of instructions, comparison of the plurality of updated sequences of instructions with a plurality of not updated sequences of instructions associated with the last condition of availability. In case that the plurality of updated sequences of instructions is different from the plurality of not updated sequences of instructions, a step is provided of sending an updated sequence of instructions to each nodal device, on the basis of the service class of the data traffic of the device. A step is furthermore provided of checking, by the local controller, a condition of service of the data traffic at time ranges ?, said updated sequence of instructions associating to each condition of service an optimal working status to be attributed to the data traffic.

Abstract: Methods, devices and computer program products for facilitating the selection of a sourcing peer in peer-to-peer (P2P) streaming environment are disclosed. These methods allow peers to select candidate source peers in an informed manner with low overhead and minimized complexity. These and other features are accomplished by signalling detailed information regarding the buffer contents to one or more requesting peers. This information includes the presence or absence of requested content segments and a listing of gaps in the requested content segments, which allow the requesting peers to select an appropriate sourcing peer. The selection of a sourcing peer is also effected by considering network connectivity and/or network congestion status between the sourcing and the requesting peers.

Abstract: Described embodiments provide systems and methods for path selection proportional to a penalty delay in processing packets. A server-side intermediary may identify a delay penalty for processing packets of a server destined for a client. The server-side intermediary may be in communication via links of different latencies with a client-side intermediary. The server-side intermediary may select a second link with a latency that deviates from the lowest latency of a first link by the delay penalty. The server-side intermediary may transmit, to the client-side intermediary, duplicates of the packets via the selected second link with information indicating to hold the duplicates at the client-side intermediary. The server-side intermediary may receive an indication to drop or send the duplicates to the client. The server-side intermediary may transmit the indication to the client-side intermediary to drop or send the duplicates according to the indication.

Abstract: A mobile communications system includes switching between communication paths based on the quality of service. A VoIP service is coupled to a mobile network and a wireless local-area network (WLAN) via a wide-area IP network. A plurality of mobile communications devices are associated with VoIP telephone numbers. A public switched telephone network (PSTN) is coupled to the plurality of mobile communications devices and coupled to the VoIP service. A quality of service server is coupled to the plurality of mobile communications devices via the wide-area IP network for determining the quality of data channels to a mobile communications device via the mobile network and to the mobile communications device via the WLAN. A voice call is carried over one of the mobile network, the WLAN, and the PSTN depending on the quality of the data channels.

Abstract: Described herein are technologies relating to computing resource allocation among multiple tenants. Each tenant may have a respective absolute reservation for rate-based computing resources, which is independent of computing resource reservations of other tenants. The multiple tenants vie for the rate-based computing resources, and tasks are scheduled based upon which tenants submit the tasks and the resource reservations of such tenants.

Abstract: An upstream network device in a switching system processes packets an determines respective one or more egress ports of a downstream network device via which the packets are to be subsequently transmitted by the downstream network device. The upstream network device temporarily stores the packets in respective virtual output queues (VoQs) corresponding to the determined egress ports of the downstream network device. Responsively to receiving a flow control message indicating that particular one or more egress ports of the downstream network device are congested, the upstream network device modulates a flow of packets from particular one or more VoQs corresponding to the one or more particular congested egress ports of the downstream network device, to reduce congestion at the particular congested egress ports of the downstream network device, without modulating the flow of packets from other one or more VoQs corresponding to other egress ports of the downstream network device.

Abstract: Embodiments of the present disclosure generally relate to a storage device fully utilizing a pipe interface by adaptively altering the size of data included in one or more packets sent to a host device. A maximum payload size for the packets and a reduced payload size for the packets are determined. The performance level of both the maximum payload size and the reduced payload size are then determined. The performance level of the maximum payload size is compared to the performance level of the reduced payload size to determine which payload size has the higher performance level. The payload size having the higher performance level is then selected, and the storage device sends data in packets in the size of the payload size having the higher performance level to the host device.

Abstract: Described is a means for switching a plurality of different data processing methods or means for changing the type of sensor data to be collected is required. A management computer includes a control unit which stores, in a memory, monitoring means for monitoring a plurality of operation processes to be monitored and management means connected to a network to manage management information about a plurality of different types of external devices for processing a plurality of types of sensor information via the network, the control unit executing the monitoring means and management means in a CPU, in which the control unit determines whether the plurality of operation processes to be monitored is changed, and instructs, when determining that the operation processes are changed, the plurality of different types of external devices to change the processing of the sensor information required to execute the operation processes before changing.

Abstract: A system includes a virtual private network (VPN) gateway and a client device. The VPN gateway receives a domain name system response through a physical coding sublayer. The VPN gateway fetches a fully qualified domain name corresponding to the domain name system response, and fetches one or more access control list rules from an access control list table for a specific user account. The VPN gateway installs an Internet protocol (IP) address in the access control list table for each access control list rule and handles requested data traffic to the IP address. The client device creates a virtual tunnel interface route with a port of a transmission control protocol (TCP) listener device and parses the domain name system response. The client device updates a domain name system cache with the fully qualified domain name and the IP address and sends unencrypted network traffic over the virtual tunnel interface route.

Abstract: Methods and systems for providing media contention controls at a virtual desktop infrastructure (VDI) device are provided. More particularly, a VDI desktop media controller (DMC) application is provided. The VDI DMC application is executed by the VDI client device. Accordingly, the VDI DMC application provides local control of media. In addition, the VDI DMC application can provide for local control of multiple media streams received simultaneously.

Abstract: A mobile station executed method, wherein upon changing from a current cell to a new cell in a wireless packet data network the mobile station enters the new cell; generates a cell change packet data unit (PDU) message for informing the network of the location of the mobile station in the new cell; buffers the cell change PDU message into a PDU transmit queue before any buffered PDUs that were present before the mobile station entered the new cell; and transmits the buffered cell change PDU before any of the buffered PDUs that were present before the mobile station entered the new cell.

Abstract: A denial of service (DoS) detection and circumvention system is described herein. The DoS detection and circumvention system can track phone calls that are initiated and store a list of phone numbers that are called. The DoS detection and circumvention system can also track the number of carrier congestion messages over a certain time window. Using the list of called phone numbers and the tracked number of carrier congestion messages, the DoS detection and circumvention system can identify excessive congestion. If the DoS detection and circumvention system identifies excessive congestion, the DoS detection and circumvention system can delay calls so as to prevent a possible DoS condition.

Abstract: Some embodiments provide a method for a hardware forwarding element. The method receives a packet to add to a buffer. The packet is assigned a packet class. The method determines an amount of buffer space available for the assigned packet class. Different packet classes have different amounts of buffer space available in the buffer. When the available buffer space for the assigned packet class is large enough for the received packet, the method adds the packet to the buffer.

Abstract: A Universal Serial Bus (USB) switch includes a host port and a plurality of USB device ports. Each USB device port is configured to be coupled to a respective plurality of USB devices. A USB interface is coupled to the host port. A switch matrix is coupled between the USB interface and the plurality of USB device ports and is configured to switch the USB interface to one of the plurality of USB device ports. A switch controller is coupled to the plurality of USB interfaces, the host port, and the switch matrix. The switch controller is configured to control operation of the USB switch.

Abstract: A method for a wireless UE device to utilize tokens and cloud service technology to facilitate the provision of location data to an emergency call center. The UE may provide cellular signaling to initiate an outgoing telephone call to an emergency call center. A token may be provided during the signaling, wherein the token is associated with location information of the UE device stored on a server computer (referred to as a cloud server or location server). The token may uniquely identify the UE device and/or a user cloud service account of the UE device. The call center may use the token to retrieve location information of the UE from the cloud server. The use of the token may also provide for enhanced security, e.g., to prevent spoofing of the UE phone number.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for providing services to customers or other users of a telecommunications network through implementation of one or more micro-services instantiated on the network. Through the micro-services, one or more of the processes or functions used to provide the services from the network may be separately located logically within the network, thereby divorcing such processes from dedicated service components of the network. The breaking apart of the processes to be instantiated within the network on a generic computing device of the network, otherwise known as “micro-services”, allows the telecommunications to adjust or scale the available services in response to operating conditions of the network.

Abstract: A token-based storage service may comprise a repository of key-value data. In response to a request to store a data item, the storage service may generate a token comprising a namespace and a unique identifier. The token may be used as a key to store and retrieve the data item from the repository. Requests to access the data may be validated based on ownership information stored with the data item and information indicative of the origin of the request for access. In response to a request to store a new version of the data item, a new token may be generated.

Abstract: Disclosed are various embodiments for facilitating uninterrupted playback of video streams using lower quality cached files. A video file corresponding to an entirety of a video content feature encoded at a first quality may be obtained from another client on a local network. A video stream corresponding to the video content feature encoded at a second quality higher than the first quality is then obtained. The video stream is rendered for playback on a display. In response to detecting an unavailability of the video stream at a particular time in the video content feature, the video file is rendered for playback on the display in place of the video stream and commences at the particular time in the video content feature. The video file may then be sent to yet another client on the local network.

Abstract: Using a hash function, an L2/L3 switch can produce an FID for a data packet. The L2/L3 switch can select, from among potentially several stored VLAN flooding tables, a particular VLAN flooding table that is associated with a particular VLAN on which the data packet is to be carried. The rows of the particular VLAN flooding table can specify different combinations of the particular VLAN's egress ports. The L2/L3 switch can locate, in the particular VLAN flooding table, a particular row that specifies the FID. The L2/L3 switch can read, from the particular row, a specified subset of the egress ports that are associated with the particular VLAN. The L2/L3 switch can transmit copies of the data packet out each of the egress ports specified in the subset, toward analytic servers connected to those egress ports.

Abstract: Techniques for mobile equipment identity and/or IoT equipment identity and application identity based security enforcement in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for mobile equipment identity and/or IoT equipment identity and application identity based security enforcement in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a device identifier for a new session; determining an application identifier for user traffic associated with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the device identifier and the application identifier.

Abstract: Techniques are described herein for coordinating a random access channel (RACH) procedure with a beam discovery procedure. A timing and configuration of a RACH window may be coordinated with a beam discovery window. By coordinating the two windows, a user equipment (UE) may be configured to use information learned from the beam discovery procedure during the RACH procedure, thereby increasing the likelihood that the RACH procedure is successful. In some cases, the RACH procedure is triggered by the transmission of directional beam reference signals during the beam discovery window. In such cases, the UE determines the timing of the RACH window based at least in part on the receipt of the directional beam reference signals. In some cases, the RACH window is configured using a static configuration relative to the beam discovery window.

Abstract: This specification provides a method for performing early data transmission in a random access procedure in a wireless communication system. More specifically, the method performed by a user equipment (UE) includes: receiving, from a base station, a control message including first information indicating whether selection for a second transport size (TBS) smaller than a first TBS for message 3 is permitted and second information for the first TBS; transmitting, to the base station, a request for the EDT by using message 1; receiving, from the base station, message 2 including a UL grant for the message 3; determining a repetition number for the message 3 based on the control message and the UL grant; and transmitting the message 3 to the base station by the repetition number. Therefore, there is an effect that battery consumption of the UE can be reduced.

Abstract: Facilitating surveillance of a targeted user participating in communication sessions over a network, such as a VoIP network, that employs SIP. The method includes receiving a subscription request from a subscriber, the subscription request identifying a targeted user to be monitored, monitoring communication sessions in which the targeted user is a participant, to detect SIP events corresponding to state transitions associated with the communication sessions. A system for facilitating surveillance of a targeted user includes an API operable to receive a subscription request from a third party subscriber, the subscription request identifying the targeted user, wherein the third party subscriber is not a participant in the one or more communication sessions, and a SIP events monitoring module operable to detect one or more predetermined SIP events associated with the communication sessions based on the subscription request and notify the third party subscriber of the detected SIP events.