Abstract: A method of operating a wireless routing device to control access to a voice communication service by a mobile device connected to a wireless local area network (WLAN) of the wireless routing device, the mobile device having a cellular network interface and a non-cellular wireless network interface, the method including identifying a request from the mobile device to a cellular network gateway of the cellular network for access to the voice communication service; performing a process prior to forwarding the request to the cellular network gateway comprising: calculating a quality score for a non-cellular wireless link between the mobile device and the cellular network gateway for accessing the voice communication service; requesting observed network information from the mobile device; and comparing the quality of the non-cellular wireless network link against the respective quality of at least one alternative network observed by the mobile device; and if the quality of the non-cellular wireless network link i

Abstract: Examples described herein relate to configuration of access points including Internet-of-Things (IoT) radio. An access point identifier list is received from a network administration node in a network. Each access point identifier in the access point identifier list is uniquely associated with an access point, which includes an IoT radio. A first rules list is received from the network administration node. Each rule in the first rules list indicates a constraint and access point configuration values. An objective function is used to identify access point identifiers satisfying one or more of the constraints in the rules. The access points associated with the identified access point identifiers are configured with the access point configuration values as indicated in the rules.

Abstract: Embodiments herein achieve a method for handling registration and session management in a wireless communication system. The method includes registering, by a User Equipment (UE), with a first core network entity over a 3GPP access network and a non-3GPP access network. Further, the method includes triggering, by the UE, a registration procedure to a second core network over the 3GPP access network when a periodic timer of the UE expires in an OOS state. Further, the method includes receiving, by the UE, a non-access stratum (NAS) message, over the 3GPP access network, with an indication to register for the non-3GPP access network with the second core network entity. Further, the method includes reinitiating the registration procedure to register again for the non-3GPP access with the second core network entity through the non-3GPP access network.

Abstract: Systems and methods are provided for dynamically generating intelligent alerts at a network edge based on coverage area characteristics. A central alert orchestrator within the network determines target edge locations and forwards alerts to regional alert systems at the target edge locations. The regional alert systems modify either content of the alert or the alert metadata or both based on characteristics of the alerts and the coverage area.

Abstract: Apparatuses, methods, and systems are disclosed for video codec aware RAN configuration and unequal error protection coding. An apparatus includes a processor that detects a video coded traffic stream and a video codec specification used to encode the video coded traffic stream, determines an awareness of video coded traffic application data units (“ADUs”) of the video coded traffic stream as video coded network abstraction layer (“NAL”) units of data, aligns the video coded NAL units of the video coded traffic stream to physical layer (“PHY”) transport elements and subsequent channel coding element partitions for a video coded traffic aware PHY transport, determines a channel coding rate allocation of the channel coding element partitions, and applies a forward error correction (“FEC”) coding given at least the determined channel coding rate allocation of the video coded traffic aware PHY transport to channel coding element partitions for protection against radio transmission errors.

Abstract: A method, a system, and a non-transitory storage medium provide for encoding a general packet radio service (GPRS)-tunnel endpoint identifier (GTP-TEID) with data identifying radio frequency (RF) bandwidths supported in a local radio environment (LRE) from which a user equipment (UE) device accesses the wireless access station; sending, via a signaling channel, the GTP-TEID to a core network device; notifying one or more core network devices of an RF bandwidth category level corresponding to the RF bandwidths; and applying at least one of a policy rule or a charging rule to a packet data unit (PDU) session for the UE device, based on the RF bandwidth category level.

Abstract: The present invention relates to a method for transmitting a packet in a communication system, the method comprising: generating drop information indicating at least one source packet to be dropped among source packets to be transmitted and whether or not to drop each of the other source packets except the at least one source packet; performing forward error correction (FEC) encoding on the drop information and the other source packets except the at least one source packet; generating a repair packet comprising repair data for restoring the drop information and a repair symbol for restoring the other source packets except the at least one source packet; and transmitting the other source packets except the at least one source packet and the repair packet.

Abstract: Systems and methods are described herein for handling video calls placed on hold or otherwise parked by one or more parties within the video call. The systems and methods can determine a video call has been placed on hold (or otherwise set to be parked), and transfer the video call to a call park server (CPS). The systems and methods can then access a content server, retrieve one or more content items (e.g., video clips, interactive content or advertisements, and so on), and present the content items within the on hold video call.

Abstract: A method for one or more meeting-facilitating machines to provide access to a remote meeting comprises assessing a capability metric of a meeting-participant computer device; selecting an access-option set including a combination of mutually compatible access modes, each access mode characterized by (a) an expense metric comparable to the capability metric and (b) a richness metric indicating a relative level of richness the access mode contributes to the remote meeting, the access-option set selected to maximize a net richness of the remote meeting while preventing a net expense of the access-option set from exceeding the capability metric; and providing the meeting-participant computer device access to the remote meeting using the access-option set.

Abstract: A method including receiving, at a VPN server from a user device during an established VPN connection between the VPN server and the user device, a data request for the VPN server to retrieve data of interest from a host device; utilizing, by the VPN server, a first exit IP address to transmit a query for retrieving the data of interest to the host device during the established VPN connection; determining, by the VPN server based at least in part on transmitting the query, that the first exit IP address is blocked by the host device; and utilizing, by the VPN server, a second exit IP address to retransmit the query for retrieving the data of interest to the host device during the established VPN connection is disclosed. Various other aspects are contemplated.

Abstract: This invention concerns the transmitting and receiving of digital media packets, such as audio and video channels and lighting instructions. In particular, the invention concerns the transmitting and receiving of redundant media packet streams. Samples are extracted from a first and second media packet stream. The extracted samples are written to a buffer based on the output time of each sample. Extracted samples having the same output in time are written to the same location in the buffer. Both media packet streams are simply processed all the way to the bugger without any particular knowledge that one of the packet streams is actually redundant. This simplifies the management of the redundant packet streams, such as eliminating the need for a “fail-over” switch and the concept of an “active stream”, the location is the storage space allocated to store one sample.

Abstract: Embodiments relate to progressively validating access token. In response to intercepting an initial call for a transaction for a service from a client, a token is validated for the initial call of the transaction for the service, the validating including contacting an authentication sever and locally storing a time to live received for the token. In response to intercepting at least one successive call for the transaction for the service from the client, it is determined that the token for the at least one successive call is valid based on the time to live locally saved. The at least one successive call for the transaction for the service is permitted to pass without contacting the authentication sever.

Abstract: In a system including a plurality of computing subsystems executing a set of hosted applications, each of the computing subsystems maintains a copy of a common routing matrix defining, for each hosted application, an identifier of a computing subsystem configured to host the application. A first intra-subsystem routing component of a first one of the computing subsystems receives a message; determines a target one of the hosted applications to process the message; identifies, according to the common routing matrix, a second one of the computing subsystems that executes the target hosted application; and in response to the identifying, provides the message and a routing indicator to a first inter-subsystem routing component of the first computing subsystem. The first inter-subsystem routing component the transmits the message to the second computing subsystem.

Abstract: The present disclosure is directed to a method and system for routing communications. A plurality of communications-enabled devices are coupled to a communications network. Each communications-enabled device has a device identifier. A user-programmable database associates each of a plurality of user identifiers with a device identifier. A router circuit is coupled to the communications network through a portal communication device having a portal identifier. A user designates a destination user identifier when making a communication. The router circuit switches the call, directing the call to a destination device identifier responsive to the user-programmable database association between the destination user identifier and a device identifier. According to certain aspects, communications are directed to users and are routed to associated equipment, a user identifier serving as a virtual extension number.

Abstract: Methods and architectures for improving operation of 9-1-1 and other emergency services networks. Enriched data (e.g., text messages, videos, phase II location information, etc.) may be transmitted to a PSAP via a secondary communication channel (i.e., data), wherein the primary communication channel is a voice telephony trunk. Disclosed embodiments may increase the speed with which accurate location information is made available to improve call routing accuracy and decrease dispatch time. Some embodiments may also enable continued operation of legacy emergency services systems during and after transition to next generation systems.

Abstract: The present invention relates to a method for transmitting a packet in a communication system, the method comprising: generating drop information indicating at least one source packet to be dropped among source packets to be transmitted and whether or not to drop each of the other source packets except the at least one source packet; performing forward error correction (FEC) encoding on the drop information and the other source packets except the at least one source packet; generating a repair packet comprising repair data for restoring the drop information and a repair symbol for restoring the other source packets except the at least one source packet; and transmitting the other source packets except the at least one source packet and the repair packet.

Abstract: In one embodiment, a packet processing apparatus includes interfaces, a memory to store a representation of a routing table as a binary search tree of address prefixes, and store a marker with an embedded prefix including k marker bits providing a marker for an address prefix of a node corresponding to a prefix length greater than k, and n additional bits, such that the k marker bits concatenated with the n additional bits provide another address prefix, packet processing circuitry configured upon receiving a data packet having a destination address, to traverse the binary search tree to find a longest prefix match, compare a key with the k marker bits, extract an additional n bits from the destination address, and compare the extracted n bits with the n additional bits, and process the data packet in accordance with a forwarding action indicated by the longest prefix match.

Abstract: Apparatus, systems and methods for implementing delayed decompression schemes. As a burst of packets comprising compressed packets and uncompressed packets are received over an interconnect link, they are buffered in a receive buffer without decompression. Subsequently, the packets are forwarded from the receive buffer to a consumer such as processor core, with the compressed packets being decompressed prior to reaching the processor core. Under a first delayed decompression approach, packets are decompressed when they are read from the receive buffer in conjunction with forwarding the uncompressed packet (or uncompressed data contained therein) to the consumer. Under a second delayed decompression scheme, the packets are read from the receive buffer and forwarded to a decompressor using a first datapath width matching the width of the packets, decompressed, and then forwarded to the consumer using a second datapath width matching the width of the uncompressed data.

Abstract: A method, a system, and a non-transitory storage medium provide for encoding a general packet radio service (GPRS)-tunnel endpoint identifier (GTP-TEID) with data identifying radio frequency (RF) bandwidths supported in a local radio environment (LRE) from which a user equipment (UE) device accesses the wireless access station; sending, via a signaling channel, the GTP-TEID to a core network device; notifying one or more core network devices of an RF bandwidth category level corresponding to the identified RF bandwidths; and applying at least one of a policy rule or a charging rule to a packet data unit (PDU) session for the UE device, based on the RF bandwidth category level.

Abstract: Systems and methods for facilitating communication between a Human Interface Device (HID) and a remote resource such as, for example, an application provided by a virtual desktop. Embodiments relate to using one or more Application Programming Interfaces (APIs) to translate messages over a communication (COM) port tunnel, launching a program within the same session assigned to the COM port tunnel, utilizing client-side encryption, and redirecting HID messages to an embedded browser that is accessible over a virtual desktop.

Abstract: Secure access to a corporate application with translation between an internal address and an external address. In some embodiments, a method may include receiving, at a secure access cloud point of delivery (PoD), from a client application on a client device, a request to access a corporate web application that is deployed in a corporate datacenter. The method may also include forwarding, from the secure access cloud PoD, to a connector that is also deployed in the corporate datacenter, the request to access the corporate web application. The method may further include brokering, by the connector and the secure access cloud PoD, authentication of a user, authorization of access by the user, and a secure communication session between the client application and the corporate web application by translating between an internal address of the corporate web application and an external address of the corporate web application.

Abstract: The disclosed embodiments provide a system that processes network data. During operation, the system obtains, at a remote capture agent, a first protocol classification for a first packet flow captured by the remote capture agent. Next, the system uses configuration information associated with the first protocol classification to build a first event stream from the first packet flow at the remote capture agent, wherein the first event stream comprises time-series event data generated from network packets in the first packet flow based on the first protocol classification. The system then transmits the first event stream over a network for subsequent storage and processing of the first event stream by one or more components on the network.

Abstract: Systems, methods, apparatuses, and computer program products for providing IMS level awareness of high latency device are provided. One method, when a UE attaches to EPC, receiving, at a network node, an indication that the UE is a high latency device. The method may also include assigning, to the UE, an IP address selected from a special IP address range that is designated specifically for high latency devices. When the UE performs IMS registration, the method may include determining that the UE is a high latency UE based on the UE's IP address provided with the IMS registration request and assigned during the EPC attach procedure.

Abstract: This application provides a method and device for transparently transmitting a service frequency, where the method includes: determining, by a first device, first service frequency information Xn, where the first service frequency information Xn is used to indicate an amount of n-bit first service data that is sent by the first device within first statistical duration, and a sending frequency of the first device is used as a reference for the first statistical duration; and encapsulating, by the first device, the first service frequency information Xn into a first S/T bit code block, inserting the first S/T bit code block into a data stream of the first service data, and sending the data stream of the first service data to a second device.

Abstract: A method of operating a network server, such as a mobile application gateway, connect devices on a cellular or carrier network with individual networks, such as enterprise voice and data networks or residential networks. The effects of the present invention are far reaching in terms of transferring effective call control from the cellular network into the control of the individual network, such as the enterprise, and enabling new business models for the purchase of cellular service from a public cellular carrier by an enterprise.

Abstract: Aspects relating to data transmission are described herein. In an implementation, in a method for data transmission, a tunneling protocol header is appended to a payload to obtain an encapsulated data packet, and at least one field is modified in the tunneling protocol header to indicate at least one of an access network (108) and a core network (108) for transmitting the encapsulated data packet, and the access network (108) and the core network (110) belong to different communication networks (104). Further, based on the tunneling protocol header, the encapsulated data packet is delivered to a routing unit for transmission.

Abstract: Audiovisual performances, including vocal music, are captured and coordinated with those of other users in ways that create compelling user experiences. In some cases, the vocal performances of individual users are captured (together with performance synchronized video) on mobile devices, television-type display and/or set-top box equipment in the context of karaoke-style presentations of lyrics in correspondence with audible renderings of a backing track. Contributions of multiple vocalists are coordinated and mixed in a manner that selects for visually prominent presentation performance synchronized video of one or more of the contributors. Prominence of particular performance synchronized video may be based, at least in part, on computationally-defined audio features extracted from (or computed over) captured vocal audio.

Abstract: Useful data is transmitted to a terminal existing in a transportation vehicle. A communication apparatus installed in the transportation vehicle and configured to transmit the data to the terminal existing in the transportation vehicle includes a data selection unit and an illumination unit. The data selection unit acquires location information indicating a location of the transportation vehicle in which the terminal exists and which is traveling. Based on the acquired location information, the data selection unit selects approaching-location data related to a location ahead of a current location of the transportation vehicle in a traveling direction from a plurality of pieces of data related to the location. The illumination unit transmits, as a modulated light signal, a signal comprising the approaching-location data.

Abstract: The apparatus includes a processor configured to send, over a 3rd Generation Partnership project (3GPP) access, a notifying message regarding non-3GPP access to a user equipment, the user equipment being simultaneously registered to the communication network via the 3GPP access and via the non-3GPP access, the user equipment being in a connection management-idle state over the non-3GPP access. The method includes sending over a 3rd Generation Partnership project (3GPP) access a notifying message regarding non-3GPP access to a user equipment, the user equipment being simultaneously registered to a communication network via the 3GPP access and via the non-3GPP access, the user equipment being in a connection management-idle state over the non-3GPP access.

Abstract: Techniques provide for identifying uplink resources that are to be used for uplink transmissions using shortened transmission time intervals (sTTIs), such as low latency or high reliability transmissions. A reference signal (RS) configuration for a three-symbol sTTI, including locations of one or more RS symbols and one or more data symbols within the sTTI may be identified. The RS configuration, along with the allocation of uplink resources, may be provided to a user equipment (UE) which may transmit uplink communications using the allocated uplink resources.

Abstract: Provided herein is a system including, in some embodiments, one or more servers and one or more database servers configured to receive user-specific target information from a client application for training a neural network on a neuromorphic integrated circuit. The one or more database servers are configured to merge the user-specific target information with existing target information to form merged target information in the one or more databases. The system further includes a training set builder and a trainer. The training set builder is configured to build a training set for training a software-based version of the neural network from the merged target information. The trainer is configured to train the software-based version of the neural network with the training set to determine a set of synaptic weights for the neural network on the neuromorphic integrated circuit.

Abstract: A system for identifying the calling device used to place a call in to an enterprise call center. The system also provides information about the network path through which the call was delivered. The system uses active “pinging” in the audio channel during the first few seconds of the call. The device of the invention sends a special sequence of audio tones from the callee to the caller over the audio channel. The system then records and analyses the resulting incoming audio and compares them with the original tones. The system uses that information to characterize the calling device, and possibly the network path as well. The system checks this information against previously stored information from a known valid caller to aid in verifying the identity of the caller, or to flag the call for further assessment via other methods.

Abstract: The present invention discloses a method, a system and an electronic device for configuring the electronic device. The method and system comprise steps of configuring the electronic device by a profile server. The profile server receives sensor information, determines a profile substantially based on the sensor information, retrieves a configuration based on the profile, and then configure the electronic device substantially based on the configuration. In one variant, the configuration of the electronic device may be performed by a profile management module of the electronic device.

Abstract: A first device verification model is sent to a first agent on a first device providing at least a portion of the service. The first agent is able to monitor based on the first device verification model a parameter of the first device related to the service. A second device verification model is sent to a second agent on a second device providing at least a portion of the service, wherein the second agent is able to monitor based on the second device verification model a parameter of the second device related to the service. A report is received from the first agent of at least the parameter of the first device. A report is received from the second agent of at least the parameter of the second device. At least the parameter of the first device and at least the parameter of the second device are analyzed to determine whether the service is functioning as intended.

Abstract: Device, system, and method of Voice over Internet Protocol (VoIP) communications, and particularly of Real Time Protocol (RTP) communication. In order to improve quality-of-service or quality-of-experience for a group of VoIP calls that are served by a VoIP router, each VoIP transmitter implements and adds a pseudo-random waiting-period prior to transmitting each outgoing RTP packet, or otherwise re-orders or mixes or shuffles the order of channels of RTP packets that are buffered or queued for transmission. Accordingly, no particular VoIP channel suffers from repeated drops of its RTP packets at the VoIP router. Additionally, VoIP network analyzers operate to measure the overall VoIP network overuse, or the average RTP packet loss rate of multiple VoIP channels, based on measuring RTP packet loss rate of a single VoIP channel which enforces a random pre-transmission waiting-period.

Abstract: Systems and methods for providing E911 services to a publicly-switched telephone network (PSTN) phone are described. In some embodiments, the systems and methods determine that the PSTN phone is connected to a voice over internet protocol (VoIP) adapter, identify an internet protocol (IP) address for an access point via which the adapter accesses an IP Multimedia System (IMS) network, determine a geographical location associated with the IP address, and enable E911 communications for the PSTN phone over the IMS network via the adapter based on the geographical location.

Abstract: Techniques are disclosed. The techniques include receiving, by a computing device, an answer to a query, the answer comprising a content element and a metadata element. Based on the content element and the metadata element, the techniques generate a presentable sentence of a plurality of presentable sentences. The techniques then utilize a machine learning model to determine a relevance score for the presentable sentence based on the query and the presentable sentence, the relevance score being of a set of relevance scores and corresponding to a measure of relevance with respect to the presentable sentence answering the query. The techniques then select a portion of the plurality of presentable sentences based on a ranking of the set of relevance scores and transmit the portion to a user device for presentation on a voice-based interface of the user device.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A non-transitory computer-readable storage medium storing a packet analysis program for causing a computer to execute a process, the process includes acquiring packets communicated between nodes, adding information of communication of ongoing couplings to an ongoing coupling list in each of predetermined time ranges belonging to start times of the couplings based on the packets, and removing information of communication of a terminated coupling from the ongoing coupling list based on the packets, and analyzing the quality of the communication of the terminated coupling in a cycle corresponding to a time range among the time ranges, and analyzing the quality of communication related to a coupling present in the ongoing coupling list even when the cycle has elapsed a predetermined number of times or more after the addition of information of the coupling to the ongoing coupling list.

Abstract: Providing dynamic, interest-based change notifications includes detecting an event for an artifact managed by a collaborative system, determining a user subscribed to the artifact, and, responsive to the event, calculating a score for the event using a processor. The score is user-specific and indicates a level of interest of the user for the event. The score is compared with a threshold score. A change notification of the event is sent to the user responsive to determining that the score exceeds the threshold score.

Abstract: A cyber-threat detection system that maintains consistency in local configurations of one or more computing nodes forming a cluster for cyber-threat detection is described. The system features a distributed data store for storage of at least a reference configuration and a management engine deployed within each computing node, including the first computing node and configured to obtain data associated with the reference configuration from the distributed data store, From such data, the management engine is configured to detect when the shared local configuration is non-compliant with the reference configuration, and upload information associated with the non-compliant shared local configuration into the distributed data store. Upon notification, the security administrator may initiate administrative controls to allow the non-compliant shared local configuration or modify the shared local configuration to be compliant with the reference configuration.

Abstract: A method and apparatus for presenting a state of a voice interaction device are provided. The method includes: acquiring a current state of the voice interaction device; determining a current presentation mode corresponding to the current state, by searching a pre-stored correspondence relation between a state and a presentation mode according to the current state; and presenting the current state of the voice interaction device in the determined current presentation mode. In embodiments, a current state of a voice interaction device is presented to a user, and necessary usage recommendations and prompts are provided to a user, thereby improving user experience.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: Disclosed is an electronic device including a communicator, a storage, and controller. The controller, through the communicator, transmits first state setting information for changing the state of at least one among the plurality of electronic devices to correspond to a started operation mode among the plurality of state setting information when one among the plurality of operation modes starts, and transmits second state setting information for changing the state of at least one among the plurality of electronic devices to correspond to at least one of the changed operation mode and the changed environment among the plurality of state setting information when one of the operation mode and the surrounding environment is changed.

Abstract: A method, based on operations of parsing a set into two subsets and then multiplying elements of one subset by those of the other subsets, for expanding the assignable Internet IPv4 public address pool consists of introducing a new category of routers, named Semi-Public Router (SPR), utilizing addresses within a reserved address block by transporting such as data via an existing mechanism within the IPv4 protocol. Each SPR is to be deployed inline between an Edge Router and a subscriber premises that it serves, resulting in the additional addressing capacity for serving many more subscribers. This enhanced operation is fundamentally transparent to current Internet equipment. Consequently, existing routers are not affected, thus no modification is imposed on their current practices.

Abstract: A routing system for implementing a service and topology exchange protocol (STEP) includes a primary STEP server configured to maintain a STEP repository and a plurality of routers, with each router including a STEP client in communication with the primary STEP server. The STEP client of each router is configured to transmit, using STEP, STEP documents containing service and topology state information for at least one route or service available through the router to the primary STEP server for storage in the STEP repository. The primary STEP server is configured to transmit to the STEP client of each router, using STEP, service and topology state information from the STEP repository for at least one other router based on configured relationships between routers. Each router is configured to make routing decisions based at least in part on the service and topology state information from the at least one other router.

Abstract: Methods and devices for operating a wireless communication device that can communicate with at least two different wireless networks using a single radio frequency modem are described. The communication device attaches to a first wireless network through the radio frequency (RF) modem, and then detaches from the first wireless network at a predetermined time before a start time of a selected event on a second wireless network. The device attaches to the second wireless network using the same RF modem before the start time of the selected event and collects at least a portion of event data associated with the selected event. After collecting at least a portion of event data, the device detaches from the second wireless network and re-attaches to the first wireless network.

Abstract: A handover method and apparatus, and a computer storage medium are provided. The method comprises: a first access network element sending a first handover request message to a second access network element so as to trigger the handover of a terminal from a first access network to a second access network, and keeping a connection between the first access network and a first core network unchanged, wherein data of the terminal is forwarded by the second access network and is transmitted between the first access network and the first core network; and the first access network element sending a second handover request message to a first core network element to trigger the handover from the first core network to a second core network, wherein the data of the terminal is transmitted between the second access network and the second core network.

Abstract: One example method of operation may include receiving a call message associated with a call, determining a service provider network identifier based on a telephone number of a call origination device, identifying, from the call message, an identity header with a link to a public certificate repository storing a public certificate assigned to a service provider network hosting the call origination device, retrieving a service provider code assigned to the service provider network from the public certificate, and determining whether the service provider code matches the service provider network identifier as identified from a verification table.

Abstract: A system is provided that includes one or more computing servers and a processing circuit for analyzing data transactions of the computing servers. Each of the computing servers is configured to provide respective services to remote users. The processing circuit is configured to analyze data transactions of at least one of the computing servers, which is associated with a user account. A security policy of the user account includes conditions that are indicative of unauthorized access when the conditions are satisfied by various characteristics of the analyzed data transactions. The processing circuit is configured to determine a threat level as function of the characteristics of the data transactions and the conditions of the security policy. In response to the threat level exceeding a first threshold level indicated in the security policy of the user account, the processing circuit performs an action for the user account that is associated with the first threshold level.