At&t Intellectual Property I, LP

Amy Zwarico

Loraine Beyer

Barrett Morris Kreiner

Larry B Pearson

Steven Alan Siegel

Thomas C Smith

Rebecca Finnin

Christine Liu

Patricia H Cooper

Derek L Calhoun

Samantha Kossey

Luba Droizman

Kevin S Cunningham

Vickey Ford Pharr

Diane F Tucker

Kevin Castellow

A system and method for returning security policy requirements data based on user input that identifies a cloud environments, a service model, first or third party responsibilities, and/or code deployment information. A user provides answers to straightforward, generally non-expert questions directed to the user's cloud environment, first or third party responsibilities, and/or code deployment information for the user's scenario, e.g., technical workload. The answers result in determining which architecture layers apply (are in-scope architecture layers) relevant to the user's scenario. The in-scope architecture layers map to security requirements maintained in a security policy data store. The security requirements are returned (e.g., as a list) in response to the user's answers.

Determining relevant security policy data based on cloud environment

One embodiment of a guest browser system, among others, includes a guest browser interface configured to provide an address bar interface for accepting a network address for retrieving a first web page. The guest browser interface is rendered from code of a second web page, where content of the second web page is rendered by an installed web browser. The system further includes a guest browser engine configured to retrieve contents of web pages. The guest browser engine is built from code provided by the second web page and is used to update content of the second web page with content from the first web page. Other systems and methods are also provided.

Guest browser

Pre-delivery authentication may be required prior to routing and delivery of electronic content. A sender of the electronic content, for example, may require that a recipient authenticate to ensure legitimate use or identity. Should pre-delivery authentication be required, the electronic content is held at any networked device while the recipient authenticates. If the recipient correctly authenticates, then the electronic content is released for delivery.

Pre-delivery authentication

Methods of operating a communications service are provided in which a communication that is addressed to a user of a communication service is received. A determination is made that end user authentication is required before the communication may be delivered to a first recipient electronic device. A request for end user authentication may then be forwarded to the first recipient electronic device in response to determining that end user authentication is required. End user authentication information may be received from the first recipient electronic device. The received end user authentication information may be compared to stored end user authentication information for the user. The communication may be forwarded over a network to the first electronic device in response to determining that the received end user authentication information matches the stored end user authentication information for the user.

Methods and systems for selectively obtaining end user authentication before delivering communications

An IP Multimedia Subsystem (IMS) network provides access to Web services. A HyperText Transfer Protocol (HTTP) message addressed to a Web Service Provider along with the IMS identifier from a device is received in the IMS network. The IMS network validates registration of the device. The IMS identifier and the HTTP message are communicated to the Web Service Provider. A Web service is conveyed from the Web Service Provider to the device.

Systems, methods and computer program products for providing access to web services via device authentication in an IMS network

A web service request from a device is received at a web service provider. The web service request is authenticated at the web service provider using the IMS network. A requested web service is provided to the device responsive to the authentication of the web service request. The web service request may be received via a path outside of the IMS network, e.g., over a network using HTTP or other non-IMS protocol. The requested web service may also be provided using a web service response communicated to the device via a path outside of the IMS network.

Systems, methods and computer program products supporting provision of web services using IMS

A network connectivity status of user equipment (UE) is detected. Detection of the network connectivity status of the UE may include, for example, detecting termination of network connectivity of the UE responsive to a communication to the network by the UE, receiving a termination message from the UE at the bootstrapping server function (BSF), receiving notification of de-registration of the UE from a home subscriber server (HSS) and/or detecting a loss of communications between the UE and the network. A bootstrapping server function (BSF) communicates with at least one network application function (NAF) responsive to detection of the network connectivity status to terminate a plurality of sessions associated with the UE.

Systems, methods and computer program products for coordinated session termination in an IMS network

A communication network provides access to a network service by providing an additional level of authentication beyond device level authentication. Operations include receiving a message at a Bootstrapping Server Function (BSF) from User Equipment (UE) that additional authentication beyond UE authentication is required for UE access to a network service, and performing an authentication protocol between the BSF and a Home Subscriber System (HSS) to authenticate an identity associated with the UE responsive to receiving the message.

Systems, methods and computer program products for providing additional authentication beyond user equipment authentication in an IMS network

A computer system and method for managing commissions, including: a storage device containing a database having commission data and a periodic extract of sales transactions stored therein; a user interface for inputting the commission data into the database and viewing the commission data stored in the database; and a processor for calculating commissions for sales representatives and agents associated with a business enterprise based on the commission data, and forwarding the calculated commissions to a payroll department within the business enterprise; wherein the processor executes: a first software module for retrieving billing, inventory, corporate, and affiliated sales information for the sales representatives, and for calculating the commissions based on a predetermined rules set; and a second software module for retrieving billing and affiliated sales information for the agents, and for calculating the commissions based on the terms of a contract between the agent and the business enterprise.

Commission management system

A Session Initiation Protocol (SIP) message including an embedded web service request is received at an IMS network from a device. The received SIP message is protocol translated to generate a non-IMS message including the web service request. The non-IMS message is conveyed to a web service provider, and a requested web service corresponding to the non-IMS message is conveyed from the web service provider to the device. The SIP message may include a SIP INVITE message containing an embedded SOAP message.

Growing community of inventors

Mountain Brook, AL, United States of America

Amy Zwarico