Oracle International Corporation

Andreas E Jansson

Terje Strand

Binod Pankajakshy Gangadharan

Boris Selitser

Sharath Rajasekar

Peng Liu

Tao Ma

Jean Elie Bovet

Ting Lou

Yun Gao

Anders Lars-Goran Forsberg

Niklas Modin

Vicky Liu

Rahul Shinde

Diwakar Goel

Lars-Göran Forsberg

Grant Yang

Jack Li

Zun Wu

Bengt-Inge Jakobsson

Paul Goodhand

Matthew John Rayner

Andrew Grant

A system performs threat protection for real-time communications ('RTC'). The system receives, by a signaling engine of a gateway, a request of a client according to a protocol, where the request has successfully traversed one or more security devices between the client and the gateway. The system determines, by a protocol handler corresponding to the protocol, whether the request includes a threat. When the request includes the threat, the system indicates the threat to the one or more security devices, and when the request does not include the threat, the system sends the request to an application server at the gateway.

Threat protection for real-time communications gateways

A method for retrieving data from a telecommunications network includes receiving a request at a view for the subscriber data from a telecommunications application, where the subscriber data resides on multiple data sources. The method includes sending the request to each data source coupled to the view and receiving the subscriber data from the data sources coupled to the view. The method further includes merging the subscriber data into a single data record and returning the merged data record to the telecommunications application.

Subscriber data federation in a telecommunications network

A system provides a media relay for real-time communications ('RTC'). The system receives, by a signaling server, a first signaling message from a first client including one or more first candidate transport addresses of the first client. The system generates a modified first signaling message by inserting a transport address of a relay server into the first signaling message, and transmits the modified first signaling message to a second client. Then, the system receives a second signaling message from the second client including one or more second candidate transport addresses of the second client. The system generates a modified second signaling message by inserting the transport address of the relay server into the second signaling message, and transmits the modified second signaling message to the first client.

Managed media relay selection for real-time communications

A system performs client wake up for real-time communications ('RTC'). The system closes a connection between a gateway and an RTC application of a device. The RTC application enters a sleeping mode when the connection to the gateway is closed. After closing the connection, the system receives a message intended for the RTC application. The system requests a push notification server to wake up the RTC application, reconnects the gateway with the RTC application, and delivers the message to the RTC application.

Resource management for WebRTC

In accordance with various embodiments, a set of features are described for enabling an application server platform for telecom based applications. A system for providing an application server for telecom-based applications can include a computer, including a computer readable medium and processor. The system can also include an application server, executing on the computer. The application server can include an actor container that manages and provides lifecycle and runtime properties for application classes that are executed as actors in the application server. The actor container can manages a set of event transactions, wherein all storage operations are performed as part of the event transaction that spans each event handler invocation.

Application server platform for telecom-based applications using an actor container

A system performs authentication for real-time communications (RTC). The system receives a request from a browser application for web authentication of a user. The system then performs the web authentication by a security provider by reaching a first resource, where the security provider determines a security principal for the user. Subsequently, the system executes a security Groovy script to obtain an identity mapping from a second resource different than the first resource, where the identity mapping maps the security principal to an Internet Protocol (IP) Multimedia Subsystem (IMS) identity. The system then provides the identity mapping to a runtime Groovy script.

Authentication interworking in communications networks

In accordance with various embodiments, systems and methods are provided for co-locating execution logic and state data in a distributed and clustered environment. Such a system can include a plurality of applications, executing on one or more application servers, including an event broker which identifies state data required by an actor, a database which identifies an application server where such state data is cached; and a co-location module which instantiates the actor on the application server where such state data is cached. The method includes identifying state data required by a transaction, identifying an application server where such state data is cached, instantiating execution logic for processing the transaction on the application server where such state data is cached, and executing said execution logic for processing the transaction on the application server where such state data is cached thereby providing predictable low execution latency.

Runtime co-location of executing logic and frequently-accessed application data

In accordance with various embodiments, a set of features are described for enabling an application server platform for telecom based applications. A system for providing an application server for telecom-based applications can include an application server that includes a session initiation protocol (SIP) adapter. The SIP adapter can use a connection oriented protocol and provides interactions with application code in an actor of said application server by means of asynchronized SIP protocol events. The SIP adapter can also provide stateless node mapping to a stateful server node hosting a specific session for the actor.

Session initiation protocol adapter system and method providing stateless node mapping to a stateful server node hosting a communication session for an actor

In accordance with various embodiments, systems and methods that integrates web services into an actor model are provided. Such a system can include an event broker, which is operable to manage events between one or more actors and a plurality web services. The system can also include a plurality of protocol adapters. Each protocol adapter is associated with a different one of the plurality of web services. The system can further include a web services bundle which is a common library shared by the plurality of protocol adapters. Each protocol adapter can convert web services messages received from a web service into events and publish the events using the event broker.

Integration of web services with a clustered actor based model

In accordance with embodiments, there are provided mechanisms and methods for controlling access to telecommunications resources implementing a legacy protocol based upon a policy. These mechanisms and methods for controlling access to legacy protocols based upon a policy can enable embodiments to control access by third party created and other applications to network resources implementing legacy telecommunications protocols. The ability of embodiments to control access by third party created and other applications to network resources can enable network providers to provide greater access to network resources without compromising security of other users. Embodiments may further provide the ability to interface with legacy push protocols, multimedia message protocols and short message peer-to-peer protocols.

System and method for controlling access to legacy push protocols based upon a policy

A split deployment model is enabled for a telecommunication service access gateway. The services of the gateway are segregated into a set of core services that provide container-based functionality and a set of exposure services that enable network integration and translation of protocols. The core services are executed as part of the application server, while the exposure services are deployed in separate archive files. This isolation of services allows single or groups of services to be independently upgraded, patched or removed and reduces the impact of one service on others. Furthermore, the services can scale independently, allowing additional hardware resources to be added to a particular service. Multiple versions of a single service can also be deployed in a single cluster or server.

System and method for providing a split deployment model for a telecommunication service access gateway

System and method for controlling access to legacy multimedia message protocols based upon a policy

A network gateway application is described that provides throttling, prioritization and traffic shaping for incoming requests from client applications. A request is received by a plug-in manager component of the gateway application. The plug-in manager can then invoke the budget service in order to determine a current available budget for the request. The budget can be computed according to a service level agreement for the service provider, application or network node. The requests can be of high or low priority. If the budget is greater than a specified priority threshold value, the low priority requests can be denied, while the high priority requests can be processed as long as there is some available budget left. If the budget for the request has reached the restricted level, the request can be denied and optionally enqueued to a traffic shaping queue to be processed at a later time.

Growing community of inventors

San Francisco, CA, United States of America

Andreas E Jansson