At&t Intellectual Property I, LP

At+t Corp.

At&t Global Network Services France Sas

Aurélien Bruno

Claude R Galand

Jean-Francois Le Pennec

Jean-François Le Pennec

Jean-Marie Sommerlatt

Nicolas Grisi

Didier F Giroir

Aline Fichou

Keylor Eng

Scott Sayers

Miguel Martinez-Heath

In one example, a method includes monitoring conditions in a telecommunication service provider network, selecting a first path by which to connect a communication session between a first endpoint and a second endpoint, wherein the first path is a path through the network that is expected to satisfy a predefined level of performance for the communication session based on the conditions, connecting the first endpoint and the second endpoint via the first path, detecting a change in the conditions that results in the first path failing to satisfy the predefined level of performance, selecting a second path by which to connect the communication session, wherein the second path is a path through the network that is expected to satisfy the predefined level of performance for the communication session based on the conditions as changed, and initiating a handoff of the communication session from the first path to the second path.

Adaptable network communications

Firewall system for interconnecting a first IP network () to a second IP network (), these networks belonging to two different entities having each a different administration wherein any data packet transmitted/received by the first IP network is filtered by using a first firewall function and any data packet transmitted/received by the second IP network is filtered by using a second firewall function. The system comprises essentially a single firewall device () including filtering means () performing both first firewall function and second firewall function, a console port () enabling the administrator in charge of each IP network to enter filtering rules for updating the associated firewall function and control means () interconnecting the console port and the filtering means for transmitting thereto the filtering rules so that each administrator may independently manage the system from the console port.

Firewall system for interconnecting two IP networks managed by two different administrative entities

Virtual Private Network (VPN) dedicated to a customer using a physical transmission network based upon Multi-Protocol Label Switching (MPLS) technology including a plurality of Provider (P) devices and a plurality of Provider Edge (PE) devices, the customer owning at least two specific Customer Edge (CE) devices amongst a plurality of CE devices, a specific CE device being attached to a specific PE device and enabling the customer to gain access to any other CE device belonging to the same VPN, by the intermediary of PE devices to which are attached the CE devices. The VPN comprises several billing zones () being each defined by the application of a single flat rate. A PE device () belonging to each billing zone includes a virtual router () associated with each billing zone, two virtual routers being interconnected by a virtual circuit () transmitting all the traffic exchanged between the two associated billing zones so that the traffic flowing between the two billing zones can be measured and therefore precisely billed to the customer.

Virtual private network based upon multi-protocol label switching adapted to measure the traffic flowing between single rate zones

Method of gaining secure access from a host () to Intranet resources provided by at least a content server () in a data transmission system wherein the host is connected to the content server through a gateway (). Such a method consists in generating and sending at predetermined transmission instants from either the host or the gateway verification messages wherein each verification message contains a signature which depends upon the data exchanged between the host and the gateway since the preceding verification message, the host and the gateway also called peer devices having at their disposal same algorithm defining which of them sends a verification message at each of the predetermined instants.

Method of gaining secure access to intranet resources

Certain exemplary embodiments provide a method for converting data packets based upon IPv4 protocol into data packets based upon IPv6 protocol, said method comprising converting any data packet based upon the IPv4 protocol into a data packet based upon the IPv6 protocol before transmitting it to an IP switched network using information provided by an external server, and converting any data packet based upon the IPv6 protocol provided by said IP switched network into a data packet based upon the IPv4 protocol before transmitting it to a first or second workstation.

System for converting data based upon IPv4 into data based upon IPv6 to be transmitted over an IP switched network

Method of gaining secure access from a host () to Intranet resources provided by at least a content server () in a data transmission system wherein the host is connected to the content server through a gateway (). Such a method consists in generating and sending at predetermined transmission instants from either the host or the gateway verification messages wherein each verification message contains a signature which depends upon the data exchanged between the host and the gateway since the preceding verification message, the host and the gateway also called peer devices having at their disposal a same algorithm defining which of them sends a verification message at each of the predetermined instants.

Growing community of inventors

Nice, France

Aurélien Bruno