Oracle International Corporation

Acme Packet, Inc.

Cheng Liu

Jitender Arora

Prashant Kumar

Rajat Gopal

Nan Luo

Ge Guo

Balaji Thoguluva Bapulal

A method for utilizing a security service engine (SSE) to assess security vulnerabilities on a security gateway element (SGE) includes establishing a security configuration for a SGE corresponding to a provisioned security service policy definition and configuring a plurality of SGE security service managers hosted by a SSE on the SGE based on policies included in the security service policy definition. The method further includes executing, by the SSE, each of the plurality of SGE security service managers as a software based service in real time to enforce the policies of the security service policy definition on the SGE and remediating the security configuration of the SGE if one or more of the plurality of SGE security service managers detects a security vulnerability corresponding to the operation of the SGE.

Methods, systems, and computer readable media for utilizing a security service engine to assess security vulnerabilities on a security gateway element

A method for dynamically remediating a security system entity includes establishing a security score for a security system entity (SSE) supporting a trusted network based on a security policy configuration of the SSE. The method further includes receiving, by the SSE, ingress network traffic flows directed to the trusted network and determining an updated security score for the SSE based on the security policy configuration of the SSE and the ingress network traffic flows that are permitted into the trusted network via the SSE. The method also includes remedying the security policy configuration of the SSE if the updated security score differs from the baseline security score by a predefined amount.

Methods, systems, and computer readable media for dynamically remediating a security system entity

A security gateway system offloads cellular data from user equipment ('UE'). The system receives a dynamic host configuration protocol ('DHCP') message from a Wi-Fi access point (&#x201c;AP&#x201d;) in communication with the UE. The system converts the DHCP message into an authentication, authorization and accounting (&#x201c;AAA&#x201d;) access request and sends the AAA access request to an AAA server. The system receives an AAA access accept from the AAA server and initiates a gateway general packet radio service tunneling protocol tunnel setup with a setup node.

Wi-Fi offload of cellular data

A system/router that flexibly routes Wi-Fi offloaded data receives a data packet from a user equipment via an access point of a Wi-Fi network. The data packet includes an access point name ('APN') and an Internet Protocol ('IP') address. The system defines two or more routing policies, each routing policy including a routing criteria and a priority. The system evaluates the data packet based on the routing policies, and routes the data packet to one of at least two possible destinations based at least on the routing policies, including the priorities.

Flexible routing policy for Wi-Fi offloaded cellular data

Systems and methods are disclosed for synchronizing sequence numbers in a packet flow. One such method includes receiving a sequence number synchronization request from a redundancy peer. The sequence number synchronization request is associated with a packet flow. The method also includes incrementing by a fixed amount a packet sequence number for the packet flow, after the sequence number synchronization request. The method also includes transmitting a next packet including the incremented packet sequence number to the communication peer.

Growing community of inventors

Acton, MA, United States of America

Cheng Liu