Avaya Inc.

Extreme Networks, Inc.

David Ahrens

Mahalingam Mani

Amit Agarwal

Manish Gaur

Rohit Mehta

Robert J Serkowski

Frank John Boyle

Russell C Jones

Anupam Rai

Rupesh Kumar

Methods and systems for routing connections between federated enterprises are provided. More particularly, user location information is stored as part of a first directory accessible to a federation broker. Location information obtained in association with a requested connection is used by the federation broker to access a second directory containing the locations of points of presence within the enterprise that includes the target communication device.

Route lookup resolution

A communication broker and methods of administering the same are provided. The communication broker is adapted to direct various enterprises to set up a media channel directly therebetween while remaining in the control signaling path for the communication session. The broker may enable the enterprises to use standard authentication techniques and the Datagram Transport Layer Security (DTLS) protocol to establish the media channel.

Universe media shuffling

Methods and systems for providing a cache of federated routing information on a dynamic domain name server are provided. More particularly, information obtained from a federation broker can be stored in a dynamic domain name server associated with an enterprise for use in connection with requests for communication links originating from communication endpoints included in the enterprise. By providing this cache of information, requests for federated routing information made to the federation broker can be reduced.

Federation route cache based on dynamic domain name system server

Methods and systems for facilitating sign-on procedures in connection with a converged system are provided. An authentication plug-in operates to receive authentication credentials in connection with a request to access an application by a client. The authentication plug-in is capable of operating in different contexts in a converged system. After an initial sign-on, subsequent sign-on requests can be fulfilled by accessing authentication credentials stored in a cache.

Single sign-on for applications

Methods, devices, and systems for creating and using a trusted host list for Transport Layer Security (TLS) sessions are provided. The proposed solutions described herein provide a mechanism of specifying authorization policy for TLS sessions where such authorization was traditionally implied by the possession of a certificate issued by a mutually trusted third party. The proposed solutions also provide for wildcard use and regular expression matching to simplify administration of the trusted host list.

Trusted host list for TLS sessions

The present invention is directed to an intrusion detection/prevention system that uses application layer event information to identify potential intrusions and notifies remote trusted peers in other enterprise networks of potential intrusions emanating therefrom.

Method for cooperative intrusion prevention through collaborative inference

A network gateway is disclosed, wherein for a received communication, the gateway determines a network component to which information for the communication is routed based upon one or more of: (a) a characterization of the source of the communication, (b) a characterization of non-address data in the communication, and (c) services applied to the communication by the gateway. The characterization of the communication source can be related to a perceived risk that the communication may be illicitly compromised or may cause a malfunction in a network component. The characterization of non-address data identifies a use of the communication, or service to be applied to the communication prior to reaching its destination, or a security feature (or lack thereof) of the communication. The services applied by the gateway are generally generic services for facilitating appropriate non-malicious communications, e.g., such services can be for a firewall, secure communications (virtual private network), FTP communications, voice over IP, email, and general Internet communications.

Enhanced gateway for routing between networks

In one embodiment, a communication deviceincludes a voice communication moduleto effect packet-switched voice communications over an untrusted network; a secure communication moduleto create a secured pathwaywith a selected remote secure communication module; and a VPN topology clientto contact a VPN topology serverto receive VPN topology informationthat enables the secure communication module to create the secured pathway with the selected remote secure communication module. The VPN topology information includes IP addresses associated with remote secure communication modules, with each of the IP addresses having a corresponding range of node addresses serviced by the respective secure communication module.

Growing community of inventors

San Jose, CA, United States of America

David Ahrens