AT&T Intellectual Property I, LP

At+t Corp.

Edward Hope

Michael Stair

Frederick Henry Meyer

Daniel Solero

Ram S Ramamurthy

Michael B Jones

Christopher Moran

Linda D Galasso

A computer-implemented method includes receiving a request for one of a network session and a virtual network function, wherein the request includes a single packet authorization request. The method further includes classifying the single packet authorization request at a first service classifier. The method further includes routing the request, via a service function forwarder, to a single packet authorization service function for validation. The method further includes instantiating a security virtual function in response to the request, wherein instantiating the security virtual function occurs after validation of the single packet authorization request. The method further includes configuring the security virtual function to apply at least one connection policy to allow or deny traffic in a data session. The method further includes, in response to allowing the data session, terminating the security virtual function after the data session has concluded.

On-demand network security system

An on-demand virtual security system between a client and a server in communication with a network, the system including an orchestrator, wherein upon receiving a service request from at least one of the client and the server, the orchestrator instantiates a security virtual function within the network and supplies the security virtual function with at least one connectivity policy, and wherein the security virtual function applies the at least one connectivity policy to approve or disapprove a connection between the client and the server and wherein upon the security virtual function approving the connection between the client and the server, a orchestrator establishes a data session; and wherein after the data session has concluded, the orchestrator terminates the security virtual function.

Concepts and technologies disclosed herein are directed to a cloud workload proxy as link-local service. According to one aspect disclosed herein, a datacenter environment system can include an infrastructure network, a service proxy gateway attached to the infrastructure network, and a software-defined networking ('SDN') controller. The service proxy gateway can include an infrastructure network address. The SDN controller can be configured with a link-local Internet protocol ('IP') address to the infrastructure network address. The SDN controller can store the link-local IP address mapped to the infrastructure network address for routing packets from a workload executing in a cloud computing environment to a target service operating external to the datacenter environment system.

Cloud workload proxy as link-local service configured to access a service proxy gateway via a link-local IP address to communicate with an external target service via a private network

A universal security agent deployed on a computing endpoint includes one or both of a base agent and a security agent plugin module. The base agent loads the security agent plugin module and, in response, receives plugin tasks from the security agent plugin module for registration. The base agent schedules the received plugin tasks based on a policy and/or a system access information associated with the security agent plugin module. Further, the base agent executes the plugin tasks based on the scheduling. The base agent controls system access requests generated during the execution of the plugin tasks based on the policy associated with the security agent plugin module. Additionally, the base agent monitors and logs system access information associated with the security agent plugin module.

Universal security agent

An action control point master gatekeeper for a communications network creates a hierarchical scalable signaling and transaction infrastructure for supporting carrier level deployment of, for example, IP telephony using H.323 terminals and gateways. The action control point master gatekeeper supports a plurality of H.323 zones in an administrative domain. Action control point master gatekeepers in an administrative domain can signal to other administrative domains via a hierarchical signaling infrastructure. A backup master gatekeeper can also be present in an action control point. A customer database, which can be distributed within zones or centralized within an administrative domain, allows for address resolution between a terminal alias and a terminal address. The customer database can also contain pointers to special purpose processes, such as network control points, to implement service specific transaction services.

Growing community of inventors

Forked River, NJ, United States of America

Edward Hope