Alcatel Lucent

Lucent Technologies Inc.

Alcatel-lucent USA Inc.

At+t Corp.

Alcetel Lucent

Hui-Lan Lu

Igor Faynberg

ZhongJin Yang

Thomas Wayne Anderson

Richard I Perlman

Lev Slutsman

Marc P Kaplan

Jie Yao

Robert J Abrams

Zhian Li

Zachary Zeltsan

Francois Cosquer

Improved virtualized application performance is provided through disabling of unnecessary functions, such as unnecessary encryption and decryption operations. An example method performed by a hypervisor includes the steps of obtaining a request from a first virtual machine to perform one or more of encrypting and decrypting of a communication between the first virtual machine and a second virtual machine; determining when the first and second virtual machines execute on a same host as the hypervisor; and in response to the first and second virtual machines executing on the same host: processing the communication without performing the one or more of encrypting and decrypting of the communication, wherein the hypervisor initiates an encryption of further communications between the first virtual machine and the second virtual machine in response to at least one of the first virtual machine and the second virtual machine being moved from the same host.

Virtualized application performance through disabling of unnecessary functions

Improved virtualized application performance is provided through disabling of unnecessary functions, such as unnecessary encryption and decryption operations. An example method performed by a hypervisor includes the steps of obtaining a request to one or more of encrypt and decrypt a communication between a first virtual machine and a second virtual machine; determining if the first and second virtual machines execute on a same host as the hypervisor (e.g., by evaluating a context of the communication); and processing the communication without encrypting or decrypting the communication if the first and second virtual machines execute on the same host. Lawful Interception is performed by forwarding an unencrypted version of the communication to an authorized agency. When the communication traverses a switch and/or a router between the first virtual machine and the second virtual machine, an unencrypted version of the communication is placed in a queue within a buffer and a random value and/or an all-zero value is returned to a caller.

Techniques for enabling improved electronic mail handling in communication networks include a method of handling an electronic mail message in an electronic mail system. The method includes establishing a secure connection between a client of a message sender and a server of a message recipient in the electronic mail system. The method also includes participating in an authentication exchange to verify the identity of the message sender. The method further includes the message sender depositing an electronic mail message with the server of the message recipient upon successful verification of the identity of the client of the message sender.

Direct electronic mail

The present invention sets forth a methodology that allows involved processes to partition among themselves a pre-defined set of multi-type resources in a way that all processes end up satisfied with the outcome of the partitioning, and no central mediation for such partitioning is required. One exemplary embodiment of the invention sets forth a method of allocating multiple type resources among a distributed set of processes that includes the steps of selecting a process from the set of processes for partitioning the resources; partitioning the resources at the selected process; sharing results of the partitioning with others of the set of processes, wherein said other processes select a partition from the partitioned resources; the selected process being able to select a partition subsequent to the other processes having selected a partition. The method also repeats the above steps until all currently involved processes are satisfied by a selected partition of available resources. Additionally, if more than one process contends for the same partition, a next-in-line process not having been allocated resources repartitions remaining resources for selection by currently unsatisfied processes.

Apparatus and method for non-mediated, fair, multi-type resource partitioning among processes in a fully-distributed environment

In a communication network, assume a first computing device is an end user device, a second computing device is a gateway server, and a third computing device is an application server. A method comprises the following steps. The second computing device authenticates one or more packets received from the first computing device. The second computing device marks the one or more packets with a first-layer identity before routing the one or more packets toward the third computing device such that the third computing device is able to authenticate the one or more packets from the first computing device by confirming an association between the first-layer identity and a second-layer identity. For example, the first-layer identity may comprise a link layer identity assigned to the first computing device and the second-layer identity may comprise an application layer identity assigned to the first computing device.

Application layer authentication in packet networks

In a communication network wherein a first computing device represents a resource owner and a second computing device represents a resource requestor, the resource owner detects an occurrence of an event, wherein the event occurrence represents a request to access one or more resources of the resource owner stored in a resource residence. The resource owner sends an authorization token to the resource requestor in response to the event occurrence, the authorization token serving as a proof of authorization delegated by the resource owner to be presented by the resource requestor to the resource residence so as to permit the resource requestor to access the one or more requested resources stored in the resource residence.

Secure dynamic authority delegation

Techniques are disclosed for optimally scheduling computations that involve multiple factors, the cost of evaluations and probabilities of success of which are known. For example, a methodology is provided for determining an optimal schedule of a multi-factor test in sub-quadratic time. While the methodology has wide ranging application, we illustrate a particular applicability to a security application involving multi-factor authentication in a cloud computing environment, as well as applicability to the contact center agent scheduling.

Optimal multi-factor evaluation in computing systems

Techniques are disclosed for enabling operators of communication networks to provide one or more identity services such as, for example, an authentication service. For example, in a communication network, assume that a first computing device is a client device, a second computing device is an application server, and a third computing device is a server under control of an operator of the communication network. A method may comprise the following steps. In response to the first computing device issuing a resource request to the second computing device and the first computing device providing a first identifier to the second computing device for use in authenticating the first computing device to the second computing device, and in response to the second computing device being unable to authenticate the first computing device, the third computing device assisting in the authentication of the first computing device to the second computing device when a correlation exists between the first identifier sent by the first computing device and a second identifier used by the first computing device to access the communication network as a subscriber, wherein the second computing device is able to reply to the resource request sent by the first computing device upon a successful authentication assisted by the third party computing device.

Identity management services provided by network operator

A method and apparatus for supporting end-to-end quality of service (QoS) reservations for an implicit reservations model are provided. The invention teaches how to implement implicit resource reservations using the open-standard Resource and Admission Control Function (RACF). A request for resources for a given reservation between an originating and a terminating point in a network is received. A central controller for that domain processes the request for a given domain to determine whether routes for said reservation are available and whether necessary bandwidth for said reservation is available. An implicit reservation and a release of the bandwidth are respectively accomplished with a specific number of messages. If the routes and bandwidth are available, the reservation for the given domain is confirmed and the reservation request is passed to another central controller for a next domain having resources required to satisfy the reservation request.

Method and apparatus for real-time application-driven resource management in next generation networks

The proposed invention solves the problem of spoofing the origin to create e-mail spam, virus distribution, and other abuse of the electronic mail. In particular, it solves a notoriously dangerous problem of distributing computer viruses via e-mail allegedly sent from friends, colleagues, and well-respected organizations. The proposed invention defines a comprehensive set of mechanisms and apparatus to reasonably ensure that an e-mail message&#x2014;when received by an e-mail gateway, e-mail relay server, or the destination e-mail server&#x2014;has originated at the location and sent by a person (or a program) specified in its 'From:' field.

Method and apparatus for reducing e-mail spam and virus distribution in a communications network by authenticating the origin of e-mail messages

A method and apparatus for establishing additional channels for a call between multi-task user terminals. A multi-task call (MTC) signaling module is used to receive requests for the addition or release of additional channels for a call. Through a signaling network, the module has access to the switches of a hybrid network for interconnecting edge switches connectable to MTC terminals. The MTC signaling module controls establishment or release of the connections between links of the paths through the hybrid network. Advantageously, an MTC terminal through its MTC signaling module can control the addition or release of channels through the hybrid network.

Signaling of multi-task calls carried by a hybrid circuit/packet network

A method of setting up calls over circuit-switched and packet-switched resources on a single network having the steps of receiving a request from a user for a call having one or more resources, and allocating the one or more resources among packet-switched, resources and circuit-switched resources associated with a communication network to set up the call. The call may be a multi-media call. Resources may be allocated based on one or more call characteristics that may be in a request for resources by the user.

Setting up calls over circuit and packet-switched resources on a network

A method and apparatus for establishing multimedia calls over an intelligent telecommunications network in which the calls are requested through an internetwork of client computers and server computers and the internetwork of client computers and server computers is further connected to the intelligent telecommunications network. The method involves: 1) a caller generating a request for a call utilizing the internetwork to initiate the request; 2) delivering multimedia and/or audiovisual presentations(s) to the caller via the internetwork and/or public switched telephone network (PSTN); and 3) completing a circuit switched telephone call between the caller and a destination user subsequent to the delivery of the presentations(s) wherein the call is placed from within the intelligent network itself. In this manner, one or more multimedia advertisements or other presentations are delivered to the originating caller before completion of the requested call.

Multimedia calling method and apparatus

The present invention provides a method and apparatus for interfacing different service creation environments (SCEs) and execution environments (EEs) in a telecommunication system. A telecommunication system interface in accordance with the present invention includes at least one SCE to be interfaced to a plurality of service EEs; a parser for parsing output code from the SCE to form a parse tree representing a telecommunication service developed in the SCE; an intermediate code generator for generating an intermediate code representing nodes of the parse tree such that the intermediate code preserves substantially all the information contained within the SCE output code; and a target code generator for generating a target code for each of the EEs from the intermediate code, such that the telecommunication service developed in the SCE may be provided in each of the EEs.

Growing community of inventors

Marlboro, NJ, United States of America

Hui-Lan Lu