Ribbon Communications Operating Company, Inc.

Secureg

Kevin Riley

Justin Hart

Shaun Jaikarran Bharrat

Timothy R Thornton

Sridhar Kuppanna

Dilnawaj Ahmed

Ashish Sharma

Carlos Solari

Surya Kumar Kovvali

Tolga Asveren

Dan Malek

System and methods of brokering trust across multiple Authentication and Authorization methods in a multi-domain, multi-operator, private and public cloud networks are identified. A Digital Trust Broker (DTB) is disclosed that brokers trust between infrastructure authentication methods that use digital certificates (PKI) and operator/enterprise Authentication/Authorization methods through interaction with multiple operator/service provider control and management platforms. The Digital Trust Broker interacts with vendor management and security platforms for associating device manufacturing, assembly, supply-chain, and logistics attributes for assuring trust of compute, network, storage and other system components that a high security enterprise or service provider acquires and installs in their networks. Additionally, methods of generating enhanced certificates for secure network slices and other Cloud and SDN hosted virtual network functions as trust assured services are also disclosed.

Digital trust broker and end to end trust assurance in multi-domain, multi-operator and cloud networks for high security environments

The present invention relates to methods and apparatus for dynamically detecting and/or mitigating threats in communications systems. Exemplary methods and apparatus of the present invention allow for a combination of automated and operator controlled responses to threats. While an operator is provided an opportunity to provide input on how to respond to a threat, after one or more threats of a given type are identified, the system will automatically take corrective action without waiting for operator input and/or in the absence of operator input following notification of a threat.

Communications methods and apparatus for dynamic detection and/or mitigation of threats and/or anomalies

The present invention relates to systems, apparatus and methods for the computation and use of session, device and/or user signatures for determining communications session types, device types, and/or user signatures. An exemplary method in accordance with an embodiment of the invention includes: receiving a first set of session control messages belonging to a first communications session, the first set of session control messages including at least one session control message; extracting a first set of features from the first set of session control messages; operating one or more neural networks to identify a group session signature to which the first set of session control messages corresponds based on the first set of features, the identified group session signature being one of a plurality of group session signatures.

Methods, systems and apparatus for using session, device and/or user signatures

The present invention relates to systems, apparatus and methods for the computation and use of session, device and/or user signatures for determining communications session types, device types, and/or user signatures. An exemplary system in accordance with an embodiment of the invention includes: a first device, the first device including: a receiver that receives a first set of session control messages belonging to a first communications session, said first set of session control messages including at least one session control message; a feature extractor that extracts a first set of device features from the first set of session control messages; and a first neural network that determines a device signature from the first set of session control messages based on said set of device features.

The present invention relates to communications methods, apparatus and systems for providing media micro flow services in a scalable manner using SDN principles. In an exemplary method embodiment a session border controller in a SDN network is operated to receive first signaling information for establishing a first media session, the first media session including a first media packet flow that passes through a first programmable switch of the SDN network; generate instructions to implement a media micro flow service on the first programmable switch through which the first media packet flow passes; and send the instructions to a SDN controller which controls the first programmable switch.

Communications methods, apparatus and systems for providing scalable media services in SDN systems

The present invention relates to communications methods, apparatus and systems for determining and using Software Defined Networking (SDN) communications link and path status information. An exemplary embodiment of a method of operating a Session Border Controller (SBC) in a software defined network (SDN) includes: determining application level metrics at a SBC for a data communications flow and transmitting the application level metrics to a SDN controller. An exemplary embodiment of a method of operating a software defined networking (SDN) controller in a software defined network includes the steps of receiving, at a receiver of the SDN controller via the software defined network, application level metrics corresponding to a data communications session flow; and determining, by the SDN controller, the status of a communications path between two Internet Protocol addresses based on the received application level metrics. Exemplary apparatus embodiments include an SDN controller and SBC controller implementing the exemplary methods.

Growing community of inventors

Amesbury, MA, United States of America

Kevin Riley