Sonus Networks, Inc.

Genband US LLC

Ribbon Communications Operating Company, Inc.

Quarry Technologies

Mark Duffy

Tolga Asveren

Shiping Li

Shaun Jaikarran Bharrat

Jian Yang

John A Perreault

M Scott Corson

Nagesh Kumar Bollapalli

Subhransu S Nayak

Shambhu Dayal Rai

Ronald V Grippo

Robin Anthony Iddon

Kevin Pilotte

Dilnawaj Ahmed

Siddharth Gahlaut

Aruna Thirumalai

Chris Cook

Gary Robert McCarthy

Sanjay Krishnan

Michael Birenback

Ephraim Ezekiel

Eric Schott

Methods and apparatus for synchronizing packet streams and in particular to the synchronization of transcoded and/or transrated Real-time Transport Protocol (RTP) packet streams, e.g., transcoded and/or transrated RTP packet streams carrying audio and/or video data. In one embodiment, a packet processing device receives packets of a first RTP packet stream and a first RTCP packet stream and generates a second RTP packet stream from the first RTP packet stream and generates a second RTCP packet stream from the first RTCP packet stream. The second RTP packet stream including packets with timestamps different than packets of the first RTP packet stream. The second RTCP packet stream including NTP timestamps received in or based on the NTP timestamps of the first RTCP packet stream and associated with RTP timestamps corresponding to content in the second RTP packet stream which was generated by transrating or trancoding content in the first RTP packet stream.

Methods and apparatus for synchronizing transcoded and/or transrated RTP packets

Systems and methods for user device registration are disclosed. In certain embodiments, at least a first edge device in a group of edge devices enters a mass-restart mode. The first edge device receives a request for registration from a user device and determines whether the user device is currently registered through the first edge device. The first edge device generates a notification associated with the user device if the user device is not currently registered through the first edge device. A second edge device in the group of edge devices receives the notification and determines whether the user device is currently registered through the second edge device based on the notification. Registration information about the user device is deleted from the second edge device if the user device is currently registered through the second edge device.

Systems and methods for handling a registration storm

Methods and apparatus for sharing bandwidth over a link in a packet-oriented telecommunications system or network that supports multiple types of traffic including, e.g., real time packet flows, opportunistic rate packet flows, control and signaling traffic, are described. In one exemplary embodiment the method includes the steps of receiving a bandwidth allocation request requesting allocation of a required amount of bandwidth for a new real time packet flow, allocating the requested bandwidth from bandwidth reserved for newly-allocated real time packet flows, updating the measure of the total amount of bandwidth allocated to real time packet flows to reflect the allocation of the bandwidth to the new real time packet flow, and generating new bandwidth allocations for existing opportunistic rate packet flows based on a measure of the total amount of bandwidth allocated to real time packet flows. Some embodiments of the invention include methods to enforce the dynamic bandwidth allocations.

Methods and apparatus for bandwidth management in a telecommunications system

Methods and apparatuses, including computer program products, are described for establishing secure communications sessions between computing devices located behind network security devices. The method includes receiving, from a first client computing device, a request for a secure connection with a second client computing device, the request including a first transport protocol role and a first security protocol role associated with the first device. The method includes transmitting the request to the second device. The method includes receiving, from the second device, a response to the request including a second transport protocol role and a second security protocol role associated with the second device, transmitting the response to the first device, and establishing the secure connection between the first device and the second device, where the first and second security protocol roles are determined independently from the first and second transport protocol roles.

Methods and apparatus for establishing secure communications between client computing devices that use transport and security protocols

A synchronization scheme is provided that includes querying a managed device to obtain an initial device state, synchronizing the device state in a plurality of management processes, detecting a change in the initial device state, and maintaining a synchronized current device state between the managed device and the plurality of management processes.

Methods, systems, and computer readable media for synchronizing device state

Described are computer-based methods and apparatuses, including computer program products, for identifying attackers on a network. A data packet is filtered by a multi-tiered filtering and transmission system. Data packets matching the first tier filter are discarded. Data packets matching the second tier filter are transmitted to an output module based on a criterion. Data packets in the third tier filter are hashed into bins and data packets matching an entry in the bin are transmitted to the output module based on a criterion for the bin. Data packets in the fourth tier transmission system are transmitted to the output module based on a criterion. Data packets that do not meet the criterion for transmission to the output module are transmitted to an attack identification module which analyzes the data packets to identify attacks.

Identifying attackers on a network

Described are computer-based methods and apparatuses, including computer program products, for scalable filtering and policing mechanism for protecting user traffic in a network. A data packet is filtered by a multi-tiered filtering and transmission system. Data packets matching the first tier filter are discarded. Data packets matching the second tier filter are transmitted to an output module based on a criterion. Data packets in the third tier filter are hashed into bins and data packets matching an entry in the bin are transmitted to the output module based on a criterion for the bin. Data packets in the fourth tier transmission system are transmitted to the output module based on a criterion. Data packets that do not meet the criterion for transmission to the output module are transmitted to an attack identification module which analyzes the data packets to identify attacks.

Scalable filtering and policing mechanism for protecting user traffic in a network

Described are computer-based methods and apparatuses, including computer program products, for filtering and policing for defending against denial of service attacks on a network. A data packet is filtered by a multi-tiered filtering and transmission system. Data packets matching the first tier filter are discarded. Data packets matching the second tier filter are transmitted to an output module based on a criterion. Data packets in the third tier filter are hashed into bins and data packets matching an entry in the bin are transmitted to the output module based on a criterion for the bin. Data packets in the fourth tier transmission system are transmitted to the output module based on a criterion. Data packets that do not meet the criterion for transmission to the output module are transmitted to an attack identification module which analyzes the data packets to identify attacks.

Filtering and policing for defending against denial of service attacks on a network

A method of maintaining multiple routing tables within a global table of a network router including the steps of providing the router with a route table generator to maintain the global table, and a forwarding engine to perform table lookups, the performing of table lookups in one of the multiple routing tables of the global table using a key, the key representing an index into the one of said multiple routing tables within said global table, the key created by combining a virtual private network identification (VPN ID) and an address prefix, and maintaining a plurality of table entries in the global table by using the key as a pointer to one of said table entries.

Growing community of inventors

Lexington, MA, United States of America

Mark Duffy