8x8, Inc.

Ykk Corporation

Other

Mehdi Salour

Raghu Rengarajan

Zhishen Liu

Oisin Glynn

Ona Stewart

Bryan R Martin

Apparatus and methods are disclosed for geographic region-based network address translation (NAT) between a public network and a private network. In certain examples, region-based NAT may assist to reduce latency, enhance quality, enhance security, and/or improve efficiency of network communications. In response to a data packet from a first port of a private IP address, of an endpoint in the private network, a region of the private network that includes an endpoint identified by the private IP address is determined. A public IP address is selected that is mapped to the determined region in the database. An available port of the selected public IP address is assigned for NAT. NAT is performed for data communicated between the public and private networks using a mapping of the first port of the first IP address to the second port of the second IP address.

Region-based network address translation

Systems, devices or methods provide for control of sensitive data in a computer system that includes at least one central server communicatively-coupled to a plurality of client computers. One particular example is directed to a method involving execution of software code on the at least one central server to monitor data communications of the plurality of client computers for sensitive data. A subset of the data communications is restricted when sensitive data is detected. Configuration data is provided to each of the plurality of client computers. Software code is executed on each of the plurality of client computers to detect accesses to sensitive data by one or more applications running on a client computer. Actions of the one or more applications running on a client computer are monitored to determine whether or not a trigger event has occurred. In response to determining that the trigger event has occurred, a notification is sent.

Information security implementations with extended capabilities

Apparatuses and methods are disclosed for protection of data servers configured for data replication of a database. As an example, one apparatus includes at least one processing circuit configured to receive records indicating respective modifications performed on a first version of the database stored in a first data server of the plurality of data servers. The at least one processing circuit is configured to delay replication of the modification in one or more additional servers in the plurality of data servers for a respective length of time specified for the servers in security profile data. While delaying replication of the modification, the processing circuit determines a probability that the modification is malicious based on a first set of factors indicated in a security profile. If the probability is greater than a threshold specified in the security profile data, the processing circuit prevents the modification from being performed.

Delayed replication for protection of replicated databases

Example systems and methods are disclosed for protection of data servers configured for data replication of a database. An example system includes a processing circuit configured to receive records indicating respective modifications performed on a first version of the database stored in a first data server of the plurality of data servers. The processing circuit determines a risk level of a modification indicated by a record based on a set of factors indicated in a security profile, the set of factors being indicative of anomalous data access activity. The processing circuit performs the modification in a second data server, in response to the risk level being less than a threshold level indicated in the security profile. The processing circuit prevents the modification indicated by the record from being performed in the second data server in response to the risk level being greater than or equal to the threshold level.

Restricted replication for protection of replicated databases

Certain aspects of the disclosure are directed to fault isolation in data communications centers. According to a specific example, a data communications server is provided including circuitry configured and arranged to isolate quality or termination issues in a data communications center. The data communications server may retrieve server data relating to data communications routed by the data communications server, and receive from a plurality of endpoint devices communicatively coupled to the data communications server, endpoint data relating to the routed communications. The data communications server may identify data communications quality or data communications termination issues based on the server data and the endpoint data, and identify at least one zone among a plurality of zones of the data communications center associated with the data communications quality or data communications termination issues using a tiered fault isolation process and based on the server data and endpoint data.

Fault isolation in data communications centers

Systems and methods are disclosed for client-based control of revising caller identifications (IDs) for communications between a private network and a public network. An apparatus including a communications provider server and processing circuit that communicates client-specific sets of data over an interface protocol. The telecommunications-providing server revises a caller ID for a data communication (aka call) based on the client-specific sets of data, an identifier that corresponds to a requesting endpoint, and a geographic region determined from the call request. Further, the telecommunications-providing server connects the VoIP call by accessing and passing a provisioned number. The provisioned number includes the revised caller ID which is a local number identified by the determined geographic region that the endpoint is located.

Region-based connecting of calls using client-specific control and provisioned numbers

Apparatus and methods are disclosed for geographic region-based network address translation (NAT) between a public network and a private network having a plurality of defined geographic regions. In some embodiments, region-based NAT may assist to reduce latency, enhance quality, enhance security, and/or improve efficiency of network communications. In response to a data packet from a first port of a private IP address, of an endpoint in the private network, a region of the private network that includes an endpoint identified by the private IP address is determined. A public IP address is selected that is mapped to the determined region in the database. An available port of the selected public IP address is assigned for NAT. NAT is performed for data communicated between the public and private networks using a mapping of the first port of the first IP address to the second port of the second IP address.

Apparatus and methods concerning routing of data in a network disclosed. In an example embodiment, an apparatus includes a network interface circuit connected to a network via a plurality of network paths. A circuit arrangement is connected to the network interface circuit and is configured to provide the one or more services for endpoints in the network by 1) communicating data with the endpoints via the network interface, 2) estimating respective qualities of service provided to the endpoints by each of the plurality of network paths, 3) selecting a subset of the plurality of network paths for routing data from the endpoints to the apparatus, and 4) prompting one or more nodes in the network to route data to the apparatus using the selected subset of the plurality of network paths. Paths may be selected for example, to address one or more quality metrics, security/compliance, and/or balance server load.

Network path selection for routing data

Apparatus and methods concerning simulation of call quality are disclosed. In an example embodiment, computing server is communicatively coupled to a server. The computing server is configured to receive a first set of data which may include audio of a call routed by the server. The computing server also includes a processing circuit configured to characterize a post-transmission quality state of the first set of data. The processing circuit is also configured to generate a second set of data including audio that is different from the audio of the call and data including characteristics indicative of the post-transmission quality state of a first set of data. The processing circuitry may configured to use the second set of data to provide security, protect the confidentiality and privacy, and/or monitor changes of behavior/quality for different audio CODECs, encryption, bit-rate, etc.

Approaches for evaluating call quality

Apparatus and methods are disclosed for client-based control of revising caller identifications (IDs) for communications between a private network and a public network. An apparatus including a telecommunications-providing server and processing circuit that communicates client-specific sets of data over an interface protocol. The telecommunications-providing server revises a caller ID for a VoIP call based on the client-specific sets of data, an identifier that corresponds to a requesting endpoint, and a geographic region determined from the call request. Further, the telecommunications-providing server causes control data to be sent to activate an analog-telephone bridging circuit and redirect the VoIP call by obtaining a dial tone and passes at least a subset of the data packet through the analog-telephone bridging circuit for connecting over the local line. The subset of the data packet includes the revised caller ID which is a local number identified by the determined geographic region.

Region-based bridging of calls using client-specific control and revised caller identifiers

Apparatus and methods are disclosed for bridging communications between a private network and a public network. A mapping that associates a first set of IP addresses of endpoints in the private network with a second set of IP addresses of endpoints in the public network is provided which enables communications between the private network and public network for network-address-translation (NAT). In response to a data packet having a first IP address of the first set of IP addresses, the data packet is used to determine whether the local line should be accessed. In response to an indication that the local line should be accessed, the identifier among the second set of IP addresses may be used to activate bridging (e.g., ATB) circuit and redirect a call associated with the data packet by passing the data packet through the ATB circuit.

Region-based redirection and bridging of calls

Certain aspects of the disclosure are directed to routing data communications based on time zone. According to a specific example, a data-communications system for routing data communications based on time zone includes a communications routing circuit and a processing circuit. The communications routing circuit receives and routes data communications to a plurality of data communications stations and provides data communications services to remotely-situated client entities. For data communications routed for client entities in which a time zone routing feature is applied, the processing circuit determines a geographic location of the respective data communications station. The processing circuit then identifies a respective set of routing functions, based on a time zone of the geographic location, and routes the data communication based on the time zone, and according to the respective set of routing functions.

Data communication routing architecture based on time zone and reconfiguration

In one particular example, a data communications system addresses changes in server load and/or connection latency in connection with data communication services provided through DNS master and slave servers. The system provides dynamic information routing, via a set of DNS master servers being in a multi-master configuration and including a first master DNS server and a second master DNS server, and consistency of DNS records is established between the master servers. Subsequently, the first DNS master server enters into an isolation mode in which updates are not communicated via the network. A set of isolation rules, which indicate how DNS records are to be updated in a communications network, are accessed and used in response to the network connections becoming reliable and the first master server updates the DNS records according to the rules, thereby establishing consistency between the first and the second DNS master servers.

Multiple-master DNS system

Systems, devices or methods provide for control of sensitive data in a computer system that includes at least one central server communicatively-coupled to a plurality of client computers. A particular method relates to the execution of software code on the at least one central server to monitor data communications of the plurality of client computers for sensitive data. A subset of the data communications is restricted when sensitive data is detected. Configuration data is provided to each of the plurality of client computers. Software code is executed on each of the plurality of client computers to detect accesses to sensitive data by one or more applications running on a client computer. Actions of the one or more applications running on a client computer are monitored to determine whether or not a trigger event has occurred. In response to determining that the trigger event has occurred, a notification is sent.

Systems and methods are disclosed for client-based control of revising caller identifications (IDs) for communications between a private network and a public network. An apparatus including a communications provider server and processing circuit that communicates client-specific sets of data over an interface protocol. The telecommunications-providing server revises a caller ID for a call based on the client-specific sets of data, an identifier that corresponds to a requesting endpoint, and a geographic region determined from the call request. Further, the telecommunications-providing server connects the VoIP call by accessing and passing a provisioned number. The provisioned number includes the revised caller ID which is a local number identified by the determined geographic region that the endpoint is located.

Growing community of inventors

San Jose, CA, United States of America

Mehdi Salour