Avaya Technology LLC

Avaya Inc.

Lucent Technologies Inc.

Robert Reagan Gilman

Richard L Robinson

Albert D Pessot

Gary S King

Mehmet Balasaygun

Kurt H Haserodt

Christopher Jason Donley

Robert J Serkowski

David Ray Burritt

Anthony Frissora

Anwar A Siddiqui

Nancy Schmidt

John Michael Walton

Mark Harald Wutzke

Farzad Raji

Charles Bertsch

Brijesh Mandan

Mark Garstin

John M Walton

An architecture for authenticating packets is provided that includes: an inputoperable to receive a packet, the packet comprising at least one of a transport, session and presentation header portion and a transport agentoperable to compute a first message authentication code based on at least some of the contents of the packet and compare the first message authentication code with a second message authentication code in the at least one of a transport, session, and presentation header portion to authenticate the packet.

Method to authenticate packet payloads

A systemfor providing credentials to a computational component in a distributed processing network is provided. The systemincludes: (a) a plurality of crypto-tokens-, each crypto-token-comprising a unique identifier, optionally a digital certificate comprising a unique public key and the unique identifier, and a private key corresponding to the public key; (b) a provisioning systemcomprising a certificate authorityoperable to generate the plurality of crypto-tokens-; and (c) a computational componentcomprising a drive operable to receive and communicate with a selected crypto-token. The computational componentuses the digital certificate and private key in any of the crypto-tokens-to establish a secured communication session with the provisioning system. Before the establishing operation, any of the plurality of crypto-tokens-can be engaged with the computational componentto establish the secure communication session.

Secure installation activation

A packet-switched communications device in an enterprise network is provided. The packet-switched communications device has a corresponding unique identifier, such as an address or extension. The device includes a processor operable to (a) establish a secure communications session with a key generating agent in the enterprise network; (b) provide, to the key generating agent through the session, the unique identifier of the communications device; and (c) receive, from the key generating agent through the session, a secret key and a key identifier. An application server authenticates the packet switched device using the secret key. After authentication is successful, secure communications is established between the packet switched device and the application server.

Key server for securing IP telephony registration, control, and maintenance

Techniques for determination of endpoint Internet Protocol (IP) address assignment in an Internet telephony system are disclosed. In conjunction with the establishment of a voice path between an endpoint and a gatekeeper in the Internet telephony system, a virtual address assigned to the endpoint in a network address translation operation is determined. The virtual address is then communicated to the endpoint as part of or otherwise in conjunction with a registration process prior to establishment of the voice path such that the registration process can complete successfully despite the network address translation operation. Advantageously, the invention overcomes problems associated with voice path registration failures resulting from network address translation in a router, virtual private network (VPN) gateway or other similar network address translation device.

Determination of endpoint virtual address assignment in an internet telephony system

The present efficient packet encryption method decreases the computation time to encrypt and decrypt successive packets of plaintext data. An S-vector is generated and the S-vector is used to encrypt successive packets of plaintext, thus reducing the per packet encryption/decryption time. The formula for encrypting successive packets includes use of the packet sequence number with a third variable injected to eliminate the predictability of the variables, thus making the present efficient packet encryption method more secure. A fourth variable is injected into the calculations to generate an encryption stream that does not repeat as frequently to provide additional security from hackers. For encrypting a packet having a long payload of plaintext, a packet byte sequence number is used to generate an encryption stream that is less likely to repeat within a particular packet.

Efficient packet encryption method

In an integrated voice and multimedia communications system (FIG.,), an end-user is given explicit control over which audio access mechanism he wishes to use regardless of whether a call is a multimedia or a voice call. The end-user's voice terminal (,) is equipped with a PC-Audio control button (,). When the user originates or receives a call, a multimedia PBX (,) automatically connects audio to the voice terminal's handset (,) regardless of whether the call is a multimedia or a voice call. If the user then presses the PC-Audio button, the PBX transfers audio to the audio subsystem (,) of the multimedia terminal (,), an LED (,) associated with the button is lit, and the user may cradle the handset without disconnecting the call. If the handset is subsequently lifted, audio is reconnected to the handset and the LED is extinguished. If the button is pressed while its LED is lit, the call is disconnected. If the voice terminal is equipped with a speakerphone (,), interaction thereof with the PC-Audio button mimics a telephone with an integrated speakerphone that is supplemented with an external speakerphone connection.

End-user control of audio delivery endpoint in a multimedia environment

A switching system (100) inserts H.320 multi-media protocol-terminating resources (156) into an existing call dynamically, only when the resources are needed, and also removes the resources from an ongoing call dynamically, when the resources are no longer needed, whereby the switching system can provide call features such as hold, conference, disconnect, drop, and transfer, to an H.320 multi-media call and can do so spontaneously, whenever desired during the call, without tying up the resources for the duration of the call even when they are not needed. To extend these capabilities to both single-channel and multi-channel multi-media ISDN BRI calls, the switching system associates a plurality of calls that constitute the individual channels of a multi-channel call and treats the associated calls identically and in unison for purposes of insertion and removal of resources and the providing of features.

Dynamic insertion and removal of multi-media call-handling resources

Growing community of inventors

Broomfield, CO, United States of America

Robert Reagan Gilman