Nortel Networks Corporation

Apple Inc.

Genband US LLC

Sean March

Patrick N Sollee

David W McKnight

Sanjoy K Sen

Cedric Aoun

Jeffrey Chen

Sanjoy Sen

A method of detecting proximity between a media proxy and a client uses a proximity probe to query a plurality of media proxies, forcing the media proxies to respond to a proximity server. The proximity server uses an algorithm to determine which media proxy is closest to the client based on the responses. In an alternate embodiment, the same sorts of proximity probes may be used to determine if two media endpoints have a direct connection such that they may bypass a media proxy.

Proximity detection for media proxies

A system to dynamically protect access to a first network receives a data unit containing a source address indicating a source of the data unit. The source address is matched with information stored in the system, and entry of the data unit to the first network is enabled or denied based on the matching. It is determined whether the data unit contains an identifier of a codec type that matches a stored codec type, and occurrence of an attack of the first network is indicated in response to determining that the identifier is of a codec type that does not match the stored codec type.

Protecting a network from unauthorized access

A method and apparatus of protecting a first network from unauthorized access includes storing profile information for each call session, and determining if an unauthorized access of the first network is occurring based on the profile information. The profile information includes a predetermined threshold indicating a maximum acceptable rate of incoming data units from an external network to the first network. If the incoming data unit rate exceeds the predetermined threshold, then a security action is taken, such as generating an alarm or preventing further transport of data units from the external network to the first network.

A method and apparatus for communicating data units (e.g., Internet Protocol or IP packets) between devices on one or more networks includes storing address and/or port translation information, and receiving a data unit having a source address and port and a destination address and port. Both the source and destination addresses and/or ports are translated, with the data unit containing the translated source and destination addresses and/or ports transmitted to a destination.

Network address and/or port translation

A method and apparatus comprises a controller to establish a call session between a first endpoint and a second endpoint. Without exchanging call setup signaling with the first endpoint, the controller is able to pivot the call session from the second endpoint to another endpoint so that media communication can occur between the first and other endpoints. The first endpoint remains 'anchored' in the call session. The pivot is accomplished by sending a call request to the other endpoint and exchanging messages with a media portal that controls the communication of packets between endpoints. The media portal contains a network address and translation module that performs translation of addresses and/or ports of media packets communicated from one endpoint to another.

Changing media sessions

A telephone network constructed according to the present invention includes call redirection functions that redirect calls intended for a toll-free-number or central number of an Internet Service Provider (ISP) to one of a plurality of available Internet Protocol (IP) gateways operated by the ISP. Call redirection may be performed within a coupled signaling network during a database lookup or Service Control Point operation, at a signal switching point of a destination switch or by a PBX operated by the ISP. The call redirection may be static or may be dynamic. In static call redirection, all calls are redirected to a single IP gateway. In dynamic call redirection, one of a plurality of available IP gateways is selected based upon operating conditions. In making such selection, IP gateway loading, IP gateway availability, telephone network loading, telephone network availability and telephone network routing costs are considered.

Internet service provider call redirection

A telephone network redirects calls intended for an Internet Service Provider (ISP) to one of a plurality of available Internet Protocol (IP) gateways operated by the ISP. A call is received by the telephone network at an originating switch from a subscriber's calling terminal, the call directed to a toll-free-number or a central number (TFN) for the subscriber's ISP. The originating switch interacts with the signaling network via a coupled service switching point (SSP) to request a Dialed Number (DN) corresponding to the TFN. A destination switch (or a Private Branch Exchange &ldquo;PBX&rdquo; coupled to the destination switch), instead of completing the call, redirects the call to a new IP gateway coupled to a new destination switch or coupled PBX. The call is then routed from the calling terminal to the new IP gateway via the originating switch and the new destination switch via a lowest point in the traffic network.

Growing community of inventors

Plano, TX, United States of America

Sean March