Telephone switch dual monitors

• US 5,592,530 A
• Filed: 01/25/1995
• Issued: 01/07/1997
• Est. Priority Date: 01/25/1995
• Status: Expired due to Term

• Current Assignee: NetScout Systems Incorporated
• Original Assignee: INET Incorporated (TNCI Operating Co. LLC)
• Inventors: Ayers, John I., Brockman, Pierce E., Ruwaldt, Gary S.
• Primary Examiner(s): Chin, Wellington
• Assistant Examiner(s): LOOMIS, PAUL A
• Application Number:
  US08/377,978
• Time in Patent Office: 713 Days
• Field of Search: 379/1, 379/9, 379/10, 379/15, 379/34, 379/207, 379/230, 379/93, 379/94, 379/22, 379/23, 370/13, 370/17, 370/68.1, 370/110.1
• US Class Current: 379/32.03
• CPC Class Codes: H04M 3/2254 in networks
• CPC Class Codes: H04Q 2213/13512 800 - freefone
• CPC Class Codes: H04Q 2213/13515 authentication, authorisation - fraud prevention
• CPC Class Codes: H04Q 2213/13535 distributed systems - also domains in service creation
• CPC Class Codes: H04Q 2213/13545 monitoring of signaling messages, intelligent network
• CPC Class Codes: H04Q 3/0029 Provisions for intelligent networking

Abstract

A system is provided for monitoring the operations of a mated pair of switching nodes in a telephone network. A first monitor is provided which is operable to capture data on all of the connection links of a first switching node of the mated pair. A second monitor is provided which is operable to capture data on all of the connection links of a second switching node of the mated pair. The first and second monitors capture selected telephone switching messages on the links of the mated pair. Each monitor compiles either a primary or secondary record of switching messages pertaining to a particular call or transaction being routed by the mated pair of switching nodes. The primary record is maintained by the monitor which detects the first message which initiates a particular call or transaction. Subsequent messages pertaining to that call or transaction that are captured by the other monitor are compiled in a secondary record. At the completion of the call or transaction, selected messages stored in the secondary call record are transferred to the monitor containing the primary record by means of a communications bus connecting the two monitors. The composite record is then analyzed by the monitor containing the primary record to evaluate the performance of the telephone switch and to perform other tasks, such as calling card fraud detection and service assurance applications.

Claims

1. A monitoring system for use in a telephone system having at least one pair of switches operating in mated relationship to one another such that call control information pertaining to a communication link carrying voice and data signals between a calling party and a called party will always pass through one or both of said pair of switches, wherein said pair of switches are geographically separated from each other and said pair of switches are separate from a communication network over which said communication link is established, said monitoring system comprising:

a pair of processors each associated with a particular one of said pair of switches, each said processor operable for receiving and temporarily storing therein selected call control information as said call control information passes through said associated switch, said stored calling information identifiable for a particular calling party and for a particular call transaction, wherein each said processor comprises means for storing all selected call control information for a particular call transaction in a unified list sorted by time of occurrence of said call control information; and

means for combining said unified lists for all stored selected call control information for a particular call transaction in one or the other of said processors.

2. The invention set forth in claim 1 wherein said selected call control information is a subset of the calling protocol used in routing and controlling telephone calls.

3. The invention set forth in claim 2 wherein said subset includes said calling party identification, said called party identification and a communication network link identification for said communication link over which said communication is established and at least one field of data pertaining to operational aspects of the call.

4. The invention set forth in claim 3 further comprising:

a memory for storing a plurality of said unified lists; and

a communications bus for transferring said selected call control information between said processors.

5. The invention set forth in claim 4 further comprising a second communications bus for transferring said unified lists to a computer database for use in telephone system applications.

6. The invention set forth in claim 5 wherein one of said telephone system applications is a billing application operable to calculate the charges associated with said particular call transaction.

7. The invention set forth in claim 5 wherein one of said telephone system applications is a fraud detection application operable to detect the fraudulent use of a calling card identification number by comparing said calling party identification and said time of occurrence of said call control information associated with said particular call transaction with a second calling party identification and a second time of occurrence of call control information associated with a second call transaction.

8. The invention set forth in claim 5 wherein one of said telephone system applications is an error detection application operable to detect errors in the operation of the mated pair of switches by comparing said selected call control information stored in said unified list with a known protocol of valid call control information for said particular call transaction.

9. A monitoring system for a pair of telephone switches operating in mated relationship to one another such that a plurality of call control data messages pertaining to a separate communication network carrying voice or data signals of a particular call transaction over a selected communication channel between a calling party and a called party will always pass through one or both of said pair of switches, said monitoring system comprising:

a first processor associated with a first of said pair of switches, wherein said first processor is coupled to each one of a plurality of data links connected to said first switch, wherein said first switch data links transfer said call control data messages into and out of said first switch, and wherein said first processor captures said call control data messages from said first switch data links and stores said call control data messages in a first call record;

a second processor associated with a second of said pair of switches, wherein said second processor is coupled to each one of a plurality of data links connected to said second switch, wherein said second switch data links transfer said call control data messages into and out of said second switch, and wherein said second processor captures said call control data messages from said second switch data links and stores said call control data messages in a second call record; and

a communications bus coupled to said first processor and to said second processor for transferring at least one of said call control data messages between said first call record and said second call record whenever said first processor and said second processor both capture said call control data messages pertaining to said particular call transaction.

10. The monitoring system as set forth in claim 9 wherein said first processor stores said call control data messages associated with said particular call transaction in said first call record and said second processor stores said call control data messages associated with said particular call transaction in said second call record according to a subset of said call control data messages comprising an origination code associated with said calling party, a destination code associated with said called party, and a communication channel code associated with said selected communication channel.

11. The monitoring system as set forth in claim 10 wherein said first processor comprises a first clock means for providing a time stamp as part of said first call record whenever said first processor captures and stores one of said call control data messages and said second processor comprises a second clock means for providing a time stamp as part of said second call record whenever said second processor captures and stores one of said call control data messages and wherein said first clock means and second clock means are synchronized.

12. The monitoring system as set forth in claim 11 wherein said first processor further comprises means for comparing said call control data messages stored in said first call record with a known protocol of valid call control data messages for said particular call transaction to determine the operation of the mated pair of switches.

13. The monitoring system as set forth in claim 11 wherein said second processor further comprises means for comparing said call control data messages stored in said second call record with a known protocol of valid call control data messages for said particular call transaction to detect errors in the operation of the mated pair of switches.

14. The monitoring system as set forth in claim 11 wherein said first call record comprises a unified list of call control data messages captured by said first processor and call control data messages captured by said second processor and transferred to said first processor over said communications bus and wherein said second call record comprises a unified list of call control data messages captured by said second processor and call control data messages captured by said first processor and transferred to said second processor over said communications bus.

15. The monitoring system as set forth in claim 14 wherein said first processor further comprises a first means for comparing said unified list of call control data messages stored in said first call record with a known protocol of valid call control data messages for said particular call transaction to detect errors in the operation of said mated pair of switches.

16. The monitoring system as set forth in claim 15 wherein said second processor further comprises a second means for comparing said unified list of call control data messages stored in said second call record with a known protocol of valid call control data messages for said particular call transaction to detect errors in the operation of said mated pair of switches.

17. The monitoring system as set forth in claim 15 further comprising a second communications bus coupled to said first and second monitors for transferring said first call record and said second call record to a computer database for use in telephone system applications.

18. The monitoring system as set forth in claim 17 wherein one of said telephone system applications is a billing application operable to calculate the charges associated with said particular call transaction.

19. The monitoring system as set forth in claim 17 wherein one of said telephone system applications is a fraud detection application operable to detect the fraudulent use of a calling card identification number by comparing said origination code and at least one of said time stamps associated with said particular call transaction with a second origination code and a second time stamp associated with a second call transaction.

20. A method of monitoring a pair of telephone switches operating in mated relationship to one another such that a plurality of call control messages pertaining to a separate communication network carrying voice or data signals of a particular call transaction over a selected communication channel between a calling party and a called party will always pass through one or both of the pair of switches, the method comprising the steps of:

capturing the call control messages of the particular call transaction with a pair of monitoring devices, wherein each monitoring device is associated with one of the pair of telephone switches;

storing the captured call control messages in a memory table in each monitoring device;

establishing the memory table in one of the monitoring devices as a primary memory table and the memory table in the other monitoring device as a secondary memory table;

truncating the captured call control messages in the secondary memory table into a subset record comprising calling party identification, called party identification and communication network link identification;

transferring the subset record to the primary memory table; and

merging the subset record with the captured call control messages stored in the primary memory table that correspond to the particular call transaction based on the calling party identification, called party identification and communication network link identification to thereby create a unified call record.

21. The method as set forth in claim 20 including the further step of transferring the unified call record to an external database for use in telephone system billing applications.

22. The method as set forth in claim 20 including the further step of comparing the captured call control information stored in the unified call record with a known protocol of valid call control information to thereby detect error conditions in the particular call transaction.

23. The method as set forth in claim 20 including the further step of comparing the calling party identification and a time of occurrence of the call control information associated with the particular call transaction with a second calling party identification and a second time of occurrence of call control information associated with a second call transaction to thereby detect the fraudulent use of a calling card identification number.