Protecting communications network integrity

• US 6,584,186 B1
• Filed: 01/12/2000
• Issued: 06/24/2003
• Est. Priority Date: 01/12/2000
• Status: Expired due to Term

• Current Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Naqvi, Shamim A, Aravamudan, Murali
• Primary Examiner(s): SMITH, CREIGHTON H
• Application Number:
  US09/481,951
• Time in Patent Office: 1,259 Days
• Field of Search: 379/201.01, 379/207.02, 379/201.02, 379/201.03, 379/900, 379/901
• US Class Current: 379/201.03
• CPC Class Codes: H04L 65/103 in the network
• CPC Class Codes: H04L 65/104 in the network
• CPC Class Codes: H04L 65/1043 Gateway controllers, e.g. media gateway control protocol [MGCP] controllers
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1106 Call signalling protocols; H.323 and related
• CPC Class Codes: H04M 7/0093 signalling arrangements in networks
• CPC Class Codes: H04M 7/06 using auxiliary connections for control or supervision , e.g. where the auxiliary connection is a signalling system number 7 link
• CPC Class Codes: H04M 7/126 Interworking of session control protocols
• CPC Class Codes: H04M 7/129 Details of providing call progress tones or announcements
• CPC Class Codes: H04Q 3/0025 Provisions for signalling
• CPC Class Codes: H04Q 3/0045 involving hybrid, i.e. a mixture of public and private, or multi-vendor systems
• CPC Class Codes: Y10S 379/90 Internet, e.g. Internet phone, webphone, internet-based telephony

Abstract

A method and apparatus for protecting against network damage in next generation communications networks. More particularly, network safety is achieved using semantic restriction of higher level call processing protocol primitives coupled with dynamically programming the various network routing elements to enforce both connection control and rate control.

Claims

1. A method for providing services in a communications network comprising:

initiating a communications session in the communications network;

executing, in response to the initiating of the communications session, a first process in a host server to deliver at least one service in the communications network;

executing, in response to the initiating of the communications session, a second process in a device server to deliver the at least one service in the communications network;

executing a third process in a call coordinator for receiving and operating on requests from the device server and the host server in the delivery of the at least one service; and

establishing rate control and connection control between the host server, the device server, and the call coordinator.

2. The method of claim 1 wherein the establishing the rate control and the connection control is performed by a policy server.

3. The method of claim 2 wherein the establishing the rate control and the connection control operation further comprises:

dynamically programming at least one firewall in the communications network to restrict access of the first process to a predetermined set of network resources.

4. The method of claim 3 wherein the communications system employs a Java Virtual Machine in executing at least one of the first process, the second process, or the third process.

5. The method of claim 4 wherein the device server and the call coordinator are coupled in a client-server arrangement.

6. The method of claim 5 wherein the device server and at least one of the call coordinators exposes a hierarchical namespace.

7. A method of claim 4 wherein the first process is a feature applet.

8. The method of claim 6 wherein the device server and the call coordinator are coupled together by a SS7 signaling network.

9. The method of claim 3 wherein the policy server further performs the operations of:

monitoring the communications session;

maintaining control over the set of network resources; and

monitoring a operational status of the host server, the device server, and the call coordinator.

10. The method of claim 7 wherein the feature applet is downloaded over a connection between the communications network and a independent software vendor server.

11. The method of claim 2 wherein the policy server employs at least one Policy Enforcement Point (PEP) in the establishing of the rate control and the connection control.

12. The method of claim 3 wherein the device server and the call coordinator are part of a softswitch.

13. The method of claim 12 wherein the communications network includes at least one PSTN and at least one IP network.

14. The method of claim 13 wherein the established rate control restricts a traffic bandwidth shared within the communications network.

15. The method of claim 13 where the established connection control restricts a number of communication connections made within the communications network.

16. A communications system comprising:

a host server executing, in response to a initiating of a communications session in the communications system, a first process to deliver at least one service in the communications system;

a device server executing, in response to the initiating of the communications session, a second process to deliver the at least one service in the communications system;

a call coordinator executing a third process for receiving and operating on requests from the device server and the host server in the delivery of the at least one service; and

a policy server for establishing rate control and connection control between the host server, the device server, and the call coordinator.

17. The communications system of claim 16 wherein the establishing of the rate control and the connection control is performed by a policy server.

18. The communications system of claim 17 wherein the policy server in establishing the rate control and the connection control dynamically programs at least one firewall in the communications system to restrict access of the first process to a predetermined set of network resources.

19. The communications system of claim 18 wherein the communications system employs a Java Virtual Machine in executing at least one of the first process, the second process, or the third process.

20. The communications system of claim 17 wherein the device server and the call coordinator are coupled in a client-server arrangement.

21. The communications system of claim 20 wherein the device server and at least one of the call coordinators exposes a hierarchical namespace.

22. The communications system of claim 18 wherein the first process is a feature applet.

23. The communications system of claim 20 wherein the device server and the call coordinator are coupled together by a SS7 signaling network.

24. The communications system of claim 16 wherein the policy server monitors the communications session, maintains control over the set of network resources, and monitors a operational status of the host server, the device server, and the call coordinator.

25. The communications system of claim 22 wherein the feature applet is downloaded over a connection between the communications network and a independent software vendor server.

26. The communications system of claim 17 wherein the policy server employs at least one Policy Enforcement Point (PEP) in the establishing of the rate control and the connection control.

27. The communications system of claim 26 wherein the device server and the call coordinator are part of a softswitch.

28. The communications system of claim 27 wherein the communications network includes at least one PSTN and at least one IP network.

29. The communications system of claim 28 wherein the established rate control restricts a traffic bandwidth shared within the communications network.

30. The communications system of claim 28 where the established connection control restricts a number of communication connections made within the communications network.