Mobile application gateway for connecting devices on a cellular network with individual enterprise and data networks

• US 8,861,491 B2
• Filed: 08/30/2011
• Issued: 10/14/2014
• Est. Priority Date: 03/02/2006
• Status: Active Grant

• Current Assignee: Tango Networks Incorporated
• Original Assignee: Tango Networks Incorporated
• Inventors: Silver, Andrew, Lewis, Lathan, Landgren, Patricia, Schmid, Glen
• Primary Examiner(s): HSU, ALPUS
• Application Number:
  US13/220,766
• Publication Number:
  US 20110312300A1
• Time in Patent Office: 1,141 Days
• Field of Search: 370/338, 370/352, 370/356, 370/401, 379/207.02, 379/229, 455/410, 455/433, 455/445, 455/554.1, 455/556.1, 709/227, 709/249
• US Class Current: 370/338
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/64 Hybrid switching systems
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/103 in the network
• CPC Class Codes: H04L 65/104 in the network
• CPC Class Codes: H04Q 2213/1307 Call setup
• CPC Class Codes: H04Q 2213/13091 CLI, identification of calling line
• CPC Class Codes: H04Q 2213/13098 Mobile subscriber
• CPC Class Codes: H04Q 2213/13103 Memory
• CPC Class Codes: H04Q 2213/13109 Initializing, personal profile
• CPC Class Codes: H04Q 2213/13141 Hunting for free outlet, circuit or channel
• CPC Class Codes: H04Q 2213/13152 Callback
• CPC Class Codes: H04Q 2213/13176 Common channel signaling, CCS7
• CPC Class Codes: H04Q 2213/1318 Ringing
• CPC Class Codes: H04Q 2213/13196 Connection circuit/link/trunk/junction, bridge, router, gateway
• CPC Class Codes: H04Q 2213/13206 User-to-user signaling, UUS
• CPC Class Codes: H04Q 2213/1322 PBX
• CPC Class Codes: H04Q 2213/13336 Store & forward, messaging systems
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/61 : Time-dependent
• CPC Class Codes: H04W 40/02 : Communication route or path selection, e.g. power-based or shortest path routing
• CPC Class Codes: H04W 76/12 : Setup of transport tunnels
• CPC Class Codes: H04W 8/04 : Registration at HLR or HSS [Home Subscriber Server]
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

A mobile application gateway for connecting devices on a cellular network with individual networks, such as enterprise voice and data networks and/or residential networks. The effects of the present invention are far reaching in terms of transferring effective call control from the cellular network into the control of the individual network such as the enterprise, and enabling new business models for the purchase of cellular service from a public cellular carrier by an enterprise. The invention may consist of a primarily of core network and services components based on the IMS network architecture, and is backward compatible to support legacy systems in place in current telecom and data networks.

Claims

1. A method, comprising:

coupling an enterprise gateway server in an enterprise network with a carrier gateway server in a carrier network;

receiving a request to establish a data session or call from a mobile device;

querying the enterprise gateway server for a data session or call policy for a subscriber account associated with the mobile device; and

automatically establishing a secure tunnel between the enterprise gateway server and the carrier gateway server to provide a secure data session for the mobile device to communicate with at least one node on the enterprise network, wherein the secure tunnel supports selectable security and encryption specific to requirements of the enterprise network.

2. The method of claim 1, comprising identifying, by the carrier gateway server, the enterprise network, wherein identifying the enterprise network comprises identifying at least one of:

the enterprise network based on calling party information of a call;

the enterprise network by information in at least one of an originating trigger or a terminating trigger; and

the enterprise network based on subscription information maintained by the carrier network.

3. The method of claim 2, wherein the subscription information is obtained from one of a home subscriber server and a home location register.

4. The method of claim 1, comprising coupling the enterprise gateway server with a private branch exchange deployed in the enterprise network.

5. The method of claim 1, comprising;

notifying, by the carrier gateway server, the enterprise gateway server of the data session or call; and

determining, by the enterprise gateway server, a data session or call routing for the data session or call.

6. The method of claim 1, comprising configuring the enterprise gateway server as an endpoint of the enterprise network.

7. The method of claim 1, comprising:

receiving, by the carrier gateway server, an indication that the data session or call is being established with the mobile device which comprises a cellular phone associated with the enterprise network;

communicating, by the carrier gateway server to the enterprise gateway server, the indication that the data session or call is being established ; and

communicating a data session or call muting from the enterprise gateway server to the carrier gateway server.

8. The method of claim 7, comprising informing by the enterprise gateway server, the carrier gateway server of the data session or call routing, wherein the data session or call muting is based on at least one of:

a criteria of the enterprise network;

a least cost muting determined by the enterprise gateway server, and

a selectable security and encryption routing determined by the enterprise gateway server.

9. The method of claim 8, wherein the data session or call muting specifies one of routing the data session or call within the carrier network or muting the data session or call into the enterprise network.

10. The method of claim 1, comprising determining, by the carrier gateway server, whether to notify the enterprise gateway server of the data session or call based on information stored in at least one of:

a subscriber profile maintained in the carrier network; and

an application server maintained in the carrier network.

11. The method of claim 1, comprising determining, by the carrier gateway server based on information stored within the carrier network, whether to route the data session or call based on policies set by the carrier network.

12. The method of claim 11, wherein the policies specify at least one of a rule to enable the data session or call to be routed based on service subscription information, a rule to enable the data session or call to be routed using specific resources, a rule to enable the data session or call at specific times, a rule to enable the data session or call to be routed based on specific congestion levels, a rule to enable the data session or call based on identification information of a called or calling party, a rule to enable the data session or call based on location information of the called or calling party, a rule that specifies triggers, and a rule that specifies it is required to record the data session or call.

13. The method of claim 1, comprising determining, by the enterprise gateway server, whether to route the data session or call over dedicated resources based on information stored within the enterprise network.

14. The method of claim 13, wherein the dedicated resources comprise at least one of resources to enable least-cost routing, resources to enable security, resources to enable high performance, resources to address congestion levels, resources to enable priority access and high availability, and resources to enable access to specific enterprise features.

15. The method of claim 1, comprising determining, by the enterprise gateway server based on information stored within the enterprise network, whether to route the data session or call based on policies set by the enterprise network.

16. The method of claim 15, wherein the policies specify at least one of a rule to enable the data session or call to be routed using specific resources, a rule to enable the data session or call at specific times, a rule to enable the data session or call based on identification information of a called or calling party, a rule to enable the data session or call based on location information of the called or calling party, a rule that specifies triggers, and a rule that specifies it is required to record the data session or call.

17. The method of claim 1, comprising determining, by the enterprise gateway server based on information stored within the enterprise network, whether to route the data session or call based on policies set by a called or calling party of the call.

18. The method of claim 17, wherein the policies comprise at least one of a rule to enable the data session or call to be routed using specific resources, a rule to enable the data session or call to be routed at specific times, a rule based on identification information of a called or calling party, a rule to enable the data session or call based on location information of the called or calling party, a rule that specifies triggers, and a rule that specifies it is required to record the data session or call.

19. A non-transitory computer-readable storage medium comprising instructions that when executed causes a processor to perform:

coupling an enterprise gateway server in an enterprise network with a carrier gateway server in a carrier network;

receiving a request to establish a data session or call from a mobile device;

querying the enterprise gateway server for a mobile origination policy for a subscriber account associated with the mobile device; and

automatically establishing a secure tunnel between the enterprise gateway server and the carrier gateway server to provide a secure data session for the mobile device to communicate with at least one node on the enterprise network, wherein the secure tunnel supports selectable security and encryption specific to requirements of the enterprise network.

20. A system, comprising:

a cellular network including a carrier gateway server, and

an enterprise network including an enterprise gateway server coupled with the carrier gateway server, which is configured to receive a request to establish a data session or call from a mobile device, and wherein the enterprise gateway server is configured to query for a data session or call policy for a subscriber account associated with the mobile device, and wherein a secure tunnel is automatically established between the enterprise gateway server and the carrier gateway server to provide a secure data session for the mobile device to communicate with at least one node on the enterprise network, and wherein the secure tunnel supports selectable security and encryption specific to requirements of the enterprise network.