# Patent

## Title
System and method for controlling access to legacy multimedia message protocols based upon a policy

## Abstract

In accordance with embodiments, there are provided mechanisms and methods for controlling access to telecommunications resources implementing a legacy protocol based upon a policy. These mechanisms and methods for controlling access to legacy protocols based upon a policy can enable embodiments to control access by third party created and other applications to network resources implementing legacy telecommunications protocols. The ability of embodiments to control access by third party created and other applications to network resources can enable network providers to provide greater access to network resources without compromising security of other users. Embodiments may further provide the ability to interface with legacy push protocols, multimedia message protocols and short message peer-to-peer protocols.

## Background
CLAIM OF PRIORITY
The present application claims the benefit of U.S. Provisional Patent Application No. 60/733,823, entitled SYSTEM AND METHOD FOR A GATEKEEPER IN A COMMUNICATIONS NETWORK, by Reto Kramer, et al., filed on Nov. 4, 2005, which is incorporated herein by reference in its entirety.
CROSS REFERENCE TO RELATED APPLICATIONS
The following commonly owned, co-pending United States Patents and Patent Applications, including the present application, are related to each other. Each of the other patents/applications are incorporated by reference herein in their entirety:
U.S. patent application Ser. No. 11/378,188, entitled SYSTEM AND METHOD FOR MANAGING COMMUNICATIONS SESSIONS IN A NETWORK, by Reto Kramer, et al., filed on Mar. 17, 2006;
U.S. patent application Ser. No. 11/384,056, entitled SYSTEM AND METHOD FOR A GATEKEEPER IN A COMMUNICATIONS NETWORK, by Reto Kramer, et al., filed on Mar. 17, 2006;
U.S. Provisional Patent Application No. 60/800,949 entitled, DIAMETER PROTOCOL AND SH INTERFACE SUPPORT FOR SIP SERVER ARCHITECTURE by Anno R. Langen, et al., filed on May 17, 2006;
US. Provisional Patent Application No. 60/801,091 entitled SIP AND HTTP CONVERGENCE IN NETWORK COMPUTING ENVIRONMENTS, by Anno R. Langen, et al., filed on May 16, 2006;
U.S. Provisional Patent Application No. 60/800,943 entitled HITLESS APPLICATION UPGRADE FOR SIP SERVER ARCHITECTURE, by Anno R. Langen et al., filed on May 16, 2006;
U.S Provisional Patent Application No. 60/801,083 entitled ENGINE NEAR CACHE FOR REDUCING LATENCY IN A TELECOMMUNICATIONS ENVIRONMENT, by Anno R. Langen, et al., filed on May 16, 2006;
U.S. patent application Ser. No. 11/434,022 entitled SYSTEM AND METHOD FOR CONTROLLING DATA FLOW BASED UPON A TEMPORAL POLICY, by Narendra Vemula, et al., filed on May 15, 2006;
U.S. patent application Ser. No. 11/434,024 entitled SYSTEM AND METHOD FOR CONTROLLING ACCESS TO LEGACY PUSH PROTOCOLS BASED UPON A POLICY, by Bengt-Inge Jakobsson, et al., filed on May 15, 2006;
U.S. patent application Ser. No. 11/434,025 entitled SYSTEM AND METHOD FOR CONTROLLING ACCESS TO LEGACY SHORT MESSAGE PEER-TO-PEER PROTOCOLS BASED UPON A POLICY, by Andreas Jansson, filed on May 15, 2006;
U.S. patent application Ser. No. 11/432,934 entitled SYSTEM AND METHOD FOR SHAPING TRAFFIC, by Jan Svensson, filed on May 12, 2006.


COPYRIGHT NOTICE
A portion of the disclosure of this patent document contains material which is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark Office patent file or records, but otherwise reserves all copyright rights whatsoever.
FIELD OF THE INVENTION
The current invention relates generally to managing telecommunications and more particularly to a mechanism for controlling access to legacy multimedia message protocols based upon a policy.
BACKGROUND
Conventionally, telecommunications and network infrastructure providers have relied on often decades old switching technology to providing routing for network traffic. Businesses and consumers, however, are driving industry transformation by demanding new converged voice, data and video services. The ability to meet these demands often can be limited by existing IT and network infrastructures that are closed, proprietary and too rigid to support these next generation services. As a result, telecommunications companies are transitioning from traditional, circuit-switched Public Switched Telephone Networks (PSTN), the common wired telephone system used around the world to connect any one telephone to another telephone, to Voice Over Internet Protocol (VoIP) networks. VoIP technologies enable voice communication over “vanilla” IP networks, such as the public Internet. Additionally, a steady decline in voice revenues has resulted in heightened competitive pressures as carriers vie to grow data/service revenues and reduce chum through the delivery of these more sophisticated data services. Increased federal regulation, security and privacy issues, as well as newly emerging standards can further compound the pressure.
However, delivering these more sophisticated data services has proved to be more difficult than first imagined. Existing IT and network infrastructures, closed proprietary network-based switching fabrics and the like have proved to be too complex and too rigid to allow the creation and deployment of new service offerings.



BRIEF DESCRIPTION OF THE DRAWINGS
FIGS. 1A-1B are illustrations of an example communications platform that can be used to control access to legacy push protocols based upon a policy in an embodiment.
FIGS. 2A-2B are illustrations of example functional aspects of a communications platform embodiment.
FIGS. 3A-3C are operational flow diagrams illustrating a high level overview of techniques for controlling access to legacy protocols based upon a policy in an embodiment.
FIGS. 4A-4C are illustrations of example functional aspects of a legacy protocol coupled with a communications platform embodiment.
FIGS. 5A-5C are illustrations of example usage scenarios of legacy protocols in embodiments.



DETAILED DESCRIPTION
The invention is illustrated by way of example and not by way of limitation in the figures of the accompanying drawings in which like references indicate similar elements. References to embodiments in this disclosure are not necessarily to the same embodiment, and such references mean at least one. While specific implementations are discussed, it is understood that this is done for illustrative purposes only. A person skilled in the relevant art will recognize that other components and configurations may be used without departing from the scope and spirit of the invention.
In the following description, numerous specific details are set forth to provide a thorough description of the invention. However, it will be apparent to those skilled in the art that the invention may be practiced without these specific details. In other instances, well-known features have not been described in detail so as not to obscure the invention.
Although a diagram may depict components as logically separate, such depiction is merely for illustrative purposes. It can be apparent to those skilled in the art that the components portrayed can be combined or divided into separate software, firmware and/or hardware components. For example, one or more of the embodiments described herein can be implemented in a network accessible device/appliance such as a router. Furthermore, it can also be apparent to those skilled in the art that such components, regardless of how they are combined or divided, can execute on the same computing device or can be distributed among different computing devices connected by one or more networks or other suitable communication means.
In accordance with embodiments, there are provided mechanisms and methods for controlling access to telecommunications resources implementing a legacy protocol based upon a policy. These mechanisms and methods for controlling access to legacy protocols based upon a policy can enable embodiments to control access by third party created and other applications to network resources implementing legacy telecommunications protocols. The ability of embodiments to control access by third party created and other applications to network resources can enable network providers to provide greater access to network resources without compromising security of other users. Embodiments may further provide the ability to interface with legacy push protocols, multimedia message protocols and short message peer-to-peer protocols.
In an aspect and according to embodiments, there are provided mechanisms and methods for controlling access to telecommunications resources implementing a legacy push protocol based upon a policy. In an embodiment and by way of example, a telecommunications system is provided. A system embodiment includes an application interface to receive at least one invocation to a legacy push protocol from a legacy application. A gatekeeper controls access through the telecommunications system by applying at least one policy to the invocation. The at least one policy indicates whether the legacy application is permitted to use a resource of the telecommunications system. A resource interface connecting the gatekeeper with at least one resource element implementing the legacy push protocol receives the at least one invocation to a legacy push protocol when the gatekeeper permits the legacy application to use a resource of the telecommunications system.
In another aspect and according to embodiments, there are provided mechanisms and methods for controlling access to telecommunications resources implementing a legacy multimedia message protocol based upon a policy. In an embodiment and by way of example, a telecommunications system is provided. A system embodiment includes an application interface to receive at least one invocation to a legacy multimedia message protocol from a legacy application. A gatekeeper controls access through the telecommunications system by applying at least one policy to the invocation. The at least one policy indicates whether the legacy application is permitted to use a resource of the telecommunications system. A resource interface connects the gatekeeper with at least one resource element implementing the legacy multimedia message protocol to receive the at least one invocation to a legacy multimedia message protocol when the gatekeeper permits the legacy application to use a resource of the telecommunications system.
In a yet further aspect and according to embodiments, there are provided mechanisms and methods for controlling access to telecommunications resources implementing a legacy short message peer-to-peer protocol based upon a policy. In an embodiment and by way of example, a telecommunications system is provided. A system embodiment includes an application interface to receive at least one invocation to a legacy short message peer-to-peer protocol from a legacy application. A gatekeeper controls access through the telecommunications system by applying at least one policy to the invocation. The at least one policy indicates whether the legacy application is permitted to use a resource of the telecommunications system. A resource interface connects the gatekeeper with at least one resource element implementing the legacy short message peer-to-peer protocol to receive the at least one invocation to a legacy short message peer-to-peer protocol when the gatekeeper permits the legacy application to use a resource of the telecommunications system.
As used herein, the terms service and web service are used interchangeably and are intended to be broadly construed to include any application, program or process resident on one or more computing devices capable of providing services to a requestor or other recipient, including without limitation network based applications, web based server resident applications, web portals, search engines, photographic, audio or video information storage applications, e-Commerce applications, backup or other storage applications, sales/revenue planning, marketing, forecasting, accounting, inventory management applications and other business applications and other contemplated computer implemented services. As used herein, the term application broadly includes any data entry, update, query or program that processes data on behalf of a user. Users may be human or computational entities.
As used herein, the term web services protocol is defined as a communications protocol that can be used for providing services between two or more applications over a network. Typical web services protocols include without limitation Short Message Peer-to-Peer protocol (SMPP) protocol, Push Application Protocol (PAP) protocol, Multimedia Messaging Services (MM7) protocol and Internet Message Access Protocol (IMAP) protocol. As used herein, the term legacy protocol is defined as a communications protocol implemented by existing applications or telecommunications systems.
As used herein, the term legacy push protocol is defined as a legacy protocol used by applications to push data to a client device, such as without limitation Push Application Protocol (PAP) for example. The Push Access Protocol (PAP), defined by the Wireless Application Protocol (WAP) Forum, outlines a proactive way to send information from Internet servers to WAP enabled mobile devices without the user having to actively request it. Typical use cases include alerts to which the user has subscribed, small ads, and email notifications. Combined with other applications, such as location-based services, push becomes a flexible way of providing users with real-time information. For example and without limitation, a tourist service could use push messaging to automatically inform a user of interesting sites nearby and suggest the closest restaurant according to predefined preferences and even provides a link to order a table.
As used herein, the term legacy multimedia message protocol is defined as a legacy protocol used by an application to exchange multimedia data to a client device, such as without limitation Multimedia Message Protocol 7 (MM7) for example. Multimedia Messaging Service (MMS) enables the addition of images, text, audio clips and ultimately, video clips to SMS (Short Message Service/text messaging). MMS implementations may offer a development and billing environments. The MM7 protocol provides a mechanism for sending value-added service content from those third parties to subscribers who have MMS-enabled mobile devices. The MM7 protocol defines and manages the data interface and protocols for the communication between Value-Added Service Providers (VASPs), which generate the multimedia message content, and carriers, which deliver the content to a recipient device or forward it to a remote carrier for delivery
As used herein, the term legacy short message peer-to-peer protocol is defined as a legacy protocol used by applications to exchange data in short messages with one another, such as without limitation Short Message Peer-To-Peer Protocol (SMPP) for example. The SMPP version 3.4, for example and without limitation, is a Short Message Peer to Peer Protocol that is an open, industry standard protocol designed to provide a flexible data communications interface for transfer of short message data between a Message Center such as a Short Message Service Center (SMSC), Global System for Mobile communications (GSM) Unstructured Services Data (USSD) Server or other type of message center and a message center and a SMS application system. This includes WAP Proxy Server, email gateway, or other messaging gateway
As used herein, the term legacy application is defined as an application designed to interface with a legacy protocol. As used herein, the term resource interface is defined as a mechanism to provide access for services to reach callers and end user applications (clients) via a network. As used herein, the term resource element is defined as a network resource that implements a protocol within a network, such as without limitation Short Message Service (SMS), Multimedia Message Service (MMS) for example and others.
FIG. 1A is an illustration of an example communications platform that can be used to control access to legacy push protocols based upon a policy in an embodiment. Although this diagram depicts components as logically separate, such depiction is merely for illustrative purposes. It will be apparent to those skilled in the art that the components portrayed in this figure can be arbitrarily combined or divided into separate software, firmware and/or hardware. Furthermore, it will also be apparent to those skilled in the art that such components, regardless of how they are combined or divided, can execute on the same computing device or can be distributed among different computing devices connected by one or more networks or other suitable communication means.
A SIP server 102 and a network gatekeeper 104 comprise a portfolio of product collectively comprise a communications platform 100. The SIP server 102 provides the communications platform 100 with a subsystem in which application components that interact with SIP-based networks may be deployed. The network gatekeeper 104 provides a policy-driven telecommunications Web services gateway that allows granular control over access to network resources from un-trusted domains.
A variety of shared and re-usable software and service infrastructure components comprise the communications platform 100. For example, an application server, such as the WebLogicTM Application Server by BEA Systems, Inc. of San Jose, Calif. This application server may be augmented and adapted for deployment in telecommunications networks, while providing many features and functionality of the WebLogicTM Server counterpart widely deployed in enterprise computing environments. Application server embodiments for use in the telecommunications applications can provide a variety of additional features and functionality, such as without limitation:

    
    
        Optimized for Peak Throughput
        Clustering for Scalability and High-Performance
        Generalized for wide range of target platforms (HW/OS) support
        Extensive deployment configuration options
        Optimized for local management
        Plug and play Enterprise Information Systems (EIS) support
    
    


Analogously, communications platform embodiments can provide a variety of additional features and functionality, such as without limitation:

    
    
        Highly Deterministic Runtime Environment
        Clustering for High-Availability (HA) and Scalability
        Optimized for Telecom HW/OS/HAM W platforms support (SAF, ATCA, HA M/W, etc.)
        Hardened configuration
        Optimized for Telecom NMS integration
        Telecommunications network connectors and interfaces
    
    


FIG. 1B is another illustration of an example communications platform that can be used to control access to legacy push protocols based upon a policy in an embodiment. Although this diagram depicts components as logically separate, such depiction is merely for illustrative purposes. It will be apparent to those skilled in the art that the components portrayed in this figure can be arbitrarily combined or divided into separate software, firmware and/or hardware. Furthermore, it will also be apparent to those skilled in the art that such components, regardless of how they are combined or divided, can execute on the same computing device or can be distributed among different computing devices connected by one or more networks or other suitable communication means.
Communications platform 100 comprises a Session Initiation Protocol (SIP) Server (WLSS) 102 and a Network Gatekeeper (WLNG) 104. Tools for interacting with Web Services, such as a Web Service—Universal Description Discovery Interface (WS/UDDI) 110, a Web Service—Business Process Execution Language (WS/BPEL) 112 may be coupled to the SIP Server 102 and the Network Gatekeeper 104 in embodiments. A log/trace and database 114 can assist with troubleshooting. In some deployments, the communications platform 100 can interface with processes that monitor underlying network function, such as Operations Support Systems/Business Support Systems (OSS/BSS) system 120 via RA protocol adapters 122. (RA protocol is a protocol for submission of billing information that are maintained in the network gatekeeper 104 and sent to a carrier's existing billing infrastructure.) Embodiments can include one or more of the following services OSS/BSS services. For example and without limitation, Operations Support Systems services can include activation, service assurance, usage/metering and provisioning, including designing, assigning and inventory. Business Support Systems can include billing, including invoicing, rating, taxation, and collections 124, customer management, including order entry, customer self services, customer care, trouble ticketing, and customer relationship management. Such interfaces can provide access to Operation, Administration, and Maintenance (OAM) applications 126 and others. A policy engine 103 controls access by one or more third party services (not shown) and services (not shown) to resource elements (not shown) in a network layer.
A Service Creation Environment (SCE) enables service providers to create applications using a higher level programming abstraction tool to expedite application creation. Other types of tools may be provided in embodiments to enable internal staff who are not necessarily software engineers (e.g. business analysts, IT/MIS staff) but are programmers or have programming skills (e.g. internal software engineers with knowledge of the carrier's network etc. but perhaps less savvy as high power J2EE software engineers) to be able to create or modify applications.
A communications platform embodiment can provide an open, high performance, software based fault-tolerant platform that allows operators to maximize revenue potential by shortening time to market and significantly reducing per-service implementation and integration cost and complexity. The communications platform is suitable for use by for network infrastructure vendors, network operators and communications service providers in multiple deployment scenarios ranging from fully IP multi-media subsystem (IMS) oriented network architectures to hybrid and highly heterogeneous network architectures. It is not restricted to use only in carrier networks, however, and may be deployed in Enterprise communications networks without restriction or extensive customization. When deployed in conjunction with an IP multimedia subsystem, the communications platform can serve in the role of an IMS SIP application server and offers communications service providers an execution environment in which to host applications (such as the WebLogicTM Network Gatekeeper), components and standard service enablers. The following diagrams illustrate example network gatekeeper embodiments in telecommunications systems.
FIG. 2A in an illustration of example functional aspects of a communications platform embodiment. Although this diagram depicts components as logically separate, such depiction is merely for illustrative purposes. It will be apparent to those skilled in the art that the components portrayed in this figure can be arbitrarily combined or divided into separate software, firmware and/or hardware. Furthermore, it will also be apparent to those skilled in the art that such components, regardless of how they are combined or divided, can execute on the same computing device or can be distributed among different computing devices connected by one or more networks or other suitable communication means.
As illustrated by FIG. 2A and by way of example, an embodiment of a communications platform 100 provides an easy to use, integrated, configuration-driven intermediary between service providers 134, third party service providers 138 and end users 136. The communications platform 100 embodiment illustrated by FIG. 2A comprises an application layer 200 with interfaces to applications of the service providers 134 and third party service providers 138 and a network layer 220 to interface with the end users 136 via one or more network resource elements 221. Communications platform 100 further comprises a gatekeeper layer 210 interposed between the application layer 200 and the network layer 220 for managing and controlling information flowing between layers 200 and 220.
At the application layer 200, third party service providers 138 and service providers 134 are provided protocol adapters 206-209 to make services 201-203 available to callers over a network via the gatekeeper layer 210 provided by the communications platform 100. Access to network resource elements 221 by services 201, 202, 203 may be achieved using one or more web services protocol adapters 206-209. The protocol adapters 206-209 provide an interface mechanism, enabling the network gatekeeper 104 to intercept protocol communications from services 201-203 and control access to network resource elements by the services 201-203 in accordance with one or more policies. While illustrated here with reference to an embodiment having adapters to specific protocols, including without limitation, a Short Message Peer-to-Peer protocol (SMPP) protocol adapter 206, a Push Application Protocol (PAP) protocol adapter 207, a Multimedia Messaging Services (MM7) protocol adapter 208 and an Internet Message Access Protocol (IMAP) protocol adapter 209, embodiments may include any number or kind of protocols and are neither limited to, nor required to possess, these illustrated protocol adapters.
The gatekeeper layer 210 includes a gatekeeper 104 that comprises a plurality of functional elements working in concert to control access to network resource elements 221 at the network layer 220 by services 201-203 according to one or more policies. In an embodiment, a service level agreement (SLA) 214 comprises one or more policies governing access to the network layer 220. A policy engine 103 provides enforcement of the service level agreements. Service level agreements specify, e.g., how many messages customer A sends an hour, and if over a contract limit, customer A starts paying more, and so forth. In one embodiment, capabilities to create, customize, and execute service level agreement provisions as policies are provided. A charging mechanism 215 determines charges to callers for making a call using network resource elements 221, e.g., determine charges for network traffic (i.e., calls) according to charging information payment amount/schedule, priorities, and the like. Charging mechanism 215 may access data including Call Data Records (CDR) and/or Event Data Records (EDR) in order to determine charges. In one embodiment, the charging mechanism 215 determines an allocation of charges to be apportioned to the third party providing the service. As shown by the dotted lines in FIG. 2A, the actions of the policy engine 103 and other functional elements of the gatekeeper 104 provide virtual isolation layers 212a, 212b between services 201-203 at the application layer 200 and network resource elements 221 at the network layer 220. The isolation layers 212a, 212b indicate that the gatekeeper layer 210 functional elements can be isolated from, and unaffected by, the particulars of protocols, interfaces and the like used by applications, services and callers communicating using the network via the gatekeeper 104.
The gatekeeper layer 210 may include one or more resource interfaces 211 to interface with legacy protocols 216-218 or other web services protocols 219 as a mechanism to reach callers and end user applications (clients) via the network layer 220. While illustrated here with reference having resource interfaces to specific protocols, including without limitation, an SMPP protocol adapter 216, a PAP protocol adapter 217, an MM7 protocol adapter 218 and an IMAP protocol adapter 219, embodiments may include any number or kind of protocols and are neither limited to, nor required to possess, these illustrated resource interfaces. An extension toolkit (not shown) enables partners to develop resource interfaces for other protocols to include into the gatekeeper layer 210.
Network layer 220 includes one or more resource elements 221 such as without limitation a Parlay (protocol) gateway 222, an IMS (IP multi-media subsystem) 223, an SMSCs (short-message-service-center) 224 and MMSCs (multi-media messaging service center) 225, each of which provides a mechanism for moving information through the network to one or more end user services 136.
FIG. 2B is functional block diagram that shows a high level overview of an example logical architecture in which techniques for managing services in a communications network may be embodied. By way of example and as illustrated by FIG. 2B, communications platform 100 of FIG. 2A may be implemented using multi-tier system architecture. As shown in FIG. 2B, an example multi-tier system architecture provides independent, coordinated execution of business logic implementing services and the like, executing in one tier, and communications connection management logic which executes in a second tier. An application tier 252 comprises machines capable of executing applications, including applications provided by third parties, on behalf of callers that initiate communications sessions managed by the network tier 254. In an embodiment, an interconnection mechanism 253 provides an interconnection between network elements of application tier 252 and network tier 254. In an example embodiment, interconnection mechanism 253 comprises Java Messaging Service (JMS). In an alternate embodiment, interconnection mechanism 253 is implemented using Common Object Request Broker Architecture (CORBA), a group of application programming interfaces (APIs), communication protocols, and object/service information models to enable heterogeneous applications written in various languages running on various platforms to interoperate.
FIG. 3A is an operational flow diagram illustrating a high level overview of a technique for controlling access to legacy push protocols based upon a policy in an embodiment. The technique for controlling access to legacy push protocols based upon a policy shown in FIG. 3A is operable with a network gatekeeper, such as network gatekeeper 104 of FIG. 1A and FIG. 1B, for example. As shown in FIG. 3A, at least one invocation to a legacy push protocol is received from a legacy application by an application interface (block 302). For example and without limitation, this can include receiving at least one invocation to a legacy push application protocol (PAP) from a legacy application.
A network gatekeeper controls access through the telecommunications system by applying at least one policy to the invocation (block 304). The at least one policy indicates whether the legacy application is permitted to use a resource of the telecommunications system. By way of example and without limitation, this can include controlling access through the telecommunications system with a policy engine at a gatekeeper by applying at least one policy in accordance with a service level agreement (SLA) to the invocation.
A resource interface connecting the gatekeeper with at least one resource element implementing the legacy push message protocol is provided the at least one invocation to a legacy push message protocol when the gatekeeper permits the legacy application to use a resource of the telecommunications system (block 306). In embodiments, this can include receiving, the at least one invocation to a legacy push protocol at a resource interface plug-in connecting the gatekeeper with at least one resource element implementing the legacy push application protocol (PAP) when the gatekeeper permits the legacy application to use a resource of the telecommunications system for example.
FIG. 3B is an operational flow diagram illustrating a high level overview of a technique for controlling access to legacy multimedia protocols based upon a policy in an embodiment. The technique for controlling access to legacy multimedia protocols based upon a policy shown in FIG. 3B is operable with a network gatekeeper, such as network gatekeeper 104 of FIG. 1A and FIG. 1B, for example. As shown in FIG. 3B, at least one invocation to a legacy multimedia message protocol is received from a legacy application by an application interface (block 312). For example and without limitation, this can include receiving at least one invocation to a legacy multimedia message services protocol (MM7) from a legacy application.
A network gatekeeper controls access through the telecommunications system by applying at least one policy to the invocation. The at least one policy indicates whether the legacy application is permitted to use a resource of the telecommunications system (block 314). By way of example and without limitation, this can include controlling access through the telecommunications system with a policy engine at a gatekeeper by applying at least one policy in accordance with a service level agreement (SLA) to the invocation.
A resource interface connecting the gatekeeper with at least one resource element implementing the legacy multimedia message protocol is provided the at least one invocation to a legacy multimedia message protocol when the gatekeeper permits the legacy application to use a resource of the telecommunications system (block 316). In embodiments, this can include receiving the at least one invocation to a legacy multimedia message protocol at a resource interface plug-in connecting the gatekeeper with at least one resource element implementing the legacy multimedia message services protocol (MM7) when the gatekeeper permits the legacy application to use a resource of the telecommunications system for example.
FIG. 3C is an operational flow diagram illustrating a high level overview of a technique for controlling access to legacy short message peer-to-peer protocols based upon a policy in an embodiment. The technique for controlling access to legacy short message peer-to-peer protocols based upon a policy shown in FIG. 3C is operable with a network gatekeeper, such as network gatekeeper 104 of FIG. 1A and FIG. 1B, for example. As shown in FIG. 3C, at least one invocation to a legacy short message peer-to-peer protocol is received from a legacy application by an application interface (block 322). For example and without limitation, this can include receiving at least one invocation to a legacy Short Message Peer-to-Peer Protocol (SMPP) from a legacy application.
A network gatekeeper controls access through the telecommunications system by applying at least one policy to the invocation. The at least one policy indicates whether the legacy application is permitted to use a resource of the telecommunications system (block 324). By way of example and without limitation, this can include controlling access through the telecommunications system with a policy engine at a gatekeeper by applying at least one policy in accordance with a service level agreement (SLA) to the invocation.
A resource interface connecting the gatekeeper with at least one resource element implementing the legacy short message peer-to-peer protocol is provided the at least one invocation to a legacy short message peer-to-peer protocol when the gatekeeper permits the legacy application to use a resource of the telecommunications system (block 326). In embodiments, this can include receiving the at least one invocation to a legacy short message peer-to-peer protocol at a resource interface plug-in connecting the gatekeeper with at least one resource element implementing the legacy Short Message Peer-to-Peer Protocol (SMPP) when the gatekeeper permits the legacy application to use a resource of the telecommunications system.
In accordance with an embodiment, a service capability Policy Enforcement Point (PEP) is provided to receive at least one of a plurality of service requests from at least one application, including at least one of a plurality of service capability modules to request a network plug-in from the plug-in manager to handle the request. A Policy Decision Point (PDP) is provided that selects from a plurality of different service level agreements, a service level agreement to control network traffic based upon at least one temporal condition to control at least one of access to network resources and traffic flow coordination based upon the selected service level agreement. A plug-in manager receives a decision from the PDP and provides at least one plug-in representing a network resource element to route requests permitted by the PDP.
In accordance with an embodiment, in an example of network level policy execution, an application sends (1) a service request to the Gatekeeper, which is processed at the service capability level. The service capability module requests (2) a network plug-in from the plug-in manager to handle the request. The plug-in manager retrieves (3) a list of possible plug-ins based on the address plan and destination address indicated in the service request. The plug-in manager sends (4) the list of possible plug-ins and the service request data to the policy engine for a policy decision. The policy engine makes a decision based on: the request data, general network gatekeeping rules, specific data in the service provider traffic SLA, specific data in the total traffic SLA, and additional data provided by external databases or by the network node. The policy engine returns (5) a list of the plug-ins that have passed the policy decision. The plug-in manager is also informed if no plug-in has passed. The plug-in manager selects (6) a plug-in from the list and sends it to the service capability module. The service capability module routes (7) the service request to the selected plug-in.
Push Application Protocol (PAP)
FIG. 4A is an illustration of example functional aspects of a legacy push protocol coupled with a communications platform embodiment. A Push Initiator residing on an Internet server to access a push proxy gateway uses the Push Access protocol. The Push Access Protocol is designed to be independent of the underlying transport protocol. A messaging pipe 410a routes a push application protocol message from a push initiator 401a to network elements 422a. In this example, the PAP interface 407a communicates with an ESPA module 412a. The ESPA module 412b then communicates with a plug in manager (not shown) for the PAP Plug-in resource interface 417a. The PAP Plug-in resource interface 417a provides connectivity to the network elements 422a. Network elements 422a may provide connectivity to a push proxy gateway that pushes the messages to clients.
FIG. 5A illustrates an example usage scenario of the PAP Protocol in an embodiment. The Push Initiator 501 interfaces directly with the gatekeeper 514 to initiate an application layer connection for sending push messages. The gatekeeper 514 controls message traffic between the push initiator 501 and push proxy gateway 536. Push proxy gateway 536 pushes the messages to the consumer clients 538.
The response and result notification is used by the push proxy gateway 536 to inform the push initiator 501 of the final outcome of a push submission, if requested by the push initiator 501. This notification tells the push initiator 501 that the message was sent, delivered (confirmation received from wireless device), expired, cancelled, or there was an error. If there was a processing error, the notification can be sent immediately upon detection of the error to the push initiator 501 and the message should not be sent to the client. Otherwise, the notification will be sent after the message delivery process has been completed. The delivery process is considered completed when the message is no longer a candidate for delivery, e.g. the message has expired. If the push submission is indicated as rejected, then no result notification will be sent.
Gatekeeper embodiments can provide Quality of Service, SLAs-Policy enforcement, traffic throttling, Service Provider/Application authentication and others. Embodiments can ensure that carrier network elements are used in the most optimal and controlled manner when Push messages are submitted to a push proxy gateway.
Multimedia Messaging Protocol (MM7)
FIG. 4B is an illustration of example functional aspects of a legacy multimedia messaging protocol coupled with a communications platform embodiment. A messaging pipe 412b routes the message from a client application 401b to the network elements 425b. In this example, the MM7 interface 408a communicates with a SESPA module. The SESPA module in turn routes message/comments via the ESPA layer 412b. The ESPA layer 412b in turn communicates with the plug in manager (not shown) of the MM7 Plug-in resource interface 418b. The MM7 Plug-in resource interface 418a provides connectivity to the network elements 425b. Network elements 425b may provide connectivity to end user clients.
FIG. 5B illustrates an example usage scenario of the MM7 Protocol in an embodiment. In the usage scenario illustrated by FIG. 5B, the network gatekeeper 554 is shown integrated as part of a MM7 architecture. The applications 551 will interface directly with the network gatekeeper 554 to initiate an application layer connection for sending multimedia messages. The gatekeeper 554 controls message traffic between the application 551 and MMSC 555. The MMSC 555 provides connectivity to the consumer clients 556.
The gatekeeper embodiments can provide Quality of Service, SLAs-Policy enforcement, traffic throttling, Service Provider/Application authentication and others. Embodiments can ensure that carrier network elements are used in the most optimal and controlled manner when multimedia messages are sent to the MMSC.
Short Message Peer-to-Peer Protocol (SMPP)
FIG. 4C is an illustration of example functional aspects of a legacy short message peer-to-peer protocol coupled with a communications platform embodiment. FIG. 4C illustrates a messaging pipe 410c that routes a short peer-to-peer message from the application 401c to network elements 422c. In this example, the SMPP interface 406c communicates with an ESPA module 412c. The ESPA module 412c then communicates with a plug in manager (not shown) for the SMPP Plug-in resource interface 416c. The SMPP Plug-in resource interface 416c provides connectivity to the network elements 424c. 
If a short message is too long to fit inside one SUBMIT_SM operation at the client on which the application 401c resides, the SMPP Client will split the message and send it using multiple SUBMIT_SM operations. The SMPP interface 406c will collect the multiple SUBMIT_SM operations and turn them into one sendSMS call towards ESPA module 412c. Later when a processNotification call is made by ESPA module 412c to indicate that the message was delivered, the SMPP interface 406c will send multiple DELIVER_SM operations to the SMPP Client, i.e. multiple delivery receipts. This is when there were multiple messages that were sent.
FIG. 5C illustrates an example usage scenario of the SMPP Protocol in an embodiment. An SMS application system called the “External Short Message Entity” (ESME) 561 may initiate an application layer connection via the gatekeeper 566 with an SMSC 568 over a TCP/IP” or “X.25” network connection and may then send short messages and receive short messages to and from the SMSC 568 respectively. The EMSE may query, cancel, or replace short messages using SMPP.
Applications such as WAP Proxy Client, VMS and Paging Bureau will interface directly with the gatekeeper. The gatekeeper embodiments can provide Quality of Service, SLAs-Policy enforcement, traffic throttling, Service Provider/Application authentication and others. Embodiments can ensure that carrier network elements are used in the most optimal and controlled manner when SMS messages are exchanged with the SMSC.
In other aspects, the invention encompasses in some embodiments, computer apparatus, computing systems and machine-readable media configured to carry out the foregoing methods. In addition to an embodiment consisting of specifically designed integrated circuits or other electronics, the present invention may be conveniently implemented using a conventional general purpose or a specialized digital computer or microprocessor programmed according to the teachings of the present disclosure, as will be apparent to those skilled in the computer art.
Appropriate software coding can readily be prepared by skilled programmers based on the teachings of the present disclosure, as will be apparent to those skilled in the software art. The invention may also be implemented by the preparation of application specific integrated circuits or by interconnecting an appropriate network of conventional component circuits, as will be readily apparent to those skilled in the art.
The present invention includes a computer program product which is a storage medium (media) having instructions stored thereon/in which can be used to program a computer to perform any of the processes of the present invention. The storage medium can include, but is not limited to, any type of rotating media including floppy disks, optical discs, DVD, CD-ROMs, microdrive, and magneto-optical disks, and magnetic or optical cards, nanosystems (including molecular memory ICs), or any type of media or device suitable for storing instructions and/or data.
Stored on any one of the machine readable medium (media), the present invention includes software for controlling both the hardware of the general purpose/specialized computer or microprocessor, and for enabling the computer or microprocessor to interact with a human user or other mechanism utilizing the results of the present invention. Such software may include, but is not limited to, device drivers, operating systems, and user applications.
Included in the programming (software) of the general/specialized computer or microprocessor are software modules for implementing the teachings of the present invention, including, but not limited to providing mechanisms and methods for controlling access to legacy push protocols based upon a policy as discussed herein.
Various embodiments may be implemented using a conventional general purpose or specialized digital computer(s) and/or processor(s) programmed according to the teachings of the present disclosure, as can be apparent to those skilled in the computer art. Appropriate software coding can readily be prepared by skilled programmers based on the teachings of the present disclosure, as can be apparent to those skilled in the software art. The invention may also be implemented by the preparation of integrated circuits and/or by interconnecting an appropriate network of conventional component circuits, as can be readily apparent to those skilled in the art.
Embodiments can provide, by way of example and without limitation, services such as:
VoIP services, including, without limitation the following features:
Basic features. These include standards services such as Voice mail, Caller ID, Call waiting, and call forwarding (the ability to forward a call to a different number).
Advanced features. The list of advanced features is operators specific. Following is a brief list of advanced features:
Call logs: The ability to view calls made over a given period of time online, ability to associate names with phone numbers, integrate call log information to other applications such as IM.
Do not disturb: The ability to specify policies around receiving calls—for example, all calls during office hours to be automatically forwarded to a mobile terminal, all calls during the night to be directed to voice mail etc.
Locate me: This is advanced call forwarding. Rather than have all calls forwarded to a single location (e.g., voice mail) when the caller is busy, Locate me can try multiple terminals in series or in parallel. For example, a user may have two office locations, a mobile, and a pager, and it may make sense to forward a call to both office locations first, then the pager, and then the mobile terminal. Locate me is another example of feature interaction.
Personal conferencing: A user could use an existing application (e.g., IM client) to schedule a Web/audio conference to start at a certain time. Since the IM client already has personal profile information, the conferencing system sends out the Web conference link information either through IM and/or email to the participants. The phone contact information in the profile is used to automatically ring the participants at the time of the conference.
Lifetime number: This is the facility where a single virtual number can travel with a customer wherever they live. Even if they move, the old number continues to work, and reaches them at their new location. This is really the analog of static IP addresses in a phone network.
Speed dial: This is the ability to dramatically expand the list of numbers that can be dialed through short-key and accelerator combinations. This is another example of a converged application, since it's very likely that when a user will set up this information when they work through the call logs on the operator user portal, and the updated information needs to be propagated to the network side in real-time.
Media delivery services, including, without limitation the following features:
Depending on the service level agreement users are willing to sign up to, the quality of media delivered (e.g. # of frames per second) will vary. The policy engine enables segmenting the customer base by revenue potential, and to maximize return on investment made in the network.
Context-sensitive applications including, without limitation the following features:
A typical example here is the need for applications that have a short lifetime, extremely high usage peaks within their lifetime, and immediacy. For example, voting on American Idol during the show or immediately afterwards has proved to be an extremely popular application.
Integrated applications including, without limitation the following features:
The final class of applications is one that combines wireline and wireless terminal usage scenarios. An example of an integrated application is the following: a mobile terminal user is on a conference call on their way to work. When he reaches his office, he enters a special key sequence to transfer the phone call to his office phone. The transfer happens automatically without the user having to dial in the dial-in information again. It's important to note hear that this capability be available without the use of any specific support from the hand-set (a transfer button for example).
Various embodiments include a computer program product which is a storage medium (media) having instructions stored thereon/in which can be used to program a general purpose or specialized computing processor(s)/device(s) to perform any of the features presented herein. The storage medium can include, but is not limited to, one or more of the following: any type of physical media including floppy disks, optical discs, DVDs, CD-ROMs, microdrives, magneto-optical disks, holographic storage, ROMs, RAMs, PRAMS, EPROMs, EEPROMs, DRAMs, VRAMs, flash memory devices, magnetic or optical cards, nanosystems (including molecular memory ICs); paper or paper-based media; and any type of media or device suitable for storing instructions and/or information. Various embodiments include a computer program product that can be transmitted in whole or in parts and over one or more public and/or private networks wherein the transmission includes instructions which can be used by one or more processors to perform any of the features presented herein. In various embodiments, the transmission may include a plurality of separate transmissions.
Stored one or more of the computer readable medium (media), the present disclosure includes software for controlling both the hardware of general purpose/specialized computer(s) and/or processor(s), and for enabling the computer(s) and/or processor(s) to interact with a human user or other mechanism utilizing the results of the present invention. Such software may include, but is not limited to, device drivers, operating systems, execution environments/containers, user interfaces and applications.
The foregoing description of the preferred embodiments of the present invention has been provided for purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise forms disclosed. Many modifications and variations can be apparent to the practitioner skilled in the art. Embodiments were chosen and described in order to best explain the principles of the invention and its practical application, thereby enabling others skilled in the relevant art to understand the invention. It is intended that the scope of the invention be defined by the following claims and their equivalents.

## Claims

1. A telecommunications system, comprising:
a gateway positioned to securely control access to a telecommunications network by intercepting one or more requests from a plurality of service provider applications to access the telecommunications network resource to transmit a multimedia message through a network pluq-in, said gateway further including:
an application interface to receive the one or more requests from the plurality of service provider applications, wherein the application interface includes a plurality of protocol adapters, each protocol adapter accepting the one or more requests from each service provider application that implements a protocol accepted by that adapter;
a policy engine to control access to the telecommunications network resource by applying at least one policy to the one or more requests, said policy being based on one of a plurality of different service level agreements (SLA) that indicate whether a particular one of the plurality of service provider applications is permitted to use the telecommunications network resource;
a service Policy Enforcement Point (PEP) to receive the one or more requests from each protocol adapter at the application interface, wherein the PEP requests the network plug-in from a plug-in manager to service the one or more requests;
a Policy Decision Point (PDP) that selects, based on the one or more requests, one of the plurality of different service level agreements to make a policy decision on whether to accept the request;
wherein upon receiving one of the one or more requests from the plurality of service provider applications, the PEP forwards the request to the PDP which evaluates the request using the selected service level agreement, and informs the PEP of the policy decision; and
a resource interface containing the plug-in manager, wherein in response to the policy decision to accept the request, the plug-in manager selects the network plug-in to connect the gateway with the telecommunications network resource to transmit the multimedia message.

2. The telecommunications system of claim 1, further comprising:
a multi-media messaging service center (MMSC) coupled to the resource interface to sending value-added service content from providers to subscribers who have multimedia messaging service (MMS) enabled mobile devices.

3. The telecommunications system of claim 2, wherein the a multi-media messaging service center (MMSC) coupled to the resource interface to sending value-added service content from providers to subscribers who have multimedia messaging service (MMS) enabled mobile devices sends value added service content comprising at least one of an image, text, an audio clip and a video clip.

4. The telecommunications system of claim 2, wherein the a multi-media messaging service center (MMSC) coupled to the resource interface to sending value-added service content from providers to subscribers who have multimedia messaging service (MMS) enabled mobile devices offers at least one of a development environment and a billing environment.

5. A method for controlling access to a legacy multimedia message protocol based upon a policy in a telecommunications environment, the method comprising:
providing a gateway positioned to securely control access to a telecommunications network by intercepting one or more requests from a plurality of service provider applications and a telecommunications network resource to transmit a multimedia message through a network plug-in, said gateway further including an application interface, a policy engine, a service Policy Enforcement Point (PEP), a Policy Decision Point (PDP), and a resource interface;
receiving, by said application interface, the one or more requests from the plurality of service provider applications wherein, the application interface includes a plurality of protocol adapters, each protocol adapter accepting the one or more requests from each service provider application that implements a protocol accepted by that adapter;
receiving the one or more requests at a service Policy Enforcement Point (PEP) from each protocol adapter at the application interface, wherein the PEP is adapted to request the network plug-in from a plug-in manager to service the one or more requests;
forwarding the request from the PEP to a Policy Decision Point (PDP) that selects, based on the one or more requests, one of a plurality of different service level agreements to make a policy decision on whether to accept the request, and wherein when the policy decision is to accept the request, the PDP evaluates the request using the selected service level agreement, and informs the PEP of the policy decision;
selecting, by the plug-in manager at the resource interface, the network plug-in in response to the policy decision to accept the request to connect the gateway with the telecommunications network resource to transmit the multimedia message.

6. The method of claim 5, further comprising:
sending value-added service content from providers to subscribers who have multimedia messaging service (MMS) enabled mobile devices via a multi-media messaging service center (MMSC) coupled to the resource interface.

7. The method of claim 6, wherein sending value-added service content from providers to subscribers who have multimedia messaging service (MMS) enabled mobile devices via a multi-media messaging service center (MMSC) coupled to the resource interface includes:
sending value added service content comprising at least one of an image, text, an audio clip and a video clip.

8. The telecommunications system of claim 6, wherein sending value-added service content from providers to subscribers who have multimedia messaging service (MMS) enabled mobile devices via a multi-media messaging service center (MMSC) coupled to the resource interface includes:
offering at least one of a development environment and a billing environment.

9. An apparatus for controlling access to a legacy multimedia message protocol in a telecommunications system, the apparatus comprising:
a processor; and
one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of:
providing a gateway positioned to securely control access to a telecommunications network by intercepting one or more requests from a plurality of service provider applications and a telecommunications network resource to transmit a multimedia message through a network plug-in, said gateway further including an application interface, a policy engine, a service Policy Enforcement Point (PEP), a Policy Decision Point (PDP), and a resource interface;
receiving, by said application interface, the one or more requests from the plurality of service provider applications wherein, the application interface includes a plurality of protocol adapters, each protocol adapter accepting the one or more requests from each service provider application that implements a protocol accepted by that adapter;
receiving the one or more requests at a service Policy Enforcement Point (PEP) from each protocol adapter at the application interface, wherein the PEP is adapted to request the network plug-in from a plug-in manager to service the one or more requests;
forwarding the request from the PEP to a Policy Decision Point (PDP) that selects, based on the one or more requests, one of a plurality of different service level agreements to make a policy decision on whether to accept the request, and wherein when the policy decision is to accept the request, the PDP evaluates the request using the selected service level agreement, and informs the PEP of the policy decision;
selecting, by the plug-in manager at the resource interface, the network plug-in in response to the policy decision to accept the request to connect the gateway with the telecommunications network resource to transmit the multimedia message.

10. The system of claim 1, wherein when the policy decision is to enforce the request, the PEP queries the plug-in manager for a list of possible plug-ins to service the request.

11. The system of claim 10, wherein in response to the PEP query, the plug-in manager retrieves the list of possible plug-ins based on the request, and sends the list of possible plug-ins to the policy engine, wherein based on the selected service level agreement, the policy engine informs the plug-in manager to select the network plug-in from the list of possible plug-ins.

12. The method of claim 5, wherein when the policy decision is to enforce the request, the PEP queries the plug-in manager for a list of possible plug-ins to service the request.

13. The method of claim 12, wherein in response to the PEP query, the plug-in manager retrieves the list of possible plug-ins based on the request, and sends the list of possible plug-ins to the policy engine, wherein based on the selected service level agreement, the policy engine informs the plug-in manager to select the network plug-in from the list of possible plug-ins.

14. The apparatus of claim 9, wherein when the policy decision is to enforce the request, the PEP queries the plug-in manager for a list of possible plug-ins to service the request.

15. The apparatus of claim 14, wherein in response to the PEP query, the plug-in manager retrieves the list of possible plug-ins based on the request, and sends the list of possible plug-ins to the policy engine, wherein based on the selected service level agreement, the policy engine informs the plug-in manager to select the network plug-in from the list of possible plug-ins.