Abstract:
Methods, systems, and computer program products for clustering and communicating between Internet protocol multimedia subsystem (IMS) entities are disclosed. According to one aspect, an IMS cluster node includes a serving call state control function (S-CSCF) for controlling media sessions between IMS users. The cluster node further includes a home subscriber service (HSS) function for storing and providing IMS subscription information to the S-CSCF function. A shared memory is operatively associated with the S-CSCF function and the HSS function. The S-CSCF function obtains IMS subscription information from the HSS function via the shared memory.

Description:
RELATED APPLICATIONS  
       [0001]     This application claims the benefit of U.S. Provisional Patent Application Ser. No. 60/637,337 and U.S. Provisional Patent Application Ser. No. 60/637,426, both filed Dec. 17, 2004; the disclosure of each of which is incorporated herein by reference in its entirety. 
     
    
     TECHNICAL FIELD  
       [0002]     The subject matter described herein includes methods and systems for implementing and communicating between Internet protocol (IP) multimedia subsystem (IMS) entities. More particularly, the subject matter described herein includes methods, systems, and computer program products for clustering and communicating between IMS entities.  
       BACKGROUND ART  
       [0003]     Internet protocol (IP) multimedia subsystem (IMS) is defined by the Third Generation Partnership Project (3GPP) as a new mobile network infrastructure that enables the convergence of data, speech, and mobile network technology over an IP-based infrastructure. IMS bridges the gap between the existing traditional telecommunications technology and Internet technology, allowing network operators to offer a standardized, reusable platform with new, innovative services by enhancing real time, multimedia mobile services, such as voice services, video telephony, messaging, conferencing, and push services. IMS can be used to provide services for both mobile networks and landline networks at the same time, providing unique mixtures of services with transparency to the end-user.  
         [0004]     The main function of IMS is to set up media communication sessions between users and between users and applications. IMS supports the establishment of any type of media session (e.g., voice, video, text, etc.) and provides the service creator the ability to combine services in the same session and dynamically modify sessions “on the fly” (e.g., adding a video component to an existing voice session). As a result, new and innovative user-to-user and multi-user services become available, such as enhanced voice services, video telephony, chat, push-to-talk, and multimedia conferencing, all of which are based on the concept of a multimedia session. The underlying IMS infrastructure enables mobile IP communication services via its ability to find a user in the network and then to establish a session with the user. The key IMS components enabling mobility management are the call session control function (CSCF) and home subscriber server (HSS). The CSCF is essentially a proxy, which aids in the setup and management of sessions and forwards messages between IMS networks. The HSS holds all of the key subscriber information and enables users (or servers) to find and communicate with other end users.  
         [0005]      FIG. 1  is a block diagram illustrating a conventional IMS system. In  FIG. 1 , a visited network  100  includes a proxy CSCF (P-CSCF)  102 . The visited network  100  may be part of or in communication with a mobile or fixed network. Accordingly, visited network  100  includes a gateway general packet radio service (GPRS) support node (GGSN)  104 , which may in turn communicate with a serving GPRS support node (SGSN)  106  that is in communication with a radio access network (RAN)  108  in which an IMS subscriber is currently located. The subscriber&#39;s home network  110  includes an HSS  112  with the subscriber&#39;s profile, an interrogating CSCF (I-CSCF)  114 , and a serving CSCF (S-CSCF)  116 .  
         [0006]     IMS uses session initiation protocol (SIP) for multimedia session negotiation and session management. For example, SIP REGISTER and INVITE messages are used for communication between P-CSCF  102 , I-CSCF  114 , and S-CSCF  116  in  FIG. 1 . In the example illustrated in  FIG. 1 , the IMS nodes function collectively as a mobile SIP network, providing routing, network location, and addressing functionalities. The DIAMETER protocol is used between I-CSCF  114  and HSS  112  and between S-CSCF  116  and HSS  112 . DIAMETER provides an authentication, authorization and accounting (AAA) framework for applications such as network access or IP mobility in both local and roaming situations.  
         [0007]     P-CSCF  102  is the first contact point within the IMS and behaves like a proxy. The P-CSCF  102  forwards a SIP REGISTER request received from the subscriber&#39;s user equipment (UE) (not shown) via GGSN  104 , SGSN  106 , and RAN  108  to I-CSCF  114 , whose identity is determined using the home domain name, as provided by the UE. After registration is performed, SIP messages concerning the registered subscriber are forwarded to S-CSCF  116 , whose identity P-CSCF  102  received as a result of the registration procedure. P-CSCF  102  also forwards SIP requests or responses to the UE, generates call detail records (CDRs), maintains a security association between itself and each UE, performs SIP message compression and decompression, and authorizes bearer resources and QoS management.  
         [0008]     I-CSCF  114  is the contact point within the subscriber&#39;s home network  110  for all communication sessions destined for the subscriber or for a roaming subscriber currently located within that network operator&#39;s service area. I-CSCF  114  locates and assigns S-CSCF  116  to a user initiating SIP registration, routes a SIP request received from another network to S-CSCF  116 , obtains the address of S-CSCF  116  from HSS  112  and forwards the SIP request or response to the S-CSCF  116 .  
         [0009]     S-CSCF  116  performs the session control services for the UE and maintains session state as needed by the network operator for support of the services. S-CSCF  116  accepts registration requests, obtains IMS subscription information from HSS  112 , and provides session control. S-CSCF  116  also acts as a proxy server, i.e., it accepts requests and services them internally or forwards them on, and behaves as a User Agent, i.e., it terminates and independently generates SIP transactions. S-CSCF  116  is responsible for interaction with services platforms for the support of services on behalf of an originating endpoint.  
         [0010]     HSS  112  holds the subscriber profile and keeps track of the core network node that is currently holding the subscriber. HSS  112  provides mobility management, call and/or session establishment support, and supports the call and/or session establishment procedures in IMS. HSS  112  supports user security information generation, authentication procedures, user identification handling, access authorization, service authorization support service provisioning support, and provides support for application services. HSS  112  may also communicate with an application server (not shown) to offer value added services. The application server and can reside either in the user&#39;s home network or in a third party location and enables different services in the IMS network, such as call-forwarding, call waiting, presence and instant messaging. The application server communicates with the HSS using the DIAMETER protocol.  
         [0011]     The P-CSCF, I-CSCF, S-CSCF, and HSS functions are all defined in the 3GPP specifications. However, the 3GPP specifications do not map these components to hardware. Moreover, the 3GPP specifications suggest an implementation, such as that illustrated in  FIG. 1 , where the components are implemented on separate nodes that communicate with each other over a wide area network. For example, in  FIG. 1 , the S-CSCF  116  and HSS  112  communicate with each other via the diameter protocol over a wide area network  110 .  
         [0012]     One problem associated with an implementation, such as that illustrated in  FIG. 1  where the IMS functions are implemented on separate nodes that communicate with each other over a wide area network, is that the volume of information exchanged between the functions can place a burden on the communications network and/or increase session setup time. For example, in light of the amount of subscription information that is stored by HSS  112  that must be communicated to S-CSCF  116 , the link between S-CSCF  116  and HSS  112  may become a bottleneck. Current 3GPP standards do not address such issues.  
         [0013]     Accordingly, in light of these difficulties associated with IMS networks, there exists a need for methods, systems, and computer program products for clustering and communicating between IMS entities.  
       SUMMARY  
       [0014]     According to one aspect, the subject matter described herein includes a system for clustering and communicating between Internet protocol (IP) multimedia subsystem (IMS) entities. This system includes an interrogating call state control function (I-CSCF) module adapted to receive a communications-session-related message containing a network subscriber identity. The system further includes a serving call state control function (S-CSCF) module adapted to retrieve network subscriber information corresponding to the network subscriber identity and process communication-session-related messages based on the retrieved network subscriber information. A shared local area communications medium interconnects the I-CSCF module and the S-CSCF module and allows the modules to communicate with each other. The communication session related message may be forwarded by the I-CSCF module to the S-CSCF module over the local area communications medium.  
         [0015]     According to another aspect, the subject matter described herein includes an Internet protocol (IP) multimedia subsystem (IMS) cluster node. The IMS cluster node includes a serving call state control function (S-CSCF) module for controlling media sessions between IMS users. The cluster node further includes a home subscriber service (HSS) module for storing and providing IMS subscription information to the S-CSCF module. The cluster node further includes a shared memory operatively associated with the S-CSCF module and the HSS module. The S-CSCF module obtains IMS subscription information from the HSS function via the shared memory.  
         [0016]     According to yet another aspect, the subject matter described herein includes an Internet protocol (IP) multimedia subsystem (IMS) cluster node. The IMS cluster node includes a first IMS module for implementing at least one aspect of establishing and controlling media sessions between IMS users. The cluster node further includes a second IMS module for implementing another aspect for setting up and controlling media sessions between IMS users. The first and second IMS modules may communicate with each other to establish and control IMS sessions. The first and second IMS modules may be implemented in the same cluster. As used herein, the term “cluster” refers to a grouping of functions where individual functions in the group are connected to each other and communicate via a local area communications medium, such as a bus or a local area network.  
         [0017]     The subject matter described herein for implementing and communicating between IMS entities may be implemented in hardware, software, firmware, or any combination thereof. As such, the terms “function” or “module” as used herein refer to hardware, software, and/or firmware for implementing the feature being described. In one exemplary implementation, the subject matter described herein may be implemented using a computer program product comprising computer executable instructions embodied in a computer readable medium. Exemplary computer readable media suitable for implementing the subject matter described herein include disk memory devices, chip memory devices, programmable logic devices, application specific integrated circuits, and downloadable electrical signals. In addition, a computer program product that implements the subject matter described herein may be located on a single device or computing platform or may be distributed across multiple devices or computing platforms. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0018]     Preferred embodiments of the subject matter described herein will now be explained with reference to the accompanying drawings of which:  
         [0019]      FIG. 1  is a block diagram illustrating a conventional IMS network where IMS entities are implemented on separate platforms;  
         [0020]      FIG. 2  is a block diagram of an IMS cluster node in accordance with an embodiment of the subject matter described herein;  
         [0021]      FIG. 3  is a flow chart illustrating exemplary steps for communicating subscription information between an S-CSCF module and HSS module using shared memory according to an embodiment of the subject matter described herein;  
         [0022]      FIG. 4  is a block diagram of an IMS cluster node that may be used to access an external HSS entity according to an embodiment of the subject matter described herein;  
         [0023]      FIG. 5  is a block diagram of an exemplary network configuration including a plurality of IMS cluster nodes according to an embodiment of the subject matter described herein;  
         [0024]      FIG. 6  is a block diagram of an exemplary network configuration utilizing a centrally located IMS cluster access gateway according to an embodiment of the subject matter described herein; and  
         [0025]      FIG. 7  is a block diagram of an exemplary network configuration utilizing a centrally located IMS cluster access gateway having access to a number portability database according to an embodiment of the subject matter described herein. 
     
    
     DETAILED DESCRIPTION OF THE INVENTION  
       [0026]     In order to avoid the inefficiencies associated with transmitting messages between IMS entities, such as I-CSCF, a P-CSCF, an S-CSCF, and a HSS, the subject matter described herein includes an IMS cluster node whereby two or more of these IMS functions are implemented on a common platform connected via a shared local area communications medium, such as a bus or local area network (LAN). In one exemplary implementation, two or more of the entities may be implemented on a single card and communicate using shared memory.  
         [0027]      FIG. 2  is a block diagram of an IMS cluster node  200  in accordance with an embodiment of the subject matter described herein. In  FIG. 2 , IMS cluster node  200  includes an interrogating call state control function (I-CSCF) module  202 , a serving call state control function (S-CSCF) module  204 , and a shared local area communications medium  206 . Local area communications medium  206  may be any suitable structure that provides a communication path between various printed circuit cards or processor modules in IMS cluster node  200 . For example, local area communications medium  206  may be a local area network or a bus. Any module, such as I-CSCF module  202  or S-CSCF module  204 , may communicate with other modules in the IMS cluster node  200  via local area communications medium  206 .  
         [0028]     I-CSCF module  202  may include a network interface (NI) module  208 , an I-CSCF processor  210 , and a subscription locator function (SLF) module  212 . NI module  208  may be adapted to communicate with nodes external to IMS cluster node  200  that are located in circuit switched or packet switched networks. NI module  208  may provide a physical interface to support communication with external networks, message error checking to ensure that received messages are complete, and buffering received messages for processing by I-CSCF processor  210 .  
         [0029]     I-CSCF processor  210  may be adapted to receive buffered messages and process session initiation protocol (SIP) messages. If the SIP message is a communication-session-related registration message, such as a SIP REGISTER message, I-CSCF processor  210  may forward the message to SLF module  212 . SLF module  212  may identify a home subscriber server (HSS) module  216  that contains a subscriber&#39;s location and subscription information. Services or information provided by HSS module  216  may include Authentication, Authorization and Accounting (AAA), subscriber IP network mobility management information, subscriber IP network profile information, Equipment Identity Register (EIR) authorization, GSM/IS41 cellular mobility management information, GSM/IS41 subscriber profile information, GSM/IS41 authentication, presence information, etc. SLF module  212  may map an IMS subscriber identification number or ranges of IMS subscriber identification numbers to an IP address associated with an HSS module  216 . Non-registration messages may be forwarded by I-CSCF processor  210  to the appropriate S-CSCF module  204  based on mapping information stored by SLF module  212 .  
         [0030]     S-CSCF module  204  may include a S-CSCF processor  214 , HSS entity  216 , and a shared data store or memory  218 . S-CSCF processor  214  may receive session-related messages from I-CSCF module  210 . For example, registration messages may be received by S-CSCF processor  214 . S-CSCF processor  214  may query HSS entity  216  to determine connection parameters and/or subscriber options for an end user identified in the registration message. In a conventional network implementation, the connection parameters and subscriber options may include a substantial amount of information. Thus, transferring the information from HSS entity  216  to S-CSCF processor  214  may require substantial network resources, such as bandwidth. In accordance with one embodiment, shared data store or memory  218  containing subscriber information may be associated with HSS entity  216  and may be accessible by S-CSCF processor  214 . Thus, in response to a query by S-CSCF processor  214 , HSS entity  216  may provide a pointer to a memory location in shared data store  218 , thereby permitting subscriber information to be directly accessed by S-CSCF processor  214 . By providing S-CSCF processor  214  with direct access to shared data store  218 , S-CSCF processor  214  can more efficiently obtain subscriber information without HSS entity  216  becoming a potential communication bottleneck.  
         [0031]     Although the example illustrated in  FIG. 2  includes an I-CSCF, an S-CSCF, and an HSS module implemented in an IMS cluster node, the subject matter described herein is not limited to implementing these three IMS functions in an IMS cluster node. Implementing any two or more IMS functions or modules in an IMS cluster node is intended to be within the scope of the subject matter described herein. For example, an IMS cluster node may include an S-CSCF and an HSS module that communicate via a shared local area communications medium. In another example, an IMS cluster node may include an I-CSCF and an S-CSCF function or module that communicates a shared communications medium.  
         [0032]      FIG. 3  is a flow chart illustrating exemplary steps for communicating between an S-CSCF function and a HSS function using a shared memory or data store according to an embodiment of the subject matter described herein. Referring to  FIG. 3 , in step  300 , an IMS cluster node receives an IMS registration message. The IMS cluster node may be the home IMS cluster node for a subscriber including the HSS and S-CSCF functions for the subscriber. In step  302 , the S-CSCF function requests subscription information from the HSS function via shared memory. The request may be sent by writing a message for the HSS function in the shared memory. In step  304 , in response to the request, the HSS function provides a pointer to the requested subscription information in the shared memory. Thus, using the steps illustrated in  FIG. 3 , the efficiency of communicating IMS subscription information between the S-CSCF and HSS function is greatly increased over implementations where these functions are located on separate nodes connected to each other via a wide area network.  
         [0033]     In some configurations, subscriber location and subscription information may be stored in an HSS entity that is external to an IMS cluster node. For example, a network operator with an infrastructure including one or more HLRs may wish to upgrade the HLRs to provide HSS functionality, rather than replacing the HLRs with an IMS cluster node that includes HSS functionality. In such an implementation, the IMS cluster node may include the I-CSCF and S-CSCF functions as well as additional functions that communicate with external HSS nodes. In one implementation, the IMS cluster node may include an abstracted profile server (APS) for communicating with external database nodes, such as HLR nodes, and caching IMS subscription information in memory local to the IMS cluster node for subsequent access.  
         [0034]      FIG. 4  is a block diagram of an IMS cluster node  400  that may be used to access an external HSS entity  402  according to an embodiment of the subject matter described herein. In  FIG. 2 , IMS cluster node  400  is functionally similar to IMS cluster node  200  described above with respect to  FIG. 1 . Accordingly, descriptions of various, similarly numbered elements common to both IMS cluster nodes  200  and  400  need not be repeated herein.  
         [0035]     As in the previous configuration, SLF module  212  may receive session-related messages, such as a SIP REGISTER message, and identify an external HSS entity  402  that contains a subscriber&#39;s location and subscription information. SLF module  212  forwards the message to S-CSCF module  404  that interfaces with HSS entity  402 . S-CSCF processor  214  forwards the message to abstracted profile server (APS) module  406 . APS module  406  retrieves the subscriber&#39;s location and subscription information from external HSS entity  402 , and stores the retrieved information in shared data store  218  for later access by S-CSCF processor  214 . APS module  406  sends the location of the subscriber&#39;s information to S-CSCF processor  214 , thereby allowing S-CSCF processor  214  to directly access the stored information.  
         [0036]     The APS function is described in detail in U.S. Provisional Patent Application No. 60/637,426 filed Dec. 17, 2004, and in a commonly-assigned, co-pending U.S. patent application entitled Methods, Systems, and Computer Program Products for Supporting Database Access in an Internet Protocol Subsystem (IMS) Network Environment (serial number not yet assigned), filed on even date herewith. In summary, the APS function communicates with external database nodes, such as HSS and HLR nodes to obtain IMS subscription information. The APS function may communicate with the external database nodes using a language or protocol that is native to each of the nodes. The APS function may communicate with internal modules, such as S-CSCF processor  214  using an abstract language.  
         [0037]     As noted above, SLF module  212  may be adapted to identify an IMS cluster node  100  or  200  that contains a subscriber&#39;s location and subscription information. Accordingly, SLF module  212  may map an IMS subscriber identifier or range of IMS subscriber identifiers to an IP address associated with an IMS cluster node  200  or  400 .  
         [0038]     According to another aspect, the subject matter described herein may include a method for providing IMS service using a plurality of IMS cluster nodes. In one implementation, a plurality of IMS cluster nodes may be provided or deployed in the network. Each IMS cluster node may be configured to serve a predetermined set of subscribers. In one implementation, a P-CSCF may forward an IMS related message, such as registration message, to IMS cluster node, and the IMS cluster node may either process the message or forward the message to another IMS cluster node until the correct IMS cluster node is located. In an alternate implementation, a cluster node location function may be provided in the network for locating the correct IMS cluster node among a plurality of IMS cluster nodes.  
         [0039]      FIG. 5  is an example of IMS network architecture where the P-CSCF forwards IMS messages to a first cluster node, and the cluster nodes communicate with each other to locate the correct cluster node to process the message. In  FIG. 5 , an IMS user agent  500  communicates with a serving GPRS support node (SGSN)  106 . SGSN  106  performs mobility management functions, such as detecting new mobile subscribers in a given service area, registration processing of new mobile subscribers, and keeping a record of their location inside a given area. A gateway GPRS support node (GGSN)  104  may serve as an interface between SSGN  106  and GPRS service nodes, including those for network and subscriber screening and address mapping.  
         [0040]     In the message flow illustrated in  FIG. 5 , a proxy CSCF (P-CSCF)  102  receives an IMS registration message and queries a DNS server  502  to obtain the address of an IMS cluster node (step  1 ). P-CSCF  308  subsequently forwards the registration message to the IMS cluster node  200 A or  400 A identified by DNS server  502 , as indicated in step  2 . In  FIGS. 5-7 , reference numbers  200 A-C or  400 A-C are intended to indicate that each IMS cluster node could have a configuration like IMS cluster node  200  illustrated in  FIG. 2  or IMS cluster node  400  illustrated in  FIG. 4 . Using subscriber information contained in the registration message, SLF module  212  in IMS cluster node  200 A or  400 A determines that the subscriber&#39;s information is not contained in IMS cluster node  200 A or  400 A, but instead is contained in IMS cluster node  200 B or  400 B. As a result, the message is forwarded or “hopped” from IMS cluster node  200 A or  400 A to IMS cluster node  200 B or  400 B (step  3 ), where processing of the message continues.  
         [0041]     In a slight variation to the example illustrated in  FIG. 5 , the SLF function may be omitted from the IMS cluster nodes, and the IMS cluster nodes may simply perform lookups using their associated HSS functions to determine whether the subscription information is present in each IMS cluster node. If the information is present, the IMS cluster node that receives the registration message may process the message. If the registration information is not present, the IMS cluster node may forward the message to the next IMS cluster node in a group of IMS cluster nodes. The last IMS cluster node in the group may process the messages if it has the appropriate subscription information. If it does not have the appropriate subscription information, an error message may be generated and sent to the P-CSCF  102 .  
         [0042]     As discussed above, in an alternate implementation, a cluster node location function (CLF) may be provided to locate the appropriate IMS cluster nodes among a plurality of IMS cluster nodes for processing a message.  FIG. 6  is a block diagram of an IMS network including a cluster location function according to an embodiment of the subject matter described herein. Referring to  FIG. 6 , an IMS cluster location node  600  includes a cluster node location function  602 , a cluster node location database  603 , and a number portability database  604  for locating an appropriate IMS cluster node serving a particular IMS subscriber. Cluster location node  600  may be implemented using any suitable hardware platform that includes a processor and storage capabilities for storing the associated databases. In one exemplary implementation, IMS cluster location node  600  may be implemented using a hardware platform similar to the Eagle® signal transfer point (STP) platform available from Tekelec of Morrisville, N.C. The Eagle® platform includes link interface modules for sending and receiving signaling messages and a database services module for processing database related messages. The cluster location function  602  may perform lookups in cluster location database  603  for the IP or other network address associated with the IMS cluster node. Table 1 shown below illustrates an example of entries that may be present in cluster location database  603 .  
                             TABLE 1                           Cluster Node Location Data                IMS Subscriber IDs   Cluster Node IP Address                       9194938000-9194938999   128.156.0.1           9194939000-9194939999   128.156.0.2           9194940000-9194949999   128.156.0.3           9194190383   128.156.0.1                      
 
         [0043]     In Table 1, the left hand column includes subscriber identifiers. The right hand column includes corresponding cluster node IP addresses. In the illustrated example, it is assumed that each of the IP addresses corresponds to one of the cluster nodes illustrated in  FIG. 6 . It should also be noted that in addition to ranges of subscriber identifiers, cluster node location databases may be provisioned with individual subscriber numbers corresponding to subscribers that have been ported into a network, as illustrated by the last entry in Table 1.  
         [0044]     In an alternate implementation, cluster location database  603  may be divided into two databases or tables. The first database or table may include entries that are indexed by individual mobile subscriber identifiers. The second database or table may include entries that indexed by ranges of mobile subscriber identifiers. The individual mobile subscriber identifiers in the first database may be inside or outside of the ranges in the second database. In such an implementation, a lookup may first be performed in the portion or database that includes individual mobile subscriber identifiers. If the lookup results in a match, then the registration message may be forwarded to the appropriate IMS cluster node. If the lookup does not result in a match, a lookup may be performed in the range based database or table to locate a matching entry.  
         [0045]     As illustrated in  FIG. 6 , a number portability database  604  may be included in order to determine whether a subscriber has been ported in or out of a network and to provide appropriate LRN information for ported-out subscribers.  FIG. 7  illustrates a message routing information for a ported out subscriber. In  FIG. 7 , P-CSCF  308  queries DNS server  310  to locate CLF location node  600 . CLF location node  600  performs a lookup in number portability database  700  and determines that a subscriber has been ported out of the network. In response to determining that the subscriber has been ported out of the network, CLF location node  600  forwards the message to a ported-to network  702 .  
       Enhanced Network Security  
       [0046]     According to another aspect of the subject matter described herein, an IMS cluster node is adapted to provide enhanced security for elements of the cluster, such as an HSS element. The advantages of this enhanced IMS cluster security may be easily seen when compared with prior IMS network architectures. For example, in the case of an IMS network that includes a stand-alone HSS element, the HSS element must advertise it&#39;s IP network address and port information to other elements in the network (e.g., IP routers, etc.), so that other nodes in the network (e.g., I-CSCF, S-CSCF, application servers, etc.) will know how to reach the HSS. By advertising its reachability information to other nodes in the network, the HSS becomes more vulnerable to malicious attacks, such as denial of service attacks and hacking attacks.  
         [0047]     The IMS cluster architecture described above affords significant additional protection to those IMS elements/functions that are incorporated within the node. For example, an HSS element that is incorporated within an IMS cluster may be effectively “hidden” from other nodes in the IMS network. As such, the HSS element is not required to advertise its IP network address and port information to other elements in the network. Instead, reachability information associated with the IMS cluster HSS element need only be known or communicated to “trusted” I-CSCF or S-CSCF elements that are associated with the IMS cluster. As such, the IMS cluster HSS element is significantly less vulnerable to malicious attacks, including denial of service and hacking type attacks.  
         [0048]     In one embodiment, an I-CSCF element associated with an IMS cluster node may implement a network address translation (NAT) function on behalf of other elements in the IMS cluster, such as an HSS element. For example, using an NAT may be provided in front of HSS cluster node  200  or  400  or any other of the IMS cluster node examples described herein so that the addresses of internal cluster node elements are hidden from external elements, while still allowing the external elements to communicate with the internal cluster node elements. In such an architecture, the NAT may advertise a translated IP address for each internal IMS cluster node element to external nodes desiring to communicate with an internal cluster node element. When the NAT receives a packet for the internal cluster node element, the NAT may translate the destination IP address in the packet from the advertised address to the hidden internal address for the internal cluster node element.  
         [0049]     It will be understood that various details of the invention may be changed without departing from the scope of the invention. Furthermore, the foregoing description is for the purpose of illustration only, and not for the purpose of limitation.