公开(公告)号：US07852809B2

公开(公告)日：2010-12-14

申请号：US11672990

申请日：2007-02-09

申请人： Karsten Oberle ,  Stefanie Braun ,  Volker Bales

发明人： Karsten Oberle ,  Stefanie Braun ,  Volker Bales

IPC分类号： H04W4/00

CPC分类号： H04L65/1006 ,  H04L29/06027 ,  H04L65/1083 ,  H04W76/22 ,  H04W80/10 ,  Y10S370/902

摘要： The invention concerns a method of providing session mobility to an IP based real-time session in a telecommunications network whereby the telecommunications network uses the session initiation protocol for the setup and control of the session. The session comprises a media stream between a first terminal associated to a first network access point of the telecommunications network and a second terminal associated to a second network access point of the telecommunications network. A re-invite session initiation protocol signalling message related to session mobility of said session is intercepted at a session-related session border controller of the telecommunications network. Said session border controller initiates a corresponding session hand-over of said session. In said session hand-over, the media stream of said session is redirected to a new network access point of the first terminal and/or a new terminal.

摘要翻译： 本发明涉及一种向电信网络中的基于IP的实时会话提供会话移动性的方法，由此电信网络使用会话发起协议来建立和控制会话。 会话包括在与电信网络的第一网络接入点相关联的第一终端和与电信网络的第二网络接入点相关联的第二终端之间的媒体流。 在电信网络的会话相关会话边界控制器处拦截与所述会话的会话移动有关的重新邀请会话发起协议信令消息。 所述会话边界控制器启动所述会话的相应会话切换。 在所述会话切换中，所述会话的媒体流被重定向到第一终端和/或新终端的新的网络接入点。

公开(公告)号：US20070189220A1

公开(公告)日：2007-08-16

申请号：US11672990

申请日：2007-02-09

申请人： Karsten Oberle ,  Stefanie Braun ,  Volker Bales

发明人： Karsten Oberle ,  Stefanie Braun ,  Volker Bales

IPC分类号： H04Q7/00

CPC分类号： H04L65/1006 ,  H04L29/06027 ,  H04L65/1083 ,  H04W76/22 ,  H04W80/10 ,  Y10S370/902

摘要： The invention concerns a method of providing session mobility to an IP based real-time session in a telecommunications network whereby the telecommunications network uses the session initiation protocol for the setup and control of the session. The session comprises a media stream between a first terminal associated to a first network access point of the telecommunications network and a second terminal associated to a second network access point of the telecommunications network. A re-invite session initiation protocol signalling message related to session mobility of said session is intercepted at a session-related session border controller of the telecommunications network. Said session border controller initiates a corresponding session hand-over of said session. In said session hand-over, the media stream of said session is redirected to a new network access point of the first terminal and/or a new terminal.

摘要翻译： 本发明涉及一种向电信网络中的基于IP的实时会话提供会话移动性的方法，由此电信网络使用会话发起协议来建立和控制会话。 会话包括在与电信网络的第一网络接入点相关联的第一终端和与电信网络的第二网络接入点相关联的第二终端之间的媒体流。 在电信网络的会话相关会话边界控制器处拦截与所述会话的会话移动有关的重新邀请会话发起协议信令消息。 所述会话边界控制器启动所述会话的相应会话切换。 在所述会话切换中，所述会话的媒体流被重定向到第一终端和/或新终端的新的网络接入点。

公开(公告)号：US08646065B2

公开(公告)日：2014-02-04

申请号：US11233116

申请日：2005-09-23

申请人： Karsten Oberle ,  Peter Domschitz

发明人： Karsten Oberle ,  Peter Domschitz

IPC分类号： G06F9/00

CPC分类号： H04L63/029

摘要： The invention relates to a method for routing a bi-directional end-to-end connection between an end subscriber and the domain of a service provider by means of a signalling protocol via an interposed firewall with address transformation device, wherein by means of a security and tunnel device, located in the end-to-end connection between the end subscriber and the firewall with address transformation device in the domain of the end subscriber, and a session border controller, located in the end-to-end connection in the domain of the service provider, a tunnel is set up between the security and tunnel device and the session border controller and a bi-directional data exchange takes place via the tunnel between the end subscriber and the domain of the service provider in the area between the security and tunnel device and the session border controller by means of a tunnel protocol, and also a telecommunication network and a security and tunnel device for this.

摘要翻译： 本发明涉及一种用于通过信令协议在终端用户和服务提供商的域之间路由双向端到端连接的方法，该方法经由具有地址转换设备的插入式防火墙，其中借助于安全性 和隧道设备，位于最终用户和防火墙之间的终端到终端的连接中，与终端用户的域中的地址转换设备，以及位于域中的端到端连接中的会话边界控制器 在安全和隧道设备和会话边界控制器之间建立隧道，双向数据交换通过终端用户与服务提供商的域之间的隧道在安全性之间的区域中进行 隧道设备和会话边界控制器，还有一个电信网络和一个安全和隧道设备。

公开(公告)号：US20070195806A1

公开(公告)日：2007-08-23

申请号：US11675626

申请日：2007-02-15

申请人： Marco Tomsu ,  Peter Domschitz ,  Karsten Oberle ,  Marcus Kessler

发明人： Marco Tomsu ,  Peter Domschitz ,  Karsten Oberle ,  Marcus Kessler

IPC分类号： H04L12/56

CPC分类号： H04L67/10 ,  H04L65/1016 ,  H04L65/1026 ,  H04L65/1036 ,  H04L67/327

摘要： The invention concerns a method of managing real-time services in a packet-based telecommunications network (1) of a plurality of coequal nodes (10 to 14) and a telecommunications network (1) for executing this method. A rule base for each node (10 to 14) is defined in consideration of the capabilities of each node (10 to 14) and/or the capabilities of all other nodes (10 to 14). After receiving information about an event requiring action, one or more of said nodes (10 to 14) determine node-specific action in consideration of said rule base and node-specific aggregated data as reaction to said event. Media data and/or signaling data associated with said real-time services are routed based on the determined action.

摘要翻译： 本发明涉及一种管理多个等同节点（10至14）和用于执行该方法的电信网络（1）的基于分组的电信网络（1）中的实时业务的方法。 考虑到每个节点（10到14）的能力和/或所有其他节点（10到14）的能力来定义每个节点（10到14）的规则库。 在接收到关于需要动作的事件的信息之后，考虑到所述规则库和特定于节点的聚合数据，所述节点（10至14）中的一个或多个确定特定于节点的动作，作为对所述事件的反应。 基于所确定的动作路由与所述实时业务相关联的媒体数据和/或信令数据。

公开(公告)号：US20060020847A1

公开(公告)日：2006-01-26

申请号：US11168419

申请日：2005-06-29

申请人： Karsten Oberle ,  Marcus Kessler ,  Peter Domschitz ,  Marco Tomsu

发明人： Karsten Oberle ,  Marcus Kessler ,  Peter Domschitz ,  Marco Tomsu

IPC分类号： G06F11/00

CPC分类号： H04M3/42 ,  H04M7/12 ,  H04Q3/0054

摘要： The invention relates to a method for performing a service or application in a network environment with network elements, which network environment contains a telecommunication network that has at least two network nodes for performing services or applications, all these nodes being equipped with a common layer for service support, wherein, if a particular network node is not equipped such that it can perform a particular service or application, this network node checks with the help of the service support layer whether another network node can perform this service or application and if the other network node can perform this service or application, the first network node passes on the task of performing this service or application to the other network node, which then performs this service or application, as well as a telecommunication network and network nodes for this.

摘要翻译： 本发明涉及一种用于在具有网络元件的网络环境中执行服务或应用的方法，所述网络环境包含具有用于执行服务或应用的至少两个网络节点的电信网络，所有这些节点都配备有公共层 服务支持，其中，如果特定网络节点未配备以使得其可以执行特定服务或应用，则该网络节点在服务支持层的帮助下检查另一个网络节点是否可以执行该服务或应用，并且如果另一个 网络节点可以执行该服务或应用，第一个网络节点将执行该服务或应用的任务传递给另一个网络节点，然后该节点执行该服务或应用，以及电信网络和网络节点。

公开(公告)号：US20050273855A1

公开(公告)日：2005-12-08

申请号：US11111761

申请日：2005-04-22

申请人： Karsten Oberle ,  Marco Tomsu ,  Peter Domschitz ,  Jurgen Otterbach

发明人： Karsten Oberle ,  Marco Tomsu ,  Peter Domschitz ,  Jurgen Otterbach

IPC分类号： H04L9/00 ,  H04L12/24 ,  H04L29/06

CPC分类号： H04L63/0263 ,  H04L63/0209 ,  H04L63/1441

摘要： The invention refers to a method for preventing attacks on a network server within a call-based-services-environment, preferably a VoIP-environment. The environment comprises a network, the network server connected to the network, a number of user agents connected to the network and means for restricting access to the network server from the network. The call server comprises an attack-detection device for detecting and identifying attacks from the network on the network server. In order to allow fast and reliable protection of the network server against attacks it is suggested that characteristic parameters of the attacks identified are entered into a black-list, the content of the black-list is transmitted via a feedback-path to an attack-prevention-device for controlling the access restricting means, the attack-prevention-device inspects and analyzes traffic directed from the network to the network server and controls the access restricting means.

摘要翻译： 本发明涉及一种用于防止在基于呼叫的服务环境（优选为VoIP环境）内对网络服务器的攻击的方法。 环境包括网络，连接到网络的网络服务器，连接到网络的多个用户代理以及用于限制从网络访问网络服务器的装置。 呼叫服务器包括用于检测和识别来自网络服务器上的网络的攻击的攻击检测设备。 为了能够快速可靠地保护网络服务器免受攻击，建议将所识别攻击的特征参数输入黑名单，将黑名单的内容通过反馈路径发送给攻击者， 用于控制访问限制装置的预防装置，防攻击装置检查并分析从网络指向网络服务器的流量并控制访问限制装置。

公开(公告)号：US20060269058A1

公开(公告)日：2006-11-30

申请号：US11430892

申请日：2006-05-10

申请人： Marcus Kessler ,  Marco Tomsu ,  Peter Domschitz ,  Karsten Oberle

发明人： Marcus Kessler ,  Marco Tomsu ,  Peter Domschitz ,  Karsten Oberle

IPC分类号： H04N7/167 ,  H04L9/00

CPC分类号： H04L63/0442 ,  H04L63/0823 ,  H04L2463/101

摘要： The invention relates to a network node (R2, D2), a module therefor and a distribution method. The network node comprises: receiving means (RB) for receiving a data stream (CDS) from a content source, in particular a content server (CS), of the network (NET), encryption means (EM) for individually encrypting said data stream to a subscriber data stream (SDS1, SDS2, SDS3), the encryption being specific to a subscriber terminal (T1, T2, T3) being coupled or able to be coupled with the network, and sending means (SM) for sending the subscriber data stream (SDS1, SDS2, SDS3) to the terminal.

摘要翻译： 本发明涉及网络节点（R 2，D 2），其模块和分配方法。 网络节点包括：用于从网络（NET）的内容源特别是内容服务器（CS）接收数据流（CD）的接收装置（RB），用于单独加密所述数据流的加密装置 对于订户数据流（SDS 1，SDS 2，SDS 3），特定于用户终端（T 1，T 2，T 3）的加密被耦合或能够与网络耦合，以及发送装置 ）用于将用户数据流（SDS 1，SDS 2，SDS 3）发送到终端。

公开(公告)号：US07028093B2

公开(公告)日：2006-04-11

申请号：US09911519

申请日：2001-07-25

申请人： Peter Jaenecke ,  Gabriele Schwoerer ,  Gunther Jacob ,  Karsten Oberle ,  Jürgen Otterbach ,  Hardy Halbauer

发明人： Peter Jaenecke ,  Gabriele Schwoerer ,  Gunther Jacob ,  Karsten Oberle ,  Jürgen Otterbach ,  Hardy Halbauer

IPC分类号： G06F15/16

CPC分类号： H04B1/7087 ,  H04J13/004

摘要： It is the object of the invention to make available a method of transferring user data packets from a terminal to a mainframe of an S-CDMA point-to-multipoint system, in which the data transfer is optimized. The method includes the steps of a repeated transmission of reference data packets coded with pilot codes for the duration of the connections between terminals and a mainframe, wherein the reference data packets contain previously known information, and the transmission of user data packets coded with communication codes include the user information to be transferred. In a preferred embodiment of the invention the user data packets are coded synchronously in time to the reference data packets, superimposed on these, and then modulated. Each terminal is allocated a pilot code, and at least one communication code.

摘要翻译： 本发明的目的是提供一种将用户数据分组从终端转移到S-CDMA点对多点系统的主机的方法，其中数据传输被优化。 该方法包括以下步骤：在终端与大型机之间的连接期间重复传输用导频码编码的参考数据分组，其中参考数据分组包含先前已知的信息，以及用通信码编码的用户数据分组的传输 包括要传送的用户信息。 在本发明的优选实施例中，用户数据分组在时间上同步地编码到叠加在它们上的参考数据分组，然后被调制。 每个终端被分配导频代码和至少一个通信代码。

公开(公告)号：US09392048B2

公开(公告)日：2016-07-12

申请号：US13806217

申请日：2011-05-06

申请人： Markus Bauer ,  Marcus Kessler ,  Karsten Oberle ,  Jurgen Sienel

发明人： Markus Bauer ,  Marcus Kessler ,  Karsten Oberle ,  Jurgen Sienel

IPC分类号： H04L29/08 ,  G06F9/54

CPC分类号： H04L67/10 ,  G06F9/54

摘要： The invention concerns a method for transmitting data via a data link in a computer network, wherein a device at an endpoint of a section of said data link is selected (203) from devices of said computer network, a computer program adapted to process said data, is transferred (204) to said device and said data is processed (206) by said device by executing said computer program.

摘要翻译： 本发明涉及一种用于经由计算机网络中的数据链路发送数据的方法，其中，从所述计算机网络的设备选择（203）所述数据链路的一部分的端点处的设备，适于处理所述数据的计算机程序 被传送（204）到所述设备，并且所述数据由所述设备通过执行所述计算机程序来处理（206）。

公开(公告)号：US20080008195A1

公开(公告)日：2008-01-10

申请号：US11647339

申请日：2006-12-29

申请人： Karsten Oberle ,  Stefan Wahl

发明人： Karsten Oberle ,  Stefan Wahl

IPC分类号： H04L12/56

CPC分类号： H04W28/26 ,  H04L12/5692 ,  H04L67/14 ,  H04L67/322 ,  H04W36/22

摘要： A requested communication session on a user terminal of a subscriber in a communication network via one of a plurality of access networks. The proposed method comprises the steps of checking for available network resources on all active access networks of the plurality of access networks usable by the subscriber; freeing network resources in one or a plurality of the active access networks by transferring at least one already established communication session from a first access network of the plurality of access networks to a second access network of the plurality of access networks; allocating freed network resources of the first access network for the requested communication session; and establishing the requested communication session using the allocated resources. In this way, utilization of available network resources is optimized for a given subscriber while obviating the need for complex technical decisions as to setting up or terminating communication sessions by the user.

摘要翻译： 通过多个接入网络之一在通信网络中的用户的用户终端上请求的通信会话。 所提出的方法包括以下步骤：检查由用户可用的多个接入网络的所有活动接入网络上的可用网络资源; 通过将至少一个已建立的通信会话从所述多个接入网络中的第一接入网络传送到所述多个接入网络中的第二接入网络来释放一个或多个所述主动接入网络中的网络资源; 为所请求的通信会话分配第一接入网络的释放的网络资源; 以及使用所分配的资源建立所请求的通信会话。 以这种方式，对给定的用户优化了可用网络资源的利用，同时避免了对由用户建立或终止通信会话的复杂技术决策的需要。