The present invention relates to methods and apparatus for dynamically detecting and/or mitigating threats in communications systems. Exemplary methods and apparatus of the present invention allow for a combination of automated and operator controlled responses to threats. While an operator is provided an opportunity to provide input on how to respond to a threat, after one or more threats of a given type are identified, the system will automatically take corrective action without waiting for operator input and/or in the absence of operator input following notification of a threat.

The present invention relates to methods and apparatus for dynamically detecting and/or mitigating threats in communications systems. Exemplary methods and apparatus of the present invention allow for a combination of automated and operator controlled responses to threats. While an operator is provided an opportunity to provide input on how to respond to a threat, after one or more threats of a given type are identified, the system will automatically take corrective action without waiting for operator input and/or in the absence of operator input following notification of a threat.

Allocating a physical radio resource for a non-guaranteed bit rate (non-GBR) bearer in a distributed communications system (DCS) is disclosed. More specifically, the method enables a radio circuit in a network node to divide the physical radio resource among a number of non-GBR quality-of-service (QoS) class identifiers (QCIs) based on a number of predetermined scheduling ratios, respectively. The radio circuit can be configured to dynamically rebalance physical radio resource allocation among the non-GBR QCIs such that the network node can maintain the predetermined scheduling ratios or respond to a reconfiguration of the predetermined scheduling ratios among the non-GBR QCIs. As a result, a network operator(s) can dynamically adjust physical radio resource allocation among the non-GBR QCIs based on, for example, subscribers' network usage and plan limits, thus making it possible for the network operator(s) to customize QoS configuration to enable differentiated non-GBR services.

Allocating a physical radio resource for a non-guaranteed bit rate (non-GBR) bearer in a distributed communications system (DCS) is disclosed. More specifically, the method enables a radio circuit in a network node to divide the physical radio resource among a number of non-GBR quality-of-service (QoS) class identifiers (QCIs) based on a number of predetermined scheduling ratios, respectively. The radio circuit can be configured to dynamically rebalance physical radio resource allocation among the non-GBR QCIs such that the network node can maintain the predetermined scheduling ratios or respond to a reconfiguration of the predetermined scheduling ratios among the non-GBR QCIs. As a result, a network operator(s) can dynamically adjust physical radio resource allocation among the non-GBR QCIs based on, for example, subscribers' network usage and plan limits, thus making it possible for the network operator(s) to customize QoS configuration to enable differentiated non-GBR services.

Techniques are described for extending a cellular quality of service bearer through an enterprise fabric network. In one example, a method obtaining, by a first switch of a network, a packet to be delivered to a client connected to the network via a cellular access point; identifying quality of service (QoS) bearer information associated with the packet, wherein the QoS bearer information is associated with a radio access bearer for the client and the QoS bearer information comprises a bearer indicator and a QoS class identifier; providing a fabric tunnel encapsulation for the packet, wherein the bearer indicator and the QoS class identifier are included within the fabric tunnel encapsulation of the packet; and forwarding the packet within the fabric tunnel encapsulation toward a second switch of the network via a fabric tunnel, wherein the cellular access point is connected to the network via the second switch.

Techniques are described for extending a cellular quality of service bearer through an enterprise fabric network. In one example, a method obtaining, by a first switch of a network, a packet to be delivered to a client connected to the network via a cellular access point; identifying quality of service (QoS) bearer information associated with the packet, wherein the QoS bearer information is associated with a radio access bearer for the client and the QoS bearer information comprises a bearer indicator and a QoS class identifier; providing a fabric tunnel encapsulation for the packet, wherein the bearer indicator and the QoS class identifier are included within the fabric tunnel encapsulation of the packet; and forwarding the packet within the fabric tunnel encapsulation toward a second switch of the network via a fabric tunnel, wherein the cellular access point is connected to the network via the second switch.

The present invention has an object to provide an uplink band allocation apparatus and an uplink band allocation method that are capable of setting an uplink band of a PON in accordance with an application.

The uplink band allocation apparatus and method according to the present invention collect not only the amount of the data accumulated in an ONU but also the information of the application (application information) used on a terminal apparatus. Then, the uplink band allocation apparatus and method according to the present invention reflect, on a DBA conducted by the OLT, information of a band and a delay (band delay information) that have been calculated by an application information acquisition server from the application information and that are demanded by the application.

A system and method for managing network traffic in a distributed environment. the system including: a plurality of logic modules configured to determine policy data related to bandwidth management and at least one split criteria for a basis for shaping network traffic; a control processor associated with each one of the plurality of logic modules, each control processor configured to determine data associated with each of a plurality of traffic flows at the associated logic module and to coordinate traffic actions over the plurality of logic modules; a packet processor associated with each control processor and configured to determine a traffic action based on each traffic flow and received policy data; and at least two shaper objects configured to receive a split of the traffic flows and enforce the determined traffic action on their respective traffic flow.

The present invention provides a method for packet processing according to a lookup table, comprising: receiving a packet, wherein the packet includes a packet header, and the packet header consists of control information; providing a lookup table with M entries, wherein each entry includes N conditions and a result/action indicator, and the M entries are sorted in a priority order; matching the information with the N conditions; and applying the result/action indicator in the matched entry with the highest priority on the packet.

The present invention provides a method for packet processing according to a lookup table, comprising: receiving a packet, wherein the packet includes a packet header, and the packet header consists of control information; providing a lookup table with M entries, wherein each entry includes N conditions and a result/action indicator, and the M entries are sorted in a priority order; matching the information with the N conditions; and applying the result/action indicator in the matched entry with the highest priority on the packet.