`Chang et al.
`
`US005958016A
`[11] Patent Number:
`[45] Date of Patent:
`
`5,958,016
`Sep. 28, 1999
`
`[54] INTERNET-WEB LINK FOR ACCESS TO
`INTELLIGENT NETWORK SERVICE
`CONTROL
`
`[75] Inventors: Te-An Chang, Laytonsville; Joseph R.
`Rostock’ Davldsonvlue> both of Md‘
`,
`_
`[73] Ass1gnee: Bell Atlantic Network Services, Inc.,
`Arhngton, Va-
`
`.
`
`6/1996 Nilakantan et a1. .
`5,526,489
`7/1996 Aldfed et a1- -
`5,539,886
`5,566,235 10/1996 HetZ .
`5,572,581 11/1996 Sattar et a1. .
`gilreizlg’ilr' et a1‘ '
`5,623,601
`4/1997 Vu .................................... .. 395/187.01
`5,721,908
`2 1998
`395 610
`578027146 92998
`37/9/34
`5,826,029 10/1998 Gore et a1. ....................... .. 395/20057
`
`_
`[21] Appl' NO" 08/904’117
`[22] Filed;
`Jul. 13, 1997
`
`Primary Examiner—Zarni Maung
`Assistant Examiner—Saleh Najjar
`Attorney, Agent, or Firm—McDermott, Will & Emery
`
`[51] Int. Cl? .................................................... .. H04M 1/24
`
`[57]
`
`ABSTRACT
`
`[52] US. Cl. ........................ ..
`/
`’
`/
`’
`/
`_
`[58] Fleld 0f Search ....................... .. 395/20059, 200.55,
`395/200'54> 200'49> 20033> 20032; 709/229>
`225> 224> 219> 203> 202
`_
`References Clted
`US PATENT DOCUMENTS
`
`[56]
`
`’
`
`’
`
`ghtancgl ettal'l '
`'
`S ta a e a '
`gibsztnzi 1111 et al' """"""""" " 379/201
`2/1994 Kazprzyk~ a a1_ _
`5’287’103
`5/1994 Perlman et aL _
`5Z3O9Z437
`7/1994 Wolff et a1, _
`5,327,486
`5,377,186 12/1994 Wegner et a1. .
`5,392,357
`2/1995 Bulferetaln
`5,406,557
`4/1995 Baudoln -
`5’423’003
`6/1995 Berteau -
`lsvlitcomtlelll '
`5’471’459 11/1995 Giltere a"
`5’495’521
`2/1996 Rang'achar _
`5:499:290
`3/1996 Koster _
`5,517,562
`5/1996 McConnell .
`5,519,772
`5/1996 Akman et a1. .
`5,526,413
`6/1996 Cheston, III et a1. .
`
`A Web page type interface is provided, which enables
`subscriber access to control and reporting functionalities of
`a Communication network, Such as the advanced intelligent
`telephone network, via a public packet data network, typi
`cally the network now commonly known as the Internet. The
`web page based Internet access opens the personal control of
`services provided by the communication network to any
`subscriber who also uses the Internet, for example using the
`subscriber’s existing PC and browser software or their
`Web-TV terminal. A secure access platform provides the
`interface and communicates via a private data network with
`various systems used to manage the communication net
`work. The secure access platform includes a ?rewall coupled
`between the public 'data network and the private data net
`work. The ?rewall implements the web page interface and
`validates certain users of the public data network as sub
`scribers to services of the communication network. The
`secure access platform also includes a web services man
`agement system, which communicates with the ?rewall and
`with the communication network management systems via
`the private data network. The platform enables persons
`sur?ng the web to control their services and receive various
`reports relating to status and/or usage of their network
`services
`
`27 Claims, 5 Drawing Sheets
`
`529
`BROWSER
`
`PC
`
`OTHER
`APPL‘S w
`0s m
`TERM‘NAL
`
`INTERNET
`
`237
`swTlTscvHsl
`MGM
`s
`235
`1
`
`233
`
`SOACS
`
`ISCP m
`
`Z: 3A9
`243
`i
`244
`1
`SCE mm RING IIIH
`M
`\ \
`
`sMs
`
`21
`
`231»
`
`RAO
`
`
`
`(smi) 246
`
`'
`
`\‘H
`
`251-»
`
`FIREWALL
`
`TRUSTED
`253_>NTwKsYs.
`SECURE ACCESS
`(ms)
`PLATFORM Q
`‘
`255-]
`3
`
`l
`]
`
`COMPUTER
`
`WEB SERVICE
`MGMT. SYS. APPL'N
`
`08 E
`WSMS
`
`DATA ISCP- DISTR.
`
`S|TE1
`
`23
`
`T~241
`
`OSN
`21
`—
`
`ISCP
`SITE 2
`
`F241
`
`. kw
`
`SITE 3
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 1
`
`
`
`U.S. Patent
`
`Sep.28, 1999
`
`Sheet 1 0f5
`
`5,958,016
`
`FGE
`
`mmaumm
`
`mmm8<
`
`imezmu
`
`mu_..Eo
`
`#525
`
`no
`_nEO
`
`
`
`w._mzz<Iom_o_o>
`
`
`
`Ew._mzz<_.._om_o_O>
`
`cISco SYSTEMS, INC. Ex. 1105 Page 2
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 2
`
`
`
`
`
`
`U.S. Patent
`
`Sep.28, 1999
`
`Sheet 2 0f5
`
`5,958,016
`
`
`
`
`
` _3SN».mm2m9:<:NEa32:m$8<mmaomm
`
`-mow_.w>mv_2:z
`
`omhmsmp
`
`SN
`
`wo<owxozsm
`
`
`$3:52
`
`mm
`
`mm
`
`1322
`
`N52%;.
`
`j<2mE:
`
`4<z_s_mm:
`
`N.o:
`
`EmIvmoZmEomn_
`
`SN
`
`-
`
`clsco SYSTEMS, Inc. Ex. 1105 Page 3
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 3
`
`
`
`
`
`
`
`
`
`U.S. Patent
`
`Sep.28, 1999
`
`Sheet 3 of5
`
`5,958,016
`
`.37:
`
`I;
`
`.?
`_ n W
`
`_ _
`
`_
`
`// _ \ \ \ / ,, Q2
`
`$2 _. ......................................................................... $2 ----L
`
`.35 m / :3 $5-420 02
`
`J; n // / _ 550m \
`
`m 55cm ESE \ \
`
`E55”; _ 5S3 ESE ESE H E
`
`” own . FR
`
`.82. n 2 $531 25 U _ R \ _
`
`_ ii .\ an m N; \TIWQ 1147
`
`u / \ \
`5Q _ >25 _ ESE \ _ _
`
`
`202,52 0525 m \ 55cm ,,
`/' \ n / ." “6E5
`
` 5555 55cm 55% in v2” / ,, jéwmi I
`
`
`[MERE \ f8
`ll\m\_‘m1v \/ /,
`
`2m+ /
`
`m \‘ ............................................. l) m No? 0E5 _\ “5.15 9 1---
`
`um \ P \\/ x _ _
`$252525 \ 3m \ £0 553 zj U
`
`55oz + $8 .I. L
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 4
`
`
`
`U.S. Patent
`
`Sep.28, 1999
`
`Sheet 4 0f5
`
`5,958,016
`
`_______________.__.1'15:5:
`
`7
`
`
`
`V.2:29
`
`525::
`
`zoE§
`
`Expo
`
`maze
`
`clsco SYSTEMS, Inc. Ex. 1105 Page 5
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 5
`
`
`
`
`U.S. Patent
`
`Sep.28, 1999
`
`Sheet 5 0f5
`
`5,958,016
`
` FIG.5
`
`55
`
`
`
` COMPUTER
`SECURWY
`
`APPLlCATlON
`
`ROUTER
`
`
`
` HOSTSOFTWARE
`
`
`
`clsco SYSTEMS, Inc. Ex. 1105 Page 6
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 6
`
`
`
`1
`INTERNET-WEB LINK FOR ACCESS TO
`INTELLIGENT NETWORK SERVICE
`CONTROL
`
`TECHNICAL FIELD
`
`The present invention relates to a system and methodol
`ogy for providing telephone service customers with a stan
`dardiZed interface for access to service control and manage
`ment elements of a communication network, such as the
`telephone network, via a public packet switched data
`network, such as the Internet.
`
`Acronyms
`The written description uses a large number of acronyms
`to refer to various services, messages and system compo
`nents. Although generally known, use of several of these
`acronyms is not strictly standardized in the art. For purposes
`of this discussion, acronyms therefore will be de?ned as
`follows:
`
`15
`
`25
`
`Advanced Intelligent Network (AIN)
`Automatic Message Accounting (AMA)
`Autonomous System (AS)
`Call Processing Record (CPR)
`Central Of?ce (CO)
`Common Channel Interoffice Signaling (CCIS)
`Competing Local Exchange Carrier (CLEC)
`Customer Premises Equipment (CPE)
`Data Distributor (DD)
`Data Reporting System (DRS)
`File Transfer Protocol (FTP)
`Generic Data Interface (GDI)
`HyperText Mark-Up Language (HTML)
`HyperText Transfer Language Protocol (HTTP)
`Integrated Service Control Point (ISCP)
`Integrated Services Digital Network (ISDN)
`Intelligent Peripheral (IP)
`IntereXchange Carrier (IXC)
`Internet Service Provider (ISP)
`ISDN Users Part (ISDN-UP)
`Local Area Network (LAN)
`Local Exchange Carrier (LEC)
`Memory Administration Recent Change System (MARCH)
`Multipurpose Internet Mail Extension (MIME)
`Multi-Services Application Platform (MSAP)
`Of?ce Equipment (OE) number
`Operations Systems Network (OSN)
`Personal Computer (PC)
`Personal Identi?cation Number (PIN)
`Plain Old Telephone Service (POTS)
`Point In Call (PIC)
`Primary Rate Interface (PRI)
`Public Switched Telephone Network (PSTN)
`Regional Bell Operating Companies (RBOCs)
`Revenue Accounting Of?ce (RAO)
`Service Control Point (SCP)
`Service Creation Environment (SCE)
`Service Management System (SMS)
`Service Order Administration and Control System (SOACS)
`Service Switching Point (SSP)
`Signaling Point (SP)
`Signaling System 7 (SS7)
`Signaling Transfer Point (STP)
`Simpli?ed Message Desk Interface (SMDI)
`Station Message Detail Recording (SMDR)
`Transaction Capabilities Application Part (TCAP)
`
`5,958,016
`
`2
`Transmission Control Protocol/Internet Protocol (TCP/IP)
`TRunk (TR)
`Trusted Network System (TNS)
`Universal Resource Locator (URL)
`Web Service Management System (WSMS)
`BACKGROUND
`For some years, the telephone industry has been devel
`oping an enhanced telephone network, sometimes referred
`to as an Advanced Intelligent Network (AIN), for providing
`a wide array of new voice grade telephone service features.
`In an AIN type system, local and/or toll of?ces of the public
`telephone network detect one of a number of call processing
`events identi?ed as AIN “triggers”. An of?ce which detects
`a trigger suspends processing of a call, compiles a call data
`message and forwards that message via a common channel
`interof?ce signaling (CCIS) link to a database system, such
`as an Integrated Service Control Point (ISCP) which
`includes a Multi-Services Application Platform (MSAP)
`database. If needed, the ISCP can instruct the central office
`to obtain and forward additional information. Once suf?
`cient information about the call has reached the ISCP, the
`ISCP accesses its stored data tables in the MSAP database to
`translate the received message data into a call control
`message and returns the call control message to the of?ce of
`the network via CCIS link. The network of?ces then use the
`call control message to complete the particular call. For an
`ordinary telephone service call, there would be no event to
`trigger AIN processing; and the local and toll of?ce switches
`function normally and process such a call without referring
`to the central database for instructions. AnAIN type network
`for providing an Area Wide Centrex service, for example,
`was disclosed and described in detail in commonly assigned
`US. Pat. No. 5,247,571 to Kay et al.
`In an AIN network developed by the Regional Bell
`Operating Companies (RBOCs) and Bell Communications
`Research (Bellcore), a terminal and software system referred
`to as ‘SPACE’ functions as the service creation environment
`and/or service provisioning system for the AIN control
`functions in the central database system. For example, as
`disclosed in US. Pat. No. 5,241,588 Babson, III et al.,
`customiZed call processing information records are created
`and/or modi?ed in a graphical environment, by creating or
`modifying a customer’s service graph-on the display termi
`nal. Data corresponding to the service graph is then stored
`in a service control point (SCP) database. Other terminal and
`software systems could be used to create and provision the
`AIN services. For AIN services today, however, telephone
`company personnel utiliZe the SPACE system to create
`templates for the service logic for new services. When
`customers subscribe to the services, the templates are ?lled
`in with the subscribers’ data to create individual call pro
`cessing records (CPRs). The CPRs are stored in the database
`in the SCP or in an ISCP, for controlling actual call pro
`cessing.
`Many of the enhanced communication services offered by
`the AIN permit a subscriber to input control information, to
`manage services as desired. For example, in a simple
`forwarding or redirection service, the subscriber might
`change the ‘forward to’ number from time to time to route
`calls to different destinations. As another example, a sub
`scriber might want to block calls unless they are to or from
`numbers on a list, and the subscriber would want to change
`the list of numbers from time to time. Some subscribers need
`to change certain information quite frequently, even for
`relatively simple AIN services. It is too cumbersome to
`require the subscriber to call the local telephone company’s
`business of?ce and request each and every one of the routine
`changes.
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 7
`
`
`
`5,958,016
`
`3
`At present, automated subscriber interactions to modify
`the subscribers’ AIN services rely mainly on a voice
`response type interaction. The subscriber calls a special
`number, hears recorded announcements or synthesiZed voice
`prompts and inputs a PIN number and service related
`information. Typically, the subscriber inputs the various
`information by keying buttons on a Touch Tone telephone,
`but use of speech recognition technology has been proposed
`to enable a subscriber to vocally input the information.
`Consider for example, commonly assigned US. Pat. No.
`5,572,583 to David F. Wheeler, Jr. and Robert D. Farris. This
`Patent discloses an intelligent peripheral (IP) for providing
`enhanced call processing functions, such as announcement
`and digit collection, voice recognition, facsimile mail and
`voice mail, in an AIN type telephone netWork. The IP
`connects through telephone line groups to one or more
`Service SWitching Point (SSP) offices of the telephone
`netWork. The IP also communicates With an ISCP via a
`signaling netWork separate from the voice circuits and from
`the CCIS netWork that interconnects the ISCP to the SSP
`of?ces. One major use for the disclosed IP relates to provi
`sioning and/or modifying services. The IP provides prompts
`and receives dual-tone-multi-frequency tone signals or
`speech inputs from subscribers.
`Typically, a telephone company technician initially sets
`up a subscriber’s service using the Service Creation Envi
`ronment or SCE in the ISCP. As part of this procedure, the
`technician establishes one or more data tables for the sub
`scriber in the service control point (SCP) database 43.
`Subsequently, the subscriber controls the service by input
`ting data to populate the subscriber’s data table(s) through
`an interaction With the IP. The neWly input control data is
`transferred from the IP to the ISCP for storage and for
`subsequent control of the subscriber’s communication ser
`vices. The IP also may provide a data interface for PC based
`access,
`Such interactive voice response processing provides only
`limited input capabilities and is subject to input errors,
`because the subscriber accidently hits the Wrong button or
`incorrectly pronounces a spoken input. Many of the AIN
`services require subscriber inputs, for example combinations
`of blocked numbers, time of day and day of the Week, that
`are too complex for the average subscriber to input using the
`interactive voice response procedures.
`Several other patents have suggested data terminal or PC
`access, through a local area netWork or direct dial-up links
`to a host computer in the telephone netWork.
`For example, commonly assigned US. Pat. No. 5,436,957
`to Von K. McConnell relates to an AIN-based technique
`enabling a commercial telephone subscriber to selectively
`activate service through a group of lines assigned to the
`subscriber. To facilitate input of the data for controlling the
`selective service activation, McConnell suggested use of PC
`type data terminals. One PC connects to the service man
`agement system (SMS) in the ISCP via a dedicated data
`communication line. Another PC communicates With the
`SMS via a dial-up modem session through the telephone
`netWork. Either PC may store information relating to the
`subscriber’s products and services and preset tables or forms
`for entry of the necessary data to control that subscriber’s
`restricted access communication services.
`With the McConnell system, When the subscriber Wants to
`activate communication services in relation to one or a series
`of products or services (e.g., a delayed or canceled airline
`?ight), the representative accesses the necessary data relat
`ing to products or services and completes the data tables to
`
`10
`
`20
`
`25
`
`30
`
`35
`
`40
`
`45
`
`55
`
`60
`
`65
`
`4
`activate the communication services, for example identify
`ing the particular line(s) for Which service Will be active and
`the on and off times. When the representative has entered
`and con?rmed the data for activating the service, the PC
`doWnloads that data to the SMS Within the ISCP. The SMS
`updates the appropriate records in the ISCP, after Which the
`ISCP activates services from the subscriber lines in accord
`With the most recently entered data.
`Commonly assigned US. Pat. No. 5,526,413 issued Jun.
`11, 1996 to Frank C. Cheston, III, James E. Curry and
`Robert D. Farris suggests extending AIN into customer
`premises equipment (CPE). The CPE system includes a
`signaling transfer point (STP) coupled to the CCIS system of
`the public telephone netWork as Well as an ISCP database.
`The ISCP on the customer premises may be implemented in
`softWare in a personal computer. Although not disclosed in
`detail in the issued Cheston, III, et al. Patent, a related
`application (Ser. No. 08/508,428) adds the teaching of
`customer programming of the netWork ISCP from the CPE
`equipment. In accord With this aspect of the Cheston et al.
`invention, a PC or other computer on the customer premises
`Will run telephone service programming softWare. The sig
`naling communication link to the CCIS netWork of the
`exchange carriers permits the subscriber using the
`on-premises PC and softWare to load AIN service informa
`tion into the relevant CPE devices as Well as into the ISCPs
`and sWitches of the local exchange carrier netWork and the
`interexchange carrier (IXC) netWork.
`Although the PC or terminal based solutions offer some
`enhanced subscriber access to control AIN services, the
`solutions proposed to date have inherent limitations. Any of
`these prior art implementations using a PC or terminal to
`access the netWork require specialiZed terminals and/or
`softWare and provide only limited access. Also, in most
`cases, the local operating company must maintain the local
`area netWork or a bank of modems to provide the PC access
`service.
`A need therefore still exists for a technique Which Will
`enable any subscriber to personally access and control their
`AIN services from a general purpose computer Without
`specially developed hardWare or softWare interfaces.
`
`DISCLOSURE OF THE INVENTION
`
`The present invention addresses the above-stated needs by
`providing a Web page type interface, for accessing control of
`intelligent netWork type telephone services, via a public
`packet data netWork, such as the netWork noW commonly
`knoWn as the Internet. Typically, a person’s PC or other
`terminal runs common softWare, such as a ‘broWser’ to
`obtain various Web pages of information from the netWork.
`While vieWing Web pages using the broWser, the invention
`enables persons sur?ng the Web to access the telephone
`netWork, to control their telephone services and receive
`various reports relating to their telephone services. The
`inventive Web access also provide an architecture, Which
`maintains the necessary security of the telephone netWork
`and associated netWork management systems.
`Thus, one aspect of the invention relates to a communi
`cation netWork. The overall netWork includes a traffic net
`Work for providing selective communications to subscriber
`stations and an operations netWork. One example of such a
`communication netWork is a public sWitched telephone
`netWork. At least one netWork management system is
`coupled to the operations netWork, for managing selective
`communication services provided through nodes of the
`traffic netWork. The overall communication netWork also
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 8
`
`
`
`5,958,016
`
`5
`includes a secure access platform coupled to the operations
`network and for coupling to a public data netWork.
`The secure access platform validates predetermined users
`of the public data netWork as subscribers to services of the
`communication netWork. The platform implements a stan
`dard graphical user interface of the public data network,
`preferably an Internet type Web page interface, enabling
`communications With terminals on the public data netWork.
`The platform also communicates With the management
`system. The platform enables validated subscribers to
`revieW service data from the netWork management system
`and to input control data to the netWork management system.
`In response to the control data, the netWork management
`system modi?es operations of the traf?c netWork as selected
`by the validated subscribers.
`Examples of netWork management systems include pro
`visioning systems and usage and/or billing data processing
`systems. The provisioning systems establish or modify data
`?les or records, in various elements of the traf?c netWork,
`that control subscribers’ services. The data processing sys
`tems receive operational data from the elements of the traf?c
`netWork and process that data, for example to generate
`subscriber usage reports or bills.
`The control data input by the subscribers may control
`services facilitated through high level netWork control
`points. In an intelligent netWork implementation of a tele
`phone netWork, for example, the control data is used to
`establish or modify call processing records stored in a
`service control point. The control data also may be used to
`modify individual subscriber pro?les in central of?ce
`sWitching systems of the telephone netWork.
`The service related data presented to the users through the
`graphical user interface may relate to existing services
`provided by the communication netWork, e.g. stored in a
`provisioning system. For example, this data may relate to
`current status of intelligent netWork services to Which each
`customer subscribes. The service related data also may relate
`to usage of the communication netWork services and/or to
`the account or billing for services used, as supplied from a
`data processing system.
`Another aspect of the invention relates to a speci?c
`implementation of the secure access platform. The platform
`includes a ?reWall and a service management system. The
`?reWall is coupled to the public data netWork. The ?reWall
`comprises a proxy server, an application server and an
`access control. The application server provides the standard
`graphical user interface through the proxy server for users
`accessing the ?reWall via the public data netWork. The
`access control authenticates users of the packet data netWork
`as valid subscribers of communication netWork services.
`The service management system communicates With the
`application server and the netWork management system. The
`service management system receives subscriber inputs via
`the application server and processes at least some of the
`subscriber inputs to provide data to the netWork manage
`ment system. The service management system also sends at
`least some information, relating to services provided to
`subscribers by the communication netWork, from the net
`Work management system through the application server and
`the public data netWork to subscribers.
`The preferred embodiment also includes a further security
`system logically operating betWeen the ?reWall and the
`service management system. All messages going to and
`from the ?reWall via the operation netWork, including com
`munications betWeen the ?reWall and the service manage
`ment system, pass through this netWork security system. The
`
`10
`
`15
`
`25
`
`35
`
`45
`
`55
`
`6
`netWork security system passes message to and from the
`?reWall only if the messages are valid in accord With certain
`security restrictions.
`As noted, in the preferred embodiment, the traffic netWork
`is an intelligent telephone netWork. The nodes of the traf?c
`netWork, for example, include various central of?ce sWitch
`ing systems of the telephone netWork. The central of?ces are
`interconnected by trunks for carrying interof?ce traf?c and
`by a signaling netWork, Which carries call set-up related
`messages and other signaling communications. The intelli
`gent implementation of the telephone netWork also includes
`a service control point. The service control point stores data
`for controlling certain call processing operations of the
`central of?ce sWitching systems.
`The operations netWork provides communications
`betWeen one or more provisioning systems and the elements
`of the telephone netWork, such as the central of?ce sWitching
`systems and/or the service control point. The operations
`netWork also carries communications betWeen the telephone
`netWork elements and one or more data processing systems,
`Which generate usage reports and bills.
`Through the Web page access provided by the platform,
`telephone subscribers can revieW the status of their services
`and modify or upgrade their telephone services, including
`sWitch-based services and intelligent netWork services con
`trolled through the data stored in the service control point.
`Subscribers also may revieW reports of usage of their
`services or revieW account or billing statements.
`Additional objects, advantages and novel features of the
`invention Will be set forth in part in the description Which
`folloWs, and in part Will become apparent to those skilled in
`the art upon examination of the folloWing or may be learned
`by practice of the invention. The objects and advantages of
`the invention may be realiZed and attained by means of the
`instrumentalities and combinations particularly pointed out
`in the appended claims.
`
`BRIEF DESCRIPTION OF DRAWINGS
`The draWing ?gures depict the present invention by Way
`of example, not by Way of limitations. In the ?gures, like
`reference numerals refer to the same or similar elements.
`FIG. 1 is a high level functional block diagram of an
`intelligent telephone netWork, systems for managing ser
`vices provided by that telephone netWork and a system for
`providing secure Internet type access to subscribers to alloW
`them to manage their telephone services via the Internet, in
`accord With the invention.
`FIG. 2 is a someWhat more detailed block diagram useful
`in understanding the secure customer access, in accord With
`the invention.
`FIG. 3 is a block diagram of the public packet sWitched
`data netWork noW commonly referred to as the Internet.
`FIG. 4 is a block diagram of one embodiment of a
`terminal, in the example a personal computer, for accessing
`the management systems of the intelligent telephone net
`Work in accord With the invention.
`FIG. 5 is a detailed block diagram of the ?reWall and the
`trusted netWork system used in the system of FIG. 2.
`
`BEST MODE FOR CARRYING OUT THE
`INVENTION
`Recently, considerable public attention has focused on the
`packet data netWork knoWn as the Internet and the range of
`information and multimedia services available via the
`‘World Wide Web’ portion of that netWork. Typically, a
`
`65
`
`CISCO SYSTEMS, INC. Ex. 1105 Page 9
`
`
`
`5,958,016
`
`7
`person’s PC runs common software referred to as a
`‘browser’ to obtain various web pages of information from
`the network. Several vendors also now offer a ‘Web-TV’
`terminal device for coupling to a television set, to provide
`web browsing and other Internet services using a remote
`control and a television screen. While viewing pages using
`either type of terminal, the user can enter requests by
`clicking on teXt or icons or can send typed inputs to a server.
`The invention enables persons sur?ng the web using such
`common technology to access a communication network,
`preferably the AIN telephone network, to control their
`services and receive various reports relating to their services.
`The inventive Internet access opens the personal control
`of AIN telephone services to any subscriber who also uses
`the Internet, using the subscriber’s eXisting PC and software
`or their Web-TV terminal. However, Internet access raises
`serious security concerns. The inventive web access there
`fore entails an access architecture, which provides the web
`page type user interface via the Internet and maintains the
`necessary security of the telephone network and associated
`network management systems. The inventive access system
`also offers ef?cient service management, both for provision
`ing functions and for usage monitoring functions.
`FIG. 1 provides a high level illustration of an intelligent
`telephone network, its control and management systems as
`well as the customer access thereto provided by the inven
`tion. To understand the invention, it may be helpful ?rst to
`review the structure and operation of the telephone network.
`The overall communication network illustrated in FIG. 1
`includes a telephone type traf?c network as well as a private
`operations data network and management systems coupled
`thereto to provision and report on operations of the tele
`phone network. The communication network connects to a
`public packet switched data network, such as the Internet,
`and through that network to a variety of users terminal
`devices. A secure access platform interfaces the public
`packet switched data network to the private data network
`associated with the telephone system. The access through
`the secure platform allows users to operate their terminals to
`access the telephone network management systems via the
`Internet.
`In the eXample depicted in FIG. 1, the telephone network
`is an advanced intelligent network or ‘AIN’. As shown, the
`telephone network includes a switched traffic network and a
`common channel signaling network carrying the control
`signaling messages for the switched telephone traf?c net
`work. The telephone or traffic network, operated by one
`carrier or a combination of local carriers and intereXchange
`carriers, includes a number of nodes, typically end of?ce and
`tandem of?ce type central of?ce (CO) switching systems 11
`interconnected by trunk circuits TR.
`FIG. 1 shows a number of subscriber stations, depicted as
`telephones 1, connected to a series of central office switches
`11. In the preferred implementation, the connections to the
`central of?ce switches 11 utiliZe telephone lines (e.g. POTS
`or ISDN), and the switches are telephone type switches for
`providing landline communication. However, it should be
`recogniZed that other communication links and other types
`of switches could be used. For eXample, some or all of the
`connections between the stations 1 and the central of?ces
`may include digital or analog radio inks, and the central
`of?ces may include mobile telephone switching of?ces.
`Trunk circuits TR carry communication traf?c between the
`central of?ce switches 11.
`Each end office type central office switch 115 provides
`switched telephone connections to and from local commu
`
`15
`
`25
`
`35
`
`45
`
`55
`
`65
`
`8
`nication lines or other subscriber links coupled to end users
`stations or telephone sets 1. The typical telephone network
`also includes one or more tandem switching of?ces such as
`of?ces 11T, providing trunk connections between end of?ces
`and/or between other tandem of?ces. Other trunks TR might
`directly connect end of?ces 115. Some of?ces may serve as
`both end of?ces and tandem offices for providing different
`call connections. As such, the traffic network consists of
`local communication links and a series of switching office
`type nodes interconnected by voice grade trunks TR.
`Although shown as telephones in FIG. 1, the terminal
`devices or stations 1 can comprise any communication
`device compatible with the local communication link.
`Where the link is a standard voice grade telephone line, for
`eXample, the terminals could include facsimile devices,
`modems etc. As discussed more later, many subscribers will
`have terminals with access to a public packet switched data
`network, such as the Internet, and many of those terminals
`will utiliZe modem connections through the lines and
`switches 11 of the telephone traffic network to access the
`public data network.
`The lines and trunks through the central of?ces 11 carry
`the communication traf?c of the telephone network, includ
`ing voice traf?c and some Internet access traffic. The pre
`ferred telephone network, however, also includes a common
`channel interof?ce signaling (CCIS) network carrying a
`variety of signaling messages, principally relating to control
`of processing of various calls through the traffic portion of
`the network. The CCIS network includes packet data links
`(shown as dotted lines) connected to appropriately equipped
`central of?ce switching systems such as of?ces 11 and a
`plurality of packet switches, termed Signaling Transfer
`Points (STPs) 15. To provide redundancy and thus a high
`degree of reliability, the STPs 15 typically are implemented
`as mated pairs of STPs. The STPs of each pair are inter
`connected with each other and with other pairs of STPs on
`the CCIS network. The CCIS network of the telephone
`system operates in accord with an accepted signaling pro
`tocol standard, preferably Signaling System 7 (SS7).
`In the preferred embodiment shown in FIG. 1, each
`central of?ce 11 has at least minimal SS7 signaling
`capability, which is conventionally referred to as a signaling
`point (SP) in reference to the SS7 network. As such, the
`of?ces can eXchange messages relating to call set-up and
`tear-down, typically in ISDN users part format (ISDN-UP)
`of the SS7 protocol.
`At least some, and preferably all, of the central office
`switches 11 are programmed to recogniZe identi?ed events
`or points in call (PICs) as advanced intelligent ne