Fixed mobile convergence

Mobile operators are turning to multiple fixed-mobile convergence (FMC) approaches to increase revenue opportunities and customer loyalty. One approach to FMC involves the 3GPP Interworking-Wireless LAN (I-WLAN) architecture to improve radio coverage and reduce backhaul costs. This architecture uses IPsec tunnels to deliver SIP-based services and packet data services over untrusted WiFi access networks with backhaul over the Internet or a managed network. Optionally, these services can be delivered via a femtocell to existing GSM/GERAN endpoints with the femtocell providing GSM-SIP signaling interworking.

Using I-WLAN, GSM mobile operators and MVNOs can further facilitate fixed-mobile substitution by delivering voice and packet data services into areas with poor radio coverage using two different types of access points:

• WiFi access points supporting dual-mode SIP/WiFi and GSM/GERAN (GSM EDGE Radio Access Network) endpoints
• SIP-based services—voice, video and interactive communications
• Packet data services
• Femtocell access points supporting existing GSM/GERAN endpoints
• Circuit-switched voice services
• Packet data services

Acme Packet’s I-WLAN access solution features our session border controller (SBC) and multiservice security gateway (MSG) deployed at the access border of the SIP or IMS service network. They can be deployed as two separate products or as an integrated product on a single hardware platform.

In IMS networks, our SBC performs the role of the P-CSCF. Acme Packet’s SBC provides critical control functions to deliver high-quality interactive communications—voice, video and multimedia sessions—and streaming video across the untrusted Internet and WiFi access networks. Our SBC control functions satisfy requirements in five major areas—security, service reach maximization, service level agreement (SLA) assurance, cost and revenue management, and regulatory compliance.

Our Net-Net Security Gateway (SG) functions as an 3GPP I-WLAN Tunnel Terminating Gateway (TTG) and is responsible for controlling IPsec tunnels used to transport SIP interactive communications and packet data services to the endpoint or femtocell. The Net-Net SG authenticates endpoints, secures the voice and data traffic within IPsec tunnels to ensure privacy and protect against theft and defends against TCP/IP and IPsec DoS/DDoS attacks on the mobile service infrastructure to deliver non-stop service.

MSG features and benefits

Our MSG controls IPsec tunnels transporting SIP interactive communications and packet data services to the endpoint or femtocell access point.

Security

SIP interactive communications and packet data services must be tunneled through an untrusted and unmanaged Internet access network to a core network for dual-mode handsets or femtocell applications. Acme Packet’s MSG provides that secure bridge between the customer premises and the service provider’s network.

Service reach maximization

Subscriber dual-mode handsets or femtocells are generally located behind untrusted access networks not controlled by the mobile operator, presenting challenges in serving that endpoint. Acme Packet Net-Net SG provides NAT traversal and multiservice virtualization to extend subscriber reach and types of services supported.

SLA assurance

Voice quality and service availability can be compromised by oversubscribed network resources. The Acme Packet Net-Net SG uses upstream and downstream policers to ensure availability of femtocell access points, dual-mode handsets and the core network.

SBC features and benefits

Acme Packet’s SBC is responsible for controlling SIP sessions between the service core and the endpoint or femtocell.

Security

As IP interactive communication services are delivered over untrusted Internet and WiFi access networks, critical resources can be compromised, elevating the risks of denial-of-service (DoS), eavesdropping and other malicious attacks. To protect service elements such as IMS CSCF servers and application servers in the network, our unique Net-SAFE security architecture helps service providers build trusted and secure access borders. Acme Packet’s security features also protect service provider and customer privacy and ensure network availability.

Service reach maximization

Service delivery may be impossible at IP access network borders due to firewalls/NATs, use of different signaling, encryption or transport protocols or overlapping IP address spaces and dial plans. Our SBCs provide numerous address and protocol translation capabilities to maximize the types of endpoints, service infrastructure and network topologies supported, allowing service providers to increase their addressable customer base.

SLA assurance

Oversubscribed networks and service infrastructure can negatively impact customers. Our SBCs provide session admission control, load balancing and QoS marking and reporting features that deliver assured service quality and network availability during abnormal busy periods or network events.

Cost and revenue management

In order to optimize ARPU and profitability of service delivered to dual-mode handsets and femtocells, service providers must optimize network utilization, capture accurate billing data, while minimizing fraud and service theft. Acme Packet SBCs deliver call routing, bandwidth policing and accounting features to aid in revenue collection and ensure the most cost effective usage of a service provider’s network.

Regulatory compliance

Public safety and law enforcement regulations for traditional phone networks are being applied to VoIP services. Acme Packet SBCs deliver call routing and replication features and interfaces to aid mobile operators in complying with government regulations for IP interactive communications.