Oracle Communications Services Gatekeeper Technical Presentation

Copyright © 2013, Oracle and/or its affiliates. All rights reserved.1


Oracle Communications Services Gatekeeper

Technical Presentation

Presenter(s)


Presentation Overview

Market Trends Service Provider Challenges Service Exposure Opportunities Oracle Communications Services Gatekeeper Overview Focused Solutions Technical Details Development and Extensions


Cross Industry Collaboration and Innovation

… more than 50 carriers have now implemented integrated carrier billing on the BlackBerry App World™

storefront for their customers. - “BlackBerry App World Integrated Carrier Billing Now Implemented with More Than 50 Carriers”, Blackberry website, November 26, 2012

the Wall Street Journal reported that ESPN has talked to at least one major carrier about paying to enable customers to access ESPN Mobile without exceeding their data limits - “Analyst Angle: OTT as a revenue source for carriers”, Jeffery Wang, IBB Consulting, RCR Wireless, May 15, 2013

Europe’s telecoms and media companies must embrace innovation in key areas such as mobile, cloud computing and big data, as well as forge strong strategic relationships with other industry players…

IDATE’s Didier Pouillot said: “Telcos do have certain leverage to deal with this change, starting with creating more value from network access now that OTT services are increasing user consumption.“NGN technologies allow telcos to increase speeds and to introduce noticeable quality improvements, both of which can differentiate their offerings. But it is clear 2013 is a pivotal year and telcos must embrace innovation. A simple Darwinian case of evolve or die!”

“2013 a ‘Darwinian tipping point’ for Europe’s telcos, Jamie Beach, May 31, 2013, Telecoms.com”


Industry Service Exposure

• Make money– 60% of all listings on eBay.com added via their APIs

• Save money– SmugMug saves > $500K/year with Amazon S3 Storage

• Build brand– Google Maps 300% growth vs 20% MapQuest

• Go anywhere– Netflix now available on over 250 devices


Service Exposure through APIsEnabling Innovation and Collaboration

Source: http://blog.programmableweb.com/2013/04/30/9000-apis-mobile-gets-serious/

June, 20139,300

Dec, 2005105

Nov, 20081000

Mar, 20113000

Feb, 20125000

Aug, 20127000“Henry Ford said customers would

have asked him not for a car, but a faster horse. Similarly, users don’t ask for APIs. They want technology that works and integrates well with other technologies.”

- Adam DuVander, Programmable Web, April 30th, 2013

“Telephony” 279“Messaging” 272

Other CSP enable API’s in other categories


Telecom Network API’s

APIs allow carriers to disseminate a wealth of internal information and resources to third parties

Becoming the CSP’s second revenue stream

Source: MindCommerce: Public advertisement for “Telecom Network API Marketplace: Strategy, Ecosystem, Players and Forecasts 2013-2018”, June 2013

Today: 24% of Web and 15% of

mobile apps use APIs By 2018:

Apps using APIs are expected to exceed 68%





Inefficiently Exposing Network and Service Assets

Slow time to market with new network & IT services

Limited control of service utilization by partners

High operational costs due to manual partner managementService

Platform 1

ServicePlatform 2

ServicePlatform N

ServicePlatform 3

Application1

Application2

ApplicationN

Partner 1

Partner 2

Telco Developer

Application3


Service Provider Challenges

Slow deployment of new services

Over-the-top competition

Underutilized competitive assets

12-18 monthsConcept to Launch





Service Exposure Market Segments

Number of Services/Developers

Rev

enue

Internal Developers

Opening to 3rd parties

Partners(MVNOs, Aggregators, etc)

Enterprises

3rd Party Developers

Service Exposure

CoreServices


Network API Revenue Opportunity$115B opportunity by 2015

Source: Alan Quayle Business and Service Development, April 2012

$42.0

$26.0

$14.0

$7.5

$4.5

$4.0

$3.0$2.6

$2.0$1.5 $1.0 $1.0

$5.9 Click to call, meet me at my number, alerting, etc

Payment across goods & services

USSD in developing markets

Advertising with user profile under customer control

Presence & location enabled call centers

Number provisioning

Messaging enabled customer service & business processes

Directory services

IVR / voice store / other voice related VAS

Machine to machine

Unified communications & collaboration

Content delivery

Other





Built-In API Management

Service Exposure– Simplified access to telecom service infrastructure

implemented on standard WebLogic Server platfrom Policy Control

– Enforce service level agreements against traffic flow with the network in a controlled and determined manner

Security– Ensure trusted access of applications to network

resources using well defined authorization and authentication models

Partner Management – Automatically on board service and content partners

providing intranet and extranet portals to service delivery Service Creation

– Easily develop new applications and extend the Oracle Communications Services Gatekeeper platform with new value added service features

Service access to secure and protected REST & SOAP based services


Developers B2BPartners Enterprises 3rd Party

Developers

RESTful/SOAP Interfaces

Network Interfaces

Operator Services 3rd Party Services

Access Control & Policy Management


Network Protection, Throttling and Policy Control Core functions and principles


OracleRAC

Applications

Network

Oracle SDP

System Mgmt

Extensions

Integration

SCE

SDK

OSS

BSS

PCRFSMSC

GMLC Custom

Service Exposure

Policy Control and Budgeting

Network Abstraction

…


Service Facades

REST Façade & SOAP Façade – Simplified, Secure, Controlled Service exposure of Network

Capabilities and services– Out of the box support for OneAPI (REST) and Parlay X

(SOAP) SOA Façade

– Simple integration with business process with Oracle Service Bus

– Telecom enable Business Services & promote Loose-coupling (extensibility/flexibility)

Native Façade– Allows Operators to Enforce SLA and Policy Control over

Native Clients providing High Availability, Scalability, Security etc.

– Allows Operator to attract MVNOs

Simple and secure service access

LOCATION

MESSAGING PRESENCE

SIPCHARGINGSTATUS

@

QOS PROFILE

Network Services

SOAPFacade

RESTFacade

NativeFacade

Service Facades

SOAFacade


Network Integration and interoperability

Oracle Communications Services Gatekeeper is integration tested with Oracle’s products in every release including online charging, network policy, mediation, application server, etc. Enabling Oracle to offer complete solutions for many business problems.

Oracle Communications Services Gatekeeper, being built on standards and engineered for integration with existing network, has succefully been deployed and proven to interoperate with over 50 different network elements from vendors including Ericsson, Nokia, ALU, ZTE, Huawei etc.

Unparalleled support for network elements out of the box

LocationServerSMSC MMSC WAP

GW HLRMSC X-CSCF ParlayGW

Billing

SMPP MM7 MLP LIFINAP

SIP MAPParlay

Diameter

SMSC

UCP

Applications

Custom

Protocol

DirServer

LDAP

PAP

PCRFDiameter


Communication Services


Network Plug-ins


Oracle Communications Services GatekeeperOverview• Open, standards-based network gateway

and policy enforcement platform enabling CSPs to expose network services to deliver innovative and revenue-generating applications and services

Key Features• Multiple service facades - SOAP, SOA,

REST, Native – including OneAPI support• 24 pre-built communication services• Multi-channel authorization support with

OAuth 2.0• Comprehensive policy, SLA and network

resource management• Easily customized and extended including

REST to REST and SOAP to SOAP support • Geographically distributed SLA enforcement• Highly available and scalable• Customizable, lightweight SDK

Oracle Communications Services GatekeeperPa

rtne

r Rel

ation

ship

M

anag

emen

t

Resource Manager

Authentication & Access Control

Platf

orm

Dev

elop

men

t St

udio

& S

DK

Service FacadesSOAP Web

ServicesRESTful Web

ServicesSOA Web Services

Native Interfaces

Container ServicesPolicy Storage

Providers

Budget GeoRedundancy

Account Alarms &Statistics

EDR/CDR Configuration Store

OA&M Billing

Communication ServicesThird Party

Call

Terminal Status

SMS

MMS

SubscriberProfile

PaymentTerminalLocation

CallNotification

WAP Audio Call

InterceptorsDeviceCapabilities Presence

USSD ACRA

SMPP MM7 PAP SIP MAP LDAP DiameterMLPUCP ParlayINAPSMTP SOAP

OAUTHA

Bulk

Email

REST

SOAP

REST

QoS

SubscrMgmnt

Reports

AddressList

Management


High Availability, Scalability, & Reliability

High availability through load balancing & session synchronization

Unlimited horizontal scalability

Highly reliable with geographic redundancy

Fastest, most reliable solution available

Access 1

Network 1 Network 2 Network n+1

Access n+1

LoadBalancer

Domain1

Sync

Applications

Access 1

Network 1 Network 2 Network n+1

Access n+1

LoadBalancer

Domain2

Applications


Geographic Redundancy Oracle Communications Services Gatekeeper supports geographically-

redundant deployment– Each geo-graphically dispersed site will host an OCSG domain

Domains are deployed and managed independently Efficient Synchronization of Configuration, Runtime Information between

geo-redundant domains Failover monitoring

– Health monitoring mechanisms between the two domains– Alarms are fired when health problems are detected

Sync

AppApp

IP Backbone

Access 1

NT Node 1 NT Node 2 NT Node n

Access n

LoadBalancer

Domain1E.g. San Francisco

Access 1

NT Node 1 NT Node 2 NT Node n

Access n

LoadBalancer

Domain2E.g. Denver

AppApp


Typical Deployment• Typically divided in two tiers. An Access Tier where the service

facades resides and a Network Tier where the Service Enables, Policy Control, Container services etc. reside.

• Firewall usually deployed between Access & Network Tiers for secure access

• Secure channel protects traffic between Access Tier & Network Tier Nodes

• The Access tier is optimized for use in the OCSG and hence can provide significant performance improvements

AT modules exposing Web Service interfaces are custom built for specific WSDL & resolve XML to native protocol mapping at compile time thereby avoiding expensive runtime XSLT/XPATH transformations

• Oracle Communications Services Gatekeeper access tier nodes do not perform any dynamic data transformation or XML processing (XPath etc) and thereby eliminate message processing overheads

DMZ

Core Network

Access 1Access 2

Network 1

Network 2 Network 3

Network n

Access n


POLICY CONTROLCore Features


Policy Enforcement FeaturesSLA based policy enforcement

Only allow access to a limited set of traffic paths e.g. only allow access to SMS and Terminal Location.

Restrict traffic rate based on budget Restrict parameter values e.g. SMS sender name

must be “Oracle”. Filter returned information e.g. remove “phone

number” in returning data High priority request (guarantee) determines what

request are rejected at overload Black list methods e.g. deny sending SMS ring tone Override network protocol parameters i.e. tunnel

parameter to affect plug-in Time of day contract i.e. date, day of week and time

of day

Service Provider group 1

Service Provider 1

Application group 1Appl. Account 1

Appl. Account 1

Appl. Instance 1

Service Provider 2Application group 2Appl. Account 2

Appl. Instance 2

Appl. Account 2

Appl. Instance 3

Appl. Instance 4


OCSG Policy Roles

Network-centricResource protectionIntelligent routing and utilization

Application-centricBillingQoS

Subscriber-centricPrivacyBillingPersonalization

SLA

SLA

SLA

Application

Subscriber

Network

Subscriber



Composed Service Level Agreement

• Features• Allows defining Service Level Agreement (SLA) on virtually

defined communication services• For example, define messaging SLA by combining Px

SMS, Native SMPP, Native UCP communication services

• Can be defined in Application and Service Provider SLAs• Applicable to custom communication services as wells

• Functionality• Any traffic request belong to a composed service results in

budget increase of individual and composed service rate/quote

• Enforced in Geo-redundant fashion

SLA Structure


Service Interceptors A Service Interceptor is an implementation of a specific

interface, that may be triggered during normal traffic flow through the Oracle Communications Services Gatekeeper

Enables the modularization of container work flow and provide customization points for extensions

Provide the ability to write customizations for network integration through POJOs (Plain Old Java Objects)

– Applicable to both application & network initiated traffic

Centralized policy enforcement and management The Interceptor makes a decision whether to permit or deny a

request through the Oracle Communications Services Gatekeeper based on evaluation of a service function

EJB

Facade

Communication Service

ProfileInterceptor

FilterPlugin

RoundRobinList

EnforceNodeBudget

EnforceBlackList

Plugin Manager

Plugin


MONITORINGCore Features


EDR, CDR & Alarms Event Data Records (EDR) are triggered when

events happen within Oracle Communications Services Gatekeeper

Type of EDRs– Raw EDRs

Event Data Records that record activities in the OCSG

– CDRs Charging Data Records used for charging

based on either time used or access of certain services

– Alarms Records reporting a warning or an issue

EDRService

JMS listener


JMS listener

JMS Topic

* ID assigned after filtering

7654*

7654*7654*

(no id)


SNMP Traps

.1.3.6.1.4.1.140.627.0.123

alarmidentifier

alarm descriptors MIB filegenerates

IANA-registered Private Enterprises

BEA

Oracle CommunicationsServices Gatekeeper

SNMP MIB is generated based on the alarm descriptors

MIB file located in $DOMAIN_HOME/snmp/

SNMP service

SNMP listener


SNMP listener

EDR Service

SNMP trap

xml filters


PRM PORTAL AND REPORTSTurn key solution for On boarding & Partner Management


Partner Relationship Management

On-boards & manages large number of partners & applications rapidly

Automates partner & app registration, service activation & provisioning

All interfaces also available through web service interfaces– Integrates easily with existing partner portals

Provides self service access for account management & service usage statistics

Enables fine grain control of app & partner access & utilization through pre-built SLAs

Protects subscriber privacy through defined user SLA Delivers highly flexible & extensible policy enforcement through

custom SLAs

Comprehensive 3rd party management capabilities

Registration

Partner Management

Account Management

Reporting

Global / Partner Node

App Group 1

App Group 2

App App

App

SP Group 1App Group 3

App Group 4

App App

App

SP Group 2


Portal and Reports - Business ValueComplete turnkey solution

• GUI based partner on-boarding• Application lifecycle management

Reports providing insights into API utilization

• Visibility into API usage and activity• Ways to decrease network congestion and increase customer retention

Move beyond competition

• Built on WebCenter and OBI making it extendable and customizable

Central point for on-boarding partners

• Automates partner & app registration, service activation & provisioning.• Enables fine grain control of app, partner access & utilization through pre-built SLAs


PRM Portal PRM portal includes management of

Registration SLA API Application Group Short code Concept


Partner (app developer) creates an application concept (an application for an application)

• Api’s and methods are selected• Throughput restrictions can be set

Life cycle management for applications and service providers


PRM manager reviews an application

1. View details2. Set/create SLA’s3. Approve application

Life cycle management for applications and service providers (cont.)


Partner Manager Portal

Inside the Portal

Partner Partner Group Application SLA

API Short Code Analytics Customization

Partner Portal

Register My Account

My Application My API

ADF EngineADF Faces

WebCenterServices

WebCenterFramework

WebLogicServer

• Total 48 UI pages in Portal• UI Design: ~80 pages• Partner Portal: 14 pages• Partner Manager Portal: 34 pages

• 70 web service interfaces• Based on Webcenter 11gR1

ADF Controller ADF Binding


PRM PortalPortal Architecture

Partner Portal

Partner Manager Portal

Web Center

OCSG

Web services

MBeans

Storage

EJB


AT NT

DB

SOAPRMI


API Analytics• Comprehensive analytics/reports over

Oracle Communications Services Gatekeeper service provider, application, API invocations

• 360 degree view on application/subscriber requests

• ROI analysis on application– SLA breaches– Subscriber usage– Rate guarantee recommendation

Reports providing insight into API utilization• Visibility into usage and activity e.g. revenue division by content type, the most popular applications

of the month, API usage per application etc.• Enables insight into underutilized assets, ways to decrease network congestion and increase

customer retention.


API business analytics with OCSG and OBI• Based on OBI Suite

Enterprise edition Plus 11.1.1.6

• Near real time access to data

• Report can be exported to PDF, excel, powerpoint, web archive(.mht), and data file(.csv,.xml)


Analytics Reports

Based on Oracle Communications Services Gatekeeper EDRs (traffic history data), it is possible to make data-warehouse level digging and generate useful analytics report for decision making.

Analytics shows different report from different perspective, like best used API and methods, best latency traffics and etc.


Inside analytics

Report Dashboard

API Usage

Oracle BI

Total 31reports• 16 API reports• 12 Application reports• 3 Subscriber reports

2 access points• View reports from within PM Portal• View reports and create new ones from

the OBI client.

Scalable and performant• Asynchroneous ETL provides scalability

and negligable impact on Oracle Communications Services Gatekeeper

Oracle Database

API Response time API Failure

App Usage App Response time App Failure

Region Subscriber

App Subscriber

EDR Raw Data

API Data App Data Subscriber Data

Dashboard Answers BI Server


Oracle Communications

Services Gatekeeper Analytics

EDR

Time period

Export

Reports

Print

Usage & trends Response time & trends Failure rate No./region/trends of

subs for each app

API name

Method name

App ID

Date & time

Subscriber addr

Respond time

Failure rate

No. of reqData.MHT

.HTML Printable

APIAPPMethodParameter

Use Case 3 - Analytics

1

2 3

4

5

6


Enable Carriers to:Analytics value

Understand their customers and how they use the APIs•How are the Service providers doing?•How much traffic is it generating?•What services exposed as API’s are making money?

Make better business decisions•How about ROI?

•Where do they need to expand?

•Where do they need to focus?


Portal and Analytics Deployment

AT Server AT Server

NT Server NT Server

PRM Portal PR Portal

Oracle Web Center

Analytics Report

Oracle BI

SOAP

Portal Analytics

OCSG

EDR raw data Report data

Service dataManagement dataAccount data

DB

JMS

DB





Focused Solutions

Telecom API

Exposure Platform

Carrier Billing aaS

Trusted Identity

aaS

Network Policy aaS

Enterprise Service Access

Gateway

Machine to

Machine

Messaging aaS

Preintegrated end to end solutions for the following Use Cases


Telecom API Exposure Platform

Operators need to boost revenue and protect subscriber base

Operators continually try to find new killer app – this is not a sustainable approach! Exposure is the application. Enables web developers to figure out new services and generate the long tail

Secure exposure of telecom capabilities via Web Services Secure policy controlled access to telecom resources Partner management and on-boarding Service Level management for partners Access to legacy and NGN telecom resources

Applications

Network

Service Exposure

Policy Control

NetworkAbstraction


Telecom API Exposure Platform

Increase control and reduce cost of managing partners accessing network services

Enable partners and internal developers to easily create innovative & differentiated services

Establish new revenue streams and enhance customer loyalty

Solution architecture overviewEnd Users

Partners

Service Exposure

Billing

IT

Video

DeveloperPortal

Network

AnalyticsPlatform

DataModel BI

Policy

Partner & Application Management

QoS


CARRIER BILLING AS A SERVICEORACLE COMMUNICATIONS SERVICES GATEKEEPER AS A CHARGING GATEWAY

Telecom API

Exposure Platform

Carrier Billing aaS

Trusted Identity

aaS

Network Policy

aaS


Gateway

Machine to

Machine

Messaging aaS


Carrier Billing aaS

Direct Carrier Billing Authentication and

Authorization Refunds Spending Limits Transaction history Both session based

(reserved mode) and event based (instant mode)

Supports both offline and online charging

Payment Gateway



Connectors

Billing/Charging/Rating System

Charging & Rating

Billing and Settlement

Online Mediation

CustomerData

OfflineMediation

RfRoSupplier End Users

Storefront


Payment API’s

Standards Compliant– One API 2.0 and 2.1– Parlay X 3.0 (now complete)

Allows Applications to – Charge, ChargeSplitAmount– Reserve, Charge Reserve– Refund– Volume Charge, Reserve Volume Charge

Pre-integrated with– Oracle Communications Mediation Controller

Parlay X and One API

Oracle Communications

Services Gatekeeper

App

IT / NetworkBilling

OAuth

2

3

4 5 6

7

1

One API charging example


OAuth 2.0 Charging use case

1. User initiates an in-app charge against his operator account for an item

E.g. virtual goods, application, tickets, etc2. Application initiates OAuth conversation for charge by redirecting

user to authorization endpoint providing redirect URI and client ID3. Authorization endpoint re-directs user to authentication end point

to authenticate and obtain consent. Oracle Communications Services Gatekeeper presents an authentication and authorization interface to user

Form containing username/password, human readable description of resource (charge description)

4. User validates requested charge in browser and submits it to Oracle Communications Services Gatekeeper

5. Oracle Communications Services Gatekeeper redirects user to the Application redirection URI.

6. App obtains access token from Oracle Communications Services Gatekeeper makes charge request with valid token

7. Oracle Communications Services Gatekeeper sends charging record to billing system

App charges on behalf of user

OCSG

App

IT / NetworkBilling

OAuth

2

3

4 5 6

7

1


Carrier Billing aaS value

• Direct Carrier Billing• Provides fast & easy means of purchasing apps & services

• In-Application Charging• Provides fast & easy means of purchasing content

• Greatly enhances existing services• Network Policy and Payment• SMS and payment• Oauth and payment (charging on behalf of user)


TRUSTED IDENTITY AAS

Telecom API

Exposure Platform

Carrier Billing aaS

Trusted Identity

aaS

Network Policy

aaS


Gateway

Machine to

Machine

Messaging aaS


Trusted Identity as a Service

Allows subscribers to share their private resources with a third party without having to provide their own security credentials.

– These resources could be photos, videos, contact lists, location, billing capability, profile etc.

Open, standards based integration points for fedrated Idenity Management solutions

Enables the Identity broker Business Model

Key Features and components

Subscriber Privacy Identity Management

Oauth 2

Subscriber Address List Profile Management

Subscription Management

Identity Management aaS


Trusted Identity aaS

• Increased concerns regarding online fraud and information privacy for service providers and end users creates a need for trusted and certified frameworks that industries can depend on to authenticate users.

• Opportunity for telcos to move up the value chain and provide enhanced identity services.

Business models• Enhance CSP’s own services and create new

ones• Take the role of identity brokers that manage high

value web transactions.

Approach and business modelsExample A large American carrier has made great advances in leveraging IDM technology to create new revenue streams.


ID Broker

The “identity broker” business model

• Telcos, as trusted “identity brokers,” can bridge the gap of trust and security between end users and web/app transactions to build sustainable revenue streams by authenticating identity credentials with relying parties.

• Offer identity services to third parties to meet needs for trust, privacy, and fraud prevention

• Example:• Distributing goods and content• Targeting promotions• Collecting payments• Providing customer care

Name Address SSN Credit card Email

Income insurance bank details

OCSG

NetworkBilling

Alternate authentication

3rd party Authentication


OAuth2 OAuth is an open standard for

authorization. http://tools.ietf.org/html/rfc6749

OAuth provides a method for clients to access protected resources on behalf of a resource owner by issuing the client a different credential – access token.

It also provides a process for resource owner to authorize third-party access to their server resources without sharing their credentials (typically, a username and password pair), using user-agent redirections.

Application driven, Flexible resource

authorization

Improved security and fine grained control over user privacy, payments, other network assets

On-demand, explicit user authorization for resource access

Widely accepted industry standard for resource

authorization

Simple HTTP based protocol, extensible to

any 3rd party authorization

Secure resource access by 3rd party applications

Example use cases• App charges on behalf of the user, user authenticates & authorizes the charge transaction• Operator provides identity service enabling users to log into 3rd party apps

http://tools.ietf.org/html/rfc6749


Subscriber privacy management

Log into app using operator ID & password

Each app gets ACR for the user, dedicated to the app

App captures information on anonymous user which can be accessed at a later date

Anonymous Customer Reference (ACR) support

Grant access to resources

App• Preferences• Order history

PrivacyManager

Provides anonymous ID

Privacy Management = OAuth + Comms API support + API semantics + multi-party + 3 rd party authorization + ACR


Subscriber privacy management

Anonymous Customer References deliver privacy and security for subscribers

– Location of 3rd party– Presence of 3rd party

Support monetization of other services– Payment as a service– Profile as a service– Network Policy as a service– Caller ID

Monetize ID or authorization as a service– Medical information– ID as a service

Value proposition for service providers

Resources

Resources

QoS

TelcoID Service App


Subscription management• Decouple access to service subscription from

its actual representation and the location of the information by providing:

• A single point of access to service subscription functions across multiple instances of a service

• A common interface to service subscription functions across multiple services

• Manage subscriptions with ease• Ensure subscriber privacy through subscriber

anonymization• Integration points to IT systems• Short code, key word to content mappings

Subscriber Anonymization

Subscription API Notifications

Out of box SMS

applicationIntegration

with IT

Multi channel support

Subscription lifecycle

managementSubscription

through OAuth

Subscription Management


Use case example

1. User gets service description about the “digital newspaper service” from the service portal presenting the information and initiates a service subscription on the service portal.

2. The service portal sends the service subscription request to Oracle Communications Services Gatekeeper.

3. Oracle Communications Services Gatekeeper (itself or delegating to other resources) manages the users identity and obtains its pseudo-Id. Oracle Communications Services Gatekeeper sends a notification about the anonymous subscription to the news site

4. The service portal forwards the subscription response to the user.

Anonymous news subscription

Service Portal OCSG

Service Portal OCSG

12

3

4

News site

News site


Use case example

1. The news site application sends a MMS with the content to Oracle Communications Services Gatekeeper. The news site only knows the Pseudo-Id as the users Identity.

2. Oracle Communications Services Gatekeeper (itself or delegating to other resources) manages the users identity and obtains the MSISDN.

3. Oracle Communications Services Gatekeeper forwards the MMS to the user

4. Oracle Communications Services Gatekeeper returns a response to the news site

Anonymous news subscription

OCSGNews site

OCSGNews site

1

23

4


Address list managementAllows you to manage groups (aliases) of subscribers

addressList SMS

createGroup/addMember(group1:[tel:123, tel:456])

sendSMS(address:group1)

tel:123 tel:456

1 2

Managing multiple users as one

Group URIs can be used in place of individual URIs by the OneAPI MMS, SMS and Terminal Location communication services

Can be used also for custom communicaton services


Example

A parent, who is the primary subscriber in a family plan, would like to track family members using a location-based application which makes use of the Address List Management plug-in.

– The parent authorizes location tracking on behalf of family members.

– The application creates a group owner which issues an authorization grant on behalf of the resource owner members that are part of the group URI.

– It passes multiple resource owner addresses to the getGroupLocation method of the Location API to retrieve location information.

Family tracking


App

IT / NetworkGMLC

OAuth

2

4

3

1

1a) createGroup(familyURI)1b) addMembers(family members)

2a) applyOAuth2Token() Apply grant for location trackingauthorizedByGroupOwner() 2b)issueOAuth2Token()

3-4) getLocation(familyURI) – with OAuthToken


Trusted Identity aaS value

Safer customer experience -> Increased trust

– Improved security, finer granularity Enabler for Network Policy, Payment and other services

Securing privacy –> more business SSO enabler through delegation support

ID Broker

OCSG

NetworkBilling

Alternate authentication

3rd party Authentication


NETWORK POLICY AS A SERVICE

Telecom API

Exposure Platform

Carrier Billing aaS

Trusted Identity

aaS

Network Policy

aaS


Gateway

Machine to

Machine

Messaging aaS


Network policy as a serviceQoS Key benefits

DifferentiatedExperience

IncreasedRevenue

Better CustomerExperience

What is the most important differentiator in the mobile broadband market? – QoS!

29%

27%

18%

15%

10%

1%

QoSSpeedPriceCoverageApps and contentOther

Source: OVUM: Mobile Industry Survey, AsiaPacific; 2012–13


Network Policy as a service

1. Zero rated commercials (Ad Funded QOS+)2. Un-throttled OTT partner video (Customer or OTT funded)3. Enterprise Mobility Applications (Enterprise funded)4. Time boxed turbo boosts (Partner or Customer funded)

Examples

From buffering to joy

Turbo Boost Movie $1

Business Drivers• Churn reduction

• Cost savings

• Revenue


OCSG API Platform

PolicyEngine

Policy Control (PCRF)

SubscriberProfile

Over-the-top apps and content Internal web-based apps and content Internal network services and applications

OperatorNetwork

Service DeliveryPlatform

CSCFIPTV

WS interface

Diameter Rx

Rx (Diam

eter) Subscriber

Portal

Decisionsflow

- On-boarding- Usage statistics- Pricing analysis- Sub segmentation REST

ServicePolicies

ApplicationPolicies

Network Policy aaS (Mobile Policy Gateway)

ContentServers

UnifiedCommunications

WS

WS

Charging & Billing

PCEF

Partner Portal

PartnerRelationshipManagement

SOAP

LDAP

Diameter

Allow an entry point for applications to influence QoS

Manage the relationship between multiple applications, subscriber, and network resources

Leverage standard mechanisms like OAuth

Allow an entry point for applications to influence QoS

Manage the relationship between multiple applications, subscriber, and network resources

Leverage standard mechanisms like OAuth


OCSG and BSS in 3GPP architecture

Adapted from 3GPP TS 23.203

Offline Charging System(BRM)

Policy and Charging Enforcement Function

(PCEF)

Online Charging System

(ECE / BRM / NCC)Policy and Charging Rules Function

(OCPC)

Subscriber Profile Repository

(BRM / NCC)

Application Function(OCCAS , WLS, Other)Application Vendor

Open and flexible access to enhance applications with QoS

Application driven charging models

Carrier Get over limitations of network centric

interfaces Open connection between applications and

network Control access to QoS resource from multiple

applications

Subscriber Gain granular control over applications and

their QoS profile

OCSG API Platform


Example End to End QoS Solution

1. A subscriber's mobile device is registered with the Gateway GPRS Support Node (GGSN) or the PCEF.

2. The GGSN or PCEF requests a default QoS plan from the PCRF.

3. Once the QoS plan is returned from the PCRF, the GGSN or PCEF executes that plan and connects the subscriber's device to the Internet.

4. A subscriber application sends a RESTful request to Services Gatekeeper for a change in QoS.

5. Services Gatekeeper sends the QoS request to the PCRF using the Rx protocol.

6. The PCRF pushes the new QoS plan to the PCEF using the Gx protocol, and the PCEF executes that plan.

7. The PCRF interfaces with BRM or another billing management system to charge the subscriber appropriately.

GGSN PCEF

InternetInternet

App

OCSG OCPC

BRM OCMC

1

2

3

4

5

6

7

7

6


Network Policy Value

• Greatly simplifies Network Policy enabled apps• Exposure to 3:rd parties - Allowing partners to guarantee high

quality user experiences• Carrier Internal services – Allowing differentiation and optimal

use of resources• Better Customer Experience• Differentiated Experience• Increased Revenue

Managed QoS and ConsumptionSmart Pipes


ENTERPRISE SERVICE ACCESS GATEWAY

Telecom API

Exposure Platform

Carrier Billing aaS

Trusted Identity

aaS

Network Policy

aaS


Gateway

Machine to

Machine

Messaging aaS


Enterprise Service Access Gateway

Expose Network Capabilities as Open Network APIs to Applications

Centralized Network Access and Usage Control– WS security, encryption & trust, OAuth 2– Policy protection framework enabling SLA for applications

and end users

Pre-built Enablers for Profile, Messaging, Charging, etc.

Pre-built interfaces for partner relationship management & OSS/BSS integration

Reliability through scalable clustering (six sigma)– Also supports geographic redundant deployments

Robust and Performant Unified Service Exposure Platform

BillingSOAPREST

ApplicationsApplicationsApplications


Access Control

Policy & Partner Mgmt

Network Protocols

Network APIs

Profile(LDAP)


MACHINE TO MACHINE

Telecom API

Exposure Platform

Carrier Billing aaS

Trusted Identity

aaS

Network Policy

aaS


Gateway

Machine to

Machine

Messaging aaS


M2M Exposure

NetworkLBS SMS-C MMS -C HLR

M2M Device M2M

GatewayM2M

Device

M2M Device

Opt

iona

l Mod

ules

Par

tner

/App

M

anag

emen

t

Network Access

SOAP & REST Facades

B2B Policy Control and Budgeting OSMBRMASAP

M2M Applications

M2M Applications

M2M Applications

SOA Façade(Oracle Service

Bus)

• Exposes network & service delivery capabilities as WEB services to partners and applications

• Handles communication and interaction to end devices

• B-2-B and SLA management to partners

• Control network access and usage

• Integrates with service enablers: profile, messaging, location, presence,…

• Integrates with OSS/BSS infrastructure: Billing & Charging, device management


M2M Core

Appl 1

Access Network

Core Network (CN)

M2M Service Capabilities(SC)

M2M Device

M2M Gateway

M2M Appl

M2M SC

M2M Device

M2M Appl

M2M SC

M2M Mgmt Function

Network Mgmt (NM) Function

Appl 2 Appl 3 Appl …

TransportNetwork

M2M Area

Network

M2M Device

Domain

M2M Enabling Platform & Service Delivery

• Centralized Service Exposure Layer & Policy Enforcement

• Scalable, Resilient, Modular and Secure Platform

• Developer-friendly API’s and Service Exposure (e.g. RESTful API’s Web Services)

• Grow an M2M Partner Ecosystem

M2M Enabling Platform & Service Delivery

Oracle CommunicationsServices Gatekeeper

Tekecom Network enablers available out of the box

Network Protection, Throttling & Policy Control

Partner On-boarding – extensive Partner relationship management

Web services generation wizards for simple WS integrations


MESSAGING AS A SERVICE

Telecom API

Exposure Platform

Carrier Billing aaS

Trusted Identity

aaS

Network Policy

aaS


Gateway

Machine to

Machine

Messaging aaS


Oracle Communications Services Gatekeeper Messaging Capabilities

OracleRAC

Applications

Network

Oracle SDP

System Mgmt

Extensions

Integration

SCE

SDK

OSS

BSS

MMSCSMSC

PPG SMTP

SMS, MMS, Wap Push & Email Service Exposure

Policy Control and Budgeting

Network Abstraction

…

Web Services (SOAP or REST)


Unified Messaging as a serviceConsolidating Messaging Infrastructure

SMPP Gateway1

SMPP Gateway2 MMS Gateway1

UCP Gateway1

Application1Application2

Application n

Content Provider 1

Content Provider 2

Content Provider x

Application 3

Telco Service ExposurePlug-in 1

WS/REST/Native /SOA interface

Plug-in 2 Plug-in N

SMSC-1

SMSC-2MMSC 2MMSC1

Plug-in 3

Application1

Application2Content Provider1



Internal Apps

• Reduce OPEX by consolidating fragmented messaging gateways that were tailored to address various business needs

• Seamless migration of existing applications; efficient network partitioning for monetization• Comprehensive messaging protocol support (SMPP3.3,SMPP 3.4, UCP 4.0,5.0,USSD)• Exposure, network protocol, business process customization choices on traffic flow • Rich policy control and application, network, subscriber protection

Custom

Plug-in N

Custom


Messaging as a service

Guaranteed Message Delivery for notifications

– Send a message (SMS or Email) for a heads up, reminder, or special offer e.g. when an invoice is sent, payment is due

Bulk Messaging for campaign management

– Send out offerings to certain customers as SMS, MMS or E-mail

– Plan, execute and follow-up on mobile marketing campaigns

Significant enhancements to existing messaging capabilities





Communication Services- Exposing Network Services to Applications

Access tier

Communication Services

Configuration Store

Storage

Account

Plug-in Manager

Policy

SNMP

Access Control

Security

Geo-Redundancy

Budget

Statistics

Event Channel

Lifecycle Management

EDR

Service Enabler

Plug-in

Service Façade

Network tier

Webservice Apps

Container Services

Service FacadeThe Application Facing Component, including the Access Tier and Common Parts of the Network Tier

Service Enabler The Network Facing Component, including the Protocol Translation Parts


Out of the Box Interfaces for Service CreationCapability Communication Service

Messaging PX 2.1 SMS OneAPI V2 SMS

SMPP 3.4 UCP 4, 4.6, 5.0

PX2.1 MMS (MMS & Email)OneAPI V2 MMS

MM7 Rel 5, Rel 6SMTP, IMAP, POP

EWS: WAP Push PAP 2.0

EWS: Binary SMS SMPP 3.4

EWS: Bulk Messaging SMPP, MM7, PAP as above

Payment PX 3.0 PaymentOneAPI V2 Payment

Diameter Ro

Location PX2.1 Terminal LocationOneAPI V2 Terminal Location

MLP 3.0

Terminal Status PX2.1 Terminal Status MAP

Profile EWS: Subscriber Profile LDAP V3

PX 3.0 Device Capabilities and Configuration

LDAP V3

Policy QoS Diameter Rf

Capability Communication Service

Call Control PX2.1 Third Party CallPX3.0 Third Party Call

Parlay 3.3 SIP RFC 3261INAP CS1

PX2.1 Call NotificationPX3.0 Call Notification

Parlay 3.3SIP RFC 3261

PX3.0 Audio Call Parlay 3.3SIP RFC 3261

Presence PX2.1 Presence SIP RFC 3261

Subscription Subscription Management REST

SOAP-SOAP Arbitrary WSDL Arbitrary WSDL

REST2REST Arbitrary WADL Arbitrary WADL

Native SMPP 3.4 SMPP 3.4

MM7 Rel5 MM7 Rel5

UCP 4, 4.6, 5.0 UCP 4, 4.6, 5.0


Platform components

Weblogic server 11g v 10.3.6 OCCAS ver 5.1 Java Sun 1.6.0_29-b11 or JRockit 1.6.0_29 R28.2.5 (32 or 64 bit)

Optional Components For SOA Facades: Oracle Service Bus 11gR1 (11.1.1.6.0) For Portal: WebCenter 11gR1 (11.1.1.6.0) For Reports: Oracle Business Intelligence Suite Enterprise Edition

Plus 11.1.1.6.0


Supported operating systemsOEL Sun Solaris Redhat

Enterprise Linux

Windows

OS Version OEL Release 4 (UL7+), 5 (UL3+),

632 & 64 bits

Solaris 2.9 u9+,10 u4+,

11

RHEL 4 (UL7+) & RHEL 5 (UL3+),

RHEL 632 & 64 bits

Windows 7Windows Vista with

SP1+Windows XP

sp2+(dev only)

JVM (bits) 32 & 64 64 32 & 64 32 & 64

http://en.wikipedia.org/wiki/File:SolarisOS.jpg


Supported databases

Database CharacteristicOracle 10g and 11g RAC Full DB Failover and Fault Tolerance

Oracle 10g and 11g Single Instance No Failover and Fault Tolerance

Oracle Database Express Edition 10g and 11g

No Failover and Fault Tolerance

MySQL 5.x Single Instance No Failover and Fault Tolerance

MySQL Cluster 7.2 Full DB Failover and Fault Tolerance


Virtualization support

Virtualization Note

Solaris Zones

OVM Tested with OVM 3.1.1

Virtual Box





Most Extensible Network Gateway Solution

• Quickly and easily extend the platform by adding network and IT APIs

• Simple wizards to generate SOAP or REST services

• Rapidly create & modify service level agreements

• Customize workflow and policy control through the creation of new interceptors

API creation & management tools

Simulation Node

Simulation App


NewCommunication

Service

New Network Node

Custom Interfaces

Application

Custom SLA

New Interceptor

CustomSDK

Custom Protocol

Pla

tform

Tes

t Env

ironm

ent

Custom Service Attributes


Customizable Software Development Kit (SDK)For application Development

Simulator Simulator GUI Workshop Controls

Simplified, Light weight, developer-friendly SDK Can be Customized, White-Labeled and re-

distributed– From UI to SLAs, operators can personalize the SDK to

developers

SOAP & RESTful Web services support SLA enforcement & WS-Security API for extensibility Easy-to-use GUI


Extending Oracle Communications Services Gatekeeper

Create a new communication service:– To develop a new end-to-end service for a new network

protocol: Create everything from the application-facing Web Service interface

to the network-facing plug-in

Modify an existing communication service:– Create a new network plug-in when the application-facing

interface is the same but the network protocol has been modified:

Customize an existing communication service – Change or add an interceptor for workflow customization

(Network Tier)– Add a new Handler of Servlet filter for customization of request

or response content (Application Tier)

EDR’sCDR’sAlarmsSNMP


CommunicationService

ServiceFacades

Handlers &Filters

Serviceenablers

Interceptors


Platform Development Studio

To create new communication services, or to extend existing communication services, Oracle Communications Services Gatekeeper provides the Platform Development Studio.

Platform Development Studio includes the following:– Sample communication service– Communication service creation wizard– Platform Test Environment:

Includes a service-level agreement (SLA) editor– A schema for creating subscriber-centric SLAs– Event data record (EDR) and alarm listeners

Custom Communication Services Support– PDS can generate complete SOAP and REST communication services for SDK using

WSDL Oracle Communications Services Gatekeeper also provides a mechanism for

implementing custom policy rules.

Features


The Platform Test Environment

Rich APIs for:– New Communication Services– New Service Enablers– Test drivers– Simulators

Rich SPIs for:– Service Interceptors– Profile Providers for Subscriber-

Centric Policy Automatic generation of:

– SOAP-SOAP communication services

What can be extended?


Extension ToolkitCommunication service creation wizard

Eclipse Wizard that Generates Substantial Code

Specialized Templates and Ant Tasks

Buildable and Executable Example

Unit Test Framework The Platform Test Environment

(GTool)


SOAP-SOAP Communication Services

ClientHTTP/SOAP

OCSG

• Supports automatic generation of SOAP services based on WSDL file.

• The soap-to-soap application interface maps directly to the network facing service (SOAP) and callback WSDL’s

• Generated through the eclipse wizard

WS

EJB

SOAPPluginNorth

WS-stub

Callback EJB

Callback EJB client

WS-Skeleton

Callback Handler

SoapPluginSouth


REST-REST Communication Services• Supports automatic generation

of REST services based on WADL file.

• The rest-to-rest application interface maps directly to the network facing service (REST) and callback WADL’s

• Generated through the eclipse wizard



The preceding is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.



Documents

Oracle Communications Services Gatekeeper Technical Presentation