Abstract Most applications using network connection services require information to be transferred within specific constraints (or Quality of Service). Parlay enables applications to access functionality of underlying networks while preserving network integrity. Connection service functionality of underlying networks is currently provided to applications by Parlay in the Call Control and Data Session Control SCFs. Parlay does not however provide access to the QoS functionality of connection services although this functionality may be provided by networks. This report presents the design, specification and simulation of a QoS framework for connection services provided by Parlay. The QoS framework provides applications with access to the QoS functionality of connection services in the underlying networks. The design is divided into 3 parts (or models): the object model (defines the objects that make up the QoS framework), the information model (deals with how objects specify QoS and mappings between different QoS specifications), and the interaction model (defines how objects interact). A formal, technology-independent specification of the QoS framework is presented using UML. The specification is composed using the three parts of the design. A simulation of the QoS framework presented in this report is also described to validate the framework. The simulation is a multi-threaded, distributed CORBA application implemented in JAVA (Java SDK version 1.5) and is based on the UML specification of the QoS framework. Details about the simulation design and implementation are summarised in this report. The QoS framework provides per-application, per-connection QoS support for Parlay’s connection services, supports existing and future Parlay connection services, follows existing Parlay design paradigms, and co-exists with and makes use of existing and future Parlay infrastructure. Parlay guidelines relating to permitted changes are followed strictly in the design of the QoS framework, which ensures the backward compatibility of Parlay if the QoS framework is added to the Parlay API. All Parlay design guidelines are also followed to allow for the easy integration of the QoS framework into the Parlay API. The simulation validates that the design of the QoS framework is: complete (in terms of specification), realistic, compatible with a standard Parlay implementation (JAVA and CORBA), and scalable (easy integration of new connection services).

ABSTRACT The environment in which services are provisioned in existing networks has a number of shortcomings. Neither the service domain nor the services therein have a standardised structure. Signalling between terminals and services uses network protocols that are inappropriately oriented towards bearer management. The control of bearer connections, and the view of call states, is maintained in the network layer, making bearer management difficult and limited. A service-centric service provisioning environment is proposed, which advocates a structured service domain, and a structured approach to service development and provisioning. A direct communication path between terminals and services at the application layer, that utilises high-level, service-oriented protocols, is proposed. Control of the call / session layer and the bearer network, and view of connection states is relocated to the application layer, facilitating bearer manipulation by services located in the service domain. It is shown that the capabilities and features of services provisioned in the proposed service provisioning environment are of a greater range, more advanced and more complex. It is also shown that the proposed service provisioning environment brings about potential efficiency gains for the initiation of 2-party calls, and significant efficiency gains for the initiation of multiparty calls.

The OSA/Parlay architecture supports the development of applications that control network connections through an open API. This research presents a proposal on improving the rate at which applications are developed and deployed using the Parlay/OSA architecture. The work seeks to facilitate software reuse by providing logical groupings in the application layer of the Parlay/OSA architecture. This research presents a new layer to provide a higher level of abstraction for application developer using Parlay to provide telecommunication services. The layer introduced is referred to as the Generic Application Programming (GApp) interface. This document details the design and implementation of this interface.

This Master’s Thesis in Electrical Engineering concerns the introduction of a Parlay gateway in Skanova’s public circuit switched telephone network, what network integrity problems this brings, and how to preserve the integrity of the network. There is a rising demand from the market on Skanova to be able to offer integrated and useful services via their network. Examples of such services are Web Controlled Call Forwarding and Virtual Call Centres. Until now, these services have been implemented with the Intelligent Network concept which is a technology for concentrating the service logic in the telephone network to centralised service platforms within the network operator’s domain. Developing new services in this environment is expensive and therefore, Skanova wants to open the network for third party service providers. The opening of the network is enabled by the introduction of a gateway implementing the open service interface Parlay. The crucial point when opening the network for third party service providers is to maintain the integrity of the network. Parlay is an object oriented Application Programming Interface that enables a third party service access to core network resources in a controlled manner. The authors’ definition of network integrity is: “the ability of a network to steadily remain in a safe state, while performing according to the expectations and specifications of its owner, i.e. delivering the expected functionality and providing means to charge for utilised network resources”. The thesis describes a few services implemented via the Parlay interface and points out examples of activities in these services that may jeopardise the integrity of the network. The described activities belong to one of the two categories: Call Control Functionality or Lack of Charging Instruments. The thesis also describes two important methods for addressing encountered integrity problems. The methods are: Parlay Service Level Agreement and Policy Management.</p> Finally, the solutions are compared and the conclusion is that Policy Management is a conformable and flexible method for addressing lots of integrity problems and that these are important qualities, since new integrity problems will arise all the time.

Student Number :9600874K - MSc research report - School of Electrical Engineering - Faculty of Engineering and the Built Environment / Telecommunication networks have evolved from voice only single service networks to multimedia networks providing bearer services such as voice, data and video transportation. Moreover, these networks, collectively called Next Generation Networks (NGNs), enable rapid creation, deployment and management of advanced services in an efficient manner. However, the initial business model of telcos was to internally develop and provide these advanced services to customers. In this monopolized environment, service development is driven by technological availability rather than customer demands. Furthermore, vendor specific network elements prohibit the development of re-useable service components, which in turn increases the time-to-market of services. Deregulation and advances in Distributed Computing Systems (DCSs) are driving towards open networks and rapid service delivery. Third party Application Service Providers (ASPs) are envisioned to develop and supply the services, with the telco providing bearer services. The use of softswitch architectures such as Open Service Access (OSA) / Parlay (OSA / Parlay) in an open NGN environment abstract services from core network elements through its Application Programming Interface (API). Services are thus decoupled from vendor and protocol specific network equipment and can be provided across a plethora of network architectures. One major advantage of NGN is the ability to provide bearer service in a mobile environment. Location Based Services (LBSs) are envisaged to be an important class of services provided in the NGN environment. For an LBS service to be complete, a geospatial database is necessary to provide location information. This report documents the design and implementation of a Geospatial Data Access Service Capability Feature (GDASCF) as an extension to the OSA / Parlay gateway. The GDASCF encapsulates necessary APIs that offer uniform access to query geospatial databases. One key component of the design is the realization of the Adapter layer which adapts function calls to an appropriate Database Management System (DBMS). The introduction of the GDASCF and Adapter layer provides a solution which results in flexible and rapid service creation.

Στην παρούσα διατριβή προτείνονται Μηχανισμοί Ασφάλειας για την ανάπτυξη ασφαλών και αξιόπιστων διάχυτων υπηρεσιών υγείας πάνω σε Δίκτυα Επόμενης Γενιάς (Next Generation Networks – NGN). Οι προτεινόμενοι Μηχανισμοί Ασφάλειας έχουν ως στόχο να λειτουργήσουν προσθετικά στο επίπεδο ασφάλειας που προσφέρουν οι υπάρχοντες μηχανισμοί ασφάλειας που υποστηρίζονται από το NGN. Αυτό είναι αναγκαίο καθώς οι διάχυτες υπηρεσίες υγείας εμπεριέχουν ιδιαιτέρως ευαίσθητη πληροφορία. Επιπρόσθετα, στην παρούσα διατριβή προτείνεται ένα γενικό πλαίσιο εφαρμογής, το οποίο υποστηρίζει τους προτεινόμενους Μηχανισμούς Ασφάλειας, προκειμένου να επιτυγχάνεται γρήγορη και αποτελεσματική ανάπτυξη ασφαλών και αξιόπιστων διάχυτων υπηρεσιών υγείας πάνω σε NGN. Πιο συγκεκριμένα, το προτεινόμενο πλαίσιο βασίζεται στην αρχιτεκτονική του προτύπου ETSI/Parlay και επεκτείνει το σύνολο των Διεπαφών των Χαρακτηριστικών Ικανότητας Υπηρεσίας (Service Capability Features Interfaces – SCFs Interfaces) και το σύνολο των μηχανισμών που υποστηρίζει το Πλαίσιο ETSI/Parlay. Το προτεινόμενο πλαίσιο επεκτείνει το σύνολο των Διεπαφών των Χαρακτηριστικών Ικανότητας Υπηρεσίας προκειμένου αυτό να περιλαμβάνει όχι μόνο τις διεπαφές που σχετίζονται με τις υπηρεσίες του υποκείμενου δικτύου (NGN), αλλά και επιπλέον διεπαφές που δίνουν τη δυνατότητα σε διάχυτες υπηρεσίες υγείας να έχουν πρόσβαση σε ικανότητες επαίσθησης (sensing capabilities) δικτύων αισθητήρων που είναι υπεύθυνα για τη συλλογή πληροφορίας περιβάλλοντος καθώς και βιοπληροφορίας. Επίσης, το προτεινόμενο πλαίσιο επεκτείνει το σύνολο των μηχανισμών που υποστηρίζει το Πλαίσιο ETSI/Parlay προκειμένου να είναι δυνατή η παροχή σε διάχυτες υπηρεσίες υγείας όχι μόνο των βασικών μηχανισμών, που υποστηρίζονται από το προτυποποιημένο Πλαίσιο ETSI/Parlay, αλλά και των Μηχανισμών Δικτύων Αισθητήρων καθώς και των Μηχανισμών Ασφάλειας, οι οποίοι προτείνονται στην παρούσα διατριβή. Οι Μηχανισμοί Ασφάλειας, οι οποίοι προτείνονται, στοχεύουν στην παροχή ασφάλειας στα δεδομένα των τελικών χρηστών καθώς και στην ασφαλή πρόσβαση στις διάχυτες υπηρεσίες υγείας και στην ασφαλή χρήση τους. Πιο συγκεκριμένα, οι προτεινόμενοι Μηχανισμοί Ασφάλειας επικεντρώνονται στη διασφάλιση της εμπιστευτικότητας των δεδομένων, της ακεραιότητας των δεδομένων, της πιστοποίησης αυθεντικότητας καθώς και του ελέγχου πρόσβασης των οντοτήτων που συμμετέχουν σε διάχυτες υπηρεσίες υγείας. Για τη διασφάλιση της εμπιστευτικότητας των δεδομένων προτείνεται ένα γενικό σχήμα κρυπτογράφησης. Αυτό το σχήμα επιτρέπει το σχεδιασμό και την υλοποίηση ασφαλών εξατομικευμένων κρυπτογραφικών αλγορίθμων τμήματος για την κρυπτογράφηση δεδομένων διάχυτων υπηρεσιών υγείας, όπως οι ιατρικοί φάκελοι των ασθενών. Επίσης, προτείνεται ένας μηχανισμός για διασφάλιση της ακεραιότητας των δεδομένων για σύστημα ιατρικής τηλε-παρακολούθησης. Αυτό το σύστημα τηλε-παρακολούθησης λειτουργεί σε περιβάλλον έξυπνου σπιτιού και υποστηρίζει τη μεταφορά βιοσημάτων του ασθενή από τον ασθενή στη Μονάδα Παροχής Υπηρεσιών Υγείας. Επιπρόσθετα, προτείνονται δύο μηχανισμοί για διασφάλιση της πιστοποίησης αυθεντικότητας. Ο πρώτος μηχανισμός είναι ένας ευφυής μηχανισμός πιστοποίησης αυθεντικότητας για εφαρμογές e-Hospital πάνω σε WLAN μέσα σε νοσοκομείο. Ο δεύτερος μηχανισμός είναι ένας μηχανισμός συμφωνίας κλειδιού ομάδας και ανάκτησης σε ad hoc δίκτυα, που χρησιμοποιούνται κατά τη διαχείριση ιατρικών συμβάντων έκτακτης ανάγκης σε περιοχές στις οποίες δεν υπάρχει σταθερή τηλεπικοινωνιακή υποδομή. Τέλος, προτείνεται μία υποδομή PKI σε ένα ιατρικό δίκτυο μεγάλης κλίμακας που συνδέει ένα ευρύ φάσμα από Μονάδες Παροχής Υπηρεσιών Υγείας. Η προτεινόμενη υποδομή PKI εστιάζεται στη διασφάλιση της πιστοποίησης αυθεντικότητας και του ελέγχου πρόσβασης των επαγγελματιών του χώρου της υγείας που επιθυμούν να αποκτήσουν πρόσβαση σε υπηρεσίες που σχετίζονται με αυτούς καθώς και σε υπηρεσίες υγείας που σχετίζονται με τον ασθενή. / In this dissertation, Security Mechanisms are proposed for the development of secure and reliable pervasive healthcare services over Next Generation Networks (NGN). The proposed Security Mechanisms aim at increasing the security level provided by the existing security mechanisms supported by NGN. It is essential since pervasive healthcare services include extremely sensitive information. Furthermore, in this dissertation, a generic application framework is proposed supporting the proposed Security Mechanisms in order the rapid and efficient development of secure and reliable pervasive healthcare services over NGN to be achieved. In particular, the proposed framework is based on the ETSI/Parlay architecture and extends the set of the Service Capability Features Interfaces (SCFs Interfaces) as well as the set of mechanisms supported by the ETSI/Parlay Framework. The proposed framework extends the set of the SCFs Interfaces in order to integrate not only the interfaces related to the services of the underlying network (NGN), but also additional interfaces enabling pervasive healthcare services to access sensing capabilities of sensor networks which are responsible for gathering context and bio information. Moreover, the proposed framework extends the set of mechanisms supported by the ETSI/Parlay Framework to provide pervasive healthcare services not only with the basic mechanisms supported by the standardized ETSI/Parlay Framework, but also with the Sensor Networks Mechanisms and the Security Mechanisms proposed in this dissertation. The proposed Security Mechanisms aim at securing the end-user data as well as the access to the pervasive healthcare services and the use of them. In particular, the proposed Security Mechanisms focus on ensuring data confidentiality, data integrity, authentication and access control of entities participating in pervasive healthcare services. To ensure data confidentiality, a generic encryption schema is proposed. This schema enables the design and implementation of secure personalized block ciphers for encryption of data included in pervasive healthcare services such as patients’ medical records. Moreover, a data integrity mechanism for a tele-monitoring system is proposed. This tele-monitoring system operates in a smart home environment and supports transmission of patient’s biosignals from the patient to the Healthcare Center. Additionally, two authentication mechanisms are proposed. The first mechanism is an intelligent authentication mechanism for e-Hospital applications over WLAN in a hospital. The second mechanism is a group key agreement and recovery mechanism in ad hoc networks used for handling emergency medical incidents in areas without fixed telecommunications infrastructure. Finally, a PKI infrastructure in a large-scale healthcare network connecting a wide spectrum of Healthcare Centers is proposed. The proposed PKI infrastructure focuses on ensuring authentication and access control of healthcare professionals willing to access services related to them as well as healthcare services related to patient.

Student Number : 9812990V - MSc project report - School of Electrical Engineering - Faculty of Engineering and the Built Environment / The NGN is a multi-service network which inter-works with the Public Switched Telephone Network (PSTN), the voice network and the data network provided by Internet. Through network independent APIs such as OSA-Parlay, the NGN slowly migrates and converges Telecoms and IT networks, voice and Internet, into a common packet infrastructure. The OSA/Parlay group defines a softswitch architecture which provides network independent APIs or SCFs that enable cross network application development The Parlay softswitch provides connectivity to underlying transport networks for application providers. The standard specifies the interaction between application providers and the softswitch. However, the standard does not specify an interface to regulate the interaction between service providers and the consumer/end user domain. This means that applications housed in the service provider domain have no defined interfaces to manage service delivery to the consumer domain. For most service providers, the lack of a non-standardized API set impedes efforts to decrease application creation and deployment time. This research investigates the design and implementation of a standard consumer interface which can be used by application providers within an OSA/Parlay system to deliver service content to end users. The main objectives with regard to the functionality provided by the interface include the integration of facilities which will assist application providers to manage end user access and authentication (to enable users to establish a secure context for service usage), subscription (to handle the subscription life cycle), and service usage management (to enable the initiation and termination of services). The TINA-Consortium (TINA-C) has developed a service architecture to support the creation and provisioning of services in the NGN. The TINA architecture offers a comprehensive set of concepts and principles that can be used in the design of NGN services. The architecture consists of a set of reusable and interoperable service components encapsulating a rich and well defined set of APIs aimed at supporting the interaction between application providers and consumers. TINA’s session concepts, information structures, interfaces and service components can be used to support the design of a consumer premises end user interface for OSA/Parlay. This research also aims to explore the feasibility of using the TINA API within an OSA/Parlay system to support consumer domain service delivery. In order to implement the consumer interface for Parlay applications, the ability of the TINA service architecture to provide Access and Authentication management; Subscription and Profile management; and Service Usage management was investigated. The report documents the design and implementation of an OSA/Parlay consumer interface utilizing TINA service components and interfaces.

Student Number : 9301997W - MSc thesis - School of Electrical and Information Engineering - Faculty of Engineering and the Built Environment / Emergency services are vital for the minimization of damage, injury and loss of life. These services are, by definition, a combination of telecommunications and information services, and are by nature, distributed. However, most current emergency services do not take advantage of emerging technology, and hence, are restricted in the functionality they offer. This project proposes the design a full information structure for an emergency call centre service, which can be offered as a service or application on any core network. As emergency services are distributed, and combine both telecommunications and information services, an appropriate design tool which caters for these issues, is the Reference Model for Open Distributed Processing (RM-ODP), which will be used in the design of the emergency service. In addition, OSA/Parlay Application Programming Interfaces (APIs) will be used for the application to access telecommunication network functionality. The enterprise viewpoint examines the design requirements and considerations for an emergency system, which is the first step in designing a service based on the RMODP guidelines. Secondly, the information viewpoint is defined, which identifies the information flows between the objects and classes defined in the enterprise viewpoint with the aid of robustness diagrams and high level message sequence charts. Next, the computational viewpoint of the emergency service describes the components that the service consists of and the interfaces through which they communicate, enabling distribution of the system to be visualized. In addition, the engineering and technology viewpoints are briefly touched upon. The RM-ODP proves to be a useful tool the design of this application. In addition, the use of OSA/Parlay APIs have also proved beneficial, enabling the application to run on any platform, irrespective of the level of functionality it already provides. The benefits that this design offers over conventional emergency services are allowing callers and emergency response personnel full access to the functionality of the service, despite any limitations on their telecommunications network, finding the location of a caller from a fixed or mobile phone, ease and speed of obtaining relevant emergency information, and the ease and speed of sending relevant information to emergency response personnel. Finally we recommend improvements in the reliability and accuracy of finding the location of mobile phones, as well as creating ways of identifying the location of VoIP users.

Parlay is an open standard that focuses on opening up the telecommunication networks for new services and new service providers. It encapsulates the underlying protocols and signaling layers and provides a framework for services so that the applications do not need to handle signaling and network related tasks. Parlay is also created to integrate the public telephone network with wireless and packet based networks. Java APIs for Integrated Networks (JAIN) is the Java implementation of the Parlay specification and includes a Java framework for network access and call control, among others. I have in this thesis used the Parlay and JAIN technology to design a Virtual Private Branch Exchange (VPBX), which is a software based system for the telecommunications domain. The VPBX provides functionality such as attendant control, routing and re-routing of calls, telephone queue handling and calls on hold. All use of the system is made from mobile phones, even the attendant client application is designed for a handheld device. I have in this thesis presented an architectural design for the VPBX and an evaluation of the design.

Στόχος αυτής της εργασίας είναι να εισάγει τον αναγνώστη στις διεπαφές Parlay/OSA με απλό και συνοπτικό τρόπο. Οι διεπαφές Parlay/OSA είναι ένα σύνολο προγραμματιστικών διεπαφών που επιτρέπουν στους ανεξάρτητους προμηθευτές υπηρεσιών να δημιουργήσουν τηλεπικοινωνιακές υπηρεσίες. Οι διεπαφές περιλαμβάνουν εκτος των άλλων : το κομμάτι του ελέγχου της κλήσης, το κομμάτι της αλληλεπίδρασης με το χρήστη,το κομμάτι του εντοπισμού του χρήστη, καθώς και το κομμάτι της χρέωσης και τον λογιστικών πράξεων. Οι Parlay/OSA διεπαφές είναι πρότυπα των ETSI και 3GPP. Το πρώτο μέρος της εργασίας είναι μια εισαγωγή στο πληροφοριακό μοντέλο του Parlay/OSA. Στην συνέχεια αναλύουμε την λειτουργικότητα των API καθώς και τον τυπικό τρόπο λειτουργίας τους. Τέλος περιγράφονται δύο εφαρμογές όπου φαίνεται η χρήση και ο τρόπος λειτουργίας των διεπαφών. / The purpose of this thesis is to introduce the reader to the Parlay/OSA interfaces in a simple manner. Parlay/OSA interfaces are a set of programmable interfaces that enable third party service providers create telecommunication services. Parlay/Osa interfaces are ETSI and 3GPP models. The first part of this thesis is an introduction to Parlay/OSA APIs. After that, the APIs' functionality is described. Finally, two sample applications are described to show the use and functionality of the interfaces.