1460901636-6515198f-4281-4ed1-91bb-44cbda111d95

1.-14. (canceled)
15. A non-transitory computer readable medium storing instructions executable by a processor, the non-transitory computer readable medium comprising:
instructions to decompose global security policies to local security policies that are locally relevant to a compute platform;
instructions to transmit the local security policies to a network interface of the compute platform via a network connection, the network interface to off-load application of the local security policies from an operating system of the compute platform; and
instructions to receive forensic logging from the network interface.
16. The non-transitory computer readable medium of claim 15, further comprising:
instructions to identify interesting traffic for the network interface;
instructions to issue commands to the network interface, the commands being associated with identified interesting traffic; and
instructions to receive a data stream that includes measurement reports, monitoring reports, or mirrored data related to identified interesting traffic, via a reliable, low latency connection.
17. The non-transitory computer readable medium of claim 16, further comprising:
instructions to collect individual data streams from a plurality of compute platforms; and
instructions to coalesce the individual data streams for storage into an archive for analysis.
18. The non-transitory computer readable medium of claim 16, wherein interesting traffic is identified based on at least one element selected from the list consisting of network address, subnet, system name, virtual LAN, application group, and protocol.
19. The non-transitory computer readable medium of claim 15, wherein the instructions to decompose the global security policy are to respond to the compute platform being authenticated.
20. The non-transitory computer readable medium of claim 15, wherein the local security policies include access control lists and intrusion prevention profiles.
21. The non-transitory computer readable medium of claim 15, further comprising instructions to insert reactive troubleshooting tools into end-to-end encryption communication flow.
22. A method comprising:
decomposing, by a security management station, global network security policies into locally relevant enforcement rules;
transmitting, by the security management station, the locally relevant enforcement rules to a network interface of a compute platform, the network interface for off-loading processing of the local security policy from an operating system of the compute platform; and
collecting, by the security management station, forensic information from the network interface in a reliable and secure fashion.
23. The method of claim 22, wherein the forensic information relates to packet analysis, deep packet inspection, behavior analysis of traffic, or statistical analysis for anomaly detection.
24. The method of claim 22, wherein the decomposing is performed in response to authentication of the compute platform.
25. The method of claim 22, further comprising restricting, by an instrumentation management system, privilege of individual network administrators to measure, monitor, or mirror specific types of data on individual compute platforms.
26. The method of claim 22, further comprising:
identifying, by an instrumentation management system, interesting traffic for the network interface;
issuing, by the instrumentation management system, commands to the network interface, the commands being associated with identified interesting traffic; and
receiving, by the instrumentation management system, a data stream that includes measurement reports, monitoring reports, or mirrored data related to identified interesting traffic, via a reliable, low latency connection.
27. The method of claim 26, further comprising:
collecting, by the instrumentation management system, individual data streams from a plurality of compute platforms; and
coalescing, by the instrumentation management system, the individual data streams for storage into an archive for analysis.
28. The method of claim 26, wherein the security management station and the instrumentation management system are central and are independent of network fabric capabilities to identify interesting traffic.
29. An apparatus comprising:
a policy enforcement point processor to:
receive, from a security management station via a network connection, local security policies decomposed from global security policies, and
forward traffic as permitted by the local security policies;

a network instrumentation processor to receive, from an instrumentation management system, commands associated with traffic identified as interesting by the instrumentation management system.
30. The apparatus of claim 29, wherein the network instrumentation processor is to, based on the commands, measure, monitor, or mirror the traffic identified as interesting.
31. The apparatus of claim 29, further comprising an encryption processor to receive encrypted data packets via the network connection, to decrypt the data packets, and to forward the data packets as traffic to the policy enforcement point processor.
32. The apparatus of claim 29, wherein the network instrumentation processor is to transmit a measurement report, a monitoring report, and mirrored data to the instrumentation management system via a reliable, low latency connection.

The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.

1. A method for providing a call setup triggered push content to at least one receiving party via a first telecommunication network, the method comprising:
performing a call control function in response to a call setup initiated by a calling party, wherein a call control function operates on at least one call parameter;
applying application logic based upon the at least one call parameter for determining the at least one receiving party and the corresponding push content details of the at least one receiving party; and
delivering the push content specified by the push content details to the at least one receiving party.
2. The method of claim 1, further comprising playing the delivered push content using a client installed on the at least one receiving party.
3. The method of claim 2, wherein playing comprises playing the delivered push content corresponding to the push content matched on caller ID and received from a known caller ID, if two or more simultaneous calls are received.
4. The method of claim 2, wherein playing comprises playing the delivered push in the order of incoming calls and incoming push contents, if unmatched push content and simultaneous incoming calls from unknown caller IDs are received.
5. The method of claim 1, wherein the at least one call parameters include an application identifier, or a calling party number, or a calling party International Mobile Subscriber Identity (IMSI), or a called party number, or a Visited Mobile Switching Center (VMSC) location or a combination thereof.
6. The method of claim 1, wherein the push content details are defined in preference settings of a subscriber, wherein the preference settings are configured on at least one of the first telecommunication network or the client.
7. The method of claim 6, wherein the preference settings include the identity of a calling party, or the identity of a called party, or a third party identity, or a call history information, or time of the day, or season, or relationships, or a combination thereof.
8. The method of claim 1, wherein the push content includes a ring tone, or a video tone, or a news item, or a stock report, or a sports update, or a quote of the day, or a calling party profile, or a called party profile, or an audio file, or a celebrity voice, or a music item, or a multimedia file, or a television footage, or an advertisement, or incoming email headers, or information of calls related to other calling devices, or a combination thereof.
9. The method of claim 8, wherein the ring tone includes a telecommunication network defined ring tone, an operator-defined ring tone, or a call party defined ring tone, wherein the call party is the calling party, or the called party or a third party.
10. The method of claim 1, wherein the receiving party includes a calling party, or a called party, or a third party or a group of parties.
11. The method of claim 1, wherein delivering the push content comprises at least one of streaming the push content or downloading the push content.
12. The method of claim 1, wherein the push content is defined by a sending party.
13. The method of claim 1, wherein the sending party includes a calling party, or a called party, or a third party or a group of parties.
14. The method of claim 1, wherein the push content is defined based on a history of calls of the at least one receiving party.
15. The method of claim 1, wherein the receiving party has an option to override the push content.
16. The method of claim 1, wherein the push content is protected by digital rights management (DRM).
17. The method of claim 1, wherein the push content is delivered before a call is answered.
18. The method of claim 1, wherein the push content is delivered while a call is in progress.
19. The method of claim 1, wherein the delivery of the push content is suspended when a call is answered.
20. The method of claim 1, wherein the delivery of push content is resumed after a call is completed.
21. The method of claim 1, wherein the delivery of the push content is suspended when a call is answered, and resumed when a call is completed.
22. The method of claim 1, wherein the push content is delivered to the at least one receiving party while a call is initiated by a calling party.
23. The method of claim 1, wherein the push content starts being delivered to the at least one receiving party, and continues after a call is disconnected without call completion.
24. The method of claim 1, wherein the push content delivery is commenced, but discontinued after a call is disconnected without the call being completed.
25. The method of claim 1, wherein the push content is delivered based upon an activity reported by a receiving party device client.
26. The method of claim 25 wherein the activity includes a silent mode, or a switched off ring forward tone mode, or a stored and configured ring forward tone, or a combination thereof.
27. The method of claim 1, wherein provided for the receiving party is at least one of storing, or configuring or purchasing the pushed content is.
28. The method of claim 1, further comprising passing inter-operator content between the first telecommunication network and a second telecommunication network for facilitating inter-working between the first telecommunication network and the second telecommunication network.
29. The method of claim 28, wherein the inter-operator content includes calling party details, or called party details, or a content link.
30. The method of claim 28, wherein the second telecommunication network is the first telecommunication network.
31. The method of claim 1, further comprising retrieving the inter-operator content from the first telecommunication network.
32. A system for providing a call set-up triggered push content to at least one receiving party via a first telecommunication network, the system comprising:
a subscriber database storing at least one subscriber profile and preference settings, the preference settings comprising push content details of the subscriber;
a network interface performing a call control function in response to a call setup, wherein the call control function operates on at least one call parameter;
an application module applying application logic based upon the at least one call parameter for determining the at least one receiving party and the corresponding push content details of the at least one receiving party; and
a content server delivering the push content specified by the push content details to the at least one receiving party.
33. The system of claim 32 further comprising a configuration server enabling configuration of the receiving party subscription and the preference settings.
34. The system of claim 32, further comprising a presence and permission server specifying the presence and preference settings of the at least one receiving party.
35. The system of claim 32 further comprising at least one independent channel for voice and at least one independent channel for data, used in providing the call set-up triggered push content service.
36. The system of claim 32, wherein the receiving party includes a calling party, a called party, a third party or a group of parties.
37. The system of claim 32, wherein the preference settings include the identity of a calling party, or the identity of a called party, or a third party identity, or a call history information, or time of the day, or season, or relationships, or a combination thereof.
38. The system of claim 32, wherein the call parameters include an application identifier, or a calling party number, or a calling party International Mobile Subscriber Identity (IMSI), or a called party number, or a Visited Mobile Switching Center (VMSC) location or a combination thereof.
39. The system of claim 32, wherein the push content is delivered using an out-of-band packet channel.
40. The system of claim 32, wherein the push content is defined by a sending party.
41. The system of claim 40, wherein the sending party includes a calling party, a called party, a third party or a group of parties.
42. The system of claim 32, wherein the network interface is configured to interact the first telecommunication network using a protocol selected from a group comprising Intelligent Network (IN), Customized Applications for Mobile networks Enhanced Logic (CAMEL) Application Part (CAP), Wireless Intelligent Network (WIN), Session Initiation Protocol (SIP), Internet Protocol (IP) Multimedia Subsystem (IMS), or Integrated Services Digital Network (ISDN) User Part (ISUP).
43. The system of claim 32, wherein the application module comprises an accounting module.
44. The system of claim 32, wherein the application module is configured to determine the push content based on a history of calls of the at least one receiving device.
45. The system of claim 32, wherein the content server comprises a push content database comprising the push content.
46. The system of claim 45, wherein the push content database comprises a network-based jukebox.
47. The system of claim 32, wherein the push content includes a ring tone, or a video tone, or a news item, or a stock report, or a sports update, or a quote of the day, or a calling party profile, or a called party profile, or an audio file, or a celebrity voice, or a music item, or a multimedia file, or television footage, or an advertisement, or incoming email headers, or information on calls related to other calling devices, or a combination thereof.
48. The system of claim 32, wherein the ring tone includes a telecommunication network defined ring tone, an operator defined ring tone, and a call party defined ring tone.
49. The system of claim 32, wherein the content server is configured to provide digital rights management implementation.
50. The system of claim 32, wherein the content server is configured to deliver the push content before a call is answered.
51. The system of claim 32, wherein the content server is configured to deliver the push content while a call is in progress.
52. The system of claim 32, wherein the content server is configured to resume delivery of the push content after a call completion.
53. The system of claim 32, wherein the content server is configured to deliver the push content to the at least one receiving party while a call is initiated by a calling party.
54. The system of claim 53, wherein the push content continues to be delivered after the call is disconnected without call completion.
55. The system of claim 32, wherein delivering the push content comprises at least one of streaming the push content, or downloading the push content.
56. The system of claim 32, wherein the receiving party device comprises one of a downloadable client, or an embedded client.
57. The system of claim 56, wherein the receiving party device includes a mobile phone, or a Personal Digital Assistant (PDA) phone, or a smart phone, or a Global System for Mobile Communications (GSM) Wireless Fidelity (Wi-Fi) phone, or a Wi-Fi phone, or a Voice over Internet Protocol (VoIP) phone, or a Session Initiation Protocol (SIP)-based client screen phone, or a VoIP phone, or a screen phone, or a laptop or an IP Multimedia Subsystem (IMS)-based phone.
58. The system of claim 32, wherein the content server is communicatively coupled to the receiving party device client, wherein the content server delivers the push content based upon an activity reported by the receiving party device client.
59. The system of claim 58, wherein the activity includes a silent mode, or a switched off ring forward tone, or a stored and configured ring forward tone, or a combination thereof.
60. The system of claim 32, wherein the content server is configured to receive push content from the sending party.
61. The system of claim 32, wherein the content server is configured to deliver the push content using at least one of a Wireless Application Protocol (WAP) push, or a Short Message Service (SMS) Uniform Resource Locator (URL), or a combination thereof.
62. The system of claim 32, wherein the receiving party is capable of at least one of storing, or configuring or purchasing the push content.
63. The system of claim 32, wherein the first telecommunication network comprises a network offering a Global System for Mobile Communications (GSM), or a Third Generation System for Mobile Communications (3GSM), or an IP Multimedia System (IMS), or a Code Division Multiple Access (CDMA), or a Wireless Fidelity (WiFi), or a Worldwide Interoperability for Microwave Access (WiMAX), or a combination thereof.
64. A system for providing call set-up triggered push content to at least one receiving party via a first telecommunication network, the system comprising:
a subscriber database storing at least one subscriber profile and preference settings, the preference settings comprising the push content details of the subscriber;
a network interface performing a call control function in response to a call set-up, wherein the call control function operates on at least one call parameter;
an application module applying application logic based upon the at least one call parameter for determining the at least one receiving party and the corresponding push content details of the at least one receiving party;
a configuration server enabling configuration of the receiving party subscription and the preference settings;
a presence and permission server specifying the presence and preference settings of the at least one receiving party; and
a content server delivering the push content specified by the push content details to the at least one receiving party.