Dual fallback hardened voip system with signal quality measurement

0001This application claims priority to <patcit id="pcit0001" dnum="US62934920" dnum-type="L"><text>U.S. Provisional Application 62/934,920 entitled Hardened VoIP System that was filed on November 13, 2019</text></patcit>.

<u>FIELD OF THE INVENTION</u>

0002The present invention relates generally to fault tolerant mobile communication systems, and specifically relates to hardened voice over IP (VoIP) systems with push to talk (PTT) functionality that integrate into existing land mobile radio (LMR) systems.

<u>BACKGROUND OF THE INVENTION</u>

0003LMR systems are wireless communications systems generally intended for use by terrestrial users in vehicles or on foot. Such systems are often used by emergency first responder organizations such as police, fire and ambulance services, public works organizations, dispatched services such as taxis, and companies with large vehicle fleets or numerous field staff. LMR systems are often independent but can be connected to other fixed systems such as the public switched telephone network (PSTN) or cellular networks (also called cellular communications systems).

0004Radio over Internet Protocol (RoIP) is like VoIP but augments two-way radio communications rather than telephone calls. With RoIP, at least one node of a network is a radio (or a radio with an IP interface device) connected via IP to other nodes in the radio network. The other nodes can be two-way radios, but can also be dispatch consoles, either traditional (hardware) or modern (software on a PC), plain old telephone service (POTS) telephones, softphone applications running on a computer such as a smartphone or some other communications device accessible over IP. RoIP has been deployed over private networks as well as the Internet. RoIP has shown to be useful in land mobile radio systems used by public safety departments and utility fleets spread over a broad geographic area. Like other centralized radio systems such as trunked radio systems, issues of delay or latency and reliance on centralized infrastructure can be impediments to adoption by public safety agencies.

0005Examples of previous attempts to integrate LMR with VoIP include <patcit id="pcit0002" dnum="US8145262B"><text>U.S. Patent No. 8,145,262 issued to Martinez </text></patcit>that claims to disclose a multimode LMR and a method of communicating LMR content using an LMR device. The Martinez LMR system includes an LMR communication portion and a cellular data network communication portion.

0006<patcit id="pcit0003" dnum="US8169983B"><text>U.S. Patent No. 8,169,983 issued to Janky </text></patcit>claims to disclose a transcoder architecture and method for transcoding in LMR systems. The Janky LMR system includes a first communication site configured to communicate using a first LMR communication protocol and a second communication site configured to communicate using a second LMR communication protocol. The Janky LMR system further includes a transcoder configured to receive LMR content from the first communication site communicated using the first LMR communication protocol and digitally convert the LMR content to the second LMR communication protocol to be communicated to the second communication site.

0007<patcit id="pcit0004" dnum="US8634799B"><text>U.S. Patent No. 8,634,799 issued to Economy </text></patcit>claims to disclose an incident commander computing device that dynamically reconfigures subscriber unit usage of radio access networks by first identifying, based at least on a type of incident occurring within a particular geographic area, a first incident response group having a first higher priority for responding to the incident and a second incident response group having a second lower priority for responding to the incident, then identifying a first higher priority radio access network having a sufficient coverage level across the particular geographic area and a second lower priority radio access network having a sufficient coverage level across the particular geographic area, and finally assigning the first incident response group to the first higher priority radio access network and assigning the second incident response group to the second lower priority radio access network.

0008<patcit id="pcit0005" dnum="US8676243B"><text>U.S. Patent No. 8,676,243 issued to Blanco </text></patcit>claims to disclose a communication system that provides dual-watch and multi-watch capability for group PTT services where incoming PTT calls are prioritized and played out in accordance with prioritization protocols. In the Blanco system a user of multiple communication devices can hear received audio traffic being played out in accordance with the priority assigned to the group call and the priority assigned to the communication device, and numerous calls can be simultaneously received and managed.

0009<patcit id="pcit0006" dnum="US10298384B"><text>U.S Patent Nos. 10,298,384</text></patcit><patcit id="pcit0007" dnum="US10044498B"><text>, which is considered the closest prior art, and 10,044,498 issued to Bockrath </text></patcit>claims to disclose a hardened VoIP system that includes secure push-to-talk voice functionality. Bockrath claims that through the addition of encryption, authentication, user filtering, and integration with new and existing LMR systems, a secure voice platform ensures malicious software, unauthorized access and brute force security attacks will not compromise the voice communications of the system. The Bockrath VoIP system is engineered to ensure graceful system degradation in the event of maintenance activities, natural disasters and failure modes.

<u>SUMMARY OF THE INVENTION</u>

0010A hardened VoIP system is presented that includes secure PTT voice functionality. Through the addition of encryption, authentication, user filtering, and integration with new and existing LMR systems, a secure voice platform ensures malicious software, unauthorized access and brute force security attacks will not compromise the voice communications of the system. The VoIP system is engineered to ensure graceful system degradation in the event of maintenance activities, natural disasters and failure modes. The hardened VoIP system offers the functions of a LMR trunking system while utilizing broadband connections. Private calls, group calls, Emergency Alarms with covert monitoring capability, scanning and priority scanning may be incorporated into the system. The system includes a VoIP controller that serves as a trunking controller, manages available VoIP based conference bridges, and assigns them as needed to the parties involved in each voice call.

0011The system allows for standard LMR functionality and the ability for supervisor tablets and smartphones to participate in and monitor VoIP calls between the dispatch center, mobile workforce, and revenue vehicles. The system also provides supervisor tablets and smart phones the capability to scan talk groups in active calls, setup calls to other users, including closed microphone users, without dispatch or other third-party intervention using the private call feature.

0012The hardened VoIP system provides an integrated mobile product that allows the system to gracefully fallback to the LMR infrastructure in the event of a broadband network outage. The integration of hardened VoIP and LMR allows new or existing LMR capital resources to be used to bridge various radio technologies and further allows switching algorithms to seamlessly and gracefully degrade from hardened VoIP to LMR without user intervention in the event of a broadband outage.

0013In an embodiment of the invention there is a mobile device having a first primary operational state, a second primary operational state, a first fallback state, and a second fallback state, the mobile device configured in the first primary operational state to receive via a cellular communications system a VoIP status signal from a VoIP controller, receive from a first land mobile radio system a first Land Mobile Radio (LMR) status signal, and provide VoIP communication over the cellular communications system; in the second primary operational state to receive via the cellular communications system the VoIP status signal from the VoIP controller, receive from a second land mobile radio system a second LMR status signal, and provide VoIP communication over the cellular communications system; in the first fallback state to provide voice communication over the first land mobile radio system; in the second fallback state to provide voice communication over the second land mobile radio system; and to transition from the first primary operational state to the first fallback state upon failing to receive the VoIP status signal from the controller; to transition from the second primary operational state to the second fallback state upon failing to receive the VoIP status signal from the VoIP; and to transition from the first primary operational state to the second primary operational state upon failing to receive the first LMR status signal.

0014An embodiment of the invention includes a mobile device that is configured in the first primary operational state to receive from the second land mobile radio system the second LMR status signal.

0015An embodiment of the invention includes a mobile device is configured to transition from the second primary operational state to the first primary operational state upon receiving the first LMR status signal.

0016An embodiment of the invention includes a mobile device that is configured in the first primary operational state to receive the first LMR status signal following a verification of receipt of the VoIP status signal from the controller and in the second primary operational state to receive the second LMR status signal following the verification of receipt of the VoIP status signal from the VoIP controller.

0017An embodiment of the invention includes a mobile device that is configured to determine a signal quality of the cellular communications system with a Session Initiation Protocol/Real-Time Transport Control Protocol (SIP/RTCP), and transition from the first primary operational state to the first fallback state upon the signal quality of the cellular communications system passing a predetermined threshold.

0018An embodiment of the invention includes a mobile device wherein the predetermined threshold is a threshold of at least one of packet loss, latency, and jitter buffer depth.

0019An embodiment of the invention includes a mobile device wherein the mobile device is configured to use a measurement of at least one of packet loss and latency in determining the signal quality.

0020An embodiment of the invention includes a mobile device wherein the mobile device is configured to transition from the first primary operational state to the first fallback state upon the signal quality passing the predetermined threshold when the mobile device is receiving the VoIP status signal from the controller.

0021An embodiment of the invention includes a mobile device wherein the mobile device further includes a first auxiliary data state and a second auxiliary data state ; the mobile device configured in the first auxiliary data state to receive via an auxiliary data communications system an auxiliary data status signal from the controller, receive from the first land mobile radio system the first LMR status signal, and provide VoIP communication over the auxiliary data communications system; in the second auxiliary data state to receive via the auxiliary data communications system the auxiliary data status signal from the controller, receive from the second land mobile radio system the second LMR status signal, and provide VoIP communication over the auxiliary data communications system; to transition from the first auxiliary data state to the first fallback state upon failing to receive the auxiliary data status signal from the controller; to transition from second auxiliary data state to the second fallback state upon failing to receive the auxiliary data status signal from the controller; and to transition from the first auxiliary data state to the second auxiliary data state upon failing to receive the first LMR status signal.

0022An embodiment of the invention includes a mobile device wherein the mobile device is further configured to transition from the first primary operational state to first auxiliary data state upon failing to receive the VoIP status signal and receiving the auxiliary data status signal; and to transition from the first primary operational state to first fallback state upon failing to receive the VoIP status signal and failing to receive the auxiliary data status signal.

0023Embodiments of the invention also include a system for providing hardened VoIP and land mobile radio communication services to mobile devices, the system comprising the previously recited mobile device.

0024An embodiment of the invention includes a system wherein the system comprises a VoIP controller, wherein the VoIP controller is configured to maintain a VoIP database, the database having identifiers associating the mobile device in both the first primary operational state and second primary operational state with the cellular communications system, and associating the mobile device in both the first auxiliary data state and the second auxiliary data state with the auxiliary data communications system.

0025An embodiment of the invention includes a system wherein the cellular communications system and auxiliary data communications system include a network pairing selected from a group consisting of two of 3G, 4G, GSM, LTE, CDMA, and 5G NR.

0026An embodiment of the invention includes a system wherein the VoIP controller is configured to determine a signal quality of the cellular communications system with a Session Initiation Protocol/Real-Time Transport Control Protocol (SIP/RTCP), and transmit a fallback command to the mobile device upon the signal quality passing a predetermined threshold.

0027An embodiment of the invention includes a system wherein the mobile device is configured to transition from the first primary operational state to the first fallback state upon receipt of the fallback command from the VoIP controller.

0028An embodiment of the invention includes a system wherein the system is configured to utilize a measurement of at least one of packet loss and latency in determining the signal quality.

0029An embodiment of the system includes a system wherein the mobile device is configured to verify receipt of the VoIP status signal from the controller at the expiration of a timer having a duration; at least one of the VoIP controller and the mobile device is configured to determine a signal quality of the cellular communications system with a Session Initiation Protocol/Real-Time Transport Control Protocol (SIP/RTCP); and the duration of the timer decreases upon the signal quality passing a predetermined threshold.

0030An embodiment of the system includes a system wherein the mobile device is configured to transmit a message to the VoIP controller upon the transition of the from the first primary operational state to the second primary operational state indicating the mobile device has secondary voice access.

0031In an embodiment of the invention there is a VoIP controller having a first primary operational state, a second primary operational state, a first fallback state, and a second fallback state, the VoIP controller configured in the first primary operational state to receive via a cellular communications system a first VOIP heartbeat signal from a mobile device, receive a first Land Mobile Radio (LMR) status signal associated with a first land mobile radio system from the mobile device, maintain a database with a first identifier associating the first mobile device with the cellular communications system and a second identifier associating the first mobile device with the first land mobile radio system; in the second primary operational state to receive via the cellular communications system the first VOIP heartbeat signal from the mobile device, receive a second LMR status signal associated with a second land mobile radio system from the mobile device, maintain the database with the first identifier associating the first mobile device with the cellular communications system and the second identifier associating the first mobile device with the second land mobile radio system; in the second primary operational state to receive via a cellular communications system the first VOIP heartbeat signal from the mobile device, receive via a second land mobile radio system a second LMR status signal, transmit a first status control signal to the first mobile device, and maintain the database with a first identifier associating the first mobile device with the cellular communications system and a second identifier associating the first mobile device with the second land mobile radio system; in the first fallback state to monitor a channel of the first land mobile radio system associated with the mobile device; in the second fallback state to monitor a channel of the second land mobile radio system associated with the mobile device; to transition from the first primary operational state to the first fallback state upon failing to receive the first VoIP heartbeat signal from the mobile device; and to transition from the second primary operational state to the second fallback state upon failing to receive the first VoIP heartbeat signal from the mobile device.

0032An embodiment of the invention includes a controller wherein the controller is configured to transition from the first primary operational state to the second primary operational state upon receipt of a first message indicating the mobile device has secondary voice access.

0033An embodiment of the invention includes a controller wherein the controller is configured to determine a signal quality of the cellular communications system with a Session Initiation Protocol/Real-Time Transport Control Protocol, and transition from the first primary operational state to the first fallback state upon the signal quality passing a predetermined threshold.

0034Embodiments of the invention also include a system for providing hardened VoIP and land mobile radio communication services to mobile devices, the system comprising the previously recited controller.

0035Embodiments, features and advantages of the invention concerning a mobile device, a controller or a system for providing hardened VoIP and land mobile radio communication services to mobile devices, respectively, also apply to the respective other categories of the mobile device, the controller or the system for providing hardened VoIP and land mobile radio communication services to mobile devices.

<u>BRIEF DESCRIPTION OF THE DRAWINGS</u>

0036Preferred embodiments are described with reference to the following drawings, wherein: <ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">Figure 1</figref> illustrates an example of a hardened VoIP system.</li><li><figref idref="f0002">Figure 2</figref> illustrates an example of a VoIP solution for mobile devices.</li><li><figref idref="f0003">Figure 3</figref> illustrates an improved VoIP solution for mobile devices.</li><li><figref idref="f0004">Figure 4</figref> illustrates a method of a VoIP controller registering client devices and updating talk group databases.</li><li><figref idref="f0005">Figure 5</figref> illustrates an example of data that may be found in a talk group portion of the VOIP database.</li><li><figref idref="f0005">Figure 6</figref> is a flow diagram of a client device transitioning between numerous communication methods and systems.</li><li><figref idref="f0006">Figure 7</figref> is the first part of a flow diagram of a system with primary, secondary, and tertiary fallback modes of operation.</li><li><figref idref="f0007">Figure 8</figref> is the second part of the flow diagram of <figref idref="f0006">figure 7</figref>.</li><li><figref idref="f0008">Figure 9</figref> is the third part of the flow diagram of <figref idref="f0006">figure 7</figref>.</li><li><figref idref="f0009">Figure 10</figref> is the fourth part of the flow diagram of <figref idref="f0006">figure 7</figref>.</li><li><figref idref="f0010">Figure 11</figref> is s chart illustrating the various states configuration states of the system of <figref idref="f0006">figure 7</figref>.</li><li><figref idref="f0011">Figure 12</figref> illustrates an example of a hardened VoIP system.</li></ul>

<u>DETAILED DESCRIPTION</u>

0037The present invention may be used with any type of hardened communication system and is particularly suited for police, fire, and transit systems. However, for descriptive purposes, the present invention will be described in use with a municipal bus system.

0038<figref idref="f0001">Figure 1</figref> shows a schematic of a hardened VoIP communication system <b>10</b> that includes a server <b>105</b> connected to a switch <b>110</b> that relays data to a data communication controller <b>115.</b> Users may configure and/or monitor the system using client devices <b>120</b> which access the switch <b>110.</b> The server <b>105</b> also communicates with the VoIP 1 controller <b>125</b> that receives and stores data from a VoIP database <b>130.</b> The controller <b>125</b> is configurable to transmit data to both a local VoIP switch <b>135,</b> a hosted VoIP Switch <b>140,</b> and a hosted conference bridge <b>145.</b> The local VoIP switch <b>135,</b> the hosted VoIP switch <b>140,</b> and the hosted conference bridge <b>145</b> are all session devices <b>137</b> that create SIP RTP sessions with mobile devices. A terminal <b>150</b> may be used to access and/or configure the VoIP controller <b>125.</b>

0039The VoIP switches (<b>135, 140</b>) are configured to communicate with commercial cellular towers <b>155</b> to transmit communications in an LTE, WiMax, EvDO UMTS, HSPA or similar format to distant communication devices. The cellular towers <b>155</b> are part of a cellular communications system.

0040In addition to communicating with the cellular towers <b>155</b> via the VoIP controller <b>125,</b> the server <b>105</b> is configured to also be able to communicate with the cellular towers <b>155</b> via the switch <b>110</b> through a firewall <b>160.</b> In one example of the system, the switch <b>110</b> transmits data to the cellular towers <b>155</b> via an access point name gateway while in alternative embodiments an independent internet service provider is utilized to transmit data to the cellular towers.

0041In addition to communicating through cellular data formats, the switch <b>110</b> may transmit communications data through a firewall <b>165</b> to a server <b>170,</b> such as a Zetron ACOM EVO server, that relays the communication to a dispatch switch <b>175</b> and a router panel <b>180</b> such as the Telex IP-224 Dual IP Remote Adapter Panel. The router panel <b>180</b> is connected by 4 wire audio to an RoIP rack <b>185</b> with Ethernet or cellular data connectivity and also via 4 wire audio to auxiliary LMR radios <b>190.</b> Dispatchers may access the system through a console client <b>195</b> such as a Zetron ACOM EVO Client that communicates with the dispatch switch <b>175</b> via a dispatcher server <b>200.</b>

0042A DMZ switch <b>205</b> is connected to the dispatch switch <b>175</b> and acts as a demilitarized zone, or perimeter network, that contains and exposes the system's external-facing services to a larger untrusted network. In addition to the DMZ switch <b>205,</b> the radio dispatch functionality is also protected by another firewall <b>210.</b>

0043The land mobile radio system, which also may be called a first land mobile radio system, includes LMR towers <b>215</b> that communicate with first and second routers (<b>220, 225</b>) via a backhaul switch <b>230.</b> The first router <b>220</b> communicates with a LAN switch <b>235</b> and receives communications from VMS servers (<b>240, 245</b>). The second router <b>225</b> communicates with the DMZ switch <b>205,</b> a gateway GPRS Support Node <b>250</b> and a PDG <b>255</b> via a second LAN switch <b>260.</b>

0044By transmitting via both the cellular towers <b>155</b> and the LMR towers <b>215,</b> the system can communicate with a variety of devices including LMR based devices <b>265</b> such as the Motorola APX6500. The system can communicate with bi-functional devices <b>270</b> such as the Motorola LEX L10 that has LTE connectivity as well as LMR connectivity. Additionally, the bi-functional devices <b>270</b> may be used to extend connectivity to Wi-Fi devices <b>275</b> that are closely located with the bi-functional devices <b>270.</b> The system may also communicate with cellular exclusive devices <b>280</b> such as the Digi Router WR44, a commercial grade cellular to Wi-Fi converter. Through a Universal Radio Logic Controller <b>285</b> (also called a URLC) and proprietary onboard hardware <b>290,</b> the cellular exclusive device <b>280</b> provides data to a vehicle logic unit <b>295</b> that delivers processing power and communication with other on-board technologies and may provide real-time access to schedule, route and traffic information, on-time performance data, and messages to and from dispatch. The Universal Radio Logic Controller <b>285</b> and the vehicle logic unit <b>295</b> can also be connected to an LMR Radio <b>300</b> that provides redundancy in the event of a malfunction in the cellular towers <b>155</b> or the cellular exclusive device <b>280.</b> Mobile devices include the bi-functional devices <b>270,</b> the cellular exclusive device <b>280,</b> the Universal Radio Logic Controller <b>285,</b> the proprietary onboard hardware 290, the vehicle logic unit <b>295</b> and the LMR Radio <b>300.</b>

0045The VoIP controller <b>125</b> of the illustrated system is a hardened VoIP controller and is configured to provide VoIP encryption, authentication, authorization, and accounting in a bandwidth efficient manner for the system. The VoIP controller <b>125</b> is shown as a single device in <figref idref="f0001">figure 1</figref>, however it should be appreciated that multiple geographically redundant VoIP channel controllers may be utilized in exemplary embodiments of the system such that an occurrence (fire, flood, power outage, etc.) at a single location would not disrupt communications in the overall system.

0046The RoIP rack <b>185</b> performs 4 wire LMR to VoIP conversions and has Ethernet or cellular connectivity. While there is a single RoIP rack <b>185</b> shown in <figref idref="f0001">Figure 1</figref>, in an exemplary embodiment there is one module per talk group such that multiple RoIP racks may be utilized by the system. In the event of an RoIP rack failure, the multi-rack system is configured to automatically shift talk groups over to any available module on the other RoIP racks to ensure seamless degradation of the system upon a component failure.

0047The console client <b>195</b> is interfaced with the RoIP rack <b>185</b> and allows dispatchers to access specific talk groups, and or reconfigure specific talk groups as needed. CSSI, DFSI, and AFSI links may also be used to interface to LMR radio infrastructure.

0048<figref idref="f0002">Figure 2</figref> illustrates an example of a call setup from a client device <b>120</b> to a vehicle with a vehicle logic unit <b>295.</b> The client <b>120</b> sends a setup message <b>305</b> to the server <b>105</b> that responds with a call progress message <b>310</b> that includes conference and channel numbers. Using the received information, the client device <b>120</b> establishes a conference bridge <b>315</b> to the session device <b>137</b> and transmits a call status confirmation <b>320</b> to the server <b>105</b> that relays a control message <b>325</b> to the vehicle logic unit <b>295</b> that in turn establishes a conference <b>330</b> with the preselected session device <b>137</b> while transmitting a confirmation <b>335</b> to the server <b>105.</b> The server <b>105</b> then provides a progress message <b>340</b> to the client device <b>120.</b>

0049While the system of <figref idref="f0002">Figure 2</figref> provides mobile VoIP capabilities there are a few issues with the system. In particular, the system requires a large amount of system bandwidth (e.g., 12 Mbps for a 350-vehicle call) due to iLBC vocoder requirements. Additionally, the system loses operability if the server <b>105</b> is taken offline or if the system is placed into administrative fall back.

0050<figref idref="f0003">Figure 3</figref> illustrates an improved example of a VoIP call setup from a client device <b>120</b> client to a vehicle with a vehicle logic unit <b>295.</b> In the illustrated example, the client device <b>120</b> sends a setup message <b>345</b> to the server <b>105</b> which relays the setup request <b>350</b> to the data communications controller <b>115.</b> The data communications controller <b>115</b> transmits a setup signal <b>355</b> to the cellular exclusive devices <b>280</b> such as the Digi Router WR44 on board a vehicle. The cellular exclusive device <b>280</b> relays the setup request <b>360</b> to the vehicle logic unit <b>295</b> via the universal radio logic controller <b>285.</b> In response to the setup request, the vehicle logic unit <b>295</b> sends a configuration communication <b>365</b> to the universal radio logic controller <b>285</b> to unmute audio and enable push-to-talk communication. The vehicle logic unit <b>295</b> sends an acknowledgment <b>370</b> to the data communications controller <b>115</b> wherein the voice call setup is relayed <b>375</b> to the client device <b>120</b> via the server <b>105.</b> The client device <b>120</b> selects <b>380</b> the voice resource for the console client <b>195.</b> The server <b>120</b> relays (<b>385, 390</b>, and <b>395</b>) a VoIP call setup request to the Universal Radio Logic Controller <b>285</b> and a VoIP module <b>286</b> with Universal Radio Logic Controller <b>285.</b> The VoIP module <b>286</b> establishes at <b>400</b> a session initiation protocol (SIP) real-time protocol (RTP) session with one of the session devices <b>137</b> (local VoIP switch <b>135,</b> the hosted VoIP switch <b>140,</b> or the hosted conference bridge <b>145</b>). Upon the completion <b>405</b> of the session (either intentionally or unintentionally) the Universal Radio Logic Controller <b>285</b> signals <b>410</b> the vehicle logic unit <b>295</b> which relays (<b>415, 420</b>) the termination of the session to the client device <b>120</b> via the data communication controller <b>115.</b>

0051<figref idref="f0004">Figure 4</figref> illustrates an example of a registration method and graceful fallback in the event of a system deterioration. In step <b>425,</b> the VoIP controller receives an initiation communication from a user client device and assigns the device to a talk group (fire talk group, transit talk group, police talk group, etc.). At regular intervals, at step <b>430,</b> the VoIP controller transmits control signals to the client devices. The regular flow of transmissions from the VoIP controller to the client devices allows the Universal Mobile Access Radio Link Control (URLC) (also called Universal Radio Logic Controllers <b>285</b>) devices on the client devices to quickly determine if there has been a deterioration in the cellular based communication. In addition to regularly transmitting control signals or status signals in step <b>430s,</b> the VoIP controller is configured to regularly receive status updates from client devices at step <b>435.</b> These status signals received from the client devices may be referred to as VoIP heartbeat signals. Similar to the control signal from the VoIP controller allowing the client devices to determine if there has been a breakdown in VoIP communications, the VoIP heartbeat signals from the client devices allow the VoIP controller to determine which devices are active. In an example of the invention, the control signals and status signals are both of small file size such that the cellular data usage is minimized while the system is in standby mode.

0052At step <b>440,</b> the VoIP controller updates the database associated with active client database. Shown in <figref idref="f0005">Figure 5</figref> are examples of some of the information that may be associated with the various clients in the active client database. In step <b>445,</b> the VoIP controller receives an intentional shutdown signal from a first client device, and in step <b>450</b> the VoIP controller removes the first client device from the active client database.

0053In step <b>455,</b> the VoIP controller fails to receive a regular status signal from a second client device. Reasons for possible loss in signal include the second client device moving outside of a zone having cellular data coverage, a problem with a cellular tower, or a malfunction with the cellular data transmitter associated with the second client device. Before the cellular data communication failure, LMR communication frequencies were associated with the second client device and stored by both the second client device and the VoIP controller. With the cellular breakdown, the predetermined LMR frequencies are assigned to the second client device, and at step <b>460</b> the talk groups unassociated with the second client device are reassigned LMR communication frequencies. At step <b>465,</b> in response to a push-to-talk signal, the VoIP controller facilitates a voice communication to the client devices in the first talk group. While the second client device receives communications via LMR, the other devices in the talk group may receive the communication via cellular data, or even local Wi-Fi. In an exemplary embodiment of the invention, the transition from cellular LTE to LMR communications occurs seamlessly and without any manual configuration by the users of the client devices. In one embodiment of the invention, the system initiates the transition from LTE to LMR communications upon a detection that the LTE signal quality has fallen below a non-zero predetermined threshold. In another embodiment, the predetermined threshold includes a percentage of packet loss or a duration of signal latency. In yet another embodiment, the predetermined threshold is determined based on metric that factors both packet loss and latency.

0054<figref idref="f0005">Figure 5</figref> illustrates some of the information that is stored by the VoIP controller in the active client database (also called the VoIP database). With each client device there may be stored a unique device identifier <b>470</b> along with a MAC address identifiers <b>475</b> associated with Wi-Fi communications and an IMEI identifiers <b>480</b> associated with cellular communications. The MAC address identifiers <b>475</b> and IMEI identifiers <b>480</b> are examples of a first identifier associating the first mobile device with the cellular communications system. The talk group identifiers <b>485</b> associated with each group is stored in the active client database along with the currently utilized communication form identifiers <b>490</b> and the talk <b>495</b> and receive <b>500</b> frequency identifiers for backup LMR communications. The talk <b>495</b> and receive <b>500</b> frequency identifiers are examples of a second identifier associating the first mobile device with the first land mobile radio system. If the system transitions to a second primary operational state, the talk <b>495</b> and receive <b>500</b> frequency identifiers become third identifiers associating the first mobile device with the second land mobile radio system. In the example of a system with dual fallback LMR system, multiple talk and receive frequencies may be stored in the VoIP database for the mobile device. Upon a first fallback, the VoIP controller would monitor a channel (such as the voice frequency identifier <b>495</b> of the first land mobile radio system associated with the mobile device, and in the second fallback the VoIP controller would monitor a channel of the second land mobile radio system associated with the mobile device.

0055Client devices <b>501-505</b> are listed as being in the first talk group while client devices <b>506-509</b> are in the second talk group. Most of the client devices (<b>501, 502, 505, 506, 508,</b> and <b>509</b>) are utilizing cellular communications protocols while two devices (<b>503, 504</b>) are communicating via LMR and one device <b>507</b> is communicating via a Wi-Fi link. The forms of communication in the database are not static and are expected to change. As an example, a client device <b>507</b> may be associated with a fire truck parked at a firehouse that communicates with the VoIP controller via the firehouse Wi-Fi. When the firetruck leaves the firehouse, the client device <b>507</b> automatically switches over to a cellular communication protocol once the firehouse's Wi-Fi access point is out of range. Should cellular and Wi-Fi communications be unavailable, the client device <b>507</b> on the firetruck would automatically begin to communicate using the predetermined land mobile radio frequencies (857.3375 and 860.3375 MHz). In an exemplary embodiment of the invention, the transition from Wi-Fi to cellular data to LMR and back is done automatically without any client user interaction and provides seamless fallback functionality such that a user may communicate using numerous different methods (Wi-Fi, LMR, satellite, etc.) without the user being aware that a change has occurred.

0056<figref idref="f0005">Figure 6</figref> illustrates an example of a client device gracefully transitioning between multiple communication methods. At step <b>510,</b> the client device regularly receives a control signal from a VoIP controller via Wi-Fi while the client device is in standby mode. The control signal may be referred to as a status control signal. A SIP/RTP bridge could be established by the VoIP controller upon a request to talk by a user. At step <b>515,</b> the URLC aboard the client device detects that the control signal has not been received and transitions the client device to cellular communications. At step <b>520,</b> the client device is once again in standby mode and at step <b>525</b> a SIP/RTP bridge is created between the client device and the VoIP controller in response to a voice communication. At step <b>530,</b> the SIP/RTP bridge is terminated, and at step <b>535</b> the client device fails to receive the control signal via cellular or Wi-Fi communications, so the client device transitions to land mobile radio communications. At step <b>540,</b> the VoIP controller receives a LMR communication from the client device, and via cellular communications, establishes a SIP/RTP bridge with the other members of the client device's talk group. At step <b>545,</b> the client device receives the control signal via Wi-Fi, and the LMR transmitter on the client device is deactivated.

System with Multiple Fallback Modes

0057<figref idref="f0006 f0007 f0008 f0009">Figures 7 through 10</figref> illustrate an example of a hardened mobile communication system <b>550</b> with a primary fallback mode of operation, a secondary fallback mode of operation, and a tertiary fallback mode of operation. The system <b>550</b> is started at step <b>555</b> where the URLC, the Universal Mobile Access Radio Link Control, is started and is operating normally. At step <b>560,</b> the system checks if the CAD/AVL link between the on vehicle URLC and controller is running. If the CAD/AVL link is running, the system then proceeds to step <b>570</b> where a check is made to see if the controller has issued a fallback command to the mobile device which would result in system proceeding to step <b>580.</b> The system may move into various states that are referred to as operational states, primary operational states, fallback states, auxiliary data states. The components of the system (e.g., mobile devices, VoIP controllers) also enter these states. Upon receipt of the fallback command from the VoIP controller, the mobile device begins the process of transitioning from the first primary operational state to the first fallback state. If the CAD/ACL link is not available in step <b>560</b> (such as when there is a VoIP service disruption), the system immediately proceeds to step <b>580</b> to begin the appropriate fallback. At step <b>580,</b> the URLC checks to see if a primary land mobile radio is available. This check may include determining if the first LMR status signal has been received from the primary land mobile radio. If so, the system proceeds to step where the system determines if the available LMR is registered for communications on the primary trunking controller. If so, the system proceeds to step <b>600</b> and enters a primary fallback voice mode. This mode may be referred to as the first fallback state. Similarly, the VoIP controller, transitions from the first primary operational state to the first fallback state upon failing to receive the first VoIP heartbeat signal from the mobile device.

0058If either step <b>580</b> or step <b>590</b> are negative, the system proceeds to step <b>610</b> where the URLC checks to see if a secondary land mobile radio is available. The secondar land mobile radio is referred to as a second land mobile radio system. This step may include determining if a second LMR status signal has been received from the second land mobile radio. Like step <b>580,</b> if the secondary land mobile radio is available the system then proceeds to step <b>620</b> where the system determines if the available LMR is registered for communications on the secondary trunking controller. If so, the system proceeds to step <b>630</b> and enters secondary voice fallback mode. This may be referred to as the second fallback state.

0059If either step <b>610</b> or <b>620</b> is negative, the system then proceeds to steps associated with a tertiary fallback mode. At step <b>640,</b> the system checks if the on vehicle URLC is affiliated with and registered a VoIP controller. If the URLC is not affiliated with a VoIP controller, the system then reverts to step <b>560</b> to again cycle through checking the availability of the CAD/AVL, primary LMR, and secondary LMR. If the URLC is affiliated with and registered with a VoIP controller, a check for status messages from the VoIP controller is made at step <b>650.</b> If the status messages are received from the VoIP (i.e., the controller and URLC are in communication), the system then proceeds to step <b>660</b> and enters the tertiary fallback mode. If the check for status messages from the VoIP controller indicates that no messages are being received, the system proceeds to step <b>670</b> where a check is made on the number of missed messages, or the length of time that no controller status messages have been received. If the predetermined threshold of time, or missed messages has been exceed, the system loops back to step <b>640</b> and continues in a process loop until either a status messages is received at step <b>650</b> or the predetermined threshold is exceeded in step <b>670.</b> If the predetermined threshold is exceeded in step <b>670,</b> the system reverts to the step <b>560</b> to again cycle through checking the availability of the CAD/AVL, primary LMR, and secondary LMR.

0060If the CAD/AVL link is running in step <b>560,</b> and the URLC does not receive a command to fallback at step <b>570,</b> the system moves to step <b>680</b> (on <figref idref="f0007">Figure 8</figref>) where the system determines if the CAD/AVL link is receiving PDM polling messages (also called a VoIP status signal). If the primary data mode (PDM) polling messages are received, the system moves to step <b>690</b> where the system determines if the URLC is connected to the primary LMR radio. This check may include determining if a first LMR status signal has been received from the primary land mobile radio. If so, the system then proceeds to a check in step <b>700</b> if the primary LMR radio is registered with the trunking controller. If registered, the system moves to step <b>710</b> where the system enters (or stays in) the primary data mode (PDM) using the primary voice resource, and the URLC sends a message indicating that it has primary voice resource access. This mode may be referred to as the first primary operational state. The states of the system (e.g., the first primary operational state) are applicable to both the mobile devices and/or the VoIP controller.

0061When the system is fully operational, it is expected the system to loop through steps <b>560</b> to <b>570</b> to <b>680</b> to <b>690</b> to <b>700</b> to <b>710</b> and back again at regular intervals (such as once a minute). Although not shown in the flow diagrams of <figref idref="f0006 f0007 f0008 f0009">figures 7 through 10</figref>, it expected that delay timers may be included in the flow to regulate how often the system checks the viability of the various fallback modes. The mobile device is configured to verify receipt of the VoIP status signal from the controller at the expiration of a timer having a duration (such as 30 seconds).

0062As another option, in step <b>570</b> the NO path to step <b>680</b> may be triggered after an alternative path <b>575</b> has been triggered a set number of times, such as 512, 1024, or 2048, or may continue on following the alternate path <b>575</b> until a timer (such as a 30 second timer) has expired. The alternative path <b>575</b> may include a time delay, such as 20 milliseconds.

0063If either of the checks in steps <b>690</b> or <b>700</b> is negative, the system moves to step <b>720</b> where the system determines if the URLC is connected to the second LMR system. This step may include determining if a second LMR status signal has been received from the second land mobile radio system. If so, the system then proceeds to a check in step <b>730</b> if the secondary LMR radio is registered with the trunking controller. If registered, the system moves to step <b>740</b> where the system enters the primary data mode - which may also be called the secondary primary operational state - using the secondary voice resource and the URLC (i.e., the mobile device) sends a message to the VoIP controller upon the transition from the first primary operational state to the secondary primary operational state indicating that it has secondary voice access (such as voice access through the second LMR system). This mode may be referred to as the second primary operational state. It is expected that the VoIP controller failing to receive the LMR status message (or status signal associated with a first land mobile radio system) from the mobile device in step <b>690</b> will often result in the system entering the second primary operational state. Once in the second primary operational state, the VoIP controller would transition to the second fallback state upon failing to receive the first VoIP heartbeat signal from the mobile device.

0064If the system has been in the second primary operational state and step <b>690</b> is found to be affirmative (e.g., LMR status signals now received) the system will often transition from the second primary operational state back to the first primary operational state. In both the modes entered in steps <b>710</b> and <b>740,</b> the mobile device is configured to provide VoIP communications over a cellular communications system. VoIP communications include transmission of voice communications using internet protocol transmission of data.

0065If either of the checks in steps <b>720</b> or <b>730</b> is negative, the system moves to step <b>750</b> where the system determines if the URLC is affiliated with and registered with a VoIP controller. If so, the system proceeds to step <b>760</b> where a check is made for whether VoIP controller status messages are being received. Step <b>760</b> is similar in function to step <b>650.</b> If the check in step <b>760</b> is positive, the system moves to step <b>770</b> where the system enters the primary data mode using the tertiary voice resource and the URLC sends a message indicating that it has tertiary voice access.

0066If no VoIP controller status messages are received in step <b>760,</b> the system proceeds to step 780 where a counter determines if the number, or duration, of missed VoIP controller messages has exceeded a predetermined threshold. This step is similar in structure to step <b>670.</b> If the threshold has not been exceeded, the step loops back to step <b>750</b> to check for VoIP controller registration and status messages in step <b>760.</b> If the missed message threshold is exceeded in step <b>780,</b> or the URLC is no longer affiliated with a controller in step <b>750,</b> the system reverts to step <b>560.</b>

0067If at step <b>680,</b> no PDM polling messages are received, the system moves to step <b>790</b> where a check for secondary data mode (SDM) polling messages is made. If SDM messages are detected from the VoIP controller, the system enters an auxiliary data state - which may also be here denoted as a first auxiliary data state - through the sequences (e.g., <b>810</b> to <b>820</b> to <b>830</b>) shown in <figref idref="f0008">Figure 9</figref>, but if no SDM messages are indicated then a check for tertiary data mode (TDM) polling messages is made in step <b>800.</b> SDM polling messages are also called auxiliary data status signals. If TDM messages from the VoIP controller are detected, the system enters the sequences shown in <figref idref="f0008">Figure 9</figref>, but if no TDM messages are detected then the system loops back to step <b>580.</b> The SDM and TDM polling messages are sent through the auxiliary data communications system(s). In one embodiment, the primary data communications system is a 5G NR network, and the auxiliary data communications system is a 3G network. The primary and auxiliary data communications system may include a network pairing that include two of the following 3G network, 4G network, GSM, LTE, CDMA, and 5G NR. The primary and auxiliary data both communications system provide VoIP communications.

0068The sequences shown in <figref idref="f0008">figures 9</figref> and <figref idref="f0009">10</figref> are like those shown in steps <b>690</b> through <b>780.</b> Like in step <b>690,</b> in steps <b>810</b> and <b>910</b> where the system determines if the URLC is connected to the primary LMR radio. This check may include determining first LMR status signal has been received from the primary land mobile radio. If so, the system then proceeds to a check in steps <b>820</b> or <b>920</b> if the primary LMR radio is registered with the primary trunking controller. If registered, the system moves to steps <b>830</b> or <b>930</b> where the system enters the secondary data mode (SDM) in step <b>830</b> or tertiary data mode (TDM) in step <b>930</b> using the primary voice resource, and the URLC sends a message indicating that it has primary voice resource access. The secondary data mode is also called the auxiliary data state.

0069If either of the checks in steps <b>810</b> or <b>820</b> is negative, the system moves to step 840 where the system determines if the URLC is connected to the secondary LMR radio. If either of the checks in steps <b>910</b> or <b>920</b> is negative, the system moves to step <b>940</b> where the system determines if the URLC is connected to the secondary LMR radio (also called the second land mobile radio system). If so, the system then proceeds to a check in steps <b>850</b> or <b>950</b> if the secondary LMR radio is registered with the trunking controller. If registered, the system moves to steps <b>860</b> or <b>960</b> where the system enters the (secondary/tertiary) data mode using the secondary voice resource and the URLC sends a message indicating that it has secondary voice access. The second data mode shown in step <b>860</b> that uses the secondary voice resource (e.g., the mobile devices uses the second land mobile radio system, receives second LMR status signals, and uses the auxiliary data communications system) is referred to as the second auxiliary data state. The second data mode shown in step <b>830</b> that uses the primary voice resource (e.g., the mobile devices uses the first land mobile radio system, receives first LMR status signals, and uses the auxiliary data communications system) is referred to as the first auxiliary data state.

0070If either of the checks in steps <b>840 / 850</b> or <b>940 /950</b> is negative, the system moves to steps <b>870</b> or <b>970</b> where the system determines if the URLC is affiliated with and registered with a VoIP controller. This step may include determining if a second LMR status signal has been received from the second land mobile radio. If so, the system proceeds to step <b>880</b> or <b>980</b> where a check is made for whether VoIP controller status messages are being received. Steps <b>880</b> and <b>980</b> is similar in function to step <b>650.</b> If the check in step <b>880</b> or <b>980</b> is positive, the system moves to step <b>890</b> or <b>990</b> where the system enters the secondary or tertiary, respectively, data mode using the tertiary voice resource and the URLC sends a message indicating that it has tertiary voice access.

0071If no VoIP controller status messages are received in steps <b>880</b> or <b>980,</b> the system proceeds to steps <b>900</b> or <b>1000,</b> respectively, where a counter determines if the number, or duration, of missed VoIP controller messages has exceeded a predetermined threshold. These steps are similar in structure to step <b>670.</b> If the threshold has not been exceeded, the step loops back to step <b>870</b> or <b>970</b> to check for VoIP controller registration and status messages in steps <b>880</b> or <b>980.</b> If the missed message threshold is exceeded in steps <b>900</b> or <b>1000,</b> or the URLC is no longer affiliated with a controller in steps <b>870</b> or <b>970,</b> the system reverts to step <b>560.</b>

0072After the transitions in steps <b>600, 630, 660, 710, 740, 770, 830, 860, 890, 930, 960,</b> and <b>990,</b> the system may start a timer that loops the system back to the previous steps.

0073<figref idref="f0010">Figure 11</figref> illustrates a database showing the various states that the system of <figref idref="f0006 f0007 f0008 f0009">figures 7-10</figref> may enter based on commands or signals received, or not received. The data of <figref idref="f0005">Figure 5</figref> may be stored in part of the database shown in <figref idref="f0010">Figure 11</figref>. This database may be stored in the VoIP database <b>130</b> or may be identical to the VoIP database <b>130.</b> In the state <b>1010,</b> (shown with identifiers Primary Data Mode / Primary Voice Mode) the data communications controller of the system is operating under a primary data mode, such as 3G or 4G cellular data, and the VoIP controller and URLC are using a primary voice resource such as land mobile radio. This state is referred to as the first primary operational state. It is generally expected that during normal operation of the system, the configuration of state <b>1010</b> will be the most used state.

0074In state <b>1020,</b> the primary data channel is enabled, but the secondary voice resource, such as a secondary LMR system, has been selected instead of the primary voice resource. State <b>1020</b> is referred to as the second primary operational state and is shown with identifiers Primary Data Mode / Secondary Voice Resource. State <b>1020</b> would be entered in step <b>740.</b> As an example, if the primary LMR was taken down for routine maintenance, the system would move to state <b>1020</b> as compared to state <b>1010</b> assuming that the primary data channel is still enabled. In both the first primary operational state <b>1010</b> and second primary operational state <b>1020,</b> the mobile device is associated with the cellular communications system as shown by the associated identifiers.

0075In state <b>1030,</b> the primary data channel is selected along with the tertiary voice method of communication. In the illustrated example shown in <figref idref="f0007">figure 8</figref>, the tertiary voice resource is a secondary VoIP system, however it should be appreciated the tertiary system may be a third LMR, a satellite radio system, or another type of system. In step <b>770,</b> the system enters state <b>1030.</b>

0076In states <b>1040, 1050,</b> and <b>1060,</b> the system has entered a secondary data mode in response to not receiving PDM polling messages through the CAD/AVL link in step <b>680</b> while also receiving SDM polling messages in step <b>790.</b> States <b>1040</b> and <b>1050</b> are referred to as the first auxiliary data state and the second first auxiliary data state, respectively. In the database the identifiers of states <b>1040</b> and <b>1050</b> (Secondary Data Mode/ Primary Voice Resource and Secondary Data Mode/ Secondary Voice Resource) associate the mobile device in both the first auxiliary data state and the second auxiliary data state with the auxiliary data communications system. The auxiliary data communications system sends and/or receives auxiliary data status signals to/from the mobile devices.

0077As an example, the PDM messages may be sent through a CDMA network while the SDM messages may be sent through an alternative GSM cellular network. In another embodiment, the differences between the primary data mode and the secondary data mode may be 4G versus 3G communications. The primary and secondary data modes may include a network pairing that includes two of the following 3G network, 4G network, GSM, LTE, CDMA, and 5G NR. States <b>1040, 1050,</b> and <b>1060</b> are entered through steps <b>830, 860,</b> and <b>890,</b> respectively. In addition to providing standard mobile data (e.g., internet connectivity) in the various data modes, the system also carries short message service (SMS) and multimedia messaging service (MMS) type messaging on the primary, secondary, and tertiary data modes.

0078In states <b>1070, 1080,</b> and <b>1090,</b> the system has entered a tertiary data mode in response to not receiving SDM polling messages through the CAD/AVL link in step <b>790</b> while also receiving TDM polling messages in step <b>800.</b> As an example, the SDM messages may be sent through a CDMA network while the TDM messages may be sent through an alternative GSM cellular network. In another embodiment, the differences between the secondary data mode and the tertiary data mode may be 3G versus 2G communications. States <b>1070, 1080,</b> and <b>1090</b> are entered through steps <b>930, 960,</b> and <b>990,</b> respectively.

0079The various data shown in <figref idref="f0005">figure 5</figref> may be included in the VoIP controller database shown in <figref idref="f0005">figure 5</figref>. As an example, each device listed in <figref idref="f0005">figure 5</figref> may include an indicator specifying if it is using its first fallback LMR system as the fallback or the secondary LMR system as the fallback.

Pre-Fallback Optimization

0080The system may also utilize SIP/RTCP (Session Initiation Protocol/Real-Time Transport Control Protocol) that carries statistical and control data for determining when a fallback should be initiated, or if a first fallback mode should be queued for use over a second fallback mode while the system is still in its primary operating mode. In one embodiment, the SIP/RTCP measures a signal quality of the cellular communications system using a time window with early edge aligned with the delay corresponding to the earliest arriving packet and late edge representing the maximum permissible delay before a late arriving packet would be discarded. This measurement is also called the jitter buffer or jitter buffer depth. The system also uses the SIP/RTCP to gather data on the transmission related to packet loss, latency, and other measures of signal quality of the cellular communications system. The system then performs a variety of statistical measurements on the jitter buffer and other measurements (such as round-trip time) over a period of time including a sum of squares, a mean, a median, a standard deviation, and a moving average of these measurements over time. Either, or both, the mobile device or the fixed location structures may test for signal quality of the cellular communications system.

0081Using the information gathered from the SIP/RTCP, the system may make adjustment to further improve the operability of the system. In a first example, the system measures the average depth of the jitter buffer over time. If the 10-second moving average is more than one standard deviation above the 500-second moving average (i.e., one possible predetermined threshold) the system will decrease thresholds used in steps <b>670, 780,</b> or <b>900,</b> or path <b>570.</b> Additionally, the system may also adjust the duration of the various timers to help the system more quickly respond to further degradation of the system. The duration of the timer may be decreased upon the signal quality passing a predetermined threshold. If the jitter buffer depth then exceeds a second predetermined threshold (e.g., 10 second moving average is more than two standard deviations above the 500-second moving average) the system will fall back to an auxiliary communication mode even if the primary mode was still functionally operable (<i>i.e.,</i> the system will transition from the first primary operational state to the first fallback state when the mobile device is still receiving the VoIP status signal from the controller). In the fallback process, the VoIP controller transmits a fallback command to the mobile device upon the signal quality passing a predetermined threshold. Alternatively, the second predetermined threshold may be a percentage of packet loss instead of jitter buffer depth. The specific numbers given are for illustrative purposes, and those skilled in the art will recognize that other durations and statistical measurements may be used in the monitoring of the communication quality. For example, in one embodiment, the system may measure the jitter depth and packet loss over a 500-millisecond range. In another embodiment, the system calculates the sum of squares of the jitter buffer. In yet, another embodiment, the system maintains a database of the conditions (jitter, latency, etc.) that occurred prior to a system fallback. Based on the recorded observations, the system increases or decreases the predetermined thresholds for preemptive events (e.g., lowering predetermined thresholds used in steps <b>670, 780,</b> or <b>900</b>) to a system fallback.

0082In addition to utilizing the SIP/RTCP to measure transmission quality, taking steps for preemptively adjust the system in advance of an expected fallback, the SIP/RTCP may also be used to provide SSL and TLS certificate-based encryption techniques for more secure communications.

Structure of System

0083<figref idref="f0011">Figure 12</figref> illustrates another non-claimed embodiment of the invention <b>1100</b> with server equipment <b>1110,</b> dispatch equipment <b>1120,</b> broadband connections <b>1130,</b> LMR radio connections <b>1140</b> of a land mobile radio system, first, second, and third fleet vehicles (<b>1150, 1160,</b> and <b>1170,</b> respectively), remote telemetry <b>1180,</b> and other vehicle or portable devices <b>1190.</b>

0084The server equipment <b>1110</b> includes a VoIP controller <b>1200</b> that is accessed through an NMS terminal <b>1210.</b> The server equipment <b>1110</b> also includes a CAD server <b>1220</b> and a firewall <b>1230</b> through which the server equipment connects with the broadband connections <b>1130</b> and the dispatch equipment <b>1120.</b> There is an access point name (APN) connection <b>1240</b> between the server firewall <b>1230</b> and the broadband connections <b>1130</b> of a cellular communications system.

0085The dispatch equipment <b>1120</b> has a dispatch firewall <b>1250</b> connected to an RoIP Rack <b>1260.</b> Dispatch radio consoles <b>1270</b> and CAD/AVL workstations <b>1280</b> are used for accessing the system. The RoIP Rack <b>1260</b> sends signals to both the LMR system's equipment <b>1290</b> (routers, switches, etc.) and any emergency mutual aid channels <b>1300.</b> The equipment of the LMR system <b>1290</b> transmits via the LMR radio system <b>1140.</b>

0086Each of the three fleet vehicles (<b>1150, 1160,</b> and <b>1170</b>) and remote telemetry <b>1180</b> receives communications from the broadband connection <b>1130</b> through a cellular router <b>1310</b> such as the Cradlepoint IBR1100, the Digital Transport WR44, or the Digital Transport WR21, or the Sierra Wireless MG90. Each of the three fleet vehicles (<b>1150, 1160,</b> and <b>1170</b>) and remote telemetry <b>1180</b> also receives communications from the LMR radio system <b>1140</b> via radios <b>1320</b> such as the Harris M7300, the Motorola APX 4500, the Kenwood NX-720, or the PowerTrunk MDT-400. The cellular router <b>1310</b> and the radios <b>1320</b> communicate with an onboard URLC <b>1330</b> having functionality previously described. In addition to communicating with the fleet vehicles (<b>1150, 1160,</b> and <b>1170</b>) and the remote telemetry <b>1180,</b> the system is also able to communicate with other devices such as LMR portable radios <b>1340,</b> mobile devices with cellular connections <b>1350,</b> and dual mode devices <b>1360</b> that are able to connect via LMR and cellular such as the Motorola Lex L11. The cellular router <b>1310,</b> the radios <b>1320,</b> and the onboard URLC <b>1330,</b> the LMR portable radios 1340, the mobile devices with cellular connections 1350 and the dual mode devices 1360 are also referred to as mobile devices.

0087In addition to the features previously discussed, numerous other features may be incorporated into the hardened VoIP system. For example, an authentication subsystem may be used to validate that a device is allowed to access the hardened VoIP infrastructure, and an authorization subsystem may be used to ensure that a user and a user's password for the system are valid. Numerous accounting/billing schemes may be utilized by a variety of agencies or groups. For example, a taxi dispatch system may purchase a hardened VoIP system while offsetting a portion of the cost by selling talk group functionality to other organizations or even individuals.

0088Numerous agencies (fire, police, EMT, etc.) of a municipality may be supported by a single system, and the talk group trunking functionality may be utilized to allow the various agencies to share communications lines without interfering with each other. The system may include encryption functionality that provides various levels of encryption to ensure user compliance with privacy, local, state, and federal regulations. A Network Management Subsystem client may also be used that allows for the addition, deletion, and editing of system parameters such as system IDs, talk groups, agencies, usernames, device IDs and passwords. The system may be configured to allow two users to converse or text without the rest of the user group hearing the conversation, a private call feature may be implemented to allow communications between two users rather than being broadcast to the active registered talk group users.