Abstract: A method of processing information centric networking (ICN) interest messages in a delay tolerant networking (DTN) scenario, wherein ICN data mules receive interests for content from end-users and disseminate content to end-users based on the interests and/or during encounters with other ICN data mules, includes performing a popularity estimation of content; appending, by a first end-user when forwarding an interest for given content to a data mule, a nonce to the interest; and employing, by a first data mule, the appended nonce according to predefined rules to maintain and/or record a counter for interests for the given content. The counter functions as a popularity indicator for the given content.

Abstract: A method for providing encrypted data on a client, a cloud or the like includes, providing, for each user, a user-specific encryption key for encrypting user-specific plaintext. A common decryption key is computed with a pre-determined f netion using the user-specific encryption keys as input for the function, The function is a polysized function supporting poly-many additions and a single multiplication. Each user-specific plaintext is encrypted with the corresponding user-specific encryption key resulting in user-specific ciphertexts, The encrypting is performed such that encryption is homomorphic in the user-specific plaintext as well in the user-specific encryption keys. A. common ciphertext is computed with the function using the user-specific ciphertexts as input for the function. The common ciphertext and the common decryption key are provided for decryption.

Abstract: A method for verifying positions of a plurality of monitoring devices includes selecting a second monitoring device by a first monitoring device. A first number of monitoring devices out of the plurality of monitoring devices is supervised, the plurality of monitoring devices being positioned such that each monitoring device of the plurality of monitoring devices can be monitored by at least one other monitoring device of the plurality of monitoring devices. Correct positions of the plurality of monitoring devices have been determined and stored prior to verification, and security information for secure communication has been exchanged between two of the plurality of monitoring devices for all of the plurality of monitoring devices.

Abstract: A search engine for finding objects that correspond to a search request, including an input module for receiving a keyword query from a user, and a search module being configured to map the keyword query to the identifiers of objects that semantically match the keyword or the plurality of keywords contained in the keyword query, and to generate a search result that contains a listing of matching object identifiers, is characterized in that the search module is further configured to generate the search result by considering network layer information about the user within the process of mapping the keyword query to identifiers of matching objects, wherein the network layer information include sophisticated information the search module receives from a dedicated entity.

Abstract: A method for byzantine fault tolerant data replication with a plurality of 2f+1 data servers and one or more clients includes storing data in at least f+1 different data servers out of the 2f+1 data servers, and storing metadata of the stored data under a metadata-identifier in a metadata-service (MDS). The stored metadata includes a unique identifier of the stored data, a fingerprint of the stored data, and a list of the at least f+1 different data servers which have stored the data.

Abstract: A method for determining a path of an object for moving from a starting node representing a starting state to an end state includes a) determining a plurality of child nodes to a parent node, b) checking whether transitions from the parent node to each of the child nodes are free of obstacles and excluding partial paths that are not free of obstacles, c) computing a cost value for each of the non-excluded partial paths, d) adding the computed cost value to a cost value from the starting node to the parent node, e) adding an estimated or expected cost value for a partial path from each of the child nodes to an end node representing an end state, f) determining a lowest overall cost value and selecting a new parent node, and g) repeatedly performing steps a)-f) until at least one termination condition is fulfilled.

Abstract: A method for controlling energy supply to different units includes receiving, by an aggregator, the demand request signal, and performing, by the aggregator, an allocation of the requested demand modification to the units based on a negotiating process with the units for minimizing an impact of the allocation on a future operation of another utility or of other utilities. Each unit is connected to multiple utilities for receiving enemy for operating its energy systems. A demand request signal is provided by at least one operational entity and/or by at least one utility for requesting a demand modification of a utility and/or of one form of energy.

Abstract: A method for monitoring a status in a form of presence and/or absence of a subscribed network entity in a network by a presence service, wherein the network is a software defined network having one or more forwarding elements being configurable for recognizing and applying one or more actions on packets being forwarded by the forwarding elements and one or more network entities, includes monitoring the status of the subscribed network entity. The monitoring the status of the subscribed network entity includes providing the presence service with a status update of the selected network entity only when at least one of the one or more forwarding elements, to which the selected network entity is directly connected, has detected a change in the presence status of the subscribed network entity; and dropping packets of the subscribed network entity destined for the presence service.

Abstract: A communication method in LIPA/SIPTO architecture is provided which, when a user equipment (UE) is to connect from a serving area to an external network, allows re-selection of an optimal gateway. The communication method allows selecting a gateway apparatus physically or topologically close to a site, where the user equipment is attached.

Abstract: A method of providing access control for a software defined network (SDN) controller includes triggering, by the SDN controller upon receiving a trigger event from a data plane of the software defined network, one or more applications that are installed to run at a control plane of the software defined network atop the SDN controller to react to the trigger event, applying, by the SDN controller before triggering applications due to a trigger event, a conflict resolution scheme. The conflict resolution scheme includes defining flow spaces and assigning each flow space a priority, selecting from these flow spaces a single selected flow space that complies with a predetermined policy, determining, a single master application according to predefined criteria, and triggering, in addition to the master application, only those applications whose reactions to the trigger event do not conflict with the master application.

Abstract: A method for generating a virtual device resource (VDR) accessible by an application includes providing a request for discovery of information by one or more applications; converting the provided request into one or more requests for one or more BigData repositories, wherein the converted one or more requests are supported by the one or more BigData repositories and fit the provided request; transmitting the converted one or more requests to the one or more BigData repositories; executing the transmitted one or more requests resulting in one or more descriptions of virtual device resources; selecting one or more virtual device resources (MR) based on the one or more descriptions; and generating the selected, one or more virtual device resources (VDR).

Abstract: A method for performing distributed geographic event processing includes: defining a geographical state system for a universe of locations that includes a model specifying a state transition function and a global aggregation function; providing a local state system for a subset of the universe of locations being defined as a single-machine implementation of the geographical state system; providing a local aggregation function being defined as an implementation of the global aggregation function of the geographical state system; and creating, via a processor, distributed scalable deployments that implement the geographical state system by dividing the universe of locations geographically among different computational nodes and by instantiating on each of the computational nodes an instance of the local state system and the local aggregation function conforming to the subset of the universe of locations assigned to the respective computational node.

Abstract: A method for check pointing a global state of a distributed system with one or more distributed applications organized in a directed acyclic graph topology includes, upon receiving a marker in an active input channel of a first task application, putting an active input channel on hold, performing check pointing by saving an internal state of the first task application when all input channels have received a marker and are put on hold, forwarding the marker via all output channels of the first task application to at least one other task application of the one or more task applications, and reactivating all input channels of the first task application, wherein the global state is a union of all internal states of the task applications after each of the one or more task applications has been check pointed.

Abstract: For achieving a coordinated and opportunistic actuator control a method for controlling physical actuators in pervasive computing environments is claimed, wherein an entity—actuation space—is provided, the actuation space being configured to manage actuation requests and actuation status information, wherein at least one resource user sends one or more actuation requests to the actuation space that stores the one or more actuation requests, wherein at least one actuator resource controls at least one physical actuator on the basis of one or more of the actuation requests stored in the actuation space, wherein the at least one actuator resource sends actuation status information corresponding to one or more of the actuation requests to the actuation space, and wherein the at least one resource user and the at least one actuator resource share the actuation space. Furthermore, a corresponding system is disclosed.

Abstract: A method for operating a software defined network having forwarding elements (S) and a software defined network controller (C) for controlling the forwarding elements (S) includes creating packet template information (PTI), including at least one of one or more packet templates (PT) or packet template handling instructions (FII), providing the packet template information (PTI) to one or more selected forwarding elements, the one or more selected forwarding elements being selected from the forwarding elements (5), triggering the one or more selected forwarding elements to generate an output packet (RESP) based on the packet template information (PTI), and sending, by the selected forwarding elements, the generated output packet (RESP).

Abstract: A method for performing a secure boot of a mobile device computing system that includes a tamper-resistant hardware that provides secure storage of at least a cryptographic private key includes performing a measurement on each system and/or application specific file before said file is being loaded or launched by a kernel module or an application loader of the computing system, directing the measurement results to the tamper-resistant hardware, maintaining an extend-only global counter at the tamper-resistant hardware, increasing the extend-only global counter upon receiving a measurement result, executing a signing process in which the tamper-resistant hardware signs the extend-only global counter together with the measurement result using the cryptographic private key, and keeping a measurement list at the computing system that includes signatures generated by the tamper-resistant hardware.

Abstract: Method for operating a wireless network, wherein at least one MIMO (Multiple Input Multiple Output) group of different stations will be constructed by a grouping algorithm based on a grouping metric for providing a MIMO group of different stations addressable simultaneously in space by a base station using MIMO techniques and meeting a definable level of performance quality, the grouping metric being based on an SINR (Signal-to-Interference and Noise Ratio) experienced by each station within the MIMO group. The method includes: computing an SNR (Signal-to-Noise Ratio) that a new station would experience without any interference when added to an existing MIMO group; computing an SINR estimate by correcting the SNR with the sum of spatial correlations between the new and each of the stations already present in the existing MIMO group; and using the SINR estimate for deciding whether the new station can be added to the existing MIMO group.

Abstract: For providing a simple monitoring mechanism with reduced resource and performance requirements a method for monitoring traffic in a network is claimed, wherein a monitoring activity of at least two monitoring probes of the network is coordinated by a coordinating element, wherein at least two nodes of the network are able to operate as coordinating elements and wherein the responsibility for coordinating the monitoring activity of the monitoring probes is split between the nodes according to a compressed representation of flow parameter keys. Further, an according network is described, preferably for carrying out the above mentioned method.

Abstract: A method for distributing user equipment context in an evolved packet system, including a plurality of user equipment, at least one eNodeB, a first mobility management entity and a second mobility management entity and one serving gateway connected to the first and second mobility management entity, the plurality of user equipment being connected via one of the eNodeBs to the second mobility management entity and to the serving gateway, wherein the user equipment context for the plurality of user equipment is each stored at the second mobility management entity, includes: a) transferring bulk user equipment context for the plurality of user equipment context, each having a mobility management entity code, to the first mobility management entity, b) reconfiguring the mobility management entity codes, c) storing the transferred user equipment context in the first mobility management entity, and d) transferring reconfigured mobility management entity codes to the at least one eNodeB.

Abstract: A method of assembling a frame in an Orthogonal Frequency Division Multiple Access (OFDMA)-based communication system, wherein data packets to be transmitted from a broadcast station to a receiver are given a rectangular shape in terms of the two dimensions—time and frequency—of the OFDMA frame, and wherein the data packets are successively fitted into the OFDMA frame by way of a frame assembly scheduler, is characterized in that the filling process of the OFDMA frame is based on an ordered list of data structures that represent the current empty space within the OFDMA frame. Furthermore, a corresponding communication system is disclosed.