Abstract: A cloud control system for LAN-based controlled apparatus and method for the same is disclosed. The cloud control system includes a cloud server and a LAN sub-system. The LAN sub-system includes a LAN communication apparatus, a LAN server host, a controlled apparatus that is controlled by the LAN server host, and a an electronic device that may connect to the cloud server and the LAN server host. After logging in to the cloud server through the LAN communication apparatus of the LAN sub-system, the electronic device may acquire the a path linking to the controlled apparatus and may connect to and operate the controlled apparatus by selecting the apparatus linking path.

Abstract: An apparatus for real-time management of a plurality of security components (SCs) connected to a network. The apparatus comprises a network interface for communication with the plurality of SCs connected to the network; a permanent storage unit for storing at least logon information to each of the plurality of SCs; a security component management unit (SCMU) having a plurality of integration point components (IPCs) enabled to identify the plurality of SCs connected to the network; a temporal storage unit for storing at least data collected from the plurality of SCs in the form of information units, each of the information units has a predefined limited lifetime after which such information unit is voided, thereby rendering the apparatus stateless; and a processing unit for carrying out at least one process designated to perform a specific generic task irrespective of a physical manifestation of each of the plurality of SCs.

Abstract: Techniques to avoid polarization in a communication network include a network switch or device having a first interface to receive a data unit or packet, and a second interface via which the packet is transmitted from the network device. The network device includes a hash value generator configured to generate, using a depolarizer, a depolarized key from an initial key (where the initial key is based on contents of the packet and the depolarizer is unique to the network device), and to generate a hash value based on the depolarized key and the packet by using a hash function that is common to all network devices in the network. The hash value may be optionally modified to load balance egress traffic of the network device. The network device selects an egress link or port, such as by determining an index into an egress table based on the (modified) hash value.

Abstract: Aspects of the disclosure relates to managed access to content and/or services in a network environment. In certain aspects, tokens or other artifacts can be utilized for authentication and authorization.

Abstract: A programmed computer assigns an authentication requirement rating to an activity and an authentication capability rating to each of one or more authentication methods. The programmed computer receives a request from a user to perform the activity and a first authentication sample result based on a first authentication attempt performed by the user using a first authentication method. The programmed computer determines a current authentication rating for the user based on the authentication capability rating of the first authentication method and the first authentication sample result. The programmed computer then determines whether to allow the user to perform the requested activity based on a comparison of the authentication requirement rating associated with the activity requested by the user and the current authentication rating determined for the user. The programmed computer provides a final authentication result.

Abstract: Systems and methods for secure communications are provided. In some aspects, a method of signalling an interception time period is described. At least one keying information used by a key management service (KMS) to regenerate a key is stored. A start_interception message is signaled from an administration function (ADMF) to a call session control function (CSCF). A halt_message is signaled from the ADMF to the CSCF.

Abstract: Techniques for facilitating operation of a communication device having a first internet protocol (IP) address in a first network and a second IP address in a second network include detecting a presence of a network address translation (NAT) table; implementing, when the NAT table is present, a message exchange protocol to obtain a mapping between the first IP address and the second IP address; and reporting, in a communication message, the mapping between the first IP address and the second IP address. In one operational scenario, the first network is a 3 GPP network and the second network is a broadband fixed network such as a DSL or a cable modem network.

Abstract: A cross-domain system for transferring files from a client to a server. A first server in the first network domain receives and stores files from the client via the first network. The received files are processed based on predetermined instructions stored in an associated file. The processed received files are transmitted to a second server via a one-way data link. The second server in the second network domain receives and stores the processed received files. The received files are further processed based on predetermined instructions stored in an associated file. The further processed received files are transmitted to the server via the second network. The two associated files are stored in permanent memory with security policies which prevent the files from disrupting operation of the first and second servers, respectively. The security policies allow the associated files to be overwritten to update the processing performed by the associated server.

Abstract: In one embodiment, a method includes identifying a second user of a social-networking system authorized to receive data of a first data type from a first wireless device, the identifying based on one or more attributes of one or more edges between nodes in a social graph of the social-networking system, one of the nodes corresponding to a first user and another of the nodes corresponding to the second user. The method also includes determining a distance between the second user and the first wireless device. The method further includes sending the data of the first data type when the distance is less than a specific distance.

Abstract: Provided is a cryptographic device implementing an S-Box of an encryption algorithm using a many-to-one binary function. The cryptographic device includes: arrays of first logic gates including I first logic gates which each receive 2 bits of an input signal; 2N second logic gates which each receive corresponding J bits from among I bits output from the arrays of the first logic gates; and L third logic gates which each receive K bits from among 2N bits output from the second logic gates, wherein there is a many-to-one correspondence between the N bits of the input signal and the K bits input to each of the third logic gates, and wherein the N, I, J, K, and L are positive integers. Because a signal output from each array includes only one active bit, current is always consumed constantly to prevent internal data from leaking out to a hacker.

Abstract: A method for implementing a Hyper Text Transfer Protocol (HTTP)-based streaming service is disclosed in the embodiments of the present invention. The method includes: a server receives a request from a client, and returns, to the client according to a request for a media presentation description file, a response that carries the media presentation description file; the server sets up a time synchronization relationship with the client; and the server receives a uniform resource locator from the client, obtains a corresponding media fragment file, and returns the media fragment file to the client for playing on the client, where the uniform resource locator is a uniform resource locator of a media fragment that is determined by the client and is required to be played, and is used for the client to request the media fragment file from the server.

Abstract: In one example, a device for retrieving multimedia data, the device comprising one or more processors configured to analyze information of a manifest file for multimedia content, wherein the information of the manifest file indicates that at least one representation of the multimedia content includes a temporal sub-sequence, determine one or more locations of data for the temporal sub-sequence, and submit one or more requests for the data for the temporal sub-sequence.

Abstract: Entities such as resource and service providers can utilize a ticketing system to define operational actions as primitives that can be stored, combined into more complex workflows, and executed in a restricted zone wherein a portion of the resources or services are not directly accessible to those providers. These primitives can be stored in the provider environment and shared with the restricted zone, in order to provide a structured approach to the sharing of operational knowledge. When a primitive is first received to the restricted zone, a person vetted by the customer associated with the restricted zone can review and approve the primitive, and can cause the primitive to be executed in the restricted zone. When that same primitive is subsequently received to the restricted zone, a lookup can be performed to determine that an approval exists, whereby the primitive can be executed in the restricted zone without another review.

Abstract: Methods, system, and media for detecting malware are disclosed. A network may be monitored to collect samples of the network traffic. Feature vectors may be extracted from the sampled network traffic. One or more machine learning models may be applied to the feature vectors to produce a score indicative of the presence of a particular type of malware. One or more scores obtained by applying the machine learning models may be fused by another machine learning model into a resulting score. A threshold value may be calculated to accompany a score indicating the likelihood that the traffic sample indicates the presence of malware and the likely effectiveness of planned remediation effort. An alert may be generated from the score and the threshold when the threshold is acceded.

Abstract: A Right Object renewal method and apparatus for a right-protected digital broadcast service that is capable of predicting the expiration of a Right Object issued for the right-protected broadcast channel and renewing the Right Object prior to the expiration of the Right object based on the predicted expiry is provided.

Abstract: An electronic device is provided with an integral transducer used to update a random data pool without connection to an external source of new random data. In one embodiment, there is provided a method for providing random data on an electronic device, the method comprising: storing random data in a random data pool in a memory; sensing motion of the electronic device using a transducer integrally carried as part of the electronic device, wherein the transducer is configured to generate an output in response to sensed motion; generating new random data in accordance with the output of a transducer when sensed motion exceeds a threshold; and storing the new random data in the random data pool in the memory.

Abstract: A method, system and a computer program product. The method may include: allocating or receiving allocated bit rates to a plurality of streaming media flows, each streaming media flow comprises a plurality of chunks and is expected to flow over a last mile channel that is bandwidth limited; receiving a plurality of chunk requests from clients that are hosted on user devices, each chunk request indicates a requested bit rate for streaming a media chunk that belongs to the streaming media flow; changing at least one chunk request to comply with an allocated bit rate, if the requested bit rate does not comply with the allocated bit rate, to provide at least one new chunk request; and sending the at least one new chunk request to a media streamer that is expected to stream the streaming media flow to the user device.

Abstract: An aspect provides a method, including: gathering, with an information handling device, client system identification data of a client system; providing, with the information handling device, the client system with at least one cryptographic key; transmitting, with the information handling device, the client system identification data and a request for security policy override to a third party; receiving, with the information handling device, encrypted approval data from the third party; and transmitting, with the information handling device, encrypted approval data to the client system. Other aspects are described and claimed.

Abstract: A controlled device generates an authentication random number. A control device accepts input of a random number from an input device. The controlled device verifies if the displayed authentication random number and the random number transferred from the control device are identical to transfer a public key of the controlled device to the control device. The controlled device generates a token. The control device encrypts the token with the public key of the controlled device. The controlled device decrypts the token and verifies if the token transferred from the control device and the generated token are identical to generate a session key. The control device stores the session key into the storage device. The control device controlling the controlled device by encrypted communication using the session key.

Abstract: An apparatus including: an input optical interface configured to receive a series of optical input signals each including photons; an encoder configured to encode a quantum key for distribution by encoding each of the series of received optical input signals with a measurable state; an attenuator configured to attenuate each of the encoded optical input signals to create a series of quantum optical signals; and an output optical interface configured to send the series of quantum optical signals to the remote apparatus via a quantum communication channel.