Abstract: A resource circuit board is configured for use by a physical migration system, the resource circuit board including at least one common interface shaped and configured to connect to an interconnect of a base circuit board; and at least one migration-support interface the at least one common interface being different from the at least one migration-support interface, the at least one migration-support interface: shaped to connect to at least one corresponding migration-support interface of the physical migration system; and configured to provide at least one of power and connectivity to the resource circuit board during a physical migration of the resource circuit board.

Abstract: Systems and methods for managing firewall rules in a distributed firewall system are provided. A first subset of rules is identified to be removed from a first firewall in a first domain and to be added to a second firewall in a second domain. A second subset of rules is identified to be duplicated from the first firewall to the second firewall. Usage statistics for the rules in the identified subsets are synchronized between the first and second firewalls and the second firewall can be configured accordingly.

Abstract: This hydraulic system comprises: an operation device; a control valve that, the larger the operation signal output from the operation device, increases the opening area of a passage that supplies hydraulic oil to a hydraulic actuator; a variable displacement pump; a regulator that, the higher the control pressure, increases the tilt angle of the pump; a first proportional solenoid valve and a second proportional solenoid valve that, the larger the operation signal output from the operation device, output a higher secondary pressure; an unload valve that, the higher the secondary pressure output from the first proportional solenoid valve, decreases the opening area from a fully opened state towards a fully closed state; and a high pressure selection valve that selects and guides to the regulator, as the control pressure, the highest amongst the secondary pressure output from the first proportional solenoid valve and the secondary pressure output from the second proportional solenoid valve.

Abstract: A resource circuit board is configured for use by a physical migration system, the resource circuit board including at least one common interface shaped and configured to connect to an interconnect of a base circuit board; and at least one migration-support interface the at least one common interface being different from the at least one migration-support interface, the at least one migration-support interface: shaped to connect to at least one corresponding migration-support interface of the physical migration system; and configured to provide at least one of power and connectivity to the resource circuit board during a physical migration of the resource circuit board.

Abstract: Systems and methods relating to a smart home system and, in particular, a manager for a smart home system are disclosed. In some embodiments, a method of operation of a manager of a smart home comprises receiving a resource request from a smart home appliance for a resource of the smart home. The resource request comprises information indicative of a resource bandwidth being requested by the smart home appliance and information indicative of a duration of time for which the resource bandwidth is being requested. The method further comprises scheduling the request based on the resource bandwidth being requested by the smart home appliance, the duration of time for which the resource bandwidth is being requested, and a total resource bandwidth limit for the smart home for the resource requested via the resource request and sending a confirmation of a resource allocation from the manager to the smart home appliance.

Abstract: Systems and methods for managing firewall rules in a distributed firewall system are provided. A first subset of rules is identified to be removed from a first firewall in a first domain and to be added to a second firewall in a second domain. A second subset of rules is identified to be duplicated from the first firewall to the second firewall. Usage statistics for the rules in the identified subsets are synchronized between the first and second firewalls and the second firewall can be configured accordingly.

Abstract: Providing security for one or more network flows may include a security deployment node decomposing one or more virtual security appliances (265) of a logical security architecture (255) into security modules (310). The security deployment node orders the security modules (310) into a sequence (320) that implements a selected workflow pattern (400). The selected workflow pattern (400) may be selected from a workflow pattern database, and may define the security to be provided for a flow, for example, according to known best practices. The sequence (320) is then divided into segments (330), and the segments (330) are assigned to different groups (220) of network nodes (230) in a network (200). For each segment (330), an assignment of each security module (310) in the segment (330) to a network node (230) within the group (220) to which the segment (330) is assigned is computed. The network (200) is then configured according to the assignments.

Abstract: Systems and methods relating to a smart home system and, in particular, a manager for a smart home system are disclosed. In some embodiments, a method of operation of a manager of a smart home comprises receiving a resource request from a smart home appliance for a resource of the smart home. The resource request comprises information indicative of a resource bandwidth being requested by the smart home appliance and information indicative of a duration of time for which the resource bandwidth is being requested. The method further comprises scheduling the request based on the resource bandwidth being requested by the smart home appliance, the duration of time for which the resource bandwidth is being requested, and a total resource bandwidth limit for the smart home for the resource requested via the resource request and sending a confirmation of a resource allocation from the manager to the smart home appliance.

Abstract: Systems and methods for ensuring multi-tenant isolation in a data center are provided. A switch, or virtualized switch, can be used to de-multiplex incoming traffic between a number of data centers tenants and to direct traffic to the appropriate virtual slice for an identified tenant. The switch can store tenant identifying information received from a master controller and packet forwarding rules received from at least one tenant controller. The packet handling rules are associated with a specific tenant and can be used to forward traffic to its destination.

Abstract: Providing security for one or more network flows may include a security deployment node decomposing one or more virtual security appliances (265) of a logical security architecture (255) into security modules (310). The security deployment node orders the security modules (310) into a sequence (320) that implements a selected workflow pattern (400). The selected workflow pattern (400) may be selected from a workflow pattern database, and may define the security to be provided for a flow, for example, according to known best practices. The sequence (320) is then divided into segments (330), and the segments (330) are assigned to different groups (220) of network nodes (230) in a network (200). For each segment (330), an assignment of each security module (310) in the segment (330) to a network node (230) within the group (220) to which the segment (330) is assigned is computed. The network (200) is then configured according to the assignments.

Abstract: Systems and methods for assigning virtualized network elements to physical resources in a cloud computing environment are provided. A resource request is received as input indicating a required number of virtual machines and a set of virtual flows, each of the virtual flows indicating a connection between two virtual machines which need to communicate with one another. Each of the requested virtual machines is assigned to a physical server. The set of virtual flows can be modified to remove any virtual flow connecting virtual machines which have been assigned to the same physical server. Each of the virtual flows in the modified set is assigned to a physical link. If a bandwidth capacity of a requested virtual flow is greater than the available bandwidth of a single physical link between servers, multiple links can be allocated to the virtual flow.

Abstract: Systems and methods for ensuring multi-tenant isolation in a data center are provided. A switch, or virtualized switch, can be used to de-multiplex incoming traffic between a number of data centers tenants and to direct traffic to the appropriate virtual slice for an identified tenant. The switch can store tenant identifying information received from a master controller and packet forwarding rules received from at least one tenant controller. The packet handling rules are associated with a specific tenant and can be used to forward traffic to its destination.

Abstract: A method and system for measuring the energy of a signal in which samples of the signal are generated, analytical signals are produced from said samples of the signal, a convolution of an instantaneous autocorrelation function is computed from said analytical signals, and from a CB kernel derived from a Gaussian kernel and having compact support properties, and a time-frequency distribution of the energy of the signal from is determined from said instantaneous autocorrelation function.

Abstract: A method and a system for measuring the energy of a signal is based on the use of a time-frequency distribution using as kernel a bi-dimensional filter having compact support properties. The two-dimentional filter is applied to the two-dimensional correlation function of the signal to be analyzed. The system includes an acquisition unit for providing samples of the signal, a Hilbert transformer for producing an alytical signals from those samples, and a local correlator for computing the convolutions of a kernel derived from a Gaussian kernel and having compact support properties and instantaneous autocorrelation functions so as to yield generalized instantaneous autocorrelation functions, and a Fourier transformer for determining information related to the energy of the signal from the derived generalized instantaneous autocorrelation functions. The method and system allows a better reduction of false energy observances (interference) while providing good resolution in time and in frequency.