Abstract: Examples disclosed herein may involve a computing system that is operable to (i) identify a source map and a target map for transferring map data, where the source map and the target map have different respective coordinate frames and respective coverage areas that at least partially overlap, (ii) select a real-world element for which to transfer previously-created map data from the source map to the target map, (iii) select a source image associated with the source map in which the selected real-world element appears and has been labeled, (iv) select a target image associated with the target map in which the selected real-world element appears, (v) derive a geometric relationship between the source image and the target image, and (vi) use the derived geometric relationship between the source image and the target image to determine a position of the real-world element within the respective coordinate frame of the target map.

Abstract: An artificial intelligence (AI) prediction engine is used to correctly classify an entity based on a predetermined classification taxonomy, e.g., NAICS. The engine and process for using takes as inputs an entity's social presence (e.g., name, web address, etc.) and address. The AI prediction engine employs various machine learning models to make a classification prediction.

Abstract: This disclosure describes a card-scan system that can update a card-scan machine learning model to improve card-character predictions for payment cards, driver licenses, or other character-bearing cards by using an active-learning technique that learns from card-scan representations indicating corrections by users to predicted card characters. In particular, the disclosed systems can use a client device to capture and analyze a set of card images of a character-bearing card to predict card characters using a card-scan machine learning model. The disclosed systems can further receive card-scan gradients representing one or more corrections to incorrectly predicted card characters. Based on the card-scan gradients, the disclosed systems can generate active-learning metrics and retrain or update the card-scan machine learning model based on such active-learning metrics.

Abstract: A control apparatus with automated test suites according to an embodiment includes capability information storage, and at least one hardware processor configured to function as an analyzer, an organizer, and an executor. The capability information storage stores therein a plurality of capabilities defining actions indicating attack methods. The analyzer parses at least one of network structure information of a system under test and vulnerability information of the system under test to extract the actions from the capabilities. The organizer generates an attack path through which an achieved state of an attack goal is reached by combining the actions extracted by the analyzer. The executor executes the actions included in the attack path.

Abstract: Examples disclosed herein may involve a computing system that is operable to (i) identify a source map and a target map for transferring map data, where the source map and the target map have different respective coordinate frames and respective coverage areas that at least partially overlap, (ii) select a real-world element for which to transfer previously-created map data from the source map to the target map, (iii) select a source image associated with the source map in which the selected real-world element appears and has been labeled, (iv) select a target image associated with the target map in which the selected real-world element appears, (v) derive a geometric relationship between the source image and the target image, and (vi) use the derived geometric relationship between the source image and the target image to determine a position of the real-world element within the respective coordinate frame of the target map.

Abstract: Examples disclosed herein may involve a computing system configured to (i) identify a stationary element in a real-world environment for which to infer information, (ii) detect a semantic relationship between the stationary element and one or more other stationary elements in the real-world environment, (iii) based on the detected semantic relationship, infer information about the stationary element, (iv) include the inferred information about the stationary element within a set of information that describes the stationary element.

Abstract: A method of employing an encoding scheme for media independent handover, comprising: having at least some data type carry only required information to determine the end of data without a length value.

Abstract: A self-organizing IP multimedia subsystem exhibiting node splitting and node merging functions wherein any node within the self organizing IP multimedia subsystem may assume any role thereby providing node balancing and fault tolerance to an overall network.

Abstract: A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. Methods for mitigating delay during SA re-association and mitigating the IPSec tunnel overhead for signaling and media at the Mobile Node are given. In one embodiment, SA keys can be transferred from the old P-CSCF to new P-CSCF, enabling the establishment of SAs before Mobile Node physically moves to the new subnet in a network. Proactive handover is used. In another embodiment, SA keys are transferred from S-CSCF to new P-CSCF. In this case, the SA keys are transferred to the new P-CSCF by S-CSCF through a context transfer mechanism well in advance so that SAs may be established before Mobile Node physically moves to new subnet. In another embodiment, methods for mitigating IPSec tunnel overhead are presented.

Abstract: A mechanism by which handoff delay can be minimized while not compromising the IMS/MMD security and also protecting the media if required by certain applications is presented. One proactive method includes proactive authentication. Another proactive method includes proactive security association, such as transferring SA keys from old proxy to new proxy, or transferring keys through serving signal entities. Reactive methods include transferring SA keys from old proxy to new proxy, using either push or pull technology. Other reactive methods include transferring keys through serving signal entities using either push or pull technology.

Abstract: A mobile device includes: multiple interfaces that are configured to support a various access technology such as 3G or Wi-Fi etc. A public land mobile network (PLMN) selector that generates a list for each of the PLMN networks that provide coverage to the mobile device. A PLMN selection policy parameter that is set to True or False to allow or prohibit the selection of PLMN networks by the mobile device based on the generated list where the generated list includes information as to different access technologies and selection priorities supported on the PLMN access networks providing coverage to the mobile device. In particular, when the PLMN selection policy parameter is set to True, multiple PLMN registrations are allowed; and when the A PLMN selection policy parameter is set to False, multiple PLMN registrations are prohibited.

Abstract: In some of the preferred embodiments, a method for network discovery of a mobile device to use at least one of a plurality of access networks within an IP network includes: obtaining specified network information in the vicinity of a given location based on a set of criteria when a mobile is connected to the IP network from any location.

Abstract: According to some embodiments, a key management apparatus for deploying in a smart grid system adapted to receive metering data from smart meters connected to at least one relay via a network, includes: a key control mechanism that derives a key array of individual purpose specific keys from one master key such that the purpose specific key in the key array are each independent cryptographic keys for each specific usage in an application or for each application if there is only one specific usage in an application.

Abstract: A solution framework is employed that includes defining of a mechanism to run multiple queries in a single message exchange, along with a priority on a per-query basis. In some embodiments, a system for facilitating handover of a mobile device across heterogeneous access networks by ensuring response to queries transmitted by the mobile device includes: a) a mobile device having a plurality of wireless network interfaces for communicating over a plurality of heterogeneous access networks, having a media independent handover (MIH) entity to facilitate handovers between the heterogeneous networks, and configured to transmit queries related to handover operation between the heterogeneous access networks to MIH entities within said heterogeneous access networks; and b) said media independent handover entity of said mobile device being configured to transmit multiple queries in a single message exchange to an MIH entity in an access network with prioritization among said multiple queries.

Abstract: In some of the preferred embodiments, a method for network discovery of a mobile device to use at least one of a plurality of access networks within an IP network includes: obtaining specified network information in the vicinity of a given location based on a set of criteria when a mobile is connected to the IP network from any location.

Abstract: The preferred embodiments involve a mechanism to bootstrap Kerberos from EAP in which EAP is used for initial network access authentication and Kerberos is used for provisioning session keys to multiple different protocols. The preferred embodiments make use of an EAP extension method (EAP-EXT) to realize the mechanism.

Abstract: A packet data network gateway device may receive packet network data at a packet data network gateway device; filter the received packet network data to extract information associated with one or more messages in the packet network data; analyze the extracted information; and dynamically determine one or more of policy updates, rules, or thresholds based on the analyzing of the information and information associated with one or more of subscribers, location, existing policies, network operating condition and load.

Abstract: A system and method for route optimization in PMIP having a first mobile node having a local mobility anchor and anchored at an access router and a second mobile node anchored at an access router is presented. The method includes establishing a binding cache at one access router comprising a mapping of mobile node addresses to access router addresses, populating the binding cache, and updating the mapping of the mobile node addresses in response to a handoff of a mobile node from one access router to another access router, so that a packet is transmitted from the first mobile node to the second mobile node using the mapping in the binding cache. The second access router address is obtained by either transmitting the packet from the first mobile node to the local mobility anchor, or querying neighboring access routers, or broadcasting access router addresses from the local mobility anchor.

Abstract: A system and method for mobility support of a mobile node having a home network in a heterogeneous roaming environment is presented. The method comprises the steps of authenticating the mobile node in a visited network and obtaining an address for the mobile node in the visited network, establishing a security connection between a functional component in the visited network and an agent in the home network, creating a home address for the mobile node, and using the home address to generate a SIP signaling address, a SIP media address, and a non-SIP media address, such that SIP non-media is transmitted using the security connection to the SIP signaling address, SIP media is transmitted using the security connection to the SIP media address, and non-SIP media is transmitted using the security connection to the non-SIP media address.

Abstract: A system and method for network selection procedures for simultaneous network connectivity through multiple accesses comprises obtaining stored and registered PLMNs, determining whether PLMNs are both stored PLMN for access technology type Ai and registered PLMN, when no PLMNs are both, performing PLMN selection using a standard procedure, when only one PLMN is both, determining whether the PLMN satisfies a condition, and when the PLMN satisfies the condition, attempting to connect to the PLMN, and when more than one PLMN is both, creating a set of PLMNs, selecting one PLMN that satisfies the condition, from the set PLMN, attempting to connect to the selected PLMN, and when attempting to connect fails, removing the selected PLMN from the set, and selecting another PLMN. In one aspect, the PLMN that minimizes changes is selected. In one aspect, the PLMN that provides access to a larger number of access technologies is selected.