Abstract: Aspects of the disclosure relate to a method of operating a user equipment (UE) for wireless communication with a network. In some aspects, the UE obtains a medium access control (MAC) control element (CE) from a network. The MAC CE may be configured to indicate any one of a plurality of state transition actions for a secondary cell. The UE transitions to a secondary cell dormant state when a state transition action indicated by the MAC CE includes a transition to the secondary cell dormant state. The UE operates in the secondary cell dormant state.

Abstract: In example embodiments, techniques are described for using workspace databases to provide workspace resources to customize sessions of applications. File-based workspace databases are maintained in workspace files in a local file system. Cloud-based workspace databases are maintained in a cloud-based blob storage container of a storage account of a cloud storage system. Each cloud-based blob storage container may hold multiple cloud-based workspace databases, including multiple versions of the same database. To use a cloud-based workspace database, a backend module of an application may create an in-memory cloud container object that represents a connection to the cloud-based blob storage container. It may be attached to an in-memory object configured to manage a local cache of blocks of workspace databases. Access to the cloud-based blob storage container may be managed by access tokens provided by a container authority.

Abstract: A policy control device includes an acquisition unit configured to acquire an amount of communication of an accommodated user terminal from a relay device that notifies the amount of communication when the amount of communication exceeds a communication amount threshold value, a calculation unit configured to calculate a communication speed by using an amount of communication in a past fixed period of time including at least the amount of communication currently acquired by the acquisition unit, and calculate the communication amount threshold value based on the calculated communication speed, and a notification unit configured to notify the relay device of the communication amount threshold value calculated by the calculation unit.

Abstract: Systems, methods, and software can be used for securing in-tunnel messages. One example of a method includes establishing a tunneling connection between a server and an endpoint. The method further includes receiving a packet from the server over the tunneling connection. The method yet further includes determining that the packet comprises a tunneling control message based on at least one address in the packet. Based on the determination of a received packet comprising a tunneling control message, the method can ensure the security of in-tunnel messages based on an indication in the tunneling control message.

Abstract: Described herein are systems, methods, and non-transitory computer readable media for defining and executing functions for determining a matching entity that is relevant to an entity of interest when, for example, there is a significant number of intermediary links and entities between the matching entity and the entity of interest. A visual depiction of a path traversal from a seed input entity to an output matched entity can be presented to an end user in a manner that allows the end user to ascertain the sequence of intermediary links and entities that connect the matched entity to the seed entity.

Abstract: According to some embodiments, system and methods are provided, comprising receiving, from a network configuration module, configuration data at a network driver of a communication network; configuring the network driver based on the received configuration data; receiving one or more data packets at the network driver from an application; determining that one or more segregation features are present in the data packet based on the received configuration data; transmitting the one or more data packets based on the one or more segregation features; and controlling one or more operations of an installed product based on the transmitted one or more data packets. Numerous other aspects are provided.

Abstract: Manifest files for proxies within an application mesh or service mesh are created using parallel computing. Virtual services in a mesh definition are identified. For each of the virtual services, one or more virtual nodes that receive traffic from the virtual service are identified. For each of the virtual nodes that receive traffic from the virtual service, an edge is added to a first graph. Virtual nodes that send network traffic to at least one of the virtual services are then identified. For each virtual node that sends traffic to the virtual service, an edge is added to a second graph. Then an optimized per node network topology is generated based at least in part on the first graph and the second graph.

Abstract: When congestion occurs, the ENUM/DNS server can identify a priority packet without relaying on origin terminal information. An ENUM/DNS packet priority control system 100 includes a call control server 10 that, upon receiving a connection request from a terminal, determines whether or not the connection request is to be subjected to priority processing based on predetermined determination logic, and generates an ENUM/DNS packet that has a priority flag upon determining that the connection request is to be subjected to priority processing. The ENUM/DNS packet priority control system 100 also includes an ENUM/DNS server 20 that, upon receiving an ENUM/DNS packet that has the priority flag, determines that the packet is to be subjected to priority processing, and transmits, to the call control server 10, connection destination information that corresponds to the call destination terminal.

Abstract: The invention relates to a method for operating a gateway wherein the method comprises to detect a downlink data packet session transmitted to the first user entity, and to amend the lifetime indicator in at least some of the data packets of the detected downlink data packet session such that the data packets for which the lifetime indicator has been amended, have reached the end of the lifetime and cannot be transmitted further when arriving at the first user entity.

Abstract: In one aspect, a computing device is configured to, while operating as a control device of a networked media playback system that includes a first set of network devices and a second set of network devices, (i) transmit a first message to each network device in the first set of network devices, wherein the first message comprises a command to, at a first time, temporarily disconnect from the computing device via a particular communication protocol, (ii) transmit a second message to each network device in the second set of network devices, wherein the second message comprises a command for the network device in the second set of network devices to, at a second time, test connectivity with the computing device; and (iii) after the second time, determine whether each network device in the second set of network devices was connected to the computing device.

Abstract: Implementing network constraint exceptions on a per device basis is disclosed. A network manager determines that a subscriber device associated with a subscriber network is to be granted an exception to a network constraint of the subscriber network. An aggregation device that is coupled to a set of subscriber networks including the subscriber network is sent aggregation device instructions to grant the exception to packets associated with the subscriber device that flow through the aggregation device. A network gateway device that serves as a network gateway for the subscriber network is sent gateway device instructions to associate packets associated with the subscriber device with information for identifying the packets as being associated with the subscriber device.

Abstract: A network element is configured to efficiently load balance packets through a computer network. The network element receives a packet associated with flow attributes and generates a Load Balancing Flow Vector (LBFV) from the flow attributes. The network element partitions the LBFV into a plurality of LBFV blocks and reorders the LBFV blocks to generate a reordered LBFV. The LBFV blocks are reordered based on a reordering sequence that is different from reordering sequences on other network elements in the computer network. The network element hashes the reordered LBFV to generate a hash key for the packet and selects a next hop link based on the hash key. The next hop link connects the network elements to a next hop network element in the computer network.

Abstract: A method for load balancing application requests across a multi-cluster container orchestration system includes receiving a load-balancing configuration for a multi-cluster service managing access to a set of destination clusters hosting a software application deployed by a user. The multi-cluster service uses the load-balancing configuration to load balance application level traffic across the set of destination clusters. Each destination cluster includes at least one container executing the software application and a respective geographical region. The method also includes receiving an application level request directed toward the software application hosted across the destination clusters. The application level request is received from a client and includes a host name and a geographical location associated with the client. The method also includes routing the request to one of the clusters based on the geographical location of the request and the respective geographical locations of the clusters.

Abstract: Packet protection is described. Data of a group of packets is concatenated with a security key and a sequence number of the packet. A hash mark of the concatenated data is calculated and sent with data or control information in a packet. If each packet has reserved bits, at least some of the packets each has data, a least a portion of the hash mark, and a header having: a first bit that indicates if the hash mark is present, and a second bit that indicates if the packet is used to determine the hash mark. Otherwise, a separate control packet is sent that contains the hash mark, a first sequence number of the group of packets, and a PDU type indicating that the control packet is an integrity protection packet for the group of PDCP packets.

Abstract: The invention relates to a method for operating a gateway wherein the method comprises to detect a downlink data packet session transmitted to the first user entity, and to amend the lifetime indicator in at least some of the data packets of the detected downlink data packet session such that the data packets for which the lifetime indicator has been amended, have reached the end of the lifetime and cannot be transmitted further when arriving at the first user entity.

Abstract: Apparatus and methods for controlling unmanned systems (UMSs), such as unmanned aircraft, are provided. A UMS can include core systems, auxiliary systems, a payload, a physical computer, a network, and a power system. The network can enable the physical computer to communicate with the auxiliary systems using a second communications tier and with the payload using a third communications tier. The network and the physical computer can logically separate the second and third communications tiers. The power system can provide a first, second, and third power domains respectively for the core systems, the auxiliary systems, and for the payload. The power system can include circuitry that inhibits an overcurrent fault in the third power domain from causing an electrical fault in the first and second power domains and that inhibits an overcurrent fault in the second power domain from causing an electrical fault in the first power domain.

Abstract: Systems and methods for managing a network are disclosed. One method can comprise determining a first modulation rate associated with a network device. A beacon can be transmitted at a second modulation rate, wherein the second modulation rate is greater than the first modulation rate. A user device can be associated with the network device based on the beacon if the user device is configured to support the second modulation rate.

Abstract: An account registration method in a Digital Enhanced Cordless Telecommunications (DECT) network cluster system includes: establishing communication with a DECT host through a DECT network cluster constructed in advance; receiving first account information allocated by the DECT host; initiating registration to a server according to the first account information, and obtaining a first registration result; sending the first registration result to the DECT host; if the first registration result is that the registration is successful, entering a first mode; if the first registration result is that the registration is not responded to, obtaining a second registration result fed back by the DECT host; if the second registration result is that the registration is successful, entering a second mode, where in the second mode, the DECT device sends SIP signaling to the DECT host so that the DECT host forwards the SIP signaling.

Abstract: A method for setting a value of an inactivity timer for transitioning between states of a data session in a network comprising a first entity and a second entity providing network analytics is provided. The method includes obtaining, by the second entity, input data comprising communication description information for at least one user equipment (UE), and providing, by the second entity to the first entity, output analytics generated based on the input data, the output analytics comprising UE communications analytics for each data session where the output analytics are used to determining whether to update a value of an inactivity timer for a data session.

Abstract: Methods, apparatus, and system to provide access to a blockchain computer system as a service to a non-blockchain computer system through an application programming interface, wherein the application programming interface is configured through a portal computer and wherein application programming interface calls are implemented by an application programming interface processing computer.

Abstract: The present disclosure provides a system for network delay guarantee based on flow aggregates and interleaved regulators according to an embodiment of the present disclosure includes: at least one unit network configured to guarantee first-in-first-out (FIFO) for flow aggregates; and at least one interleaved regulator per flow aggregate located at input port or an output port of the at least one unit network, wherein among flows passing through the unit network, flows having the same network input port and the same network output port are aggregated into a single flow aggregate.

Abstract: Method for radio communication with base station, by user equipment (UE), apparatus in UE for radio communication with base station, a method for radio communication with a UE by a base station, and an apparatus in a base station for radio communication with a UE are provided. The method for radio communication with a base station, by a UE, includes determining whether to start a first timer based on a predetermined condition, in response to a buffer status reporting triggered; starting the first timer in response to the predetermined condition being satisfied; in response to an uplink resource for a buffer status report transmission being available before the first timer expires, transmitting an uplink packet including a buffer status report using the available uplink resource; and in response to no uplink resource for the buffer status report transmission being available and the first timer expiring, transmitting a scheduling request to the base station.

Abstract: Architectures and techniques are presented that provide an improved mechanism for a subscriber entity to report to a network provider a network issue that affects the performance of an application that uses a service provided by the network provider. The improved mechanism can enable fine granularity with respect to the network issue by identifying the issue on a per-session basis. In response to feedback data that is reported by the subscriber entity, the network provider can perform self-healing or other upgrade techniques to rapidly remedy the network issue.

Abstract: A packet processing method and a network device in a hybrid access network. The method comprises sending, by a first network device, a first data packet in a first sending window to a second network device by using a first tunnel. In response to receiving a first acknowledgement response sent by the second network device, increasing, by the first network device, a size of the first sending window based on a first proportion. In response to not receiving, within a first predetermined time, the first acknowledgement response, decreasing the size of the first sending window based on a second proportion; and in response to determining that the size of the first sending window is greater than or equal to a first threshold, sending a second data packet to a second receiving window of the second network device by using a second sending window.

Abstract: Identifying Internet of Things (IoT) devices with packet flow behavior including by using machine learning models is disclosed. Information associated with a network communication of an IoT device is received. A determination of whether the IoT device has previously been classified is made. In response to determining that the IoT device has not previously been classified, a determination is made that a probability match for the IoT device against a behavior signature exceeds a threshold. Based at least in part on the probability match, a classification of the IoT device is provided to a security appliance configured to apply a policy to the IoT device.

Abstract: The disclosure provides a wireless communication device and a method and apparatus for processing voice data. The wireless communication device includes: a radio frequency chip and a computing power chip. The radio frequency chip includes: a first processor and a radio frequency transceiver. The radio frequency chip and the computing power chip are connected via a preset communication interface, so that the first processor communicates with a second processor in the computing power chip, wherein the second processor is configured to: perform a processing of decoding data received by the radio frequency transceiver and encoding data to be sent for the radio frequency transceiver to send. The computing power chip is provided in the wireless communication device, and a codec with a good processing effect is supported by the second processor, thus the effect of the encoding or decoding processing may be improved.

Abstract: Systems and methods are provided for automatically cueing content for playback on a second device after it is paused or stopped on a first device. A content direction device is in electronic communication with user devices and content providers. This content direction device directs streamed content from the content providers to the various user devices. When a user pauses or stops playback at a first device, the content direction device stops the stream. Later, when the user activates a second device, the content direction device detects the second device and directs the content provider to resume the stream, whereupon it is transmitted to the second device. In this manner, the user can pause or stop playback on one device, later activate another device, and automatically receive a cued stream of the previously paused/stopped content. No user input is required to open an application or window, or to re-select content.

Abstract: Methods and systems are provided for cloud processing data streamed from a vehicle and a home (e.g., any location) associated with a user account. One method includes receiving a data stream from the vehicle entity, where the data stream from the vehicle entity includes metadata from one or more data producing objects of the vehicle entity. And, receiving a data stream from the home entity, where the data stream from the home entity includes metadata from one or more data producing objects of the home entity. The method includes accessing action conditions associated with a user account. The action conditions identify a position where at least one or more states of the metadata from each of the home entity and the vehicle entity intersect. And, each action condition identifies a type or types of control information to be processed. The method includes processing the received metadata from the vehicle entity and the home entity.

Abstract: A method includes transmitting first data with a first priority through a first dedicated interface on a transmit side of a PCIe system. The method also includes transmitting second data with a second priority through a second dedicated interface on the transmit side of the PCIe system. The method includes transmitting the first data and the second data to a receive side of the PCIe system using two or more virtual channels over a PCIe link, where the first data uses a first virtual channel and the second data uses a second virtual channel.

Abstract: The present disclosure provides a method for monitoring a network status of a Zigbee node. The method includes: acquiring a value of a status tag configured on the Zigbee node, the value of the status tag indicating a current network status of the Zigbee node; and determining that the value of the status tag equals a first preset value and a preset condition associated with the status tag is met. The first preset value indicates that the Zigbee node has joined a Zigbee coordinator but has not joined a gateway. The method also includes: in response to determining that the value of the status tag equals the first preset value and the preset condition is met, restarting the Zigbee node and resetting the value of the status tag to an initial value. The initial value indicates that the Zigbee node has not joined the Zigbee coordinator.

Abstract: A domain manager (320) of a Radio Access Network, RAN, determines a configuration of a RAN resource partition of a network slice. The configuration defines which network elements of the RAN are assigned to the RAN resource partition of the network slice. The domain manager (320) receives at least one report (407, 408, 409) indicating, for at least one of the network elements assigned to the RAN resource partition, an amount of traffic of the network slice handled by the network element in an observation time window. Based on the at least one report (407, 408, 409), the domain manager (320) adapts the configuration of the RAN resource partition by removing one or more of the network elements from the RAN resource partition.

Abstract: A method for monitoring the connection between a first node and a second node of a communication network, includes selecting a session established between the first node and the second node, the selected session becoming a monitoring session, monitoring the connection between the first node and the second node via the monitoring session.

Abstract: A system comprising one or more network elements and configured to process at least first and second packet flows. The system comprises a first packet gate selectively switchable between an open state for packet transmission and a closed state and an associated first packet queue. The first packet gate and the first packet queue are configured to handle first packet flow packets. The system further comprises a second packet queue configured to handle second packet flow packets. Moreover, the system comprises at least one processor configured to control switching of the first packet gate between the open state and the closed state based on the occurrence of a first event associated with the second packet queue to trigger transmission of the first packet flow packets in a relative transmission order among the first packet flow packets and the second packet flow packets.

Abstract: Implementing network constraint exceptions on a per device basis is disclosed. A network manager determines that a subscriber device associated with a subscriber network is to be granted an exception to a network constraint of the subscriber network. An aggregation device that is coupled to a set of subscriber networks including the subscriber network is sent aggregation device instructions to grant the exception to packets associated with the subscriber device that flow through the aggregation device. A network gateway device that serves as a network gateway for the subscriber network is sent gateway device instructions to associate packets associated with the subscriber device with information for identifying the packets as being associated with the subscriber device.

Abstract: Methods, systems, and apparatuses for device routing management are disclosed. A client device of a wireless network may roam from a first access point to a second access point of the wireless network. The second access point, or the client device itself, may send a network message indicating the client device is currently being served by the second access point. The message may cause a network mapping stored at the first access point and/or at each device associated with the wireless network to be updated to indicate the client device is associated with the second access point, thereby enabling proper routing of network traffic to the client device via the second access point.

Abstract: A system, computer readable medium and a method that may include performing multiple iterations of: determining, by each active initiator of the multiple initiators, a number of pending access requests generated by the active initiator, wherein each access request is a request to access a shared resource out of the shared resources; determining, by each active initiator, a priority level to be assigned to all pending access requests generated by the active initiator, wherein the determining is based on the number of pending access requests generated by the active initiator, a number of active initiators out of the multiple initiators, and a number of access requests serviceable by the shared resource; for each active initiator, informing an arbitration hardware of a network on chip about the priority level to be assigned to all pending access requests generated by the active initiator; and managing access to the shared resources, by the arbitration hardware, based on the priority level to be assigned to all p

Abstract: A method of managing wireless access to a network performed by an access point includes storing a programmable response time for defining a zone of operation around the access point, receiving from a client device a request to associate with the access point, transmitting a probe to the client device, when a response to the probe is received, measuring a round trip time between transmission of the probe and receipt of the response, determining whether the client device's request to associate with the access point should be granted or denied by comparing the round trip time to the programmable response time, granting the request to associate in response to determining that the round trip time is less than the programmable response time, and denying the request to associate with the access point in response to determining that the round trip time is longer than the programmable response time.

Abstract: Methods and structures are disclosed which facilitate handling discontinuous reception (DRX) in Long Term Evolution (LTE) type communication signal reception and transmission using one carrier, such as a licensed carrier, and another carrier, such as an unlicensed carrier, in the presence of other transmissions using the other carrier.

Abstract: The disclosed technology relates to a network agent for generating platform specific network policies. A network agent is configured to receive a platform independent network policy from a network policy system, determine implementation characteristics of the network entity, generate platform specific policies from the platform independent network policy based on the implementation characteristics of the network entity, and implement the platform specific policies on the network entity.

Abstract: Disclosed is a payload mapper including N mapper(s), each of which includes a controller, multiple mapping circuits, an output control circuit, and a storage circuit. The controller includes: a decoding circuit receiving a first-format signal and decoding at least a part of this signal to find out the type of a control signal relating to the first-format signal; and a conversion control circuit generating a selecting signal according to the type of the control signal to choose one of the mapping circuits. The mapping circuits receive the first-format signal and selecting signal, and the selected mapping circuit converts the first-format signal into a second-format signal according to the selecting signal. The output control circuit is coupled to the mapping circuits and outputs at least a part of the second-format signal as an effective output signal. The storage circuit temporarily stores the effective output signal and then outputs it.

Abstract: The present disclosure provides an integration method for multiple centralized units, an integration device for multiple centralized units, and an integration system for multiple centralized units. The integration system for multiple centralized units includes a centralized unit center, the centralized unit center is configured to integrate multiple logical centralized units, the multiple logical centralized units share one or more function modules at corresponding levels according to a preset service requirement, and the function modules at the corresponding levels are configured to provide function services at the corresponding levels for the logical centralized units.

Abstract: A deaggregated computing system having a memory centric computing storage controller can transfer data from a source to a destination node while dynamically updating a transfer route between them. The transfer route can be recalculated based on the current conditions of the routing nodes between the source and destination. Recalculating the transfer route can be based on power status, bandwidth, in-use status, current capacity, or failure conditions. The deaggregated computing system can include one or more processor units coupled to one or more storage and memory units all connected by the memory centric computing storage controller that can route control and data packets between the processor units and the storage and memory units. The processor units and the storage units can be connected by a combination of serial data communication links and a data storage fabric network.

Abstract: A method is used in managing remote replication in storage systems. The method monitors network traffic characteristics of a network. The network enables communication between a first storage system and a second storage system. The method predicts a change in at least one of an application demand of an application of a set of applications executing on the first storage server and a network state of the network, where the set of applications have been identified for performing a replication to the second storage system. Based on the prediction, the method dynamically manages replication of the set of applications in accordance with a performance target associated with each application.

Abstract: A method, user equipment (UE) and application server for adding media stream of multimedia session. A UE1 establishes a multimedia session with a UE2, receives a media stream adding request directed at the multimedia session of the UE1; the media stream adding request includes an identity of a UE3 and the media type of the media flow requested to be added; the UE3 is controlled to establish a media stream of the media type with the UE2. Therefore, adding the media stream on the UE3 is realized, and the user may realize the multimedia session with the peer end through multiple UEs, thereby avoiding the inconvenience that the media stream can only be added to the two parties in the session and living up to the users' diversified requirements on the multimedia services.

Abstract: Techniques for enhanced overlay network-based transport of traffic, such as IPsec traffic, e.g., to and from customer branch office locations, are facilitated through the use of the Internet-based overlay routing infrastructure. This disclosure describes managing and enforcing quality-of-service (QoS) in an Internet-based overlay network shared by a set of content provider customer entities. For each entity having a customer branch, the customer branch is coupled to the Internet-based overlay routing network. A quality-of-service (QoS) policy is configured for the customer. Utilization of the Internet-based overlay network against the configured QoS policy is then monitored. The QoS is then enforced for the customer and at least one other customer, based in part on the QoS policies. Capacity is enforced for a customer entity according to the QoS policy at one of: a global level, a geographical region level, and at the customer branch level.

Abstract: A method for weighted data traffic routing can include receiving a data packet at data switch, where the data switch includes a plurality of egress ports. The method can also include, for each of the egress ports, generating an independent hash value based on one or more fields of the data packet and generating a weighted hash value by scaling the hash value using a scaling factor. The scaling factor can be based on at least two traffic routing weights of a plurality of respective traffic routing weights associated with the plurality of egress ports. The method can further include selecting an egress port of the plurality of egress ports based on the weighted hash value for each of the egress ports and transmitting the data packet using the selected egress port.

Abstract: Various embodiments of the invention are detection systems and methods for detecting call provenance based on call audio. An exemplary embodiment of the detection system can comprise a characterization unit, a labeling unit, and an identification unit. The characterization unit can extract various characteristics of networks through which a call traversed, based on call audio. The labeling unit can be trained on prior call data and can identify one or more codecs used to encode the call, based on the call audio. The identification unit can utilize the characteristics of traversed networks and the identified codecs, and based on this information, the identification unit can provide a provenance fingerprint for the call. Based on the call provenance fingerprint, the detection system can identify, verify, or provide forensic information about a call audio source.

Abstract: A network defense system can include a sensor alert ingestion framework adapted to monitor network activity and alert detected or suspected anomalies. A network analyzer may be coupled to the sensor alert ingestion framework to analyze the anomalies. A course of action (CoA) simulator may be coupled to the network analyzer adapted to generate a list of decision including courses of action to address the anomalies. There may be a training and feedback unit coupled to the CoA simulator to train the system to improve responses in addressing future anomalies.

Abstract: Described embodiments provide systems and methods of forming overlay tunnels for delivery of data between networked devices. A first intermediary device may transmit, responsive to a connection request from a client, a request having a source IP address corresponding to a first virtual IP address of the first device and a first payload including first security hash information to be processed by a second intermediary device. The first device may receive, from the second intermediary device, a response. The response may have a source IP address corresponding to the IP address of the server and a second payload including a virtual IP address of the second device, responsive to second security hash information corresponding to the first security hash information. The first device may establish an overlay tunnel using the first virtual IP address and the second virtual IP address for communicating data between the client and the server.

Abstract: Methods and apparatus for providing bandwidth which can be used to support network connectivity and to obtain services from elements in a network, e.g., 5G network, are described. In various embodiments a DOCSIS link is connects a residential gateway at a customer premises to devices outside the customer premises, e.g., to devices in a 5G network or another network. Devices which support EAP authentication are provided with their dedicated bandwidth over the DOCSIS link. Devices which do not support EAP authentication, e,g, WiFi devices, share bandwidth to which a subscriber residing at the customer premise subscribes. Devices which support EAP authentication are provided reserved resources corresponding to a subscription associated with the individual device thereby allowing a user of a device which supports EAP authentication to obtain more bandwidth than is normally provided to a visited premises based on the service subscription associated with the visiting device.