Abstract: Provided is a media processing method. The method is used for uploading a function provided by a user or a third party and obtaining media processing parameters provided by the user. The method includes the following steps: receiving the description information of the media processing and determining whether a function that fulfills the requirement of the description information exists in a system; in a case where the function that fulfills the requirement of the description information exists, selecting the function that fulfills the requirement of the description information from the system; and in a case where the function that fulfills the requirement of the description information does not exist, selecting the function from the system according to the priority or selecting the function that fulfills the requirement of the description information from outside the system.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for generating customized recommendations for environmentally-conscious cloud computing frameworks for replacing computing resources of existing datacenters. One of the methods involves receiving, through a user interface presented on a display of a computing device, data regarding a user's existing datacenter deployment and the user's preferences for the new cloud computing framework, generating one or more recommendations for environmentally-conscious cloud computing frameworks based on the received data, and presenting such recommendations through the user interface for the user's review and consideration.

Abstract: A network node comprises a core processing part to perform a core processing function, an ingress processing part to receive incoming signalling messages, an egress processing part to output signalling messages for transmission from the network node, and a message manipulation function to manipulate signalling messages. In a first configuration, the message manipulation function is comprised in the ingress processing part, and in a second configuration the message manipulation function is comprised in the egress processing part. In the first configuration, an egress characteristic is determined, indicative of how an outgoing signalling message is to be outputted, and an incoming signalling message is manipulated based on the egress characteristic. In the second configuration, an ingress characteristic is determined, indicative of how an incoming signalling message has been received, and an outgoing signalling message is manipulated based on the ingress characteristic.

Abstract: Systems and methods for conducting various types of Connection Validation (CV) are provided for reducing the overall CV scan time of regular CV scans. A Reconfigurable Optical Add/Drop Multiplexer (ROADM), according to one implementation includes at least one degree component; at least one add/drop component; a plurality of fibers interconnecting the at least one degree component and/or the at least one add/drop component; and a controller configured to, responsive to any of ongoing operation and connection of one or more fibers of the plurality of fibers, cause a Connection Validation (CV) scan in the ROADM that cycles through the one or more fibers, attain a desired cycle time for the CV scan through one or more techniques, and determine one or more of connectivity and whether fiber loss is within expectations, based on the CV scan.

Abstract: This application discloses a communications method and related communications apparatus and system. The method includes recovering, by a first node, when detecting that a first packet is lost, the first packet according to a local recovery mechanism. The first packet is a packet obtained based on a packet sent by at least one first terminal to at least one second terminal, and the first node is a node on a network path between each first terminal and a second terminal communicating with the first terminal. The method further includes adding a first identification information related to local recovery, and sending the first packet. This application can reduce a transmission delay and improve transmission efficiency.

Abstract: A method for the protection of files is performed on an integrated-circuit device that comprises a hardware memory protection module, which controls access to regions of the memory depending on region-specific settings. A new file is created in the memory by storing metadata and content data for the new file in a common memory region. An access condition is set for the common memory region in the configuration settings of the hardware memory protection module. A file is retrieved from the memory by searching the memory to identify a file meeting a search criterion. The searching involves comparing the metadata of files from the memory against the search criterion in order to identify a file from the memory that meets the search criterion.

Abstract: An authenticating system and process for authenticating user devices to a access a service where access to certain portions of the service may be limited according to a access point or other device used by a user device to facilitate interfacing a user with the service. The authentication may be achieved without directly assessing a trustworthiness of the user devices, and optionally, without requiring a user thereof to complete a sign-on operation.

Abstract: A live event polling system is disclosed that provides passive engagement tools and micro-polling services during live events so that live event hosts and developers of virtual spaces can engage their audiences and collect valuable input and data more effectively and promote audience participation for sentiment sharing and data collection in ways that overcome conventional barriers, such as time and user participation, which exist to gaining verbal input during such live events.

Abstract: A method for transmitting digital subscriber connection signals to an interface of an end user via a coaxial cable includes: supplying, by a distribution point unit (DPU), first balanced subscriber connection signals to the coaxial cable by a first transformation; coupling unbalanced subscriber connection signals into the coaxial cable into a lower frequency range of an overall frequency range; attenuating, by means of a filtering device, a reflection of the unbalanced subscriber connection signals in the coaxial cable; a second transformation of the unbalanced subscriber connection signals into second balanced subscriber connection signals by means of a balun device assigned to the interface, wherein the input impedance of the filtering device is adjusted with respect to reflections from the direction of the customer terminal output; and separately making the second balanced subscriber connection signals available at the customer terminal output.

Abstract: Aspects of the present disclosure involve a system comprising a computer-readable storage medium storing a program and method for determining zone identification reliability. The program and method provide for receiving plural page samples of a webpage or page group, each page sample of the plural page samples corresponding to a respective pageview of the webpage or page group; determining, for each page sample of the plural page samples, zone identification information for the page sample, the zone identification information indicating targets and zones identified by the targets for the page sample; detecting any identification errors with respect to the zone identification information for the plural page samples; and determining, based on the detecting, a reliability of the zone identification information.

Abstract: In one embodiment, a method of alerting a user of a WCD is described. The method includes receiving an alert from the WCD on a remote device associated with the user and in communication with the WCD and transcribing the alert into a message for the user. The method also includes personalizing the message for the user and delivering the message to the user via the remote device.

Abstract: Systems and methods to encrypt centralized information associated with users of a customer due diligence platform based on a modified key expansion schedule are disclosed. Exemplary implementations may: obtain user profile information making up user profiles of users of a customer due diligence platform; encrypt the user profile information to generate encrypted user profile information based on a modified key expansion schedule requiring multiple different keys; effectuate storage of the encrypted user profile information in association with the user profiles in non-transitory electronic storage; and/or perform other operations.

Abstract: Embodiments of the present invention relate to a method, system and computer program product for application programming interface (API) management. According to the method, in response to a first response from an API provider indicating a failure of a first API request initiated by an API requestor, a second API request is generated at least based on the first API request. The second API request is transmitted to the API provider. A second response to the second API request is received from the API provider. A third response is provided to the API requestor based on the second response.

Abstract: Disclosed herein are methods and systems for access point device recovery and management using mobile devices. The method includes providing, by a mobile device to an access point device via a service provider system, authentication details of the mobile device, establishing a secure wireless connection using the authentication details between the access point device and the mobile device upon receiving, by the mobile device, an indication of failure of a network connection between the service provider system and the access point device, sending, by the mobile device to the access point device over the secure wireless connection, a configuration instruction, receiving, by the mobile device from the access point device over the secure wireless connection, confirmation of the configuration instruction, and disconnecting the secure connection upon successful application of the configuration instruction.

Abstract: A computer-implemented method includes storing usage of a resource of said computer system as time-stamped resource usage values, comparing said time-stamped resource usage values with predetermined time-stamped performance goal values, assigning a time-stamped priority value to an application that is running based on at least one of said performance goal values, identifying a future workload demand value by applying a time-series analysis algorithm to at least some of said time-stamped resource usage values and a corresponding at least some of said time-stamped performance goal values for said application resulting in workload demand time frames and related amplitudes of said workload demand time frames, and adjusting a dispatch priority value for said application by setting a minimum dispatch priority for said application based on said future workload demand value.

Abstract: Selectively rewriting URLs is disclosed. An indication is received that a message has arrived at a user message box. A determination is made that the message includes a first link to a first resource. The first link is analyzed to determine whether the first link is classified as a non-rewrite link. In response to determining that the first link is not classified as a non-rewrite link, a first replacement link is generated for the first link.

Abstract: In some embodiments, a non-transitory processor-readable medium stores code representing instructions to be executed by a processor. The code includes code to cause the processor to receive a structured file for which a machine learning model has made a malicious content classification. The code further includes code to remove a portion of the structured file to define a modified structured file that follows a format associated with a type of the structured file. The code further includes code to extract a set of features from the modified structured file. The code further includes code to provide the set of features as an input to the machine learning model to produce an output. The code further includes code to identify an impact of the portion of the structured file on the malicious content classification of the structured file based on the output.

Abstract: A mobile office realization method includes receiving a mobile office access request from a mobile office device, determining a target network of the mobile office access request, sending the mobile office access request to the target network, receiving, from the target network, response data of the mobile office access request obtained by the target network, and sending the response data to the mobile office device.

Abstract: A server may include at least one server processor configured to execute an application. A desktop virtualization system may include at least one desktop virtualization processor. The desktop virtualization processor may be configured to instantiate a virtual desktop; authenticate a user of a client device; in response to authenticating the user of the client device, place the client device in communication with the virtual desktop through at least one network; launch a secure browser in the virtual desktop; and using the secure browser, place the client device in communication with the server through the at least one network. The application may be configured to perform processing in response to at least one command from the client device sent through the secure browser of the virtual desktop.

Abstract: Improved techniques and systems for delivery and acquisition of digital assets are disclosed. The techniques and systems are especially suitable and useful for delivering digital assets (e.g., media assets) that are available for acquisition and electronic delivery from online stores to electronic devices. In accordance with one aspect, when a digital asset is acquired from an online store via an electronic device associated with a user, the digital asset can be arranged for delivery to a number of other of electronic devices also associated with the user. It will be appreciated that the digital asset can be delivered and acquired without requiring explicit user input or instruction in accordance with another aspect. Other aspects of the techniques and systems include customization of configuration and user interfaces that are provided to facilitate acquisition of digital assets in a more efficient manner.

Abstract: A workflow resource manager receives a request to execute a workflow in a cloud computing environment. The workflow resource manager determines that a first set of cloud computing resource requirements associated with the first set of operations for the workflow is satisfied by available cloud computing resources, and responsive to determining that a second set of cloud computing resource requirements associated with a subsequent set of operations for the workflow is not satisfied by the available cloud computing resources, rejects the request to execute the workflow.

Abstract: The present application relates to embodiments for detecting firewall drift. In some embodiments, a first set of firewall rules of a first firewall for a first instance of a distributed application, a second set of firewall rules of a second firewall for a second instance of the distributed application, and a mapping of IP addresses to identifiers of services from amongst a first set of services of the first instance and a second set of services of the second instance may be obtained. First connectivity data and second connectivity data may be generated indicating, for each of IP address associated with the first and second set of firewall rules, a respective port number over which communications between a respective IP address are transmitted, and generating comparison data indicating whether firewall drift is detected based on a comparison of the first connectivity data and the second connectivity data.

Abstract: Root certificates generated by root certificate authorities may be bound at the time of generation. In an example, a first root certificate can include an identity of a first root certificate authority, a first key identifier associated with a first key of the first root certificate authority and an identity of a first digital signature algorithm used by the first root certificate authority. The first root certificate can also include at least one extension including a second key identifier of a second key associated with the second root certificate authority and an identity of a second digital signature algorithm used by the second root certificate authority, the second digital signature algorithm being different from the first digital signature algorithm.

Abstract: Some demonstrative embodiments include apparatuses, devices, systems and methods of beamforming. For example, a responder station may process a received Beam Refinement Protocol (BRP) request including a beam tracking request from an initiator station; and select whether or not to transmit a BRP response including beam tracking feedback, in response to the BRP request, based on a comparison between a time period and a BRP tracking time limit, the time period being based on a timing of the BRP request and a timing of the BRP response.

Abstract: A content delivery method including the operations of receiving a uniform resource locator resolution request at an authoritative name server for a domain where the uniform resource resolution request is received based, at least in part, on a host name of the uniform resource resolution request where the host name is uniquely related to a resource associated with the uniform resource resolution request. The method further including the operation of tracking a popularity of the resource based on the host name uniquely related to the resource and providing a location within a network capable of delivering the resource where the provided location is based on the popularity of the resource.

Abstract: A printing system including: a location registration equipment (11) that performs user authentication of a user who operates a client terminal (14) at a workspace (100); a remote desktop server (12) that enables a desktop screen of an office-installed terminal to be operated through the client terminal (14); and a printing device (13) that outputs printing data in accordance with a printing request, wherein the location registration equipment (11) transmits location information of a user for whom it has performed user authentication to the printing device (13), and the printing device (13) transmits, when it receives a printing request from the remote desktop server (12), printing data to which the location information is added to the location registration equipment (11).

Abstract: Systems and methods are provided for establishing a secure communication link between a first client and a second client. One exemplary computer-implemented method for establishing a secure communication link between a first diem and a second client includes accessing, from a storage, identification information of a user of the first client. The method further includes receiving a Domain Name Service (DNS) request from the first client requesting a secure network address corresponding to a secure domain name associated with the second client. The method further includes authenticating the user based on the user identification information. The method also includes transmitting the secure computer network address in response to the DNS request based on a determination that the user has been authenticated. A secure communication link between the first diem and the second client is established based on the secure computer network address.

Abstract: Techniques for management of traffic in a network. The techniques provide application awareness in a Network Address Translation (NAT) system. In some examples, a first traffic is received at a first switch in a network from a first application hosted behind the first switch. The first switch identifies a first resource tag associated with the application from the first traffic. Further, the first switch identifies a first rule from the first resource tag indicating that the first traffic is to be routed through an intermediate device that performs network address translation. Moreover, the first switch transmits the traffic to an intermediate device, which perform NAT to translate the source IP address of the first traffic to a second IP address. Finally, the intermediate device sends the traffic to a destination device indicated by the first traffic.

Abstract: A system receives a request associated with a first account to delegate, to a second account, authority to send documents on behalf of the first account. The request identifies requirements that must be satisfied before the second account can send documents on behalf of the first account. Responsive to receiving a request to send a first document to a first entity from the second account and on behalf of the second account, the system sends the first document to the first entity. Responsive to receiving a request to send a second document to a second entity from the second account and on behalf of the first account, the system determines whether the request to send the second document satisfies the requirements. Responsive to the request satisfying the requirements, the system sends the second document to the second entity on behalf of the first account.

Abstract: To provide a presentation assistance system capable of dynamically changing presentation materials according to terms used in a presentation. A presentation assistance system comprises: a presentation material storage unit 3; a related word storage unit 5 which stores a plurality of related words related to the presentation material; a succeeding information storage unit 7 which stores, for each of the related words, information about a succeeding related word that is one or a plurality of related words that are preferably used next; a related word analysis unit 9 which analyzes which one of the related words corresponds to the word analyzed by a term analysis unit; and a succeeding related word selecting unit 11 which selects a succeeding related word from the succeeding information storage unit, by using information about an analyzed related word which is a related word analyzed by the related word analysis unit.

Abstract: A system and method for early detection of a compromised client device includes a tamper detection service configured to monitor modifications to resource access privileges over time to identify unusual variations in jailbreak status that indicate compromise of the client device. For example, the tamper detection service may monitor the jailbreak status of system files over time to expose attempts to hide the jailbreak status of a protected resource. To validate that malware is attempting to hide the jailbreak status of a protected resources, the tamper detection process may launch multiple different resource accesses, targeting the protected resource, to determine whether different accessibility results are returned, indicating a compromised device.

Abstract: Network traffic through a router, e.g., home router, operating as a firewall is monitored and analyzed the network to identify devices and the type of one or more of the identified devices. In some embodiments, the device type identification is performed using a neural network. The router stores a set of firewall templates. At different times, different templates are applied, e.g. based on mode of operation, user selection, and/or time information. Rules in a firewall template, applicable at a given time to traffic corresponding to identified devices, that are attempting to send or receive via the router, are applied. Different rules may, and sometimes do, apply to different device type classifications.

Abstract: A computer-implemented method for configuring a blockchain network, a computer program product for integrating device identity into a permissioning framework of a blockchain network, and a blockchain network. One embodiment may comprise registering a device at a delineate node of a blockchain network, creating, by a processor of the delineate node based on the registering, a profile for the device; an performing, by the processor of the delineate node, a pass-through service for the device. The registering may include receiving, by a network interface, an immutable device identity from the device.

Abstract: Provided is a welding-type power source, comprising power conversion circuitry configured to convert input power to welding-type power, a user interface comprising a first input device, a second input device, and an output device, and control circuitry. The control circuitry is configured to, in response to a first input via the first input device, control the output device to output an indication that the welding-type power source is in a preconfigured state, set predetermined ones of welding-type parameters to respective predetermined values, set a welding current, when there is an input from the second input device, to a value indicated by the second input device, and set the welding current, when there is not an input from the second input device, to one of: the default value when the default welding current has not been changed, or a welding current that has been changed previously via the second input device.

Abstract: Systems and methods for providing least privilege access to a resource within a secured server are disclosed. The systems and method can include receiving an access request from a client requesting access to the resource, the access request comprising a role or policy associated with the client and one or more actions associated with the resource. A rules engine can be initialized, the engine defining one or more rules usable by the system to determine whether the access request complies with a least privilege policy. The systems and method can analyze the role or policy and the access request with the rules engine to determine whether the access request complies with the least privilege policy. When the access request complies with the rules, access to the resource can be granted; when the access request does not comply with the rules, access to the resource can be denied.

Abstract: An interactive demonstration application can be used to test and experience the use of overlay elements (e.g., application add-ons, such as an interactive chat overlay) on a graphical interface (e.g., of a website or a computer application) before fully integrating the overlay elements into the graphical interface. The interactive demonstration application can also be used to demonstrate and update the live settings of a live overlay element used on a live webpage.

Abstract: A cloud-connected baseboard management controller (BMC) enables remote management of all management layers of edge-based host machines from the cloud without imposition of costs associated with firewalls and private data connections. A remote management agent incorporated into the BMC enables creation of a remote management-enabled bare-metal server paradigm in which remote management from the cloud is supported at the lowest hardware levels which provides for cost-effective utilization of network resources down to even a single isolated node.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable storage media for managing projects in a content management system. For example, the content management system can create a project folder (e.g., shared folder) for managing data associated with a project. The project folder can be shared with content management system users (e.g., project members) who are contributors to the project. The content management system can store project data (e.g., content items, communications, comments, tasks, etc.) related to the project in the project folder. When the project folder is selected by a user, the content management system can generate a project folder view that presents the project data associated with the project folder and/or project in a convenient and easy to access graphical user interface. The content management system can aggregate project data from various content items associated with the project and present the project data in a single graphical user interface.

Abstract: Techniques for managing erasure of data are presented. In response to receiving a request for erasure of data from a set of data stores, an erasure component can analyze a set of rules and information relating to the user account, including an account status and erasure hold status associated with the user account. The set of rules can be based on legal or contractual obligations applicable to the set of data stores, and can indicate various conditions under which data associated with a user account of a user can be eligible to be erased from the set of data stores or an associated data vault repository. The erasure component can determine eligibility for erasure of all or a portion of the set of data from the set of data stores based on the analysis results. Erasure component can determine erasure eligibility scores to pre-qualify user accounts for erasure eligibility.

Abstract: A cryptographic key management service receives a request, associated with a principal, to use a cryptographic key to perform a cryptographic operation. In response to the request, the service determines whether a rate limit specific to the principal is associated with the cryptographic key. If the rate limit is associated with the cryptographic key, the service generates a response to the request that conforms to the rate limit. The service provides the response in response to the request.

Abstract: A computer implemented and electronic process is provided that uses artificial intelligence to detect unauthorized activity by an insider or hacker. Electronic systems that employ artificial intelligence and machine learning to detect unauthorized transaction activity by insiders or hackers for a computer network system are also provided. Hardware required for carrying out the invention typically include a plurality of networked computers. Specialized software and/or firmware is typically needed in connection with the hardware for carrying out the invention.

Abstract: On-demand activation of a security policy may be provided. Upon receiving a selection of a link, a profile identified by a security policy associated with the link may be activated and the link may be opened according to the security policy. In some embodiments, opening the link according to the security policy may comprise redirecting the opening of the link from a first application to a second application.

Abstract: Systems and methods for managing a network are disclosed. In certain systems and methods, access to a network such as a wireless network, can be granted or denied based upon a threshold number of devices accessing the network. Moreover, access to a first service available over the network can be granted or denied based upon a threshold number of devices accessing the first service. Various network resource can be allocated to the first service based at least upon the number of device access the first service.

Abstract: Provided is an edge compute platform (“ECP”) for serving optimized content from local cache or from output of a shared customizable function executed by a compute device at the network edge on behalf of different customer content such that the function is not redundantly deployed for different customer content, and is not be executed each time the same variant of the optimized content is requested. The ECP may canonicalize first transformation parameters of a received original request according to a transformation parameter definition of a particular function that is implicated by the original request, may generate second transformation parameters with a different ordering than the first transformation parameters as a result of the canonicalization, may generate a variant of the original file by inputting the second transformation parameters to the particular function, and may provide the variant in response to the original request.

Abstract: The present invention provides a computing power scheduling method, apparatus, electronic devices and storage medium, the method comprising: a computing power node and an access terminal send computing power information to a switch using L4 network protocol; the switch uploads the computing power information to a distributed SDN subcontroller; the distributed SDN subcontroller collects switch state information and network quality information from the switch using in-band network telemetry technology; the distributed SDN sub-controller collects switch state information and network quality information from the switch using in-band network telemetry; the distributed SDN sub-controller uploads the computing power information, switch state information and network quality information to the SDN master controller; the SDN master controller determines the computing power scheduling policy based on the computing power information, switch state information, network quality information and master controller information

Abstract: A system for analyzing computer systems and networks for potential vulnerabilities to cyber-attacks configured to (i) receive scan data from a scan of a target computer device; (ii) search for one or more vulnerabilities based on the scan data; (iii) determine at least one attack vector based on the one or more vulnerabilities; (iv) generate one or more exploits based on the one or more attack vectors and the one or more vulnerabilities; and (v) execute the one or more exploits on the target computer device.

Abstract: Recognizing unknown data objects may be implemented for data objects stored in a data store. Data objects that are identified as unknown may be accessed to retrieve a portion of the data object. Different representations of the data object may be generated for recognizing different data schemas. An analysis of the representations may be performed to identify a data schema for the unknown data object. The data schema may be stored in a metadata store for the unknown data object.

Abstract: Methods and systems for balancing online stores across servers. Monitoring a level of customer activity associated with a particular online store in a plurality of online stores. Detecting, based on the level of customer activity, a demand-level condition for the particular online store. Responsive to the detecting of the demand-level condition for the particular online store, moving one or more of the plurality of online stores from a first server of a plurality of servers to a second server of the plurality of servers.

Abstract: A computer readable medium having non-transitory memory for storing machine instructions that are to be executed by a computer. The machine instructions when executed by the computer implement the following function: establishing a network interface communication path between a first router on a first network and a second router on a second network. The first network including first and second network devices is in communication with the first router. A further function is establishing a first network interface between the second router and the first network device through the network interface communication path and a second network interface between the second router and the second network device through the network interface communication path. A further function includes permitting access to the first and second network devices through the first and second router interfaces, respectively, by a user application. The network interfaces may be virtual private networks (VPNs).

Abstract: The present disclosure provides new and innovative systems and methods for publishing standardized data in a variety of formats. In an example, a computer-implemented method includes obtaining source data, wherein the source data is in a standardized format, obtaining target platform data comprising a target platform address and a target format, generating a directory structure based on the source data and the target format, generating target data based on the source data and the target format, wherein the target data is in the target format, packaging the target data in the directory structure, generating instructions based on the target platform data and the packaged data, and transmitting the packaged data and the instructions to a third-party server system identified by the target platform address.