Abstract: A message display method includes: caching, by a server, a message display page according to each original URL, extracting a fingerprint feature, and generating an alternative URL, then detecting a display status of each message at a preset time interval and marking the display status, and when receiving a display information obtaining request from a client, sending the fingerprint feature, the original URL, or the alternative URL of each message to the client according to a currently marked display status; and when receiving a message access request of a user, determining, by the client, a type of a corresponding URL, and if the corresponding URL is an alternative URL, displaying the message to the user, or if the corresponding URL is an original URL, determining whether the message is displayed normally, and if yes, displaying the message to the user.

Abstract: A method for managing a communication session includes receiving a request to perform a task. The task is divided into one or more steps. One or more user devices are identified that can be used to perform one or more of the steps. One or more communication channels are identified that are available to the one or more user devices. The communication session is permitted to switch from one or more of the user devices and communication channels to complete the one or more steps of the task while maintaining a continuity of the communication session.

Abstract: A digital conference system can include a digital conference manager that automatically selects a digital conference service based on one or more digital conference parameters. A digital conference agent can request a digital conference configuration from a policy manager 204 that is based on the one or more digital conference parameters. The policy manager 204 can send the selected digital conference configuration to the digital conference agent that sends the selected digital conference configuration or an identifier associated with a digital conference service associated with the digital conference configuration to a digital conference service manager. The digital conference service manager establishes a digital conference connection based on the digital conference service received from the digital conference agent.

Abstract: Zero trust network security is provided without modifying the underlying network infrastructure. Unique intermediate certificates created based on a primary certificate are sent to each of a plurality of entities. Each entity of the plurality of entities is installed on a respective node of a plurality of nodes in a network environment of a cloud provider. An agent is deployed to each of the plurality of nodes, and the agent is configured to enforce at least one network firewall policy based on the intermediate certificate sent to the corresponding entity.

Abstract: Disclosed are systems and methods for vehicle charging. A charging system can include a component to convey power to a vehicle to charge the vehicle. The charging system can include a module to store a certificate via a cryptographic technique. The charging system can include a data processing system coupled to the module, the data processing system including one or more processors, coupled with memory, to retrieve the certificate from the module, transmit, to a second data processing system, a request to establish a communication connection, the request including the certificate, and establish the communication connection with the second data processing system responsive to a verification of the certificate by the second data processing system. The data processing system can transmit, to the second data processing system, data corresponding to power conveyed by the component to the vehicle subsequent to verification of the certificate.

Abstract: A method for locally serving content is described. The method includes receiving, at a gateway device, a first request for a data file via a first user device communicatively coupled to the gateway device. The data file is received at the gateway device from an external server and sent to the first user device. A data record is stored to a storage device indicating that the data file has been sent to the first user device. A second request for the data file is later received at the gateway device from a second user device communicatively coupled to the gateway device. In response to the receiving of the second request, the data record is accessed and causes a computer read of the data record. The first user device is then instructed to transfer the data file to the second user device, via the gateway device, based upon the computer read.

Abstract: A materialization configuration request is received via a programmatic interface from a client of a journal-based multi-data-store database. The request indicates a partitioning rule to be used to select, for respective writes indicated in committed transaction entries of a journal, the materialization node at which the writes are to be stored. A control plane component of the database verifies that a set of materialization nodes corresponding to the partitioning rule has been established, and initiates the propagation of writes from the journal to the materialization nodes by respective write appliers.

Abstract: A communication device comprising: one or more processors and one or more memories supporting communication, the device comprising a plurality of modes, including at least a normal mode and at least one focused mode, wherein the normal mode is distinct from the focused mode, and wherein, when the device is in the focused mode one or more features of the device are at least partially disabled, and wherein the one or more features of the device that are at least partially disabled in the focused mode include one or more features relating to communication supported by the device, wherein the device is configured to: support a user interface (UI) for setting one or more focused time periods, and wherein the device is further configured to switch to the at least one focused mode during the focused time periods.

Abstract: Some aspects include a schedule development method for a robotic floor-cleaning device that recognizes patterns in user input to automatically devise a work schedule.

Abstract: A method of operating a network having one or more nodes which are in communication with a server, the server including or being in communication with a high precision time source, to estimate a time delay between the server and each node is provided. The method includes initiating a delay request from the server which is transported over a physical layer to the node, the server receiving a delay response from the node receiving the delay request, wherein a timestamp for the delay request and a timestamp for the delay response are times recorded from the high precision time source, wherein the time delay is estimated from half of a time difference between the timestamps.

Abstract: Connecting a client computer to a server may include receiving a first request at the server from the client computer for content managed by the server, and the first request includes a communication protocol and is sent from a first access point, receiving a second request at the server from the client computer for the content managed by the server, and the second request is transmitted from a second access point prior to the server responding to the first request and includes a different communication protocol than the first request, determining by the server the first request and the second request share a common attribute, transmitting a connection acceptance message from the server to the client computer identifying a selected one of the first request and the second request based on a most optimal connection associated with the selected request, and establishing a connection between the server and the client computer based on the selected request.

Abstract: A method for intermediary client reconnection to a preferred server in a high availability server cluster. The method includes monitoring a persistent connection of a logical connection to a preferred server to identify an unavailability of the preferred server, establishing a temporary persistent connection for the logical connection to an available server to replace an unavailable preferred server, prompting attempts to reconnect to the preferred server at intervals, and providing a connection switching pool and simultaneously re-establishing a persistent connection with the preferred server for the logical connection using the connection switching pool while terminating the temporary persistent connection to the available server. The connection switching pool and a main connection pool used by the persistent connection allow for simultaneously maintaining two connections to different servers in a same server cluster for the logical connection.

Abstract: Route provisioning techniques for an autonomous driving feature of a vehicle include receiving a user-generated route generated by a user using a second map database that differs from a first map database of the vehicle that stores a road graph specifying nodes and links representative of a map of roads proximate to the vehicle and specifies an array of geo-points between a current geo-location of the vehicle and a final geo-location for the vehicle, determining, using the road graph maintained by the first map database, a set of valid routes from the current geo-location to the final geo-location ordered based on relative likelihood, determining a best route from the set of valid routes based on a weighted comparison between each route of the set of valid routes and the user-generated route, and utilizing the selected route for control of the autonomous driving feature.

Abstract: The present invention relates to a judgment method for edge node computing result trustworthiness based on trust evaluation, and belongs to the technical field of data processing. By means of the present invention, a security mechanism for trustworthiness of a computing result output by an industrial edge node is guaranteed, the industrial edge node is prevented from outputting error data, and attacks of false data of malicious edge nodes are resisted, it is guaranteed that trustworthy computing results not be tampered are input in the industrial cloud, and a site device is made to receive correct computing results rather than malicious or meaningless messages, thereby improving efficiency and security of industrial production.

Abstract: A network of a new configuration is flexibly constructed while maintaining a stable operation in the network. A management device includes: a detection unit that detects addition of a function unit to a network including one or a plurality of on-vehicle function units; an acquisition unit that acquires function unit information of a new function unit that is the function unit the addition of which has been detected by the detection unit and function unit information of each on-vehicle function unit, each piece of function unit information including information regarding network configuration of a layer lower than an application layer; and a generation unit that, based on the pieces of function unit information acquired by the acquisition unit, generates configuration information of a new network that is the network further including the new function unit.

Abstract: A method by a software defined networking (SDN) controller to configure a switch to perform translation module bypass in a container orchestration system. The method includes receiving a translation rule for a flow from a load balancer, sending translation module bypass instructions to a switch in response to receiving the translation rule for the flow, where the translation module bypass instructions include instructions for the switch to stop sending packets belonging to the flow to the translation module and to apply a network address translation specified by the translation rule for the flow to the packets belonging to the flow, and send an indication to the load balancer that the packets belonging to the flow are to bypass the translation module to cause the load balancer to disable timeout processing for the flow in the translation module.

Abstract: A first node (110; 210; 212; 310; 1000) for determining an indication of a maximum datagram size supported without fragmentation in communication between the first node (110; 210; 212; 310; 1000) and a second node (111; 211; 210; 220) in an Internet Protocol, IP, network (100; 201; 201-202; 300).

Abstract: One example method of operation may include identifying a call to a mobile device, determining whether the call includes call content data intended for the mobile device, initiating an active session and a time to live (TTL) associated with the call content data, forwarding the call content data to the mobile device when the call includes call content data associated with the caller, and receiving a content confirmation from the mobile device that the call content data was received.

Abstract: An email verification system is described. The email verification system stores names and associated email addresses. An email is received that has a sender name and a sender email address. If the email verification system determines that the sender name matches a stored name but the sender email address does not match with an email address associated with the stored name, the email is prevented from being transmitted to its recipient unless the email is verified as being legitimate. The email verification system transmits a request to verify the email via a configured verification method. If a response is received that verifies the email as legitimate, the email is delivered; otherwise the email is blocked.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: Distinguishing between functional tracking domains and nonfunctional tracking domains on a host web page. In particular, a list of known tracking domains that load content into host web pages may be received. This list of tracking domains may include tracking domains that are functional and tracking domains that are nonfunctional. The tracking domains that are functional may be determined by evaluating various behaviors and characteristics of the tracking domains. Once functional tracking domains have been determined, these functional tracking domains may be allowed, and other tracking domains may be blocked from loading content onto host web pages thereby preserving the functionality of the web pages.

Abstract: A first wireless communication device may send, to a second wireless communication device, a request message including a traffic stream identifier (TID) and a first value, the first value indicating that a traffic stream between the first wireless communication device and the second wireless communication device and corresponding to the TID is latency sensitive.

Abstract: A system and method for the late-binding of time-based media in real-time. With late binding, the sender may create time-based media before or at the same time an active delivery route to the recipient is discovered. As soon as the route becomes available, the media is transmitted. The existing DNS and email infrastructure is possibly used for route discovery, while any real-time transmission protocol may be used for the actual delivery of the media. “Progressive” emails may also be used for the real-time delivery of time-based media.

Abstract: A system comprising a plurality of dispensers each configured to dispense a respective hygienic consumable product during a dispense operation and each including a processor and memory; a distributed computing program configured to receive data defining a computational task comprising work streams and generate data assigning the work streams to at least two of the plurality of dispensers, wherein each of the at least two of the plurality of dispensers are configured to use their respective processor and memory to work on their respective work streams; and a data processing apparatus configured to run the distributed computing program.

Abstract: In the IKE or IPSec SA rekeying, whether the rekey exchange includes the cryptographic suite in the payload depends on whether the cryptographic suite used in the old SA is changed on both ends, e.g., the initiator and the responder. If the cryptographic suite is not changed, then the rekey exchange does not include the cryptographic suite. Additionally, in the IPSec SA rekey, if the flowing information is not changed in either end, the rekey exchange further does not include the Traffic Selector (TS). As such, the size of the payload is decreased, which saves bandwidth, more processing time and power in the course of the IKE SA or the IPSec SA rekey.

Abstract: Techniques for delivering a distributed network security service providing isolation of customer data are described. One example method includes assigning a first node in a distributed network to a first customer; assigning a second node in the distributed network to a second customer; configuring the assigned first node to process network traffic only from the first customer; configuring the assigned second node to process network traffic only from the second customer; processing, by the assigned first node, network traffic associated with the first customer; and processing, by the assigned second node, network traffic associated with the second customer, wherein the network traffic of the first customer is isolated from the network traffic of the second customer, wherein the network traffic of the customers is kept isolated from one another.

Abstract: The subject technology determines a derived encryption key using a cryptographic hash function applied to a hybrid tenant master encryption key and a local random generated identifier. The subject technology encrypts a record value and a key value associated with a transaction using the derived encryption key. The subject technology determines a non-leaf node using a tenant prefix of a tenant. The subject technology inserts the encrypted record value at a leaf node below a non-leaf node of a tree structure associated with the tenant. The subject technology receives a second transaction for performing a read operation on a distributed database. The subject technology retrieves a set of encryption keys based at least in part on an account and the tenant. The subject technology decrypts, using the set of encryption keys, data from the distributed database. The subject technology provides the decrypted data as a result of the second transaction.

Abstract: Aspects of the present disclosure are drawn to a client device for use with a first network device, a second network device, an external server, the first network device being configured to communicate with the external server and the second network device being configured to communicate with the external server. The client device includes a memory and a processor configured to execute instructions stored on the memory. This causes the client device to onboard onto the first network device using a first password, generate a key, and store first association information in the external server. The first association information including client device identifying data to uniquely identify the client device.

Abstract: A system, method, and computer-readable medium are disclosed for performing a data center connectivity management operation. The connectivity management operation includes: providing a data center asset with a data center asset client module and a host operating system agent; establishing a secure communication channel between the data center asset client module and a connectivity management system, the connectivity management system comprising a service mesh proxy; exchanging information between the data center asset and the connectivity management system via the secure communication channel between the data center asset and the connectivity management system; and, remotely executing a workload on the data center asset via a workload orchestration operation, the service mesh proxy communicating with the host operating system agent when performing the workload orchestration operation.

Abstract: A media guidance application is provided by which users can define rules for assigning user equipment devices as destinations for media content. For example, a user may define a rule by which selected media content having attributes that satisfy a user-defined condition are downloaded, recorded, or streamed to a particular, user-specified user equipment device. The user may define and manage rules using media guidance menus, and may restrict other users from accessing the rules (e.g., parents restricting children).

Abstract: In one embodiment, a system receives an exec function invocation request from a second application to run a first application from an executable file. In response to receiving the exec function invocation request, the system determines a working directory associated with the second application. The system determines one or more extended attribute values associated with the working directory. The system determines, in view of the one or more extended attribute values, whether to allow or deny the first application to use the working directory to run the executable file of the first application.

Abstract: An illustrative video conference management system monitors an encoded video stream corresponding to an original real-time video stream of a video conference meeting. The video conference management system determines context data associated with one or more encoded video frames of the encoded video stream. The context data includes at least one of an encoder metric or a content attribute that indicates an encoding complexity level of the original real-time video stream. The video conference management system adjusts one or more encoded video streams corresponding to the original real-time video stream based on the context data. Corresponding methods and systems are also disclosed.

Abstract: Systems, methods, and apparatus are disclosed that provide a pickup process for items purchased from a store. In some embodiments, a mobile computing device of a customer may determine whether the mobile computing device and therefore the customer are in a pickup zone for a store. In response to determining that the mobile computing device is in the pickup zone, the mobile computing device may notify the customer and request whether the customer wishes to initiate pickup of purchased items from the store. The mobile computing device may notify a merchandise pickup system of the customer's desire to pickup the purchased items.

Abstract: A method, system, and computer program product for identifying network appliances on a network which includes a processor configured to intercept network communications from one or more devices between a first network and a second network. The processor may store the information about each connection in a database, the information including a Client Id and a destination address. The processor may query the database for a list of all destination addresses which were attempted to be contacted for each Client Id and generate metadata for each Client Id. The processor may analyze each Client Id, the associated metadata for each Client Id, and the destination addresses associated with each Client Id using one or more rules in a device identification tree and assign a device label to each Client Id of the one or more devices.

Abstract: A synthetic full backup of a source volume representing a state of the volume at a current time is retrieved, the synthetic full having been generated by merging a full backup of the volume performed at an initial time with an incremental backup of the volume performed at the current time, after the initial time. A bitmap tracking changes to the volume made between the initial and current times is accessed. The bitmap is used to identify a location on the volume having changes made between the initial and current times. First data written to the location on the volume is read. Second data written to the same location on the synthetic full backup is read. First and second checksums are generated based on the first and second data, respectively. The checksums are compared and if any do not match, an indication is generated that the synthetic full is corrupt.

Abstract: A distribution control apparatus assigns one of the one or more media distribution servers that is selected based on a reserved bandwidth of the media distribution server for distributing the media information and a maximum reserved bandwidth available to the media distribution server, as a media distribution server that distributes the media information to one or more communication apparatuses at a collective site, the collective site including one or more sites that share the same media information, and transmits, in response to a connection request to connect to the assigned distribution media distribution server, transmitted from a particular communication apparatus of the one or more communication apparatuses at a particular site of the collective site, a connection response to the particular communication apparatus at the particular site.

Abstract: A cloud based implemented method (and apparatus) includes receiving input data including bipartite graph data in a format of source MAC (Media Access Control) address data versus destination IP (Internet Protocol) data and timestamp information, and providing the input bipartite graph data into a first processing to detect malicious beaconing activities using a lockstep detection module on the input bipartite graph data, as executed in a cloud environment, to detect possible synchronized attacks against a targeted infrastructure.

Abstract: Embodiments of the present disclosure provide a method, an electronic device, and a program product implemented at an edge switch for data encryption. For example, the present disclosure provides a data encryption method implemented at an edge switch. The method may include receiving encryption and decryption information for an encryption operation or a decryption operation from a source device. In addition, the method may include encrypting a data packet received from the source device based on encryption information in the encryption and decryption information to generate an encrypted data packet. The method may further include sending the encrypted data packet to a target device indicated by the data packet. The embodiments of the present disclosure can reduce the computing loads of Internet of Things (IoT) devices, clouds, and servers while ensuring encryption performance, and can also reduce the time delay caused by encryption and decryption operations.

Abstract: According to examples, an apparatus may include a processor that may identify activities of an entity on resources over a predetermined period of time, in which the entity is to use permissions assigned to the entity over the resources to perform the identified activities. The processor may also identify which of a plurality of groups of permissions includes the permissions the entity used to perform the identified activities and may determine permutations of the identified plurality of groups of permissions. The processor may further calculate respective scores for each of the determined permutations to identify permutations of the groups of permissions having the lowest scores and may output information pertaining to the determined permutations having the lowest scores.

Abstract: Disclosed herein are example techniques to support multiple voice assistant services. An example implementation may involve a playback device capturing audio from the one or more microphones into one or more buffers as a sound data stream monitoring the sound data stream for a wake word associated with a specific voice assistant service and monitoring the sound data stream for a wake word associated with the media playback system. The playback device generates a second wake-word event corresponding to a voice input when sound data matching the wake word associated with the media playback system in a portion of the sound data stream is detected. The playback device determines that the voice input includes sound data matching one or more playback commands and sends sound data representing the voice input to a voice assistant associated with the media playback system for processing of the second voice input.

Abstract: In some examples, a storage medium stores a plurality of information elements that relate to corresponding virtual trusted platform module (TPM) interfaces, where each respective information element of the plurality of information elements corresponds to a respective virtual machine (VM). A controller provides virtual TPMs for respective security operations. A processor resource executes the VMs to use the information elements to access the corresponding virtual TPM interfaces to invoke the security operations of the virtual TPMs, where a first VM is to access a first virtual TPM interface of the virtual TPM interfaces to request that a security operation of a respective virtual TPM be performed.

Abstract: An assignment of demands to routes on a communication network can be improved by selecting and updating a subset of the routes. A network management system (or other communication network component) can obtain a representation of the communication network. The representation can include a network graph, sets of resources, and a set of paths for the network graph. The network management system can update the set of paths by selecting a path subset and updating the paths of the path subset. The updating can satisfy a total change condition and a network improvement condition. The updating can be limited to unused edge and resource combinations or edge and resource combinations used by paths in the path subset. The network management system can configure the communications network to satisfy the demand using routes corresponding to the updated set of paths.

Abstract: Facilitating an object protocol based access of data within a multiprotocol environment is presented herein. In response to receiving a simple storage system (S3) protocol based request to access data via a storage device of a filesystem, the filesystem determines a type of S3 bucket that represents the data; and based on the type of S3 bucket, the filesystem facilitates an S3 protocol based access of the data via the storage device. For example, the S3 protocol based request comprises a file request to create, read, write, and/or delete a file within the storage device. In another example, the S3 protocol based request comprises an object request to create, modify, read, and/or delete an object within the storage device.

Abstract: A three-phase full quorum commit method enabling backing up of network devices that do not offer direct hooks in order to have application consistent protection. Devices are verified to be ready to perform a backup, and a condition of reaching and maintaining a full quorum of devices within a maximum time period is required before the system can be backed up. The three phase backup process reduces the chance of changes to network devices from corrupting consistency among the saved states of the different and disparate network devices. Multiple devices of different makes and models participate together as a unified backup as a network partition and all devices are verified as being in a ready state. The device configuration data is moved from device memory to local disk, and can then be tiered to secondary storage.

Abstract: Systems and methods directing requests to a particular node in a multi-tiered middleware environment are provided. In one embodiment, traffic requests can be dynamically routed to a desired server, and not be load balanced, based on an identification of the client generating the traffic requests.

Abstract: A system and method for cybersecurity reconnaissance, analysis, and scoring that uses distributed, cloud-based computing services to provide sufficient scalability for analysis of enterprise IT networks using only publicly available characterizations. The system and method comprise an in-memory associative array which manages a queue of vulnerability search tasks through a public-facing proxy network. The public-facing proxy network has search nodes configurable to present the network to search tools in a desired manner to control certain aspects of the search to obtain the desired results. A distributed data processing engine and cloud-based storage are used to provide scalable computing power and storage. Each of the cloud-based computing services is containerized and orchestrated for management and efficient scaling purposes.

Abstract: A system for configuring a UE-AMBR includes a MME to send the UE-AMBR to an eNB covering the serving cell of the UE, the eNB covering the serving cell of the UE establishes a radio access bearer of the UE on at least one secondary cell. The MME sends an AMBR of the UE in the primary eNB covering the serving cell of the UE and an AMBR of the UE in a secondary eNB to the primary eNB. The primary eNB sends the AMBR of the secondary eNB to the corresponding secondary eNB. The technical solutions of the present disclosure can make total rate of all non-GBR services of the UE be not larger than the UE-AMBR when the UE has multiple S1 bearers or one S1 bearer.

Abstract: Methods and apparatus for providing delivery of content to client devices of a network via both multicast and unicast mechanisms. In one embodiment, a system for use in a managed content delivery network is described to bridge multicast to unicast, so that the total network bandwidth consumption is significantly lower than a corresponding unicast-only delivery solution, yet which still provides improved quality of service and user viewing experience as compared to a multicast-only delivery solution. In addition, various exemplary aspects of the present disclosure are readily adapted for real-time multicast to unicast streaming of audio and data to, among other things, minimize network bandwidth usage, while maintaining the guaranteed delivery of unicast streams with little or no modification to the existing client device logic.

Abstract: A processing system of a node is operable to determine at least one query for execution, and determine a set of segments that include a set of rows required to execute the at least one query. At least one virtual segment in the set of segments is identified, and at least two data portions in the at least one virtual segment are identified. A locally rebuilt set of rows for the at least two data portions is generated by utilizing a recovery scheme. Query resultant data is generated based on performing execution of the at least one query by utilizing the locally rebuilt set of rows.

Abstract: Exemplary embodiments are directed to a method and system for transferring a user session between a source device and a target device. The method may include receiving a request to transfer a user session from a source device to the target device, the user session corresponds to a running session between the source device and a session end point device, receiving session data corresponding to the user session transfer request, determining, at the target device, a corresponding launch application for the user session using the session data, launching the corresponding launch application to initiate a transfer of the user session; and replacing the source device in the running session by establishing a communication channel with the session end point device upon the launch of the corresponding launch application using the session data and terminating the user session at the source device.