Abstract: Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and/or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

Abstract: A data communication channel between a client and a service is preserved through a failure of the server by maintaining a request log and an inflight request queue in a protected memory region that preserves the contents of the request log and the inflight request queue even when the service encounters a failure. The method of restarting the data communication channel includes, upon the service being restarted following the failure of the service, determining whether the request log contains requests and, if so, copying the requests from the request log into the in-flight request queue and then removing the copied requests from the request log. The requests in the in-flight request queue, which include any that were in the in-flight request queue at the time of the failure of the service and any that were copied from the request log, are then processed.

Abstract: Described herein are techniques for adding adaptive annotations to an electronic content item. For example, a user may insert an annotation by hand drawing the annotation over the content of the content item, in white space around the content, or within an annotation window. The user may also anchor, associate, or link annotations to particular portion of the content item, such that when the content is displayed or rendered on a display of an electronic device, the annotation appears in-line with the content and adjacent to the associated portion.

Abstract: The subject matter herein is directed to a digital data locker that acts as an intermediary between end users operating end user device and document providers. The data locker provides the end user with a secure and easy way to manage, store, and retrieve data that is stored at the document providers. Specifically, the features provided by the data locker include, but are not limited to, a dual level of encryption for data, content assurance to determine whether the data is corrupted, and dissociation between an identity of an end user and the data of the end user stored at the document providers. More specifically, an end user device operated by the end user, through use of a single application, may access the data locker to securely store and retrieve data on/from the document providers.

Abstract: A system transports a plurality of UDP datagrams from a sending application to a receiving application by creating a TCP tunnel between a TCP sending-end and a TCP receiving-end, encapsulating the datagrams in TCP packets at the TCP transmitting-end, transmitting the TCP packets via the TCP tunnel to the TCP receiving-end over a network using a TCP/IP protocol, and extracting the datagrams from the TCP packet and forwarding the extracted datagrams to the receiving application. The TCP tunnel may provide the same delay and responsiveness as UDP protocol. The TCP receiving-end may detect when a packet is missing and request retransmission when a packet is missing, so that the TCP sending-end retransmits the missing packets. The transmitting of TCP packets to the TCP receiving-end continues when the receiving-end detects a missing packet, so that there is no lag in the forwarding of the extracted datagrams. Retransmitted packets may be discarded.

Abstract: Users share live (SHARE LIVE) content in real-time by sharing socially-targeted user-selected/generated content while simultaneously consuming content from any integrated content provider. In the context of an exemplary music-based scenario, the user, while listening to music from any integrated music provider, may initiate a SHARE LIVE session such that concurrent data streams are maintained and media playback information is managed separately from media content playback channels. Information about playback events is continuously transmitted via facilitated sockets. Other users may consume shared content (LISTEN LIVE) by tapping a proprietary resolution method to identify and properly source the media content files the broadcaster is sharing. Independent social broadcast streams may also be overlaid atop the direct playback of media content from a preferred provider as governed by the proprietary resolution method.

Abstract: Methods and systems are disclosed for performing Transmission Control Protocol (TCP) communications. A TCP packet may be received. An artificial error may be added to the TCP packet to prevent the occurrence of a TCP meltdown.

Abstract: A supercomputer system having at least one server, a plurality of compute clients and a distributed file system. The server is configured to distribute computation tickets and each compute client is configured to request a computation ticket. The distributed file system is configured to stock input data for all tasks and output data produced by the compute clients. The supercomputer system is characterized in that it further includes at least one I/O client configured to exchange data with each compute client and with the distributed file system, to distribute input data to at least some of the compute clients or to collect output data produced by at least some of the compute clients.

Abstract: A network node may determine parameters of an authenticated client session for a client device, wherein the parameters comprise a network address of the client device. The network node may determine inactivity of the client device in the authenticated client session. The network node may generate, based on determining the inactivity of the client device, an address resolution protocol (ARP) message or a neighbor solicitation (NS) message to send to the client device, wherein the ARP message or the NS message is to trigger a response from the client device to indicate that the network address of the client device is in use. The network node may provide, toward the client device, the ARP message or the NS message. The network node may perform one or more actions based on receiving or not receiving the response, from the client device, to the ARP message or the NS message.

Abstract: System and method for identifying data corruption in a data transfer over an error-proof communication link, wherein additional structure checksums are formed to secure a data structure during transfer of the data structure, where representatives are associated with the data types, and the structure checksum is formed via the representatives to provide identification of data corruption in a data transfer over an error-proof communication link between a first automation component and a second automation component in industrial control engineering.

Abstract: This disclosure describes systems, methods, and devices related to a multiuser multiple-input and multiple-output (MU-MIMO) setup frame. A device may generate an MU-MIMO setup frame comprising a physical layer (PHY) header and a media access control (MAC) header, the PHY header comprising an indication of a control trailer after the MAC header, the MAC header comprising a first receive address (RA) field comprising one or more first device identifiers (IDs), and the control trailer comprising a second RA field comprising one or more second device IDs. The device may transmit the MU-MIMO setup frame over a directional multi-gigabit (DMG) channel.

Abstract: A communication device that includes processing circuitry that receives an input to switch an operation mode between a first operation mode in which access to the communication device or a connected device connected to the communication device is restricted and a second operation mode in which access is not restricted; controls the access from devices that transmitted access requests in accordance with the first operation mode or the second operation mode, which is designated by the received input; and permits a no-permission device that has no permission for the access to access the communication device or the connected device based on an access request from the no-permission device by registering the no-permission device as a permission device, in a case where the operation mode is the second operation mode.

Abstract: A network element includes output ports, a crossbar fabric and a scheduler. The output ports are organized in groups of multiple output ports selectable over predefined time slots in accordance with a cyclic mapping assigned to each group. In each time slot, the crossbar fabric routes to fabric outputs data received from the buffers via fabric inputs, in accordance with a routing plan. The scheduler determines and applies the routing plan for transmitting packets from the buffers to the communication network via the crossbar fabric and output ports. When in a given time slot, a required readout rate from a given buffer exceeds a maximum rate, the scheduler selects a group of the output ports to which the given buffer is routed in that time slot, and modifies the cyclic mapping for that group to reduce the required readout rate from the given buffer in the given time slot.

Abstract: Provided is a method of correlating an Internet Protocol version 4 (IPv4) address with an Internet Protocol version 6 (IPv6) address. The method may include communicating, via the Internet, an IPv4-addressed signal transmitted to, or received from, an IPv4-capable computing device. The method may also include communicating, via the Internet, an IPv6-addressed signal transmitted to, or received from, an IPv6-capable computing device. The method may further include determining that the IPv4-capable computing device and the IPv6-capable computing device are the same computing device based on the IPv4-addressed signal and the IPv6-addressed signal, and storing in memory data indicating a correlation between at least part of the IPv4 address and at least part of the IPv6 address.

Abstract: Provided are devices and methods that enable content distribution of data units generated by dividing a GOP, and GOP reconstruction and reproduction on the reception device side. A transmission device generates a sub GOP media segment as packet-stored data, the sub GOP media segment storing media data including only part of constituent data of a Group of Pictures (GOP) as a processing unit of encoded data and metadata corresponding to the media data, and generates and transmits a packet having an in-GOP location identifier recorded as packet additional information therein, the in-GOP location identifier indicating the in-GOP location of the media data stored in the sub GOP media segment. A reception device arranges media data dispersed and stored in packets by referring to the in-GOP location identifiers stored in received packets, and reconstructs and decodes a GOP.

Abstract: Some aspects are directed to systems for providing access to data. An example includes a computer system implementing a data access framework for providing data to one or more predictive models. The system is configured to receive at least one asset definition comprising an asset identifier for at least one asset associated with at least one data source, receive at least one data lens definition comprising a data lens identifier and a logical model identifier, the logical model identifier identifying at least one portion of a logical system model, access a first datastore to retrieve asset information extracted from the at least one data source, determine, using the logical model identifier, a portion of the logical system model associated with the retrieved asset information, format the retrieved asset information for storage in a second datastore corresponding to the logical system model, and store the formatted retrieved asset information in the second datastore.

Abstract: Methods and devices for providing a media description of a media stream to a client are described. The client is subscribed to a media description delivery service. The media description delivery service comprises a media description delivery rule. A request for a media description delivery is sent to a media server. From the media server a media description is received. It is verified that the received media description complies with the media description delivery rule and if the verification is in the affirmative, a delivery of the media description is initiated to the client.

Abstract: In aspects of packet segmentation and reassembly for mesh networks, a source node in a mesh network segments an access protocol data unit (PDU) into a set of segments that are concatenated with a segment transport header and transmitted over the mesh network in segmented access messages to a destination node. The destination node allocates memory to store the content of the access PDU based on a segment total field in the segment transport header, and stores each received segment at the appropriate offset in the allocated memory, based on a value of a segment offset filed in each segmented access message. The destination node transmits a segment acknowledgement message including a segment acknowledgement field indicating which of the multiple segments have been received by the destination node.

Abstract: An information processing apparatus includes an obtaining unit and a converter. The obtaining unit obtains information regarding a browsing program in a terminal trying to browse a document. The converter converts the document to a format browseable with the browsing program in a case where the document is not browseable on the terminal.

Abstract: To realize some of the advantages discussed above, there is provided a computerized method for dynamic shared compression between a first node and at least a second node communicatively connected over a network. The method comprises receiving by the first node a first plurality of data inputs from the at least a second node. At least a pattern corresponding to the received first plurality of data inputs is continuously determined. Compression metadata corresponding to the at least a pattern are periodically generated. The compression metadata is stored in a memory. The compression metadata is provided to the at least a second node.

Abstract: [Object] To provide a technology capable of performing processing on desired data in the reception-side communication device, even in the case in which a sequence number space is shared among a plurality of pieces of data transmitted from the transmission-side communication device. [Solution] Provided is a transmission control device including: a communication control unit that controls transmission of a plurality of pieces of data including respective sequence numbers; and a data generation unit that generates, as information indicating one or a plurality of pieces of data to be processed in a reception device among the plurality of pieces of data, number information indicating the sequence numbers included in the one or plurality of pieces of data to be processed. The communication control unit controls transmission of the number information to the reception device.

Abstract: A computer-implemented method of transmitting encrypted data comprises accessing, by one or more processors of an origination endpoint, first data to be transmitted to a destination having a corresponding identifier; generating, by the one or more processors, an identifier security header; generating, by the one or more processors, second data from the first data and the identifier security header; encrypting, by the one or more processors, the second data; generating, by the one or more processors, authentication data based on the encrypted second data; generating, by the one or more processors, third data from the encrypted second data and the authentication data; generating, by the one or more processors, fourth data from the identifier corresponding to the destination and the third data; and sending, by the one or more processors, the fourth data to the destination.

Abstract: Private data to be communicated to a recipient is encrypted with the public key of a public and private key pair associated with the recipient. An optically readable format of the encrypted private data is generated. The optically readable format may be provided to the recipient.

Abstract: An apparatus comprises: a memory; and a processor coupled to the memory and configured to: perform a random number generation; generate a host identifier (HID) based on the random number generation, wherein the HID is substantially unique within a local network; and generate, using the HID, an initial message requesting a local address. A method comprises: performing a random number generation; generating a host identifier (HID) based on the random number generation, wherein the HID is substantially unique within a local network; generating, using the HID, an initial message requesting a local address; and transmitting the initial message.

Abstract: Methods for authenticating a user account are generally described. In various examples, the methods may comprise performing a first handshake comprising sending authentication data to a first computing device. The authentication data may include a handshake identifier, a user token, and an encryption key. In some examples, the methods may further comprise storing the handshake identifier, the user token, and the encryption key in a database. The methods may further comprise receiving a request for verification of a transaction. The request may comprise the handshake identifier and an encrypted user token. The user token and the encryption key may be retrieved from the database based at least in part on the handshake identifier of the request. The encryption key may be used to decrypt the encrypted user token. A determination may be made that the decrypted user token matches the user token retrieved from the database.

Abstract: A service provider (SP) network device or system can enable a WiFi protected access 2 (WPA2) pass-through with a user equipment (UE) and define various partitions between a physical access point (pAP) and a virtual AP (vAP) based on virtual network function(s) (VNFs). The WPA2 pass-through can be an interface connection that passes through a computer premise equipment (CPE) or wireless residential gateway (GW) without modifying the data traffic and also enable different packet sizes, even if the vAP or data VNF at the SP network device is not configured to process the size, by fragmenting and defragmenting at least one of: a packet frame from the UE to the vAP, or from the vAP to the UE based on fragmentation criteria.

Abstract: A computer-implemented method of transmitting encrypted data comprises accessing, by one or more processors of an origination endpoint, first data to be transmitted to a destination having a corresponding identifier; generating, by the one or more processors, an identifier security header; generating, by the one or more processors, second data from the first data and the identifier security header; encrypting, by the one or more processors, the second data; generating, by the one or more processors, authentication data based on the encrypted second data; generating, by the one or more processors, third data from the encrypted second data and the authentication data; generating, by the one or more processors, fourth data from the identifier corresponding to the destination and the third data; and sending, by the one or more processors, the fourth data to the destination.

Abstract: A method of verifying, during a continuous integration (CI) and continuous delivery (CD) process, that an asynchronous message contract between a consumer service and a provider service in a microservice architecture has not been broken by a change to the provider service is disclosed. The asynchronous message contract is retrieved from a central server. A test message queue is created, the test message queue being separate from an existing message queue. Generation of a message based on a precondition specified in the asynchronous message contract is triggered. The message is retrieved from the test queue. The message is verified according to the asynchronous message contract, the verifying based on a build error not being generated during the CI and CD process.

Abstract: Direct data transfer between devices having a shared bus may be implemented with reduced involvement from a controller associated with the devices. A controller, a source memory device, and a target memory device may be coupled with a shared bus. The controller may identify a source address at the source memory device for data to be transferred to the target memory device. The controller also may identify a target address in the target memory device, and initiate a data transfer directly from the source to the target through a command that is received at both the source and the target memory device. In response to the command, the source memory device may read data out to the bus, and the target memory may read the data from the bus and store the data starting at the target address without further commands from the controller.

Abstract: A method is described and in one embodiment includes receiving at a first node in a communications network a message associated with a first flow, wherein the message comprises a flow treatment attribute including metadata indicative of how the first flow should be treated in the network; analyzing the flow treatment attribute at the first node; setting policy for treatment of the flow in the network based on the analyzing; and forwarding the message to a next network node.

Abstract: An apparatus for multi-bitrate content streaming includes a receiving module configured to capture media content, a streamlet module configured to segment the media content and generate a plurality of streamlets, and an encoding module configured to generate a set of streamlets. The system includes the apparatus, wherein the set of streamlets comprises a plurality of streamlets having identical time indices and durations, and each streamlet of the set of streamlets having a unique bitrate, and wherein the encoding module comprises a master module configured to assign an encoding job to one of a plurality of host computing modules in response to an encoding job completion bid. A method includes receiving media content, segmenting the media content and generating a plurality of streamlets, and generating a set of streamlets.

Abstract: Methods and systems for penetration testing of a networked system by a penetration testing system. In some embodiments, both active and passive validation methods are used during a single penetration testing campaign in a single networked system. In other embodiments, a first penetration testing campaign uses only active validation and a second penetration campaign uses only passive validation, where both campaigns are performed by a single penetration testing system in a single networked system. Node-by-node determination of whether to use active or passive validation can be based on expected extent and/or likelihood of damage from actually compromising a network node using active validation.

Abstract: Methods and devices for providing a media description of a media stream to a client are described. The client is subscribed to a media description delivery service. The media description delivery service comprises a media description delivery rule. A request for a media description delivery is sent to a media server. From the media server a media description is received. It is verified that the received media description complies with the media description delivery rule and if the verification is in the affirmative, a delivery of the media description is initiated to the client.

Abstract: The present application discloses a method and system for transmitting communication data. A specific implementation of the method comprises: receiving a connection request for transmitting communication data through a remote direct memory access network; determining a transmission type of the communication data according to the connection request; establishing a socket according to the transmission type; transmitting the communication data on the remote direct memory access network by using the socket; and deleting the socket when the transmission of the communication data is completed. This implementation improves the efficiency of transmitting communication data on a remote direct memory access (RDMA) network by a non-RDMA network.

Abstract: Systems, methods, apparatuses, and software for data storage systems are provided herein. In one example, a data storage system is provided that includes a processor and a network interface having a tunneled network connection established with another network interface associated with another processor. The processor is configured to receive one or more packets indicating the network interface as a network destination and comprising a storage operation, and inspect at least a storage address included in a header of the one or more packets to determine that the storage operation corresponds to a storage drive managed by the other processor. The processor is configured to establish one or more further packets comprising the storage operation and having a header modified from the one or more packets to indicate a network address of the other network interface, and transfer the one or more further packets for delivery to the other network interface.

Abstract: The invention relates to a method for configuring a device connected to a field bus, comprising: providing a field bus which is based on an Ethernet network, providing a first device connected to the field bus, transmitting a broadcast message from the new device over the field bus, wherein the broadcast message requests information about a field bus protocol used on the field bus and/or to be used by the new device, sending a configuration response in response to the broadcast message from the first device to the new device, wherein the configuration response comprises information at least about a field bus protocol used on the field bus and/or to be used by the new device.

Abstract: In a method for data transmission in a communications network, data frames containing metadata and payloads are transmitted via point-to-point connections between a respective transmitter and a receiver according to a communications protocol. For each point-to-point connection, a transmission list of the data frames to be transmitted from the transmitter to the receiver is kept. In addition, a priority set of at least three interrupt priorities of pairs with differing significance is provided, and the communications protocol permits each data frame of a transmission list to be assigned an interrupt priority and to interrupt a current transmission of a data frame of the transmission list in order to transfer a data frame that is contained in the transmission list and that has been assigned a higher interrupt priority than the currently transferred data frame.

Abstract: A service provider (SP) network device or system can operate to enable a WiFi protected access 2 (WPA2) pass-through with a user equipment (UE) and further define various partitions between a physical access point (pAP) and a virtual AP (vAP) according to one or more virtual network functions (VNFs). The WPA2 pass-through can be an interface connection that passes through a computer premise equipment (CPE) or wireless residential gateway (GW) without the CPE or GW modifying or affecting the data traffic. One such partition, can include security functions, including authentication and authorization being initially at the CPE, while other network functions of the community WiFi network are virtualized and moved to the SP network. The SP network device can receive traffic data from a UE through or via the WPA 2 pass-through from a UE of a community Wi-Fi network at a home, residence, or entity network.

Abstract: Disclosed is method for operating a protocol translator between an upstream device and a downstream device including receiving, at the protocol translator from the upstream device, a first plurality of packets according to a first protocol, extracting a payload from each of the first plurality of packets according to the first protocol, constructing a message from the extracted payloads, slicing the message into a second plurality of packets according to a second protocol, storing the second plurality of packets in a retransmit queue, sending the second plurality of packets to the downstream device, receiving an acknowledgement from the downstream device, and removing from the retransmit queue, one or more packets identified by the acknowledgement.

Abstract: In a communication network, a first communication device obtains respective channel estimate matrices of respective communication channels between i) the first communication device and ii) respective second communication devices. The first communication device generates respective steering matrices for use in communicating with the respective second communication devices, including generating each steering matrix to project to a null-space of a space spanned by channel estimate matrices corresponding to others of the second communication devices. The first communication device utilizes the respective steering matrices to simultaneously transmit respective signals to the respective second communication devices.

Abstract: Systems and methods for load balancing Internet-of-Things (IoT) gateways. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory including program instructions stored thereon that, upon execution by the processor, cause the IHS to: receive metadata including attributes of IoT devices communicatively coupled to the IHS, wherein the attributes are collected by the IoT devices at least in part during a time interval leading up to the IHS entering an undesired state; perform feature extraction upon the metadata; identify correlations between extracted features and the undesired state; and perform load balancing based upon the correlations.

Abstract: A method and apparatus for transmitting and receiving a broadcast signal including a robust header compression (RoHC) packet stream are disclosed. The broadcast signal transmitting method includes compressing a header of an IP packet included in an IP packet stream to generate an RoHC packet stream, extracting a first part of an RoHC packet included in the generated RoHC packet stream, converting a second part of the RoHC packet into another type of an RoHC packet, reconfiguring a new packet stream including the converted another type of the RoHC packet, transporting the reconfigured packet stream through a first channel, and transporting the extracted first part through a second channel.

Abstract: A token apportionment stack may include multiple layers. A data structure layer of the token apportionment stack may access configuration memory to determine nodes and node attributes for a multiple-tier data structure. The data structure layer may send a message to a token assignment later of the token apportionment stack that indicates the determined nodes and attributes. Responsive to the message, the token assignment layer may assign tokens to a first node and recursively assign an apportionment of the assigned tokens to a second node. The token assignment layer may send a message with the assignments to the data structure layer. An interface interaction layer of the token apportionment stack may receive and handle query regarding token assignment by accessing token assignment data stored at the data structure layer.

Abstract: A device includes a first input/output (I/O) port for communication with an external processor, a second I/O port for communication with a second device, and an interface adaptor supporting communication through the first and second I/O ports via a protocol having a plurality of layers, including an application layer, a physical layer, and a physical adaptor layer. The application layer processes information according to an application layer format and the physical adaptor layer processes information according to a physical adaptor layer format. The device receives from the external processor through the first I/O port a request in the application layer format that one or more communication conditions be set for a physical layer of the second device, converts the request from the application layer format to the physical adaptor layer format, and sends the converted request in the physical adaptor layer format to the second device through the second I/O port.

Abstract: A computer implemented program executable to display a graphical user interface on a display surface of a computing device which by user indications retrieves a video and a geospatial representation in which one or more coordinate location indicators can be selected, and further functions to match location coordinates associated with selected coordinate location indicators with the plurality of images occurring between a beginning video image and an ending video image of the video.

Abstract: The present disclosure provides a data transmission method and a terminal. The method includes respectively allocating, by a terminal, a first download range and a second download range to a first network interface card and a second network interface card according to an obtained download range of to-be-downloaded data; and if the terminal determines that when a preset download time arrives, the first network interface card completes downloading of the first download range and the second network interface card does not complete downloading of the second download range, performing, by the terminal, a first allocation operation at least once. This reduces download duration of to-be-downloaded data.

Abstract: An apparatus and a method for transmitting multimedia data in a broadcast system are provided. A method for constructing a payload for a multimedia frame to be transmitted via a heterogeneous network, in a broadcast system that supports an Internet protocol-based multimedia service, includes dividing the data so as to transmit data of at least one media type and constructing a data region based on each datum of the divided data, constructing a header region including information on the state of the data contained in the data region and/or information on the data region, and combining the data region and the header region to construct a payload for the multimedia frame.

Abstract: A first medium access control (MAC) service data unit (MSDU), intended for a communication device of multiple communication devices, is divided into a plurality of fragments. First and second groups of MAC protocol data units (MPDUs) intended for the multiple communication devices are generated and one or more transceivers are controlled to transmit first and second orthogonal frequency division multiple access data units that include the first and second groups, respectively, to the multiple communication devices. The first group includes a first MPDU that includes a first fragment of the plurality of fragments and is an only MPDU of the first group intended for the communication device. The second group includes a second MPDU that includes the first MSDU in its entirety and is included in the second group in response to determining that the first fragment was not properly received and/or decoded by the communication device.

Abstract: [Object] To provide a technology capable of performing processing on desired data in the reception-side communication device, even in the case in which a sequence number space is shared among a plurality of pieces of data transmitted from the transmission-side communication device. [Solution] Provided is a transmission control device including: a communication control unit that controls transmission of a plurality of pieces of data including respective sequence numbers; and a data generation unit that generates, as information indicating one or a plurality of pieces of data to be processed in a reception device among the plurality of pieces of data, number information indicating the sequence numbers included in the one or plurality of pieces of data to be processed. The communication control unit controls transmission of the number information to the reception device.

Abstract: Adaptive tuning techniques are provided for data communications in an Object Management Group (OMG) Real-Time Publish Subscribe (RTPS) Protocol operable over a communication network to provide good throughput/latency tradeoff as well as efficient bandwidth utilization. With this invention, latency under high throughput conditions can be reduced several times compared with the latency obtained with traditional non-adaptive approaches.