Abstract: An unauthorized activity detection method in an onboard network system. The detection method includes determining whether or not a message sent out onto the network is an attack message, saving information relating to the attack message in at least one memory in a case where the message is an attack message, identifying a communication pattern from information relating to the attack message, and determining whether or not the message matches a communication pattern. The determination of whether an attack message and determination of whether matching a communication pattern are executed on each of a plurality of messages received from the network. In the determining of whether an attack message executed on a message received after executing of determining of whether matching a communication pattern, results of the determination of whether an attack message that has already be executed are used.

Abstract: A fog data agent for a connected car includes a connector configured to couple to an on-board diagnostic port of the connected car, a microprocessor, a wireless communication interface coupled to the microprocessor, a cellular communication interface coupled to the microprocessor, a data storage device coupled to the microprocessor, and logic configured to receive data from the on-board diagnostic port, analyzes the data in real-time, and establish a bi-directional communication channel with a remote server via at least one of the wireless communication interface and the cellular communication interface to transmit a subset of the analyzed data to the remote server in response to the data analysis.

Abstract: A gateway device for a fire control system is described herein. The gateway device can comprise a processor and a memory having instructions stored thereon which, when executed by the processor, cause the processor to detect that a network interface of the gateway device is connected to a network, receive data associated with the fire control system, and determine a data management scheme for the gateway device based on the type of detected network interface and the received data.

Abstract: A method for filtering data packets at a firewall system is disclosed that includes receiving a data packet having a plurality of fields at a processor. Determining with the processor whether a precondition exists for one or more of the plurality of fields, where an action is associated with the precondition. Performing the action associated with the precondition on the data packet with the processor if it is determined that the precondition exists for one or more of the plurality of fields. Processing the data packet using a plurality of rules with the processor if it is determined that the precondition does not exist for the one or more of the plurality of fields.

Abstract: A method, article of manufacture, and apparatus for providing a write leases in a distributed file system is discussed. A lease break is received for a file at a client from a metadata server (“MDS”), wherein the client has a write lease for the file. A write buffer is flushed on the client to an object store, wherein the write buffer comprises data objects comprising the file. A metadata request is transmitted from the client to the MDS in connection with flushing the write buffer. A lease extension is received for the write lease from the MDS.

Abstract: A communication method and system configured to facilitate integration of complex automation systems composed of disparate components that may run with different processes are distributed over a network or are embedded devices. The system/method allows for a client to rapidly access functionality exposed by a service within a client-service system employing a distributed application structure utilizing an augmented object-oriented model of multiple member types. The system/method allows interconnected nodes to communicate through message passing and remote procedure calling so as to reduce latency within a system composed of distributed resources.

Abstract: A network security protection method is executed by a network security protection device and includes obtaining at least one of network environment data or threat detection data of a host that is in a protected network and that is connected to the network security protection device, where the network environment data includes an identifier of an operating system, a parameter of the operating system, an identifier of software with a network port access function, or a parameter of the software; and the threat detection data includes a threat type or a threat identifier, where the threat type includes a vulnerability or a malicious program; searching, according to the obtained at least one of network environment data or threat detection data, for corresponding information used to eliminate a security threat in the host; and sending the found information to the host.

Abstract: A method performed by an Operation and Support System (OSS) node for handling communication between a wireless device and a communication network node in a communication network, which communication network comprises a first radio access node associated with a first gateway and a second radio access node associated with a second gateway. The OSS node determines to initiate a change of an Internet Protocol (IP) address for the wireless device. The OSS node further identifies a session of packets for the wireless device, which session is run over a protocol that supports session continuity even though source or destination IP addresses change in the packets. Furthermore, the OSS node triggers the change of the IP address associated with the first gateway for the wireless device, of packets of the session, to a changed IP address associated with the second gateway.

Abstract: A secure start system for an autonomous vehicle can include a communications router comprising an input interface to receive a boot-loader to enable network communications with a backend system. The secure start system utilizes a tunnel key from the backend system to establish a private communications session with a backend data vault. The secure start system then retrieves a set of decryption keys from the backend data vault, via the private communications session, to decrypt a plurality of encrypted drives of the autonomous vehicle, which enables one or more functions of the autonomous vehicle.

Abstract: A provider network includes a service that creates virtual private network (VPN) endpoint nodes. Application programming interfaces are available that the creation of VPN endpoint nodes, peer them together, and attach them to respective virtual private networks to thereby establish communication tunnels between pairs of virtual private networks. Each VPN endpoint node may be implemented as a fault tolerant endpoint node in which the node is created as a plurality of virtual machines. Each of the virtual machines is configured from a common machine image that includes software capable of causing the respective virtual machine to configure a tunnel such as an IPSec tunnel. One of the virtual machines, however, is operated in an active mode, while another virtual machine is configured to operate in a standby mode.

Abstract: Systems, methods, and apparatuses are disclosed herein for providing an Individual Service Instance identifier (“I-SID”) translation service for accessing services on different networks. Packets designated for specific services via an I-SID Tag may be received at an edge network device and a lookup may be performed to locate the service on another network via the I-SID corresponding to the service, the I-SID being mapped at another network. The I-SID may be updated with the newly-located I-SID in order for the packet to reach an appropriate service on the other network.

Abstract: A system and method for transparently caching content from multiple content providers.

Abstract: Methods, systems and apparatus for securing credential distribution are disclosed. One method includes receiving, by a wireless device, from a cloud system, that the wireless device is authorized to receive private network credentials, sensing, by the wireless device, a presence of one or more wireless networks, providing, by the wireless device, wireless network information of the sensed presence of the one or more wireless networks to the cloud system, providing, by the wireless device, to the cloud system, a request for private network credentials, wherein the cloud system, receives the private network credentials of the authenticated user, and receiving, by the wireless device, from the cloud system, distribution of the private network credentials, thereby allowing the wireless device to obtain local network access with the private network credentials.

Abstract: Backups of workloads in a multi-tenant cloud computing environment are efficiently queued and scheduled. A method of backing up workloads for multiple tenants of a cloud computing system, includes the steps of determining a pool of workloads to be backed up during a time window, the workloads including workloads for a first tenant and workloads for a second tenant, placing a backup task for backing up each of the workloads in the pool in a scheduling queue and prioritizing the backup tasks according to backup parameters specified by the tenants, sizes of workload data to be backed up, and hardware constraints of a backup storage device executing the backups, and instructing the backup storage device to execute the backup tasks according to an order of the backup tasks in the scheduling queue.

Abstract: Disclosed are a multi-dimensional segmentation method and apparatus for a 5G-oriented protocol stack, and a terminal. The method comprises: segmenting an MAC layer in a protocol stack, and putting HARQ entities of a physical layer and the MAC layer together in a pre-set physical resource for processing; and moving a relevant partial module of the physical layer to an FPGA for processing according to a calculation amount and functional requirements. The hardware configuration requirements are reduced on the basis of guaranteeing the performance.

Abstract: An approach is provided for optimizing application throughput. Data is collected about traffic flow in a computer network from one or more switches and one or more switches in the computer network. A hot spot destination in the computer network is identified by performing analytics on the collected data about the traffic flow against a traffic pattern in the computer network. An application-optimized software-defined networking (SDN) path is created for new flows to the hot spot destination. In response to an establishment of a new flow, the new flow is forwarded to the application-optimized SDN path.

Abstract: Systems and methods are directed to communication between a vehicle and an entity infrastructure. In one example, a computer-implemented method for facilitating communication from and to a vehicle includes obtaining, by a computing system comprising one or more computing devices, a request to establish communication from a vehicle computing system. The method further includes establishing, by the computing system, one or more bidirectional communication connections to the vehicle computing system. The method further includes receiving, by the computing system, one or more messages over the one or more communication connections to the vehicle computing system. The method further includes determining, by the computing system, routing for the one or more received messages. The method further includes providing, by the computing system, the one or more messages to one or more clients based at least in part on the determined routing.

Abstract: A virtual computer system includes virtualization software, and one or more physical network interfaces for connecting to one or more computer networks. The visualization software supports one or more virtual machines (VMs), and exports one or more virtual network interfaces to the VM(s) to enable the VM(s) to access the computer network(s) through the physical network interface(s). The virtualization software modifies and filters network data frames from the VM(s) and from the physical network interfaces) to restrict one or more VMs to one or more virtual local area networks (VLANs) that are implemented within a VLAN topology. Restricting a VM to a VLAN Omits the broadcast domain to which the VM belongs, which may reduce security risks facing the VM. implementing the VLAN functionality within the virtualization software provides the functionality to every VM in the computer system, without requiring every VM to provide the functionality.

Abstract: An information handling system reduces latency of input/output transactions. The information handling system includes a system memory and an accelerator. The accelerator intercepts a command response that is issued by the system memory, determines a correct drive from an incorrect drive based on an attribute of the command response, and maps an address of the command response and sends the command response to the correct drive. The no-response command is sent to the incorrect drive. The correct drive completes the command response, and the incorrect drive issues a response that is disregarded by the accelerator.

Abstract: Platform-specific user interface (UI) objects may be generated based on received free hand input. In response to receiving free hand input, the received free hand input is analyzed. Based on the analysis of the received free hand input, one or more elements associated with the free hand input are identified. The one or more elements can comprise shapes or text corresponding to the received free hand input. For each of at least one of the one or more elements, the one or more elements are analyzed. Analyzing the at least one element may comprise analyzing a context of the at least one element. A UI object corresponding to the at least one element is determined. Executable platform-specific UI code associated with the determined UI object is generated.

Abstract: Techniques are disclosed for a communication system that facilitates communication between a computing device and a computer system. In some examples, the computing device can support a first communication protocol (e.g., hypertext transfer protocol (HTTP)). In such examples, the computer system can support a second communication protocol (e.g., Lightweight Directory Access Protocol (LDAP)). In some examples, the communication system can provide a callable, communication interface that supports one or more communication protocols and that provides functions to enable the computing device t to communicate with the computer system. For example, the communication interface can enable the computing device to use HTTP to communicate with the computer system to perform operations defined using LDAP.

Abstract: Methods and apparatus for selecting digital access technology for programming and data delivery over, e.g., a network. In one embodiment, the network comprises an HFC cable or satellite network that includes a server process interfacing with a plurality of customer premises equipment (CPE), and/or associated client devices, each having different capabilities profiles. The server determines one or more capabilities possessed by the CPE, and evaluates one or more program or content choices for possible delivery to that CPE based on its profile. The server generates a list of programs or content based on this evaluation, and transmits this list to the CPE, which displays the list for viewing by a user. The user is therefore offered a list of available content that is compatible with their specific configuration. A business and operational rules engine is also optionally employed to control the operation of the foregoing processes to accomplish particular business, or operational goals.

Abstract: A chip design environment is disclosed which accepts application specific processing, memory and IO elements and declarative specification of function, cost and performance of peripheral, low-level and infrastructural elements and of overall design and generates synthesizable module RTLs and relevant place-and-route constraints. The generated elements include the network interconnecting all the elements, a programming memory consistency model and its coherence protocol, allocation and scheduling processes realizing run-time inference of optimal parallel execution and processes for control of coherence action and prefetch intensity, task-data migration, voltage-frequency scaling and power-clock gating. The environment employs knowledge bases, models to predict performance and to assign confidence scores to predictions and, in turn, the predictions to explore space of topology, architecture, composition, etc options.

Abstract: An example system includes one or more resource managers forming a federation of resources, at least one resource manager being associated with one or more resources; a federation hub for receiving local resource information from each of the one or more resource managers, wherein the federation hub aggregates the local resource information from each of the one or more resource managers and provides an aggregated view of all resources of the federation; and a bylaw guardian for determining compliance of each of the one or more resource managers to requirements of the federation.

Abstract: A method implemented by a system on a chip (SOC) system executing an enhance serial peripheral interconnect (eSPI) master. The method to receive an alert from an eSPI slave, send a get out of band message to the eSPI slave, and receive an out of band message from the eSPI slave including a connection or disconnection command. The method enabling the SOC to include an embedded multiplexor for managing the role of a universal serial bus (USB) Type-C connector.

Abstract: A system determines groups of nodes within a communication network, each group forming a bi-connected component. A simple path is computed between a source node and a target node. Each group of nodes without a node in the simple path is removed producing a resulting set of nodes. Valid connections between the source node and the target node are determined that include only nodes in the resulting set of nodes. Information is provided from the source node to the target node via one or more of the valid connections. A running time for performing the step of determining the groups of nodes through the step of removing each of the groups of nodes without a node in the simple path is linear with respect to a size of a graph of the communication network. A method and computer program product also are provided.

Abstract: A method according to one embodiment includes mapping the competitive computer network environment based on network connections between web domains within the competitive computer network environment, wherein the web domains include at least a target domain and a plurality of source domains, determining persistence properties of the network connections between the web domains to identify network connections that are expected to persist for at least a threshold period of time, determining, for each source domain of the plurality of source domains having a network connection with the target domain expected to persist for at least the threshold period of time, a referral value indicative of an amount of network traffic directed from the source domain to the target domain, and ranking the source domains based on the corresponding referral values.

Abstract: Systems and methods for securely replicating a database include receiving, at a server with access to a database comprising a plurality of database entries, a request to replicate the database to a computing device, wherein access to each database entry of the plurality of database entries is controlled based on a plurality of classification levels; determining, by the server, a classification level of the computing device; filtering, by the server, the plurality of database entries to generate a filtered subset of the plurality of database entries, wherein the filtered subset comprises database entries at or below the classification level of the computing device; sending, to the computing device, the filtered subset, wherein the computing device uses the filtered subset to create a replicated database.

Abstract: Examples include receiving a rule for communication between a first group and a second group of endpoints in a network. The network may include a plurality of networking devices. Examples include receiving a first identifier for the first group and a second identifier and a network address for the second group, receiving composition data of the network. Examples also include determining a topology of the network comprising a first number of communication paths and determining a reduced topology based on the rule, the first identifier, and the second identifier. The first number of paths may link a first networking device out of the plurality of networking devices to each device of the plurality of the networking devices. The second number of paths may link the first networking device to the second group.

Abstract: Methods and systems are provided for configuring or customizing settings or parameters of different media devices for compatible operations in an automated manner. An exemplary method of configuring a device for presenting media content in conjunction with a second device involves a client device detecting the device on a wireless network, identifying performance characteristics associated with the second device coupled to the device, and automatically configuring the device for operation with the second device via the wireless network and in a manner that is influenced by the performance characteristics associated with the second device. In this regard, one or more configurable parameters or settings maintained at the device and that influence its operation may be modified via the wireless network to correspond to performance characteristics of the second device, thereby facilitating compatible interoperation with the second device.

Abstract: A system includes a vehicle modem; a storage maintaining paired device data including phone numbers of mobile devices; and a web server installed to a telematics control unit connected to a vehicle bus. The web server identifies a change in a network address of the vehicle modem, and in response, sends the changed network address to the mobile devices using short message service (SMS) messages addressed to the phone numbers of the mobile devices. A mobile device identifies a web request as including a hostname of a vehicle; accesses a virtual domain name server of the device to determine whether the mobile device locally maintains a network address for the hostname; if so, initiates a web connection to the network address, and if not, initiates the web connection using a network address resolved from the hostname via a remote domain name server.

Abstract: Embodiments of the present invention are directed to a configuration interface of a network ASIC. The configuration interface allows for two modes of traversal of nodes. The nodes form one or more chains. Each chain is in a ring or a list topology. A master receives external access transactions. Once received by the master, an external access transaction traverses the chains to reach a target node. A target node either is an access to a memory space or is a module. A chain can include at least one decoder. A decoder includes logic that determines which of its leaves to send an external access transaction to. In contrast, if a module is not the target node, then the module passes an external access transaction to the next node coupled thereto; otherwise, if the module is the target node, the transmission of the external access transaction stops at the module.

Abstract: Technologies are described for facilitating transaction processing within a database environment having a coordinator node, a first worker node, and at least a second worker node. The coordinator node receives local transaction tokens from the first and the at least a second worker nodes. The coordinator nodes determines a synchronized transaction token using at least the local transaction tokens from the first and the at least a second worker nodes. The coordinator node sends the synchronized transaction token to the first and the at least a second worker nodes.

Abstract: Systems and methods here may be used for authorizing network access including using a controller with a processor and memory, the controller in communication with a first network for controlling access to the first network. From a user equipment having a user registered in a visitor network, an access request to access the first network is received, wherein the access request includes a MAC address of the user equipment. Based on a query performed in a subscriber repository, if the received MAC address is not found, a credential request is sent to the user equipment, and a credential is received from the user equipment. A single use code is generated, stored in the subscriber repository, and sent to the user equipment via a trusted channel. A new code and a new credential are received via the visitor network, and are compared. If the new code and the single use code match, the new credential is registered for re-use by the user equipment.

Abstract: A natural language query can be received at a main natural language processor inside a data protection compliance boundary in a computer system. The natural language query can be processed via the main natural language processor. The data from the query can be transmitted to a data protection computer component. It can be determined via the data protection component whether the data from the query includes protected data whose transmission to a computerized extension would violate a computer-readable data protection rule. The extension is outside the compliance boundary in the computer system and is configured to participate in responding to natural language queries received by the main natural language processor. In response to determining that the data from the query includes the protected data, transmission of the protected data from the main natural language processor to the extension as part of responding to the query can be inhibited.

Abstract: A service management system communicates via wide area network with gateway devices located at respective user premises. The service management system remotely manages delivery of application services, which can be voice controlled, by a gateway, e.g. by selectively activating/deactivating service logic modules in the gateway. The service management system also may selectively provide secure communications and exchange of information among gateway devices and among associated endpoint devices. An exemplary service management system includes a router connected to the network and one or more computer platforms, for implementing management functions. Examples of the functions include a connection manager for controlling system communications with the gateway devices, an authentication manager for authenticating each gateway device and controlling the connection manager and a subscription manager for managing applications services and/or features offered by the gateway devices.

Abstract: A system may include a first network having a first communications protocol, a second network having a second communications protocol and at least one edge device in communication with the first network and the second network. The edge device may include a translator to translate a first address associated with the first network and based on the first communications protocol into a second address associated with the second network and based on the second communications protocol. The second address may include a first address portion based on a first fragment of the first address, a second address portion having a translation key based on a second fragment of the first address and a third address portion having a locator address.

Abstract: Techniques for notification for a prioritized media path for a communication session are described. According to various embodiments, a communication session is authenticated with a communication service. The communication service interacts with an Internet Protocol (IP) network and a wireless access network to cause the communication session to be routed across a prioritized media path.

Abstract: A radio terminal apparatus (113) is configured to perform D2D communication with at least one radio terminal (121-124) belonging to a second group (group 2) when a predetermined condition is satisfied. The predetermined condition includes that a first radio terminal (110) belonging to a first group (group 1) to which the radio terminal apparatus (113) belongs gives the second group (group 2) implicit or explicit permission to perform D2D communication between the first and second groups (groups 1 and 2). It is thus, for example, possible to contribute to improving security of device-to-device (D2D) communication performed between D2D communication groups.

Abstract: A hub apparatus comprises a first port that receives predetermined cascade-supplied differential signals; a plurality of second ports that receive and output the predetermined differential signals; a third port that cascade-outputs the predetermined differential signals; a plurality of differential signal line pairs that daisy-chain connect the first port, the plurality of second ports, and the third port in this order from upstream to downstream; and a terminator provided between two differential signal lines that constitute a differential signal line pair connecting the last-stage second port out of the plurality of second ports to the third port.

Abstract: For a managed network implementing at least one logical router having centralized and distributed components, some embodiments provide a method that better supports the provision of certain network applications and/or services. The method receives at a host implementing (1) a distributed logical router and (2) a plurality of logical switches of a logical network along with other hosts, a message from a first data compute node (DCN) executing on the host. The host logically forwards the message to the distributed logical router that uses a particular anycast internet protocol (IP) address using a first media access control (MAC) address. The distributed router determines that the message requires processing by a centralized logical router (e.g., a service router, edge node, etc.) executing on an edge node host and forwards the message to the centralized logical router using the same anycast IP address and a second, unique MAC address.

Abstract: Systems, methods, and apparatuses enable optimizing a size of computer threat signature libraries used by computer security applications to detect potential occurrences of computer and network security threats. In an embodiment, a threat signature is a pattern used by a computer security application to detect instances of potential security threats. A threat signature library is a collection of individual threat signatures, the library used in conjunction with a threat library to enable detecting a range of threats to computing devices and networks (e.g., various known viruses, malware, spam, types of network-based attacks, etc.). Based on profile information collected for a computing device, a security orchestrator optimizes the size of security threat signature libraries to be used to provide security services to the device.

Abstract: Metadata from a file system in a data storage environment is obtained. The obtained metadata from the file system is indicative of one or more properties of one or more data blocks storable in the data storage environment. One or more data optimizations performed in a data protection operation for the data storage environment with respect to the one or more data blocks are controlled based on at least a portion of the metadata obtained from the file system.

Abstract: Mass storage devices of any interface can be redirected to a server. When a mass storage device is connected to a client terminal, a client-side proxy can obtain information about the device including the interface by which the device connects to the client terminal. The proxy can relay this information to a server-side agent which can instruct a VMiniport enumerator to enumerate the mass storage device using the interface specified in the information. When the VMiniport driver is loaded, the agent can also use the information to cause the VMiniport driver and the storport driver to be initialized in accordance with the specified interface. The VMiniport driver and storport driver will therefore be configured to communicate IO requests targeting the mass storage device in a format appropriate for the interface.

Abstract: According to examples, an apparatus may include a processor and a memory on which is stored machine readable instructions. The instructions may cause the processor to intercept a packet from a downstream service function classifier, in which the packet includes metadata that specifies an ordered set of service functions within a service function chain to be implemented on the packet, generate a correlation cookie that associates the packet with the service function chain, and encode the correlation cookie into the packet. The instructions may also cause the processor to store the correlation cookie and the metadata in a cache to correlate the correlation cookie and the metadata and send the packet with the encoded correlation cookie to the service function provider.

Abstract: A system comprising a gateway capable of connecting to an Internet router, and at least one Internet-connected device, said Internet-connected device comprising a digital certificate limiting its Internet access to a particular server or servers, said gateway capable of verifying the certificate and connecting the Internet-connected device to its server or servers.

Abstract: Systems and methods for implementing a user mode virtual serial communications port emulator are disclosed herein. According to an aspect, a method for a virtual serial communications port emulator includes using at least one processor and memory for creating a virtual serial communication port (VCP) driver in a user mode of an operating system. The method further includes emulating a physical serial communication port using the VCP driver. In addition, the method includes converting outgoing data from an application executed on the at least one processor and memory via the VCP driver into a format complying with a protocol associated with a VCP device server. The method also includes converting incoming data from the VCP device server complying with the protocol into a second format understood by the application, wherein the VCP driver is communicated with using an unpublished universally unique identifier (UUID).

Abstract: Wireless lighting control systems and methods for controlling the illumination of one or more light fixtures are disclosed, including self-commissioning of hardware. Embodiments include a server connected to a wide area network and having software for configuring, monitoring, and controlling lighting fixtures at a site. The control system also includes a wireless gateway at the site initiating communication with the server via a cellular network. Wireless devices initiate communication with the wireless gateway via a mesh network and each wireless device can be wired to control at least one lighting fixture. Once hardware of the site system (e.g., a gateway and/or any device) is mounted or positioned in the appropriate location and powered on, the hardware will self-commission by automatically initiating communications. The gateway will initiate communication and identify itself to server system.

Abstract: Techniques disclosed herein include systems and methods for excluding specific application traffic from customer consumption-based data billing counts. This is useful for excluding traffic from consumption totals where the application traffic has been accounted for using other means, such as through billing as a separate or technically distinct service. In practice, a tablet computer (or other end user device) can run a video application that uses a high-speed data network via a cable modem. This video application may be included as part of a core video package associated with a distinct cable television service. The system then provides accurate consumption billing of customer traffic that is outside of any other managed services by creating separate logical data service flows at a Cable Modem Termination System (CMTS) for excluding specific traffic counts.

Abstract: In an example, there is disclosed a system and method for providing a service-oriented architecture, including request/response, over a publish/subscribe framework. In one embodiment, a system is disclosed for adding layers upon a publish/subscribe messaging framework for sophisticated messaging such as point-to-point (request/response) and the ability to query for available services, in a reliable, scalable manner.