Abstract: A network device stores a Virtual Extensible Local Area Network (VxLAN) Tunnel Endpoint (VTEP) membership information that associates VxLANs each with a corresponding set of VTEPs authorized to originate VxLAN packets on that VxLAN. The network device receives from a communication network a VxLAN packet that identifies a VxLAN and an originating VTEP. The VTEP compares the originating VTEP to the set of VTEPs associated with the VxLAN in the VTEP membership information that matches the identified VxLAN. If the comparison indicates that the originating VTEP is not included in the set of VTEPs authorized to originate VxLAN packets, the VTEP discards the received VxLAN packet. Otherwise the VTEP further processes the VxLAN packet.

Abstract: Embodiments are directed to managing data in a file system. A file system engine may provide a file system that includes file system objects accessible by two or more clients that use different native permission schemes. The file system engine may receive an access request from a client to access the file system objects that includes native permission values. A permissions engine provides platform permission values from a platform permission scheme associated with the file system objects. The permissions engine provides requested platform permission values based on the platform permission scheme and the native permission values included in the access request. The permissions engine compares the requested platform permission values to the platform permission values associated with the file system objects. The permissions engine provides access rights to the file system objects based on an affirmative result of the comparison.

Abstract: The invention relates to a method, by a control node (100, 150), for selecting one of a plurality of media forwarding elements (200, 250) in a network for forwarding an additional media data stream by the selected media forwarding element, the method comprising the steps of receiving (S21, S31, S100) a load message from one of the media forwarding elements, the load message containing information about a load level of said one media forwarding element and about how media data streams from a first area (300) of the network from which said one media forwarding element receives the media data streams contribute to the load level of said one media forwarding element. The received information is stored in a storage unit (130) of the control node. When a setup request for an additional media data stream is received, the setup request requesting a selection of one of the media forwarding elements for the second media data stream by the control node (100, 150).

Abstract: A system and method of logging and replay among heterogeneous devices includes one or more shared services including a replay service, a processor for executing the shared services, and a shared interface for providing access to the shared services. The replay service selects one or more logs for playback, emulates one or more playback devices, each of the playback devices being associated with a respective one of the logs, extracts one or more log entries from each of the logs, recreates one or more recreated service requests for the one or more shared services based on information associated with each of the log entries, and initiates the recreated service requests. In some embodiments, the system and method further include a logging service to create new log entries based on new service requests, associate the new log entries with a corresponding timestamp, and record the new log entries.

Abstract: Methods, systems, and computer program product embodiments for exchanging data information packets, by a processor device, include receiving an Internet Protocol (IP) information unit by a host node executing a Fibre Connection (FICON) software library; writing the IP information unit to a transport layer; and transmitting data including the IP information unit to a target node over a FICON network.

Abstract: A method includes, with a bearer node, utilizing a first connection between the bearer node and a first type application node, the first type application node being associated with a first telecommunication service, the bearer node configured to process media traffic between endpoints. The method further includes, with the bearer node, utilizing a second connection between the bearer node and a second type application node, the second application node being associated with a second telecommunication service, the second telecommunication service being different than the first telecommunication service. The bearer node is configured to provide a common media platform to the first application node and the second application node.

Abstract: The disclosure relates to technology providing seamless mobility to a mobile producer node. A request message is received from a requesting node in an information centric network. The request message includes mapping point parameters that have an identifier to identify a mapping server that serves requests targeting the mobile producer node and location-based metrics of the mobile producer node. The mapping point parameters are updated when the mobile producer node moves from a first network component to a second network component, and the updated mapping point parameters are provided to the requesting node in a response message sent from the mobile producer node. The request message may then be forwarded from the requesting node to the mobile producer node using the updated mapping point parameters.

Abstract: A packaged circuit including a digital controller, a port physical layer and a digital coding circuit is provided. The digital controller outputs digital data in parallel via a parallel data channel, and the digital data includes a plurality of data bits. The port physical layer includes a clock generator, and outputs a data signal according to the data bits. The clock generator outputs a clock signal to the digital controller. The digital coding circuit is coupled to the digital controller and the port physical layer, and receives the digital data and the clock signal. The digital coding circuit codes the clock signal to generate a plurality of clock bits, and outputs the clock bits to the port physical layer. The port physical layer converts the clock bits into an output clock and outputs the output clock.

Abstract: A system and method for testing a data channel are provided. In one embodiment, the method includes: (1) transmitting groups of increasing numbers of probing packets of a uniform load over successive time periods over the data channel and (2) determining a bandwidth of the data channel based on receive times and loads of at least some of successfully received ones of the groups.

Abstract: The present disclosure is directed to a system and method for dynamic and adaptive load balancing. An example method includes receiving, at a network device, a data packet to be sent via one or more aggregation groups, where the aggregation groups each comprise a plurality of aggregate members. The example method further includes determining, based on the data packet, a flow identifier of a flow to which the data packet belongs and determining a state of the flow. The example method also includes determining, based on the flow identifier and the state of the flow, an assigned member of the plurality of aggregate members for the flow and communicating the packet via the assigned member.

Abstract: A method is provided for classifying a data segment with respect to its further processing in a data transporting unit, in particular in a network processor. The data segment is provided by an input interface. A first key for a lookup table is ascertained as a function of an identifier (chid) established in advance and as a function of an identifier (devid) of the input interface from which the data segment stems. A second key for the lookup table is ascertained.

Abstract: Embodiments of the present disclosure decrease conflicts between individual lighting devices in a wireless network when responding to a broadcast/multicast message sent to a group of devices. In some embodiments the devices delay sending their acknowledgment to commands until after a specific time period. Some embodiments limit the number of time delays to one of a predetermined number of time delays, where the number of time delays are assigned by an external source, such as the gateway. Still other embodiments include assigning each device one of a limited number of preset time delays, where the total number of preset time delays are less than the number of devices, for example, ten (10) percent of the number of devices (here some devices will have the same time delays as other devices). Still other embodiments use bitmaps to designating which one or more individual devices the message is intended for.

Abstract: A method of providing navigation on an electronic device when the display screen is locked. The method receives a verbal request to start navigation while the display is locked. The method identifies a route from a current location to a destination based on the received verbal request. While the display screen is locked, the method provides navigational directions on the electronic device from the current location of the electronic device to the destination. Some embodiments provide a method for processing a verbal search request. The method receives a navigation-related verbal search request and prepares a sequential list of the search results based on the received request. The method then provides audible information to present a search result from the sequential list. The method presents the search results in a batch form until the user selects a search result, the user terminates the search, or the search items are exhausted.

Abstract: Communication apparatus includes a host interface for connection, via a host bus, to a host processor and a host memory, which is mapped to an address space of the host bus, and a network interface, configured to transmit and receive packets over a network. A local memory is configured to hold data in a memory space that is not mapped to the address space of the host bus. Packet processing circuitry, which is connected between the host interface and the network interface and is connected to the local memory, is configured to receive from the network interface a packet carrying a remote direct memory access (RDMA) request that is directed to an address in the local memory, and to service the RDMA request by accessing the data in the local memory.

Abstract: A network interface device for a host computer includes a network interface, configured to transmit and receive data packets to and from a network. Packet processing logic transfers data to and from the data packets transmitted and received via the network interface by direct memory access (DMA) from and to a system memory of the host computer. A memory controller includes a first memory interface configured to be connected to the system memory and a second memory interface, configured to be connected to a host complex of the host computer. Switching logic alternately couples the first memory interface to the packet processing logic in a DMA configuration and to the second memory interface in a pass-through configuration.

Abstract: A process and system for user-controlled configuration of an Internet protocol network. The user may supply input for generating a network classification profile, which includes a number of classes of service (COSs) for prioritizing network traffic, including video transmission. A quality of service (QOS) may be measured and compared with a COS for video transmission. Depending on the measured QOS, a network alert may be issued and a priority of packets associated with the COS for video transmission may be increased.

Abstract: A new management node associated with a new rack sends at least a public key of the new management node to a first management node associated with a first rack and a plurality of autonomous management nodes. The first management node sends the new management node an access token trusted by at least a portion of the plurality of autonomous management nodes and a set of public keys corresponding to at least a portion of the plurality of autonomous management nodes. The new management node can send its public key and the access token to at least a portion of the plurality of autonomous management nodes. In response, the new management node can establish a mutual trust relationship with at least a portion of the plurality of autonomous management nodes.

Abstract: Threat detection instrumentation is simplified by providing and updating labels for computing objects in a context-sensitive manner. This may include simple labeling schemes to distinguish between objects, e.g., trusted/untrusted processes or corporate/private data. This may also include more granular labeling schemes such as a three-tiered scheme that identifies a category (e.g., financial, e-mail, game), static threat detection attributes (e.g., signatures, hashes, API calls), and explicit identification (e.g., what a file or process calls itself). By tracking such data for various computing objects and correlating these labels to malware occurrences, rules can be written for distribution to endpoints to facilitate threat detection based on, e.g., interactions of labeled objects, changes to object labels, and so forth.

Abstract: A near field communication (NFC) router of a mobile device receives a first message from an external NFC device and, in accordance with a first active rule, processes the first message as being targeted to a first host processing device of the mobile device. When the NFC router receives a second message from the external NFC device and detects a bit pattern in the second message indicating that the first host processing device is not an intended target of the second message, the NFC router activates a second rule. When the NFC router receives a further first message from the external NFC device, the NFC router processes the further first message as being targeted to a target host processing device in accordance with the second active rule.

Abstract: Methods and systems for analyzing flows of communication packets. A front-end processor associates input packets with flows and forwards each flow to the appropriate unit, typically by querying a flow table that holds a respective classification for each active flow. In general, flows that are not yet classified are forwarded to the classification unit, and the resulting classification is entered in the flow table. Flows that are classified as requested for further analysis are forwarded to an appropriate flow analysis unit. Flows that are classified as not requested for analysis are not subjected to further processing, e.g., discarded or allowed to pass.

Abstract: Techniques disclosed herein include systems and methods for excluding specific application traffic from customer consumption-based data billing counts. This is useful for excluding traffic from consumption totals where the application traffic has been accounted for using other means, such as through billing as a separate or technically distinct service. In practice, a tablet computer (or other end user device) can run a video application that uses a high-speed data network via a cable modem. This video application may be included as part of a core video package associated with a distinct cable television service. The system then provides accurate consumption billing of customer traffic that is outside of any other managed services by creating separate logical data service flows at a Cable Modem Termination System (CMTS) for excluding specific traffic counts.

Abstract: One or more implementations can include methods, systems and computer readable media for client location discovery. In some implementations, the method can include receiving, at an access point, a location discovery request message from a client and sending a request from the access point to a location server requesting location information for the client, when a location server is available. The method can also include receiving location information from the location server, when a location server is available and providing the access point location as location information, when a location server is not available. The method can further include sending the location information as a response to the client.

Abstract: A near field communication (NFC) router of a mobile device receives a first message from an external NFC device and, in accordance with a first active rule, processes the first message as being targeted to a first host processing device of the mobile device. When the NFC router receives a second message from the external NFC device and detects a bit pattern in the second message indicating that the first host processing device is not an intended target of the second message, the NFC router activates a second rule. When the NFC router receives a further first message from the external NFC device, the NFC router processes the further first message as being targeted to a target host processing device in accordance with the second active rule.

Abstract: Techniques are described for managing QoS parameters of a bearer for which at least a portion of bearer data is served over a WLAN radio access technology. According to these techniques, a first device may identify a first set of one or more QoS parameters for serving a bearer over a wireless wide area network (WWAN). The first device may also determine a second set of one or more QoS parameters for serving the bearer over the WLAN based on an association between the first set of QoS parameters and the second set of one or more QoS parameters.

Abstract: An apparatus and a non-transitory computer-readable medium may perform a method for providing brand-driven URL keyword navigation. The method may comprise: receiving a user selection of an accepted third party; transmitting third party selection information to the accepted third party, the third party selection information being based on the user selection; and receiving brand-driven keyword data from the accepted third party in response to the transmission of the third party selection information, the brand-driven keyword data mapping a keyword to a particular URL.

Abstract: An apparatus and a method for storing a BPM process state is described. A process engine generates a business process state. The business process state is stored in a memory grid of a tree structured cache nodes. A converter converts the business process state to a plain text file or a binary format file prior to storing the business process state.

Abstract: Systems and methods here may be used for authorizing network access including using by a server computer with a processor and memory, for receiving, through the gateway support node, a request to access the first network associated with the gateway support node from a client device, wherein the request includes a client device identifier, sending a validation request of the client device identifier to the data storage server, receiving a validation response based on previously registered client device identifier information and previously registered credential information from a second network, from the data storage server and sending authorization approval to the gateway support node for the client device access request to the first network.

Abstract: Generally discussed herein are systems, apparatuses, and methods for secure transfer of content across a security boundary. A system can include a high side domain communicatively coupled to a transfer guard module, the high side domain comprising a high side data repository, a first review module executable by processing circuitry to determine whether a permission level of first content violates a permission level of the high side domain, a second review module executable by the processing circuitry to determine whether second content from the high side data repository includes a permission level that violates a permission level of a low side domain, a first data diode module communicatively coupled between the first review module and the high side data repository, and a second data diode module communicatively coupled between the second review module and the high side data repository.

Abstract: An information management method includes collecting log information of one or more home electrical apparatuses, generating display screen data indicating a status of the log information of the apparatuses corresponding service providers based on the collected log information, where the display screen data includes groups of information each contain information on an apparatus, a service provider corresponding to the apparatus, and log information output from the apparatus, and provision of the log information of each group is individually selectable, providing the display screen data via a network to a display terminal that performs access to a server device, receiving information from the display terminal, which indicates that selection on whether or not provision of the log information is performed, and stopping provision of the log information on the selected group when a determination is made that the refusal of provision of the log information on the selected group is performed.

Abstract: An approach is presented that provides computer clustering support across geographical boundaries. Inter-node communications are managed in a cluster by having each node operate at the network device driver (NDD) level within the kernel. Multiple types of NDD are utilized (Ethernet, SAN, DISK etc.) to provide redundancy so that nodes can reliably exchange heartbeat. To align with this architecture, for remote nodes, a pseudo NDD is used over Transmission Control Protocol (TCP) based communication interface to work along side other NDDs. Thus, the same packet which is sprayed over the NDDs pertaining to local nodes can be sprayed over the TCPSOCK NDD interface for remote nodes. Nodes (local or remote) receive the same packet and reassemble and process it in the same manner.

Abstract: An approach is presented that provides computer clustering support across geographical boundaries. Inter-node communications are managed in a cluster by having each node operate at the network device driver (NDD) level within the kernel. Multiple types of NDD are utilized (Ethernet, SAN, DISK etc.) to provide redundancy so that nodes can reliably exchange heartbeat. To align with this architecture, for remote nodes, a pseudo NDD is used over Transmission Control Protocol (TCP) based communication interface to work along side other NDDs. Thus, the same packet which is sprayed over the NDDs pertaining to local nodes can be sprayed over the TCPSOCK NDD interface for remote nodes. Nodes (local or remote) receive the same packet and reassemble and process it in the same manner.

Abstract: A method, apparatus and computer program product for forming a tiered Wireless Local Area Network (WLAN) server topology is presented. A Wireless Local Area Network (WLAN) having a plurality of Mobile Virtual Local Area Network (MVLAN) servers is broken into a plurality of zones, each zone including at least one MVLAN server. An Identifier (ID) is assigned to each zone. A MVLAN server in each zone is designated as a MVLAN gateway server, wherein MVLAN servers within a zone communicate with each other within the zone, wherein the MVLAN servers within a zone communicate directly with the MVLAN gateway sever within the zone, wherein MVLAN gateway servers communicate directly with each other, and wherein a MVLAN server within a first zone communicates with a MVLAN server in a second zone by way of the MVLAN gateway sever of the first zone and the MVLAN gateway server of the second zone.

Abstract: A method and system for providing on-line services to a user from a services provider over a wireless cellular network. The cellular network is located between the user and the services provider, and a distributed computer system such as the Internet is located between the services provider and the cellular network for transmitting data between the services provide and the cellular network. In one embodiment, the services provider transmits software and operating characteristics over the distributed computer system to the cellular network, and the cellular network installs this software on one or more nodes of the network. When a user connects to the cellular network for services from the service provider, the network operates the software on the one or more nodes in accordance with the operating characteristics, to provide one or more services from this one or more nodes to the user from the service provider.

Abstract: The present disclosure includes a system, method, and article of manufacture for spend based targeting and measurement. The method may comprise transmitting to a third party system a model and/or a measurement file associating a first party cookie ID with a model, and receiving, from the third party system, an updated model (and/or measurement) file associating a third party cookie ID with web-browsing data. The third party cookie ID may anonymously and uniquely correspond to the first party cookie ID, and the first party cookie ID may be stripped from the updated model (and/or measurement) file to de-identify a customer associated with the first party cookie ID. Moreover, the web-browsing data may be received by the third party system from a second party system.

Abstract: A method of controlling job authority of an image forming apparatus that supports a P2P connection includes: storing a profile of a wireless device that is P2P connected to the image forming apparatus in the image forming apparatus; receiving and storing job authority information corresponding to the profile; when the wireless device requests the image forming apparatus to execute an operation, setting a job authority of the wireless device by using the profile and the job authority information; and checking the job authority of the wireless device by the image forming apparatus, and executing the requested job when the wireless device has the authority to perform the requested job.

Abstract: A method and system are provided for architecture of a very fast programmable transport demultiplexer using a double-buffered approach. The method may involve utilizing a hardware assist block to process incoming packets, retrieve information about the packets, and write the retrieved information to a memory block. A firmware block may then utilize the information in memory to perform further processing on the packet data. The firmware and hardware assist blocks may work simultaneously so as to speed up the processing of the packet, which can comprise record data and/or audio/video data. The system may comprise the hardware assist block, the firmware assist block, and a memory block.

Abstract: The ability to perform non-destructive editing of files and models requires the generation and persistence of input deltas that capture changes that are made to a base starting point. Reconstitution of saved state may be achieved through the application of deltas. This capability is useful for failover remediation in client/server environments since the client has access to the deltas, such that in the event that a stateful service becomes unresponsive (and therefore, no longer available), the service may be taken offline and a new resource may be assigned as a replacement. In such an event, the service is directed to load the baseline data and any changes may be reapplied, restoring the service state.

Abstract: Systems and methods for remote device configuration is provided. In one embodiment, a method comprises outputting, from a computer, to a first computing device, configuration options for a second computing device; receiving, at the computer, from the first computing device, configuration data associated with the configuration options for the second computing device; associating a first security identifier with the configuration data for the second computing device; and in response to a request for the configuration data for the second computing device, outputting, from the computer, to the second computing device, the configuration data for the second computing device.

Abstract: Systems and methods here may be used for authorizing network access including using a flow controller server in communication with a first gateway associated with a first network, a second gateway associated with a second gateway, and a repository, the flow controller server configured to, receive a first client device request to access the first network via the first gateway, receive a second client device request to access the second network via the second gateways, retrieve a validation response from the repository, wherein the validation response includes correlated client device identifier with client device credentials for the first network and second network.

Abstract: Techniques are provided for designating, in an overlay transport virtualization (OTV) network connected to a data center, an edge device to act as a backup authoritative edge device (BAED) for an authoritative edge device (AED) for multicast packet encapsulation and forwarding. Data traffic associated with a given virtual local area network (VLAN) may be detected from a multicast source in the data center addressed to recipients in a site group. A mapping may be generated between the site group and a core data group in the OTV network for traffic from the multicast source. Advertisements may be sent of the mapping to edge devices in another data center across the OTV network. A similar configuration is presented for a BAED for inbound multicast traffic to a data center.

Abstract: An enhanced mechanism for conflict resolution between authorized services in respect of selective authorization criteria, such as service incompatibilities, subscribed bandwidth QoS assigned per subscriber and pre-emption priority value assigned per service. The present invention allows the authorization of a subsequent service as a result of applying a selective authorization criterion for the subscriber at a policy control rules server to determine those previously authorized services to be put on hold, notifying about said previously authorized services to be on hold towards application devices handling such services, and inactivating at a policy enforcement device those control rules applicable to the media associated with said previously authorized services.

Abstract: A virtual extensible local area network (“VXLAN”) system includes servers having VXLAN tunnel end points (“VTEP”) and virtual machines (“VMs”), multiple routers to transmit network data using bidirectional groups (“BIDIRs”) and rendezvous points (“RPs”), and an associated management and provisioning entity (“MPE”) adapted to arrange BIDIRs dynamically based upon network traffic such that traffic is more evenly distributed across the VXLAN. Some of the routers can be preconfigured as potential RPs, and the MPE can activate and deactivate these routers to and from RP status as needed. The MPE creates and rearranges BIDIRs based upon volume thresholds of traffic being reached in BIDIRs, such as by splitting overloaded BIDIRs. Network traffic can be monitored by VTEPs and RPs.

Abstract: A method of managing a distributed storage space. The method comprises mapping a plurality of replica sets to a plurality of storage managing modules installed in a plurality of computing units, each of the plurality of storage managing modules manages access of at least one storage consumer application to replica data of at least one replica of a replica set from the plurality of replica sets, the replica data is stored in at least one drive of a respective the computing unit, allocating at least one time based credit to at least one of each storage managing module and the replica data, iteratively renewing the time based credit as long a failure of at least one of the storage managing module, and the at least one drive and the replica data is not detected plurality of storage managing.

Abstract: Techniques disclosed herein include systems and methods for excluding specific application traffic from customer consumption-based data billing counts. This is useful for excluding traffic from consumption totals where the application traffic has been accounted for using other means, such as through billing as a separate or technically distinct service. In practice, a tablet computer (or other end user device) can run a video application that uses a high-speed data network via a cable modem. This video application may be included as part of a core video package associated with a distinct cable television service. The system then provides accurate consumption billing of customer traffic that is outside of any other managed services by creating separate logical data service flows at a Cable Modem Termination System (CMTS) for excluding specific traffic counts.

Abstract: A vehicular data communication system includes an authentication device for authenticating an external tool connected to a bus, an authentication control device for determining whether an external tool is authenticated by the authentication device and for setting an authenticated state to permit a data communication between the external tool and an access target ECU on the bus upon determining that the external tool is authenticated by the authentication device, and an authentication maintain device for maintaining the authenticated state within a predetermined period after the authenticated state is set by the authentication control device.

Abstract: An apparatus includes an access switch having a set of ports and configured to be operatively coupled to a multicast router via a first port from the set of ports. The access switch is configured to be associated with a network associated with the multicast router, and designate the first port as a multicast-router interface during a time period. The access switch is configured to send a message to the multicast router via each port from the set of ports in response to an indication of a change in a topology of the network after the time period. The access switch is configured to designate a second port from the set of ports as the multicast-router interface and dedesignate the first port as the multicast-router interface in response to receiving, via the second port and in response to the message, a signal from the multicast router.

Abstract: An interconnection system, apparatus and method is described where the motherboard may be populated with less than all of the modules that it has been designed to accept while maintaining a configuration such that in the event of a module failure, a memory controller failure, or a combination thereof, the connectivity of the remaining modules is maintained. Where data is stored using a RAID organization of the memory on the modules, the data may be reconstructed to a spare module. The system also provides for the orderly incremental expansion of the memory by adding additional memory modules and memory controllers, while maintaining the connectivity properties.

Abstract: The invention proposes a method and device for protection of data for devices connected in a network such as a local area network or LAN. The method and device can for example be implemented on a gateway, which acts as an interconnecting device between the devices in the LAN network and that can offer these devices an access to an external network such as a wide area network or WAN. The method and device thus offers a protected environment for applications that are executed on the gateway, such as applications downloaded from the WAN. The method and device gives the applications executed on the gateway controlled access to the LAN resources in order to protect the data that the LAN devices share within the LAN, while giving the applications access to the WAN.

Abstract: For a network controller for managing hosts in a network, a method for configuring a host to resolve network addresses is described. The method configures an address resolution module in a host to resolve a network address. The method configures a managed forwarding element in the host to (1) avoid sending a request to resolve the network address to another host by using the address resolution module to resolve the network address and (2) forward packets using the resolved network address.

Abstract: Methods are provided for filtering, collecting, and analyzing location data for a plurality of devices in a wireless network. Location data for one or more devices is received, for each device the location data includes a unique identifier. Whether the devices belong to the group of devices is determined based on the unique identifier. The location data of devices determined to belong to the group of devices are stored and used in the mobility analysis and the results distributed accordingly. A relevancy analysis may be performed on the stored location data of devices determined to belong to the group of devices in which device information is generated that is associated with devices not belonging to the group of devices. The device information is fed back to determine whether the devices belong to the group of devices based on the unique identifier.