Abstract: A plug-and-play (PnP) driver associated with a security agent is described herein. The PnP driver attaches to device stacks of enumerated bus devices of a computing device as upper-device or lower-device filters based on the device classes of the enumerated bus devices. For example, the PnP driver may attach to the device stack of a hub or controller device as an upper-device filter and to device stacks of other devices as lower-device filters. Either while attaching or after attachment, the PnP driver may take action to alter, limit, or otherwise block functionality of an enumerated bus device. The PnP driver may also perform a system inventory of enumerated bus devices connected to the computing device and create fingerprints for one or more of the computing devices. Additionally, the PnP driver may create and remove control device objects (CDOs) to enable communication with user-mode processes or threads.

Abstract: Disclosed herein a disaggregation computing system. The disaggregation computing system comprising: a local computing device that comprises a local processor, a local memory bus, a local memory and a local disaggregation controller; a remote computing device that comprises a remote processor, a remote memory bus, a remote memory and a remote disaggregation controller; and a disaggregation network that connects the local computing device and the remote computing device, wherein the local disaggregation controller and the remote disaggregation controller are configured to: check a response delay for access of the remote memory, and control the access of the remote memory based on the response delay.

Abstract: A method for wireless communication includes that: a terminal device detects M downlink control channels using N groups of search spaces or N groups of control resource sets (CORESETs), N being an integer greater than or equal to 2, and M being an integer greater than or equal to 2, and different groups of search spaces or different groups of CORESETs are used for detecting different downlink control channels. Further, a terminal device is also provided.

Abstract: A host system includes a device driver with application-specific settings for a hosted application. Input data is generated by one or more tablet devices at a client computer system. A host-side data transfer application receives the input data and forwards it to the host-side driver, which sends the input data to the hosted application. The tablet data sent to the hosted application is configured according to application-specific settings of the host-side driver, which may support multiple application programming interfaces. A dedicated driver-to-driver connection may also be used to transmit data between client-side and host-side drivers. In another aspect, a host sends an identifier of a hosted application currently in use to a client-side driver, which uses that identifier to look up and apply application-specific settings to tablet data sent to the hosted application. This can eliminate the need for a host-side driver while still allowing application-specific settings for hosted applications.

Abstract: An information handling system may include a processor and a management controller communicatively coupled to the processor and configured to perform out-of-band management of the information handling system, the management controller further configured to, in response to a request from a management utility remote from the information handling system to create a firmware image for an item of firmware for a cluster comprising the information handling system retrieve a firmware update package, store the firmware update package in a repository integral to the management controller, and communicate a uniform resource locator to the management utility setting forth a path of the firmware update package within the repository, such that the management utility may later use the uniform resource locator to perform a firmware update for another information handling system of the cluster.

Abstract: A method for processing an abnormality is provided. The method includes: loading and executing a driver of the Wi-Fi module in response to receiving an instruction for enabling a Wi-Fi function of the terminal device, initiating at least one request sub-process to a hardware layer of a Wi-Fi system of the terminal device through a framework layer of the Wi-Fi system, clearing the driver of the Wi-Fi module from a memory of the terminal device in response to failure of any request sub-process and re-loading and executing the driver of the Wi-Fi module after completely clearing the driver of the Wi-Fi module from the memory.

Abstract: Techniques are described for maintaining in-order execution when a dependency exists between write transactions. In some embodiments, a write re-order buffer (WROB) is configured to assign the same group ID to an incoming write transaction upon determining that the incoming write transaction is dependent on a pending write transaction. The WROB forwards the incoming write transaction to an interconnect fabric for routing to a completer device. The interconnect fabric enforces in-order execution when write transactions share the same group ID. The WROB can maintain a transaction log of pending write transactions and also track the statuses of responses for such transactions. Transaction responses can include responses sent from a completer to confirm that a transaction has actually been completed. Additionally, the WROB can send a response indicating completion back to the requester of the transaction. In some embodiments, the WROB is configured to send an early response to the requester.

Abstract: Enabling control of authenticated applications and websites from other applications and websites within an auto entertainment service, including: implementing controls of the auto entertainment service within a privilege auto platform with a defined structure that enables a controller to issue a command; constructing calls appropriate to execute the command; routing playback controls through the privilege auto platform; issuing the command to the privilege auto platform with a content ID; and receiving the command and making the calls for content and digital rights management to execute the command.

Abstract: Systems and methods for controlling the exposure of data privacy elements are provided. The systems and methods may generate an artificial profile model. The artificial profile model may include a constraint for generating new artificial profiles. A signal may be received indicating that a computing device is requesting access to a network location. One or more data privacy elements associated with the computing device can be detected. An artificial profile can be determined for the computing device. The artificial profile may be usable to identify the computing device. The one or more data privacy elements may be automatically modified according to the constraint included in the artificial profile model. The method may include generating a new artificial profile for the computing device. The new artificial profile may include the modified one or more data privacy elements. The new artificial profile may mask the computing device from being identified.

Abstract: In some aspects, the disclosure is directed to methods and systems for encapsulating intra-device protocols, such as CXL and/or PCIe packets, into inter-device protocols, such as IP packets, allowing resources across one or more networks to be shared. For example, CXL and/or PCIe address to IP address lookup tables may be used to determine destination IP addresses or source IP addresses such that CXL and/or PCIe packets may be sent across various networks. Layer 3 forwarding enables communication between large distributed systems while utilizing existing network infrastructure.

Abstract: A method includes detecting a change in control of a peripheral device from a first security domain to a second security domain of a computer system and in response to detecting the change in control of the peripheral device, reading a current firmware version of the peripheral device and determining whether the current firmware version of the peripheral device is trusted by the computer system. The method further includes in response to determining that the current firmware version is trusted by the computer system, providing control of the peripheral device to the second security domain.

Abstract: A control method for display switching, an electronic device, and a storage medium are provided. The control method for display switching includes: establishing a first buffer and a second buffer at a kernel layer and initializing the first buffer; establishing a first service process and a second service process at a user layer, and controlling the first service process to render a first image according to a display parameter of a first buffer and transmit it to a display screen via the first buffer for display; and initializing the second buffer according to a switching instruction, and controlling the second service process to render a second image according to a display parameter of the second buffer and transmit it to the display screen via the second buffer so as to make the display screen switch to displaying the second image.

Abstract: The present disclosure relates to devices and methods for creating one or more proxy devices in a guest device mirroring the devices hosted by a host device. The proxy devices may provide full device access functionality to applications running in the guest device. The devices and methods may load a proxy driver inside the guest device, which communicates with the host device. When applications running on the guest device interact with the proxy devices, the proxy driver communicates the interaction to the host device, which communicates with the device driver managing the device. The devices and methods allow applications running on the host and applications running on the guest to shares access to the same device.

Abstract: An apparatus includes at least one processing device configured to obtain information characterizing which of a plurality of storage nodes of a distributed storage system stores respective ones of a plurality of different logical blocks of a logical storage volume of the distributed storage system. The at least one processing device is further configured, for each of a plurality of input-output operations directed to a particular one of the logical blocks of the logical storage volume, to identify, based at least in part on the obtained information, which of the plurality of storage nodes of the distributed storage system stores the particular logical block, to select a path to the identified storage node, and to send the input-output operation to the identified storage node over the selected path.

Abstract: An apparatus in one embodiment comprises at least one processing device comprising a processor coupled to a memory. The at least one processing device is configured to receive in a storage system, from a host device, an identifier of an encryption-enabled logical storage device of the storage system, to utilize the identifier to obtain in the storage system a device-specific key from a key management server external to the storage system, and to utilize the obtained device-specific key to process input-output operations directed to the encryption-enabled logical storage device from the host device. The host device in some embodiments comprises at least one virtual machine and the encryption-enabled logical storage device comprises a virtual storage volume of the at least one virtual machine. Metadata associated with the virtual storage volume illustratively comprises an encryption status indicator specifying whether or not encryption is enabled for the virtual storage volume.

Abstract: A method for transferring a medical image record including, receiving, by one or more computing devices and from a client device of a first user, a query for the medical image record stored within a record storage system, the medical image record having one or more characteristics; selecting, by the one or more computing devices, a transfer protocol for transferring the medical image record from the record storage system based on at least one of the characteristics of the medical image record; transferring, by the one or more computing devices, the medical image record using the transfer protocol; and sending the medical image record to the client device of the first user for display.

Abstract: A user space driver for input/output traffic distribution and packet processing is provided. A device can establish a driver in user space with access to a memory mapped region shared with a kernel of the device. The driver can access a packet stored to the memory mapped region by a network interface of the device responsive to receipt of the packet. The driver can provide the packet to a selected application of a plurality of applications for processing by the selected application.

Abstract: This disclosure describes various methods, systems, and devices related to dynamic service node discovery in a network. In an example method, a service node generates a discover message including a discovery field. The discovery field indicates an identifier of the service node. The service node further transmits the discovery message to an intermediary node.

Abstract: Aspects of the present invention relate to a method, a control system, a vehicle, a system, and a non-transitory computer readable medium. Application program code is downloaded to the control system via an interface and installed on the control system. Then, it is determined whether the control system is able to communicate with an external device via the interface while running the installed application program code, and the installed application program code is subsequently loaded on startup of the control system in dependence on a determination that the control system was able to communicate with the external device.

Abstract: File number segments to be used within simulations can be defined. Tape division regions to be used within simulations can be defined. Times to locate each file number segment for each tape division region according to a first locate method can be simulated. Times to locate each file number segment for each tape division region according to a second locate method can be simulated. The simulated times for each locate method can be applied to a set of defined total file numbers to determine the time to locate each defined total file number for each locate method, file number segment, and tape division region combination.

Abstract: A processing system including processors, peripheral slots, hardware resources, and gateway circuitry. Each processor is assigned a corresponding identifier. The peripheral slots are located within an addressable peripheral space. Each hardware resource is placed into a corresponding peripheral slot, including at least one direct memory access (DMA) device supporting at least one DMA channel and at least one general-purpose input/output (GPIO) pin. Memory protection and gateway circuitry is programmed to control access of the hardware resources only by a processor that provides a matching identifier. The memories along with hardware resources are protected against unauthorized accesses to isolate applications executed on each processor within a multicore system and hence support freedom of interference.

Abstract: A technique performs load balancing self-adjustment within an application environment. The technique involves, while nodes of the application environment load balance traffic among clusters that provide services for an application in accordance with a first load balancing configuration, sensing application environment metrics. The technique further involves performing a self-adjustment operation that generates a second load balancing configuration based on the application environment metrics, the second load balancing configuration being different from the first load balancing configuration. The technique further involves deploying the second load balancing configuration among the nodes to enable the nodes to load balance the traffic among the clusters that provide the services for the application in accordance with second load balancing configuration in place of the first load balancing configuration.

Abstract: Examples described herein generally relate to a computer device including a memory, and at least one processor configured to partition application files for multiple users of the computer device. The computer device creates a per-user location for a first user when installing an application package to an installation location. The application package includes a plurality of files for an application that are read-only for the first user. The computer device projects, via one or more filter drivers, installed package files from the installation location into the per-user location. The computer device receives a modification to the plurality of files for the application projected into the per-user location. The computer device writes at least one modified file into the per-user location. The computer device loads, during execution of the application by the first user, the at least one modified file from the per-user location for the first user.

Abstract: A scanner redirection method for a remote desktop system that includes a client computing device and a host server, includes the steps of: acquiring properties of a physical scanner from a data source; generating a user interface (UI) for the acquired properties of the physical scanner; in response to a first user selection made on the UI, transmitting a request to the physical scanner to update a scanner property that is one of the acquired properties of the physical scanner; and in response to a second user selection made on the UI, receiving from an application running on the host server, a request for a scanned image, transmitting to the data source a request to acquire the scanned image from the physical scanner, and upon receiving the scanned image from the data source, transmitting the scanned image to the application.

Abstract: The invention relates to an embedded system (1) comprising a processor (2) operated by means of a kernel (3) executable by said processor, a hardware peripheral (8, 9), a memory (5) and an application-related software program (6) recorded in said memory (5), said application-related software program (6) being executed by means of said kernel (3) executable by said processor (2), as well as a securing method. The invention is characterized in that the kernel (3) executable by said processor (2) controls said hardware peripheral (8, 9), obliges said application-related software program (6) to execute a policy, which is neither defined nor controlled by said program, for controlling access to said communication peripheral (8, 9), and is formally proven to satisfy at least one security property.

Abstract: Some embodiments provide a method of providing distributed storage services to a host computer from a network interface card (MC) of the host computer. At the NIC, the method accesses a set of one or more external storages operating outside of the host computer through a shared port of the NIC. In some embodiments, the method accesses the external storage set by using a network fabric storage driver that employs a network fabric storage protocol to access the external storage set. The method presents the external storage as a local storage of the host computer to a set of programs executing on the host computer. In some embodiments, the method presents the local storage by using a storage emulation layer on the NIC to create a local storage construct that presents the set of external storages as a local storage of the host computer.

Abstract: A method of monitoring traffic by a router acting as a gateway between a first and second network is described. The router can receive data packets sent from the first device over the TCP connection and can send a TCP ACK packet to the first device in response to each data packet. The data packets can be stored without sending them to the second device. The stored data packets can be examined in order to determine whether to block or allow the TCP connection. In the event that it is determined to allow the TCP connection, the router can send each of the stored data packets to the second device. In the event that it is determined to block the TCP connection, the router can send a TCP RST message to each of the first and second devices in order to close the TCP connection.

Abstract: Some embodiments provide a novel method for sharing data between user-space processes and kernel-space processes without copying the data. The method dedicates, by a driver of a network interface controller (NIC), a memory address space for a user-space process. The method allocates a virtual region of the memory address space for zero-copy operations. The method maps the virtual region to a memory address space of the kernel. The method allows access to the virtual region by both the user-space process and a kernel-space process.

Abstract: A system can determine a memory range associated with data stored in a zone namespace. The system can identify a plurality of zones in the zone namespace for the memory range at the one or more memory devices, where the data is distributed across the plurality of zones. The system can perform a striped memory access operation on the plurality of zones to retrieve the data.

Abstract: Methods, systems, and computer-readable media for on-demand resource provisioning for service instances. An on-demand service broker provisions IaaS resources at service instance creating time. The service broker provides a catalog listing one or more service plans, each service plan corresponds to a set of available resources. A user device selects a respective service plan that matches specific needs of an application that consumes the resources. The service broker generates a deployment manifest based on the selected service plan. The service broker then submits the deployment manifest to a deployment system. The deployment system provisions the resources to the service instance according to the manifest generated by the service broker.

Abstract: An approach is provided for autonomous and optimal cloning, reinstating, and archiving of a containerized application. Application metadata is obtained from a catalog. Cloning rules specifying cloning an application are obtained. Application components are selected for cloning and the cloning is determined to be compliant with the cloning rules. The application components are cloned and data for the clone is saved to a clone repository. The catalog is updated with specifications of the cloned application components. Reinstating rules specifying reinstating a clone of the application are obtained. Reinstating the clone is determined to be compliant with the reinstating rules. The catalog is updated with specifications of the reinstated clone. In one embodiment, the catalog is updated with inferred associations among applications and identified rules associated with the application, where the inferred associations and identified rules are generated by a trained machine learning-based classifier.

Abstract: A method for determining a packet dequeue rate includes allocating a plurality of consecutive blocks in a first memory to a first packet, storing the first packet and a first length in the plurality of blocks, where the first length is of a first packet queue and is obtained when the first packet is enqueued into the first packet queue, and determining, based on a first span and the first length stored, a first rate at which a packet in the first packet queue is dequeued, where the first span is equal to a difference between a second time and a first time, the first time is when the first packet is enqueued into the first packet queue, and the second time is when the first packet is dequeued from the first packet queue.

Abstract: A host system includes a device driver with application-specific settings for a hosted application. Input data is generated by one or more tablet devices at a client computer system. A host-side data transfer application receives the input data and forwards it to the host-side driver, which sends the input data to the hosted application. The tablet data sent to the hosted application is configured according to application-specific settings of the host-side driver, which may support multiple application programming interfaces. A dedicated driver-to-driver connection may also be used to transmit data between client-side and host-side drivers. In another aspect, a host sends an identifier of a hosted application currently in use to a client-side driver, which uses that identifier to look up and apply application-specific settings to tablet data sent to the hosted application. This can eliminate the need for a host-side driver while still allowing application-specific settings for hosted applications.

Abstract: A system on chip (SoC) includes an internal read-only memory (ROM) configured to store a first boot loader; a first internal static random access memory (SRAM) configured to receive a second boot loader output from a booting device, store the second boot loader, and perform a booting sequence according to control of the first boot loader; a second internal SRAM configured to receive a third boot loader output from the booting device, store the third boot loader, and perform a wake-up sequence according to control of the first boot loader; and a dynamic random access memory (DRAM) controller configured to load an operating system (OS) from the booting device into a DRAM according to control of the second boot loader.

Abstract: A printer includes a controller, a memory, and a user interface. The printer has a first mode and a second mode. The controller disables the first mode when enabling the second mode and disables the second mode when enabling the first mode. The controller executes a first printing process while the first mode is enabled. In the first printing process, the controller receives a print job from a client device, stores the received print job in the memory, and performs printing based on the stored print job upon receiving a storage print command. The controller executes a second printing process and restricts the first printing process while the second mode is enabled. In the second printing process, the controller receives a print job from a server in response to receiving a prescribed input operation via the user interface, and performs printing based on the received print job from the server.

Abstract: The present disclosure provides a method and apparatus for implementing OSD, and relates to the OSD technology. The method for implementing OSD provided by the present disclosure can include receiving a WMI event, the WMI event being triggered based on an OSD shortcut operation initiated by a user, and determining an OSD function corresponding to the WMI event according to a correspondence between WMI events and OSD functions, and acquiring popup window information corresponding to the OSD function. The method can further include generating an OSD function popup window according to the popup window information, and displaying the OSD function popup window. In embodiments of the present disclosure, attention is paid to WMI events corresponding to OSD shortcut operations, and corresponding OSD functions triggered by the WMI events. Thus, a unified implementation method for OSD functions of terminal devices produced by different manufacturers can be provided.

Abstract: A method for storing data, the method comprising receiving, by an offload component in a client application node, a request originating from an application executing in an application container on the client application node, wherein the request is associated with data and wherein the offload component is located in a hardware layer of the client application node, and processing, by the offload component, the request by a file system (FS) client and a memory hypervisor module executing in a modified client FS container on the offload component, wherein processing the request results in at least a portion of the data in a location in a storage pool.

Abstract: A system and method is provided for timely and uniform real-time data packet transmission by a computing device. The system can include a shared packet memory buffer for storing data packets generated by a user application and a shared schedule memory buffer for storing packet identifiers and corresponding time slots for the data packets. Moreover, a kernel module is provided that operates in the kernel mode of the operating system directly above the network interface controller and can continuously poll the shared scheduled memory to access packet identifiers at corresponding time slots. Based on the packet identifiers in each time slot, the kernel module can pull the data packet having the packet identifier directly from the ring buffer and send each packet to the network interface controller for transmission as part of a media stream over a network to a media consuming device.

Abstract: In one implementation, a non-transitory machine-readable storage medium may store instructions that upon execution cause a processor to: determine, by a network device, path information for a plurality of paths in a computing fabric, the path information identifying alternative paths to access namespaces; determine, by the network device, a first portion of the path information that is associated with a first host; and provide, by the network device the first portion of the path information to the first host.

Abstract: Some embodiments provide a method of providing distributed storage services to a host computer from a network interface card (NIC) of the host computer. At the NIC, the method accesses a set of one or more external storages operating outside of the host computer through a shared port of the NIC that is not only used to access the set of external storages but also for forwarding packets not related to an external storage. In some embodiments, the method accesses the external storage set by using a network fabric storage driver that employs a network fabric storage protocol to access the external storage set. The method presents the external storage as a local storage of the host computer to a set of programs executing on the host computer. In some embodiments, the method presents the local storage by using a storage emulation layer on the NIC to create a local storage construct that presents the set of external storages as a local storage of the host computer.

Abstract: Methods, systems, and devices for wireless communications are described in which a narrowband device may communicate in a wireless communications network according to frequency hopping techniques. Devices using narrowband communications and frequency hopping techniques may maintain separate radio link monitoring (RLM) processes, beam failure detection (BFD) processes, beam failure recovery (BFR) processes, or combinations thereof, for multiple bandwidth parts (BWPs) or hop regions of a full channel bandwidth. Such separate processes may provide for enhanced estimates of beam failures per BWP or hop region, which may be used to enhance communications reliability.

Abstract: A device is provided with a multicore microprocessor unit (21) capable of inter-processor communication, storage (22) for storing a file describing device configuration information, and a device interface (23). Threads of the microprocessor unit are separated: a first processor core drives the OS, and meanwhile, a second processor core drives the device driver for controlling the device interface. While sharing the device configuration information by inter-processor communication, a notification driver interface for notifying the operating system kernel of configuration information on the basis of the device configuration information is loaded and the second processor core controls the device connected to the device interface by reading a scenario sequence file into the notification driver.

Abstract: The present application describes a method and apparatus for updating a service in a service layer function of a network. In particular, a method for adding a service is disclosed. Initially, a request is received at a service enabler function located in the service layer function to add the service. A service description of the requested service is reviewed to understand its capabilities. A verification request is sent to a service capability located in the service layer function. Further, another service layer function or application is notified that the requested service is enabled.

Abstract: A system includes an application processor configured to generate a read request and including a data memory; a host processor configured to generate a read command corresponding to the read request; and a data storage device including a data storage memory, wherein the data storage device transmits read data output from the data storage device according to the read command to the data memory of the application processor without passing the host processor.

Abstract: An example method for gathering a plurality of data sets for a particular process is provided. Each data set indicates transitions between different stages for a corresponding occurrence of the particular process. The method includes generating stage transition data based on the plurality of data sets. The stage transition data indicates an aggregate value for each distinct transition. The method includes determining a root stage based on the plurality of data sets. The method includes selecting each additional stage in the pipeline of stages. Each additional stage is sequentially selected based on a dynamically determined path constructed to reduce a value of a cost function. The method includes selectively modifying the pipeline of stages responsive to detecting an improvement to the value of the cost function. The method also includes generating a command to perform the particular process using the modified pipeline of stages.

Abstract: A virtual track design system for mobile devices and implementation method thereof are disclosed. The virtual track design system includes communication module: which is mainly used for relevant map information, virtual track information, positioning information, and task information transmission, and acts as a bridge; interaction module: which sets fixed track with arbitrary shape and length through graphical editing environment, and supports segmental modification, deletion of tracks and other functions. After editing, sends the virtual track information to the intelligent cruise algorithm processing module; acquisition module: which gets the virtual track information provided by the interaction module, stores relevant data, and sends the information to the key point of track extraction module. The invention does not require additional cost to deploy auxiliary equipment, and is more convenient, flexible and fast to use.

Abstract: A system for providing a search service is disclosed and includes a processor-based search service application builder component that provides a search model representing a search service application for a first object of a plurality of objects. The search model is based at least on a user-defined end-user input field corresponding to a first attribute of a plurality of attributes associated with the first object and a user-defined search result output field corresponding to a second attribute of the plurality of attributes. The search model is also associated with a backend data store that supports a storage structure configured to store information relating to the first object. The system also includes a processor-based deployment engine that automatically configures a search engine system associated with the backend data store system to generate and/or update search index(es) based on at least one of the first attribute and the second attribute.

Abstract: Methods, systems, and computer-readable media for on-demand resource provisioning for service instances. An on-demand service broker provisions IaaS resources at service instance creating time. The service broker provides a catalog listing one or more service plans, each service plan corresponds to a set of available resources. A user device selects a respective service plan that matches specific needs of an application that consumes the resources. The service broker generates a deployment manifest based on the selected service plan. The service broker then submits the deployment manifest to a deployment system. The deployment system provisions the resources to the service instance according to the manifest generated by the service broker.

Abstract: A local server is provided. The local server includes a BIOS memory and control circuit. The BIOS memory stores a BIOS code and an actual setting data. The control circuit reads a current setting data corresponding to the local server from a cloud server in a POST procedure of the local server, and compares the actual setting data with the current setting data, and when the actual setting data does not match the corresponding current setting data, the control circuit sends the actual setting data to the cloud server, so that the actual setting data overwrites the current setting data in the cloud server.

Abstract: Various methods and systems are provided for generating an optimized workflow and assisting in clinical decision making during analysis of a patient image by a user at a site. In an example, a method includes automatically identifying one or more exam parameters associated with a diagnostic exam that includes one or more medical images and automatically generating a workflow for analyzing the one or more medical images, the workflow including one or more of a diagnostic protocol, a toolset, a prior imaging scan, a prior finding, and a reference image, the workflow generated based on the one or more exam parameters.