Abstract: Internet-connected devices are commonly used in various applications including home automation and industrial telemetry and control. Such devices may have relatively constrained needs for the various types of communications that are possible within the local network and with other devices on the internet, but the networks to which they are connected may nonetheless grant such devices unrestricted access. This may result in vulnerabilities that may be exploited by a malicious actor. As such, a system and method for providing security to internet-connected devices are provided.

Abstract: The present disclosure describes providing end-to-end call identity validation of a forwarded call. Identity information associated with a received call invite may be temporarily stored and reused for the forwarded call when a determination is made that the called party is likely to forward the call. If the inbound call is diverted (forwarded) by the called device, a call invite comprising an indication that the invite has been diverted (forwarded) by the called device may be received. The system may match data associated with the diverted call invite with the stored identity information. In some examples, the SHAKEN identity header and SHAKEN token is stored and may be attached to the diverted call invite. DIV authentication may then be performed, and the diverted call invite comprising SHAKEN and DIV identity headers may be provided to the forward-to destination.

Abstract: Novel tools and techniques for are provided for implementing a hybrid spectrum access system and access probe framework. A system includes a base station coupled to a network, a spectrum access system, and user equipment coupled to the base station and the spectrum access system. The user equipment is configured to transmit, to the base station, a first network access request following a first access sequence while transmitting signals under a first power limit. If no response is obtained from the base station, the user equipment is configured to transmit a second network access request above the first power limit, but under a second power limit. The user equipment is configured to obtain spectrum access from the spectrum access system and transmit a second network access request to the base station.

Abstract: Novel tools and techniques might provide for implementing secure communications for IoT devices. In various embodiments, a gateway or computing device might provide connectivity between or amongst two or more Internet of Things (“IoT”) capable devices, by establishing an IoT protocol-based, autonomous machine-to-machine communication channel amongst the two or more IoT capable devices. For sensitive and/or private communications, the gateway or computing device might establish a secure off-the-record (“OTR”) communication session within the IoT protocol-based, autonomous machine-to-machine channel, thereby providing encrypted machine-to-machine communications amongst the two or more IoT capable devices, without any content of communications that are exchanged amongst the IoT capable devices over the secure OTR communication session being recorded or logged.

Abstract: Novel tools and techniques are provided for utilizing blockchain to implement named data networking. In various embodiments, a computing system might determine whether a cache that is communicatively coupled to the computing system contains data that is responsive to a first request received from a user. If so, the computing system might retrieve and send (to the client device) data that is responsive to the received first request. If not, the computing system might send, to a blockchain system, a second request for identifying a blockchain containing a block containing data responsive to the received first request. In response to identifying such a blockchain, the computing system might receive a copy of the identified blockchain; might abstract, from the identified blockchain, the block containing the data responsive to the received first request; might abstract the data from the identified block; and might send the data to the client device.

Abstract: A system for noise profile generation includes a customer gateway communicatively coupled to one or more end devices over a communication medium, at least one noise information node communicatively coupled to the customer gateway and programmed to extract noise information present on a communication path from the customer gateway to at least one of the one or more end devices, a noise profile database storing one or more noise profiles, and a noise profile generator. The noise profile generator includes at least one processor and non-transitory computer readable media having a set of instructions executable by the at least one processor to retrieve the extracted noise information associated with the communication path, determine whether the at least one noise characteristic of the extracted noise information matches with one or more noise profiles and identify at least one noise source on the communication path.

Abstract: The present application describes the generation and use of micro-pools that are assigned to various DHCP servers by an agent. In examples, each micro-pool includes a set number of IP addresses. The agent tracks which DHCP servers are assigned which micro-pools. As the IP addresses of a micro-pool are assigned to requesting computing devices, the agent may subsequently assign an additional micro-pool to a particular DHCP server.

Abstract: Novel tools and techniques are provided for implementing virtual machine (“VM”) management, and, more particularly, to methods, systems, and apparatuses for implementing VM management using hardware compression. In various embodiments, a computing system might identify one or more first virtual machines (“VM's”) among a plurality of VM's that are determined to be currently inactive and might identify one or more second VM's among the plurality of VM's that are determined to be currently active. The computing system might compress a virtual hard drive associated with each of the identified one or more first VM's that are determined to be currently inactive. The computing system might also perform or continue to perform one or more operations using each of the identified one or more second VM's that are determined to be currently active.

Abstract: A network interface device bracket and a method of connecting a network device to a network via the network interface device bracket is provided. According to an example, the network interface device bracket may be adapted to be removably attached to the network interface device and removably mounted to a mounting surface. The network interface device bracket may include an internal housing that is adapted to connect a jumper cable connected to the network interface device to a drop cable connected to a service provider network and to store excess drop cable.

Abstract: A framework for security information and event management (SIEM), the framework includes a first data store; a data router; one or more parsing mechanisms; one or more correlation machines; and one or more workflow engines, wherein said framework performs SIEM on behalf of multiple subscribers to said framework.

Abstract: Examples of the present disclosure provide a message relay service. The message relay service provides an application programming interface (API) with which messages can be sent and received without handling specific implementation details of a messaging system. When inbound messages are received, the message relay service may provide a push notification and/or may store the message for later access. In examples, one or more source addresses are used to send messages. If the client device indicates a group of addresses should be used, one address is selected from the group and used to send a message accordingly. In some examples, the message relay service determines that a messaging gateway need not be used to message a recipient address, and transmits the message without use of the messaging gateway. The same API may be used to send and receive messages across different messaging systems without a customer handling system-specific complexities.

Abstract: Novel tools and techniques are provided for implementing voice monitoring and tracking, and, more particularly, to methods, systems, and apparatuses for implementing voice monitoring and tracking of participants in group settings. In various embodiments, a computing system might receive, from at least one audio sensor among the one or more audio sensors disposed within the first space, voice signals corresponding to voices associated with individuals present within the first space. The computing system might analyze the received voice signals to identify one or more individuals who are present within the first space. The computing system might present, within a user interface of the user device associated with the user, information regarding the identified one or more individuals to assist the user in coordinating discussions among the individuals present within the first space.

Abstract: Novel tools and techniques are provided for implementing object-oriented infrastructure-as-code platform (“OOIACP”) and its functionalities. In various embodiments, an OOIACP may receive a request to perform a function from a requesting device. The OOIACP includes a declarative configuration language (“DCL”)-based infrastructure-as-code (“IAC”) software tool that provides structure and data functionalities and a wrapper tool that provides algorithm and sequence functionalities to the IAC software tool to convert the IAC software tool into an object-oriented programming (“OOP”)-based IAC system. The OOIACP uses a run command to perform the requested function, by identifying classes within a class hierarchy associated with the requested function, and initiating a set of procedures in each identified class. Each class and subclass within the class hierarchy has one or more predefined class behaviors, and each subclass inherits class behaviors of classes to which it belongs and of any intermediate subclasses.

Abstract: Graphical codes, such as Quick Response (QR) codes, are commonly used for convenient acquisition by a mobile device of a text string (e.g., a Uniform Resource Locator identifying a website) or other data word. Such an acquisition, however, may be a relatively low-security operation because of the relative ease with which such graphical codes may be produced. As such, a system and method for secure code scanning and verification are provided.

Abstract: A method for controlling deployment of network configuration changes includes receiving, by centralized network management system executed by a processor and memory, configuration change instructions to alter a configuration of a network; computing, by the centralized network management system, a weighted impact of the configuration change instructions; determining, by the centralized network management system, whether the weighted impact of the configuration change instructions exceeds a threshold impact level; and in response to determining that the weighted impact does not exceed the threshold impact level, executing the configuration change instructions.

Abstract: Systems and methods for detecting a location change of a phone and prompting an end-user to update the phone's location when the location change is detected are provided. Detection of the location change may be based on a change in network location information associated with a device. For example, when detecting a change in network location information for a device, an end-user may be notified and/or prompted to update address information for the device.

Abstract: Novel tools and techniques for providing an in-line AI virtual assistant are provided. A system includes a session border controller coupled to an end-user device, and a session initiation protocol stack. The session initiation protocol stack includes a processor, and non-transitory computer readable media comprising instructions executable by the processor to: receive, from the session border controller, a call invite request; provision, via the AI virtual assistant service, an AI virtual assistant instance in response to the call invite request; and join the AI virtual assistant instance to a call with the end-user device.

Abstract: Remote on-demand site link testing is provided. A site link tester (SLT) system includes an SLT connected to a customer's VoIP phone system. The SLT is configured to communicate with a front end client application operating remotely on a user's computing device. The packet-capture application receives instructions from the client application to perform a packet capture in association with the SLT's network interface and/or to operate as an emulated VoIP endpoint and conduct a test call (e.g., to confirm the customer's VoIP system's compliance with 911-associated legislation or to troubleshoot a VoIP issue). Results of the packet capture may be sent to the client application and analyzed for remotely diagnosing and troubleshooting VoIP-related problems. Using the SLT system, the technician is enabled to perform 911-associated legislation compliance and diagnose VoIP issues on-demand from a remote location, which can reduce or eliminate the need for a technician to be on-site.

Abstract: A method for suppressing network traffic includes: detecting an overload condition at a target device in a network; determining a source address of high traffic associated with the overload condition at the target device; generating a traffic suppression request including a source-destination tuple including a source identifier corresponding to the source address and a destination identifier corresponding to an address of the target device; sending the traffic suppression request to a router; configuring the router with a filter based on the source-destination tuple of the traffic suppression request; and filtering traffic between the source address and the target device based on the configured filter.

Abstract: In a system with a plurality of servers serving one or more clients, situations may arise in which a client has a connection to a first server which is providing a service to the client, and in which it would be advantageous to transfer the connection to a second server, in a manner that does not require the re-establishing of the connection or the making of a renewed request, by the client, for the service. As such, a system and method for transferring a client connection from one server to another server are provided.