Abstract: In one embodiment, a supervisory device for a network of a power substation identifies a plurality of nodes in the network of the power substation. The supervisory device associates each of the nodes with one or more security certificates. A particular security certificate authenticates a particular node to the supervisory device and authorizes the particular node to communicate in the network of the power substation. The supervisory device determines a security perimeter for the nodes in the network. The supervisory device schedules communications among the nodes using the one or more security certificates and based on the determined security perimeter.

Abstract: In one embodiment, segment routing network processing of packets is performed, including using segment routing packet policies and functions providing segment routing processing signaling and packet forwarding efficiencies in a network. A segment routing node signals to another segment routing node using a signaled segment identifier in a segment list of a segment routing packet with the segments left identifying a segment list element above the signaled segment identifier. A downstream segment routing node receives the segment routing packet, obtains this signaled segment identifier, and performs processing of one or more packets based thereon. In one embodiment, a provider edge node replaces its own segment identifier in a received customer packet, with a downstream customer node using the replaced (signaling) segment identifier (of a provider edge node/segment routing function) for accessing a return path through the provider network.

Abstract: Detection of a device connected to a network element may be provided. First, upstream allocation data corresponding to the device may be received. Next, active minislot data detected at the network element may be received. It may then be determined that the upstream allocation data and the active minislot data correlate. In response to determining that the upstream allocation data and the active minislot data correlate, it may be determined that the device is attached to the network element.

Abstract: A method of controlling performance of a wireless device is performed by a node that is in electronic communication with a cellular network. The node includes a processor, a non-transitory memory, and a network interface. The method includes receiving a performance value characterizing a performance of a communication channel between a wireless device and a wireless access point. In some implementations, the wireless device and the cellular network are associated with different radio access technologies (RATs). The method includes determining whether the performance value breaches a performance criterion for the wireless device. The method includes adjusting a first amount of data transmitted to the wireless device from a base station of the cellular network and a second amount of data transmitted to the wireless device from the wireless access point. In some implementations, the combined first and second amounts of data satisfy the performance criterion for the wireless device.

Abstract: In an example embodiment, an apparatus comprising a transceiver configured to send and receive data and logic coupled to the transceiver. The logic is configured to determine from a signal received by the transceiver whether an associated device sending the signal supports a protocol for advertising available services. The logic is configured to send a request for available services from the associated device via the transceiver responsive to determining the associated device supports the protocol. The logic is configured to receive a response to the request via the transceiver, the response comprising at least one service advertisement and a signature. The logic is configured to validate the response by confirming the signature.

Abstract: Indication of an amount of processing performed in detection and removal of ingress noise may be provided. A frequency domain representation of a narrowband region of a digital input signal may be received. The received frequency domain representation of the narrowband region may be compared with a predetermined threshold. Results from the comparison of the received frequency domain representation of the narrowband region with the predetermined threshold may be aggregated. Based on the aggregated results, an indication of an amount of processing performed by an ingress exciser in removing the ingress noise may be provided.

Abstract: Full Duplex (FDX) enhanced node deployment may be provided. First, a first device level may be provided comprising a first plurality of FDX enhanced nodes. The first plurality of FDX enhanced nodes may comprise a first FDX enhanced node and a second FDX enhanced node. The first plurality of FDX enhanced nodes may be operated in a first mode. Next, a second device level may be provided comprising a third FDX enhanced node. The second device level may be upstream from the first device level. The third FDX enhanced node may be operated in a second mode. Then an input port of the first FDX enhanced node and an input port of the second FDX enhanced node may be provided with a same type of input that is being provided to an input port of the third FDX enhanced node. The first plurality of FDX enhanced nodes may then be switched from being operated in the first mode to being operated in the second mode.

Abstract: Echo cancellation to alleviate timing varying channels may be provided. First, a feedback signal corresponding to one of a plurality of downstream paths and a combination upstream signal comprising a combination of upstream signals from a plurality of upstream paths may be received. Next, a plurality of echo corrected signals may be created using the feedback signal, the combination upstream signal, and a plurality of echo cancelation coefficients that each respectively correspond to each one of the plurality of echo corrected signals and that are different from each other. Then a one of the plurality of echo cancelation coefficients that corresponds to a one of the plurality of echo corrected signals that provides a best echo cancelation performance as compared to other ones of the plurality of echo corrected signals may be selected to use.

Abstract: A method of routing network traffic may include routing traffic from a local network device, through a remote network location, to a third party network resource along a first path. The method may also include determining a first ranking for the first path, and determining a second ranking for a second path from the local network device to the third party network resource along a second path, the second path excluding the remote network location. The method may additionally include, based on the second ranking exceeding the first ranking by a threshold amount, rerouting the traffic along the second path.

Abstract: The proposed methodology enables finding the most efficient roots in the network to carry multicast traffic, while further providing a theoretical basis for such selection. It guarantees the minimum expected delivery cost for multicast frames in the absence of any knowledge about the source and receivers.

Abstract: In one embodiment, a method comprises: in response to a request of a user device to access first content, sending a challenge, relating to digital video included in second content, the challenge at least indicative of positions that include a plurality of frames; receiving a response to the challenge, the response at least indicative of values; attempting to validate the response, including determining values of pixels in the digital video associated with positions indicated by at least one of: the challenge or the response, and comparing the values indicated by the response, or a function thereof, to the determined values, or a function thereof; and performing at least one action relating to access to the first content, dependent on whether or not the attempt to validate the response was successful.

Abstract: In one embodiment, a system includes a processor to determine a number P of how many multi-user groups are to be formed to promote airtime fairness for N client devices in which each one client device of the N client devices will be equally represented in the to-be-formed multi-user groups and in which each of the to-be-formed groups is to be actively considered by a scheduler for transmission purposes, the N client devices being associated with N wireless connections with an access point having multi-user simultaneous communication multiple-input multiple-output technology, define P multi-user groups with each one multi-user group of the P multi-user groups having a capacity for M client devices from the N client devices, N being greater than M, and allocate the N client devices to the P multi-user groups with each one client devices of the N client devices being equally represented in the P multi-user groups.

Abstract: A system is provided to run new code modules safely in a duplicative, protected environment without affecting the code modules that are already trusted to be on the system. The system receives a new code module that validates operational data of a computing device, and instantiates a new, parallel execution engine to run the new code module on the operational data in parallel with another execution engine running the trusted/verified code modules that also validate the same operational data. The new engine runs the new code module with the operational data to produce new code module results. The production engine runs the trusted/verified code modules with the operational data to produce verified code module results. The new code module results are combined with the verified code module results to produce combined results describing the operational status of the computing device.

Abstract: In one embodiment, a device identifies, from image data captured by one or more cameras of a physical location, a focal point of interest and people located within the physical location. The device forms a set of nodes whereby a given node represents one or more of the identified people located within the physical location. The device represents a person queue as an ordered list of nodes from the set of nodes and adds a particular one of the set of nodes to the list based on the particular node being within a predefined distance to the focal point of interest. The device adds one or more nodes to the list based on the added node being within an angle and distance range trailing a forward direction associated with at least one node in the list. The device provides an indication of the person queue to an interface.

Abstract: In one embodiment, a device in a wireless power transfer (WPT) system receives data regarding a vehicle equipped with a vehicle-based charging coil configured to receive electrical power transferred from a ground-based charging coil of the WPT system. The device determines, based on the received data, a time at which the vehicle-based charging coil is expected to be in charging proximity of the ground-based coil. Based on the received data, the device determines a gap distance between the vehicle-based charging coil and the ground-based charging coil to optimize the transfer of electrical power from the ground-based charging coil to the vehicle-based charging coil when the coils are in charging proximity of one another. The device sends control instructions to an adjustment system to implement the identified gap distance in advance of the determined time by adjusting a height of the vehicle-based charging coil or the ground-based charging coil.

Abstract: A SOI device may include a waveguide adapter that couples light between an external light source—e.g., a fiber optic cable or laser—and a silicon waveguide on the silicon surface layer of the SOI device. In one embodiment, the waveguide adapter is embedded into the insulator layer. Doing so may enable the waveguide adapter to be formed before the surface layer components are added onto the SOI device. Accordingly, fabrication techniques that use high-temperatures may be used without harming other components in the SOI device—e.g., the waveguide adapter is formed before heat-sensitive components are added to the silicon surface layer.

Abstract: In one embodiment, an instruction is received at a blockchain server from a first digital rights management (DRM) client, the instruction including an instruction to transfer a DRM license to an encrypted content item to a second DRM client. A block to be recorded in a blockchain, is created, the block including a content item ID of said encrypted content item, one of a device ID of a device including the second DRM client or a user ID of a user of the second DRM client, DRM license information for said DRM license, and a DRM decryption key for decrypting said encrypted content item. The block is recorded in the blockchain. A confirmation message is sent to the second DRM client confirming that the block was written to the blockchain. Related systems, methods, and apparatuses are also described.

Abstract: A network apparatus for providing native load balancing, having: a first network interface to communicatively couple to a first network; a plurality of second network interfaces to communicatively couple to a second network; one or more logic elements providing a switching engine to provide network switching or routing; and one or more logic elements, including at least one hardware logic element, providing a load balancing engine to: load balance network traffic among a plurality of service nodes; probe a first service node with a first probe; and probe a second service node with a second probe, the second probe different in kind from the first probe.

Abstract: A method is provided in one example embodiment and includes receiving a first request from a first user equipment by a first transport layer proxy located within an access network The first request includes a request to establish a user session between the first user equipment and a remote server. The method further includes establishing a first transport layer session between the first user equipment and the first transport layer proxy, establishing a second transport layer session between the first transport layer proxy and the remote server, and establishing a first control channel between the first transport layer proxy and a transport layer function manager within a core network. The method further includes sending session state parameters associated with the first transport layer session and the second transport layer session to the transport layer function manager using the first control channel.

Abstract: In one illustrative example, a network cybersecurity procedure may be employed with use of at least one unmanned aerial vehicle (UAV), where the UAV includes an intermediary pairing device for providing a temporary connection between a first network (e.g. a private LAN) and a second network (e.g. the Internet). The network cybersecurity procedure may involve deploying the UAV in proximity to the first network, such that the intermediary pairing device pairs with a first pairing device via a first transceiver and with a second pairing device via a second transceiver. A temporary connection is established between the first network connected via the first pairing device and the second network connected via the second pairing device. Data is communicated between a first device (e.g. IoT device) or server of the first network and a second device or server of the second network over the temporary connection. During this time, the intermediary pairing device executes a cybersecurity service function.