Abstract: One embodiment of the present invention provides a system for controlling the spread of interests and content in a content centric network (CCN). During operation, the system maintains a routing policy for content data. The system also receives a packet associated with a piece of content or an interest for the content. Next, the system determines that the structured name included in the packet is within the namespace specified in the routing policy. The system further determines that the packet satisfies the condition in the routing policy. Subsequently, the system routes the packet based on in part the action corresponding to the condition as specified in the routing policy.

Abstract: Techniques are provided for augmenting the capabilities of the standard OAuth2 authorization framework in such a way as to allow clients to consume the services of multiple resource servers residing in disjoint security domains while requiring only a single one-time user authentication. An access token that provides access to resource services distributed across a plurality of security domains is partitioned into a plurality of reduced-scope access tokens. Each reduced-scope access token is limited to a subset of authorization scopes of the access token, providing access to a resource service in a particular security domain based upon the subset.

Abstract: In one embodiment, a method for the prioritized transmission of messages includes monitoring a network link of a mobile device to determine performance characteristics of the network link, establishing a network association between the mobile device and a routing network node, receiving a connection request from an application that is directed to a connection between the mobile device and a destination server, determining a relative priority of the connection, mapping the connection to a stream of the network association that is associated with the relative priority of the connection and identifies the destination server, and transmitting messages for the stream to the routing network node interlaced with messages of other streams of the network association based on the performance characteristics of the network link and the relative priority associated with the stream in comparison to relative priorities associated with the other streams of the network association.

Abstract: In one embodiment, a method, system, and apparatus is for storing an assigned operations, administration and management (OAM) bitstring in a memory in a BIER (Bit Index Explicit Replication) enabled router, the OAM bitstring being assigned to a BIER domain, the semantic of the OAM bitstring being to replicate and forward the OAM bitstring to neighboring bit-forwarding routers (BFRs), generating an OAM probe packet including the OAM bitstring, setting a BFR ID associated with a first BFR as a BIER header bitstring in the OAM probe packet, setting a TTL (time to live) field in the OAM probe packet to be 2, sending the OAM probe packet to a next hop BFR, and performing one of receiving the OAM probe packet back from the first BFR, and taking an alternative action if the OAM probe packet is not received back from the first BFR.

Abstract: In one embodiment, a mobile base station includes: an antenna; a transceiver operative to communicate with a user equipment (UE) via said antenna; a processor; and a mobility control application to be executed by said processor and operative: to provide to said UE when in communication with said mobile base station at least a relevant tracking area list from among at least two tracking area lists associated with said mobile base station.

Abstract: Systems and methods for managing packet flows in a communication network are provided. Packet information can be cached on different levels and used to avoid external queries. The cache information can also be correlated with other types of information, such as location information, to be able to serve that information quicker than if one or more external queries were to be made. A demux manager can provide routing and session setup, by routing packets that already have a session to the session manager and assigning packets to a session manager if they are not already assigned to a session. The tiered architecture also provides scalability to many users and minimizes delays even during high call volumes because the load can be distributed well across the gateway's resources.

Abstract: A method is provided in one example embodiment and includes receiving at a node of a transitive IP network a data packet including a Network Services Header (“NSH”); accessing by the transitive IP network node context contained in the NSH, wherein the context may be used by the transitive IP network node to perform an enhanced network service in connection with the received data packet; performing by the transitive IP network node the enhanced network service in connection with the received data packet using the accessed context; and, subsequent to the performing, forwarding the received packet to a next node.

Abstract: One embodiment provides a system that indicates conditions associated with received content. During operation, the system generates, by a first computing device, an interest message which includes a name, wherein the interest message further includes a verification token which is a hash of a nonce. In response to transmitting the interest message to a second computing device, the system receives a content object message which includes a same name as the name for the interest message. In response to detecting a condition associated with the content object message, the system generates a content object return message which includes the nonce and a same name as the name for the content object message. The system forwards the content object return message to the second computing device, thereby facilitating the second computing device to process the content object return message.

Abstract: One embodiment of the present invention provides a system for retrieving a content collection over a network. During operation, the system determines additional information associated with the piece of content that is needed for consumption of the content collection; generates a plurality of Interests, which includes at least one Interest for a catalog of the content collection and at least one Interest for the additional information; and forwards, concurrently, the plurality of Interests, thereby facilitating parallel retrieval of the content collection and the additional information.

Abstract: In one embodiment, a system includes a Headend apparatus including a watermark processor to generate secondary video streams from sections of a primary video stream, group the secondary video streams in groups of at least two secondary video streams, the secondary video streams including units of data for use in watermarking across cryptoperiods in an end-user device which selects one secondary video stream in each group for rendering as part of a composited video stream in order to embed units of data of an identification in the composited video stream, wherein in each cryptoperiod, the watermark processor is operative to generate different groups of the secondary video streams from different non-overlapping portions of the primary video stream, and an encryption processor to generate control words, encrypt each secondary video stream with a different control word, and change the control word of each secondary video stream every cryptoperiod.

Abstract: In one embodiment, a computing device groups a plurality of devices into update clusters based at least on their connectivity layout, and divides update data into a plurality of update portions, distributing the plurality of update portions to a plurality of selected redistribution devices in the particular cluster (each receiving one or more of the portions). The computing device notifies devices in the particular cluster (that can use the update data) of the plurality of selected redistribution devices along with which particular update portions are available from each of the plurality of selected redistribution devices. This therefore causes (or allows) the devices needing an update to i) download needed update portions of the plurality of update portions from the redistribution devices, ii) combine all of the plurality of update portions into the update data, and iii) perform an update using the combined update data.

Abstract: Methods and systems are disclosed which may consolidate a flash management entity using IO virtualization. The consolidation may occur in a centralized location. Furthermore, a boot strap may be created to allow booting of the micro server from a virtualized firmware management entity.

Abstract: In one embodiment, data packet messages are received in a Field Area Router (FAR) sent from one or more sources toward one or more destination devices in a Low-Power Lossy Network (LLN). An LLN routing topology for the data packet messages is interpolated in the FAR. An expected time for the data packet messages to reach a destination device in the LLN is determined based upon the routing topology interpolation. Traffic shaping is applied by the FAR for the data packet messages based upon the determined expected time for the data packet messages to reach destination devices in the LLN.

Abstract: Embodiments include a method and associated apparatuses for phase-shifting an optical signal. The method comprises receiving, at a first end of an optical waveguide formed in a semiconductor layer and extending along a first axis, an optical signal having a first phase. The method further comprises transmitting, at a second end of the optical waveguide opposite the first end, a modified optical signal having a second phase different than the first phase. Transmitting a modified optical signal comprises applying a voltage signal between a first contact region and a second contact region formed in the semiconductor layer apart from the first axis. Applying a voltage signal causes an electrical current to be conducted along a dimension of the optical waveguide. The electrical current causes resistive heating of the optical waveguide and a desired phase shift between the first phase and the second phase.

Abstract: In one embodiment, a device in a network receives information regarding one or more traffic flows in the network. The device identifies a particular one of the one or more traffic flows as a seasonal traffic flow based on the information regarding the one or more traffic flows. The device determines whether a service level agreement associated with the seasonal traffic flow is met. The device causes a time-based path for the seasonal traffic flow to be provisioned, in response to a determination that the service level agreement associated with the seasonal traffic flow is not met.

Abstract: One embodiment provides a system that facilitates efficient key retrieval by using key catalogs in a content centric network. During operation, the system generates, by a client computing device, a first interest for a key indicated in a signed key catalog. In response to receiving the key, the system verifies the received key by determining that a hash of the received key matches a hash of the key as indicated in the catalog based on a name for the received key. The system generates a second interest for a content object, wherein a name for the second interest includes a name prefix associated with the key as indicated in the catalog, wherein the first interest is transmitted before or concurrent with transmitting the second interest. In response to receiving the content object, the system verifies the received content object based on the key.

Abstract: Various systems and methods for implementing efficient TCAM resource sharing are described herein. Entries are allocated across a plurality of ternary content addressable memories (TCAMs), with the plurality of TCAMs including a primary TCAM and a secondary TCAM, where the entries are allocated by sequentially accessing a plurality of groups of value-mask-result (VMR) entries, with each group having at least one VMR entry associated with the group, and iteratively analyzing the VMR entries associated with each group to determine a result set of VMR entries, with the result set being a subset of VMR entries from the plurality of groups of VMR entries, and the result set to be stored in the primary TCAM.

Abstract: A location of a client device may be detected. From a first location, a first angle from a first reference line to the client device may be determined using beamforming. Next, from a second location, a second angle from a second reference line to the client device may be determined using beamforming. The first reference line and the second reference line may be parallel. Then, an intersection point of a first directional line and a second directional line may be determined. The first directional line may be defined by the first location and the first angle. The second directional line may be defined by the second location and the second angle. A client device location corresponding to the intersection point may then be obtained.

Abstract: Embodiments are provided for optimized best path selection for optimal route reflection and include configuring, by a cloud-based node, a first cluster of nodes in an autonomous system, and determining whether any paths for a network address prefix are available in the first cluster of nodes. Embodiments also include selecting a best path from one or more paths if the one or more paths are determined to be available in the first cluster for the network address prefix. Embodiments further include advertising the best path to one or more nodes in the first cluster. More specific embodiments include determining, if no paths for the network address prefix are available in the first cluster, another path for the network address prefix is available in a second cluster of nodes of the autonomous system, and selecting the other path as the best path.

Abstract: Determining audience engagement may be provided. First, an image may be received and a plurality of faces may be identified in the received image. Then position data and head pose data for each of the plurality of faces in the received image may be determined. Next, the plurality of faces may be separated into a plurality of clusters based upon the determined position data for each of the plurality of faces in the received image. For each of the plurality of clusters, a plurality of bins may be created where each bin corresponds to a non-overlapping range between a maximum pose data value and a minimum pose data value. Next, a bin count may be determined for each of the plurality of bins in each of the plurality of clusters and then an engagement value may be determined for each of the plurality of clusters based on the bin count.