Abstract: A method includes receiving a request for a communication session from a user device, identifying a first resource from a plurality of resources, wherein the first resource is associated with a first service control layer for a radio access network and wherein the plurality of resources includes at least one virtual network function (VNF), identifying a second resource from the plurality of resources, wherein the second resource is associated with a second service control layer for LTE core functions, identifying a third resource from the plurality of resources, wherein the third resource is associated with a third service control layer for content delivery, allocating a virtual machine to be used to instantiate the at least one VNF, instantiating the at least one VNF and establishing the communication session by facilitating communications between the first service control layer, the second service control layer and the third service control layer.

Abstract: The technologies described herein are generally directed to validating the integration of new carrier components at base station equipment, e.g., in a fifth generation (5G) network or other next generation networks. For example, a method described herein can include, confirming based on installation data, an installation milestone of an installation of a carrier component at base station equipment, resulting in a confirmed milestone. The method can further include, based on the confirmed milestone, identifying for an evaluation of the installation of the carrier component, a criterion associated with a characteristic of operation of the base station equipment. Further, the method can include based on a result of evaluation of the installation, sending, by the network equipment, a validation signal to the base station equipment indicating that the installation of the carrier component is validated.

Abstract: The system allows real time collection and processing of massive data from many network elements. It has an elastic architecture that scales horizontally to support different network sizes. The system in a uniform data format for downstream consumption. It employs a pub/sub data distribution mechanism that supports multiple concurrent downstream subscribers efficiently in real-time.

Abstract: Aspects of the subject disclosure may include, for example, obtaining a reference data set comprising a plurality of reference data records, wherein the reference data set is associated with a cloud infrastructure, and wherein each of the reference data records comprises a reference network name associated with one of a plurality of reference networks that is configured within the cloud infrastructure and a corresponding reference Virtual Local Area Network (VLAN) identifier for the one of the plurality of reference networks that is configured within the cloud infrastructure; obtaining an input data set comprising a plurality of input data records, wherein the input data set is associated with the cloud infrastructure, and wherein each of the input data records comprises a network name associated with one of a plurality of networks that is being considered for configuration within the cloud infrastructure and a corresponding VLAN identifier for the one of the plurality of networks that is being considered for

Abstract: A processing system may maintain a relationship graph that includes nodes and edges representing phone numbers and device identifiers having associations with the phone numbers. The processing system may obtain an identification of a first phone number or a first device identifier for a fraud evaluation and extract features from the relationship graph associated with at least one of the first phone number or the first device identifier. The plurality of features may include one or more device identifiers associated with the first phone number, or one or more phone numbers associated with the first device identifier. The processing system may then apply the features to a prediction model that is implemented by the processing system and that is configured to output a fraud risk value of the first phone number or the first device identifier and implement at least one remedial action in response to the fraud risk value.

Abstract: An example method for estimating a number of individuals present in a crowd includes generating a density map based on an image of a crowd, using a convolutional neural network, augmenting the density map with cellular signal processing data to produce an augmented density map, and estimating a number of individuals present in the crowd, based on the augmented density map.

Abstract: In one example, a method includes receiving a plurality of network probes originating from a first provider edge router in a service provider network, calculating a plurality of network performance metrics, based on the plurality of network probes, and storing the network performance metrics associated with each network probe of the plurality of network probes in a path metric table, wherein an entry in the path metric table for the each network probe includes a path traveled by the each network probe from the first provider edge router to the processing system, the network performance metrics associated with the each network probe, a community value associated with the each network probe, and a traffic classification value associated with the each network probe.

Abstract: Aspects of the subject disclosure may include, for example, a radio device that has first and second subscriber identity modules; radio resources; a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations of establishing a first communications network connection associated with the first subscriber identity module; establishing a second communications network connection associated with the second subscriber identity module; determining a communications activity on the first communications network connection; pausing or suspending activities of the second communications network connection; and blocking use of the radio resources by the second communications network connection. Other embodiments are disclosed.

Abstract: The disclosed technology is directed towards routing, by a mobile network operator, a message to a messaging hub associated with a partner carrier or to the partner carrier itself. In response to receiving a message to reroute, a data store (e.g., an ENUM database) is queried to attempt to obtain information corresponding to the routing. For example, when the query response includes a regular expression that specifies a domain, the domain is evaluated against a data structure of respective messaging hubs associated with respective domains. If the returned domain is matched such that an associated messaging hub is identified, the message is routed to the identified messaging hub; otherwise a mobile network partner carrier is determined based on the telephone number of the message recipient, and the message is routed to the determined partner carrier.

Abstract: Aspects of the subject disclosure may include, for example, obtaining for a first path carrying first network traffic a corresponding first alternate path; obtaining for a second path carrying second network traffic a corresponding second alternate path, at least a first portion of the first alternate path being the same as at least a second portion of the second alternate path; responsive to a first detected failure on the first path, causing communication of first re-directed network traffic via the first alternate path instead of via the first path; responsive to a second detected failure on the second path, detecting whether total traffic, including the first re-directed network traffic, on the first portion of the first alternate path meets a threshold; responsive to the detected meeting of the threshold, obtaining for the second path a corresponding back-up alternate path; and causing communication of second re-directed network traffic via the back-up alternative path instead of via the second path.

Abstract: The concepts and technologies disclosed herein are directed to time-aware blockchain staged regulatory control of Internet of Things (“IoT”) data. A federation platform can receive a registration request from an enterprise edge platform to register a blockchain identifier for publication of public data on a public blockchain. The federation platform can determine if the registration request contains any restricted data parameters. In response to determining that the registration request does not contain any restricted data parameters, the federation platform can query a security module to obtain an encryption key. The federation platform can receive the encryption key from the security module. The federation platform can store the encryption key in association with the blockchain identifier and an enterprise edge platform ID that uniquely identifies the enterprise edge platform.

Abstract: A system is provided with a software controller; a storage platform capable of storing stored blocks of data and having a central processing unit; a controller monitoring and isolation tool embedded in the software controller; and a storage monitoring and isolation tool embedded in the storage platform that is capable of locking down a memory partition on the storage platform. The system also includes a memory for storing computer instructions and a host computer coupled with the memory, wherein the host computer, responsive to executing the computer instructions, performs certain operations. The operations include extracting orchestration configurations through the controller monitoring and isolation tool and relaying the orchestration configurations to the storage monitoring and isolation tool.

Abstract: Techniques for Enhanced 911 (E911) location for dense cell network meshes are provided. A method can include obtaining, by a system comprising a processor via a communication network comprising first network cells listed in a neighboring cell list of a user equipment, coverage area information for the first network cells, wherein the coverage area information comprises respective reported positions of the first network cells and respective coverage radii of the first network cells; determining, by the system based on the coverage area information for the first network cells, a first area in which respective coverage areas of the first network cells overlap; and defining, by the system, an estimated position of the user equipment as a selected position within the first area.

Abstract: A processing system of an autonomous aerial vehicle including at least one processor may determine informational data to present for at least one person, capture at least a first image via at least one imaging sensor of the autonomous aerial vehicle in a vicinity of the at least one person and determine a first position and a first orientation of the at least one person. The processing system may then identify, based upon the first position and the first orientation of the at least one person, a plurality of candidate projection areas, each candidate projection area comprising a contiguous area within the at least the first image that is deemed to be visible to the at least one person, select one of the plurality of candidate projection areas as a projection zone, and project the informational data on the projection zone via a projector.

Abstract: A system includes a plurality of interconnected hardware platforms, wherein the plurality of hardware platforms are configured to run a software defined network, a plurality of virtual machines configured to be instantiated on the software defined network, and a plurality of floating management layers, each of the floating management layers associated with one of the plurality of virtual machines. Each floating management layer includes coupling the associated virtual machine to one of the plurality of hardware platforms, monitoring performance of the associated virtual machine, detecting a trigger, based on the trigger, determining whether to move the virtual machine to a second of the plurality of hardware platforms, and moving the virtual machine.

Abstract: The disclosed technology is directed towards avoiding a misconfiguration that uses a Long Term Evolution (LTE) and new radio dynamic spectrum sharing (DSS) carrier as an LTE carrier and new radio primary secondary cell carrier concurrently for a dual connectivity mobile device. Network equipment can detect the misconfiguration and prevent its usage, or if already configured, deconfigure the LTE DSS secondary cell during setup of a dual connectivity mobile device. Alternatively a dual connectivity mobile device can detect the misconfiguration and notify the network to terminate one of the carriers. Information regarding the misconfiguration can be saved in the mobile device to proactively avoid the dual misconfiguration going forward. Such information can be communicated to other mobile devices, as well as the network.

Abstract: Unmanned aerial vehicle drive testing and mapping of carrier signals is disclosed. An example method may include determining that an unmanned aerial vehicle is travelling on a flight route at an altitude for determination of network performance of a cellular network. The method may further include determining, using an antenna, signal diagnostics of the cellular network during travel of the unmanned aerial vehicle on the flight route. The method may conclude with transmitting the signal diagnostics of the cellular network to a service provider.

Abstract: Aspects of the subject disclosure may include, for example, identifying a first position of a first user, identifying a first context associated with the first user, determining, based on the first position and the first context, at least a first action that is recommended to be taken, and providing at least one output that provides an indication of the at least a first action. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, a device in which a processing system of a remote entry system selects a first circuit from a plurality of circuits of a key remote from the device; wirelessly transmits a first challenge signal to the key, the first challenge signal specifying the first circuit; and wirelessly receives a first response signal from the key, the first response signal having a first response signal power level and a first response signal delay with respect to the first challenge signal. The processing system analyzes the first response signal by comparing the first response signal power level and the first response signal delay respectively with a predetermined first signal power and predetermined first time delay associated with the first circuit; and, in accordance with the comparing, determines whether to enable the entry system. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, receiving, from a computing device, a validation request for validating an individual associated with a mobile device equipped with an authentication app communicatively coupled with an authentication system, obtaining request data from a user validation system, enabling, using the request data, the computing device to communicate with the user validation system to facilitate the validation, wherein the validation involves the user validation system triggering the authentication system to provide access information to the computing device, the authentication system authenticating the individual/mobile device, the authentication system providing, to the user validation system, identification information of the individual based on the authenticating, and the user validation system determining a validation result based on data relating to the identification information.

Abstract: Methods, systems, and apparatuses, for real-time operation control, among other things. There may be adjustments to a first device in which a first network service operates. The adjustment to the device may include moving a second network service of the first device to a second device. The first network service and the second network service may be associated with virtual machines.

Abstract: Aspects of the subject disclosure may include, for example, a network communication device that includes a backhaul link circuit and a Wi-Fi access point to provide broadband services to a service provider's broadband customers and to provide mobility services to the service provider's mobility customers. This network communication device is installed outside of a dwelling unit in order to simplify the installation procedure and avoid property disruption. An extender device registered to a broadband customer user account may associate to the access point for seamless service. User equipment (UE) of the service provider's mobility customers may associate to the access point to receive Wi-Fi roaming services. Other embodiments are disclosed.

Abstract: An architecture to dynamically create fifth generation technology based geofences around defined areas to ensure the safe operation of user equipment (UE). A method can comprise determining that first serving cell equipment is servicing an aerial user equipment determining that the first serving cell equipment has enabled beamforming, determining that a first beam of a group of beams is being used to service the aerial user equipment, determining a second beam of the group of beams that the first serving cell equipment will use to service to the aerial user equipment, determining that a handover event from the first serving cell equipment to a second serving cell equipment will occur, and causing the first serving cell equipment to adjust an emitted power level associated with the second beam.

Abstract: A streaming orchestrator may monitor the quality of video being delivered to a home or other building. If the streaming orchestrator determines that additional performance is needed, it may create an additional User Plane Gateway in the virtual “white box” environment residing in the customer premises. The streaming orchestrator may instruct gNodeBs to continue to route traffic back to the central core functions or to route traffic to local user plane gateways which transmit video streams to the Internet via localized high-speed connections.

Abstract: Aspects of the subject disclosure may include, for example, a device that receives data from a machine-type communication (MTC) device located at a premises, determines an identifier for the MTC device; compares the identifier with a list of identifiers; and, responsive to determining that the MTC device is a listed device, transmits the data to a first network element remote from the premises. The device and the first network element do not receive data from devices at the premises generating human traffic communications (HTC). The first network element transmits the data to a second network element for aggregation and subsequent transmission to a cloud data facility comprising cloud storage. A data path from the device to the first network element, from the first network element to the second network element, and from the second network element to the cloud data facility forms a secure data path. Other embodiments are disclosed.

Abstract: In one example, the present disclosure describes a device, computer-readable medium, and method for minimizing customer impact during network access migrations. For instance, in one example, a method includes detecting a change in an access network that affects a first network circuit connecting a customer premises to a first provider edge router and provisioning a second network circuit in response to the detecting, wherein the provisioning comprises taking an action to preserve a wide area network internet protocol address of the customer premises on the first network circuit in the second network circuit.

Abstract: Described is centralized scheduling of baseband unit resources of a hub, including allocating and deallocating baseband unit resources of a distributed unit instance based on anticipated and/or actual demand for the resources. For example, when user equipment transitions to a connected state, a corresponding message can be detected and used to determine whether sufficient baseband unit resources exist to handle the traffic of the newly connecting user equipment. If not, additional baseband unit resources are allocated, coupled to a node (cell), and the node scheduled to handle the user equipment traffic. When user equipment transitions to an inactive state, the corresponding command can be detected and used to determine whether the baseband unit resources are still needed for other traffic. If not, the baseband unit resources are deallocated.

Abstract: A method and system for centralized control of user devices is disclosed. The method for centralized control of user devices via universal IP services registrar includes receiving a request to register a user device for a plurality of services, registering the user device for the plurality of services by creating a user settings profile for the user for each of the plurality of services, receiving data from the plurality of registered services, and transmitting received data to the user device in accordance with the user profile.

Abstract: In a 5G network, control unit (CU) can be connected to a radio access network controller (RC). In response to receiving measurement data from the CU, the RC can process the measurement data to determine polices and procedures related to radio resource management, and/or radio resource control, which can then be utilized to manage mobility, dual-connectivity, carrier aggregation, and/or integrated access and backhaul topology formation and routing. The measurement data provided by the CU can be provided directly to the RC without processing of the measurement data by the CU.

Abstract: The disclosed technology relates to detection of attention exhibited by a second user to a first user's avatar in a virtual reality environment. A first user's avatar activity and the second user's activity are evaluated to determine the second user's (e.g., via another avatar) attention level directed towards first user's avatar. Information can be sent to notify the first user that the second user's attention level has satisfied attention-level criterion data. For example, if the second user is viewing and/or is within audio range of the first user for too long of a time or too frequently, then the first user can be notified and/or other action taken. Remedial action is available for negative attention, such blocking the second user from experiencing the first user in the environment. Detection of attention for positive purposes is available, such as to reward an influencer whose avatar is receiving significant attention from followers.

Abstract: A processing system may obtain a request from a user device to activate an access credential locker for use in accessing at least one enterprise system of an enterprise via the processing system, the request comprising a token that identifies the access credential locker, obtain a first key from the user device, transmit, to the enterprise, a request for a second key, obtain the second key from the enterprise in response to the request, apply the first key and the second key to the access credential locker, the access credential locker being encrypted in accordance with the first and second keys and being decrypted via the applying of the first and second keys, and establish a communication session between the user device and the at least one enterprise system via the processing system using at least one access credential that is stored in the decrypted access credential locker.

Abstract: Excessive signaling by devices against a radio access network (RAN) can be detected and mitigated. A security management component (SMC) can determine whether a total number of control signals received by a base station from devices satisfies a threshold total number of control signals indicative of excessive signaling. If so, SMC can identify a device associated with the base station based on analyzing communication conditions associated with the device. SMC can determine whether to classify the device as an excessive signaling device based on whether the number of control signals received from the device by the base station satisfies a threshold number of control signals indicative of excessive signaling. If so, SMC can determine the device is an excessive signaling device. In response, SMC can perform or facilitate performing a mitigation action to mitigate excessive signaling or can generate statistics relating to the excessive signaling.

Abstract: The described technology is generally directed towards an automated security hangar for private cellular networks. In response to detecting that a user equipment is departing a geographic area served by a private cellular network, the user equipment can encrypt its data and send it to a private cellular network server. The server can receive and securely store the encrypted data, and the server can provide a code to the user equipment. The user equipment can store the code, disconnect from the private cellular network, and depart the geographic area. When the user equipment returns to the geographic area and reconnects to the private cellular network, the user equipment can present the code to the server. The server can validate the code, the user equipment, and/or the operator of the user equipment, and the server can return the encrypted data to the user equipment.

Abstract: The technologies described herein are generally directed to monitoring the configuration of an inventory of devices using captured images of a site. For example, a method described herein can include identifying a group of equipment installed at locations within a site. The method can further include, based on an image captured at the site by image capture equipment, detecting configuration activity at the site. Further, the method includes, based on analysis of the image, associating, by the tracking equipment, the configuration activity with equipment of the group of equipment.

Abstract: Aspects of the subject disclosure may include, for example, receiving a first request from a first communication orchestrator of a first protected environment to provide a secure and authenticated connection between a first resource of the first protected environment and a second resource of a second protected environment, accessing first encryption information from the first communication orchestrator and second encryption information from a second communication orchestrator of the second protected environment, verifying a capability for secure quantum communications of an encryption technique of the first communication orchestrator and the second communication orchestrator according to the first encryption information and the second encryption information, and enabling the first communication orchestrator and the second communication orchestrator to initiate a secure and authenticated communication channel via quantum communications. Other embodiments are disclosed.

Abstract: Aspects of the subject disclosure may include, for example, determining a Reference Signal Received Power (RSRP) and a Signal to Noise Ratio (SNR) for a plurality of carriers at a user equipment (UE) device, the plurality of carriers transmitted by a source group of cells including a source primary cell (PCell) and one or more source secondary cells (SCells) associated with the source PCell, and initiating a handover of communication with the UE device from the source group of cells to a target group of cells, wherein the target group of cells includes a target PCell and one or more target SCells, wherein the initiating the handover is responsive to the RSRP exceeding a predetermined RSRP threshold and the SNR exceeding a predetermined SNR threshold. Other embodiments are disclosed.

Abstract: The disclosed technology is generally directed towards monitoring electronic communications to detect content in a communication that is attempting to influence the recipient user in some way. A user can specify influential intent preference data, such as which electronic communications services/applications to monitor for such influential intent content, and the types of the influential intent to monitor for, e.g., political influence types, advertisement influence types, and so on. A user also can specify remedial or other actions to take upon detection, e.g., block such content, alert on detecting such content and so on. An electronic influence manager server and/or application program can perform the monitoring and/or take the actions. Also described is reporting on the communications with influential intent, user actions with respect thereto. Reputation data can also be collected and used with respect to sources of communications with influential intent.

Abstract: Generating a core instance via a first access network device of a first access network, wherein the core instance facilitates operation of a second access network via a second access network device of the second access network is disclosed. Generally, implementing a core network can be highly resource intensive, e.g., high labor, equipment, and monetary costs. The level of resources that are conventionally committed in developing a core instance can be a significant barrier for many small or medium sized entities. The disclosed subject matter discloses a configuration component that can generate a core instance that can be performed at a remotely located access network. In an embodiment, a remotely implemented core instance can be updatable. Further, in response to a remotely implemented core instance failing to perform, a monitoring component can facilitate a failover operation.

Abstract: The disclosed technology is directed towards presenting communications data to a responding entity that are relevant to an emergency situation at an emergency location. The communications data can be obtained from communications (e.g., text messages, transmitted video, voice calls and the like) that involve at least one user device at the situation, including communications that do not involve the responding entity. Users may opt in to such an emergency service to allow access to their communications, whereby their device locations are tracked and known in the event of an emergency. Upon obtaining the communications data, a responder can receive a view of the scene augmented with the communications data. The view can include a three-dimensional and/or two-dimensional representation of the zone/area of the emergency situation. Filtering can be used to eliminate irrelevant communications, and summarization can be used to combine generally redundant communications.

Abstract: In accordance with one or more embodiments, a method includes injection molding of a dielectric material in a pre-distorted antenna mold; and curing the dielectric material. The pre-distorted dielectric mold has a shape that compensates for shape distortion of the dielectric material during the curing.

Abstract: Aspects of the subject disclosure may include, for example, identifying an entity of a natural language question, locating a node of a knowledge graph corresponding to the entity, and generating a candidate answer set including a group of other entities located a predetermined proximity to the node. Contextual information for the group of other entities is determined from the knowledge graph, and the natural language question and contextual information are separately encoded to obtain separate encoded vectorial representations of the natural language question and members of the candidate answer set. The encoding uses pre-trained language model embeddings obtained via a bidirectional encoder representations from transformer encoding process. The encoded vectorial representations of the question under an influence of aspects of the contextual information are scored and a member of the candidate answer set selected according to the score to obtain an answer to the original question.

Abstract: Aspects of the subject disclosure may include, for example, determining, by a wireless router or a wireless access point (WAP) associated with a fixed network connection, that a network condition is satisfied, based on the determining that the network condition is satisfied, detecting for available networks operating in licensed spectrum and available networks operating in unlicensed spectrum, responsive to the detecting, identifying a first available network operating in licensed spectrum and a second available network operating in unlicensed spectrum, and aggregating, in one or more link aggregation groups, a first connection established with the first available network and a second connection established with the second available network, thereby augmenting a network capacity of the fixed network connection. Other embodiments are disclosed.

Abstract: The disclosed technology is directed towards intelligently steering a roaming mobile communications device to a roaming carrier that is preferred by the mobile device's home network. When a mobile device requests to connect to a first visited network, decision logic of the home network determines whether the first visited network is the preferred visited network. If not, the home network returns a steer message (via the first visited network) to steer the mobile device to a preferred visited network. In one implementation, the steering decision is performed at the network edge by a home security edge protection proxy (H-SEPP) node coupled to a visiting SEPP (V-SEPP) node, which reduces hops and latency. What the home network considers preferred can be changed (e.g., dynamically) as desired by the home network. Also described is service-based steering that selects a different visited network based on a particular service requested by a mobile device.

Abstract: The disclosed technology is directed towards creating a media content presentation for playback, based on user specified input criteria and playback instructions. A user specifies input criteria related to media source data. The media source data is accessed, and further based on the input criterion, matching segments (e.g., scenes and audio) are determined from metadata information that describes the segments; the media playback content is generated from the matching segments. A user may also specify criteria/instructions that describe how to play the matching segments, such as in linear order, or based on relative relevance such as scene impactfulness. A matching scene can be repeated, and/or augmented with annotation data. For any matching scene or transition between two matching scenes, specified playback speed and audio volume can be specified and applied. As part of generation, the media content presentation can be fit to a specified time constraint.

Abstract: A processing system of a radio access network may obtain an attach request from a user equipment to the radio access network, identify a first cellular core network of a first mobile network operator associated with the user equipment from among a plurality of cellular core networks of a plurality of mobile network operators in communication with the radio access network, generate a first record that includes an identifier of the user equipment, at least one quality class indicator, and at least one radio access network resource utilization metric for a utilization of the radio access network by the user equipment associated with the at least one quality class indicator, and transmit the first record to at least one of: the first cellular core network of the first mobile network operator or a second cellular core network of a second mobile network operator of the plurality of network operators.

Abstract: Aspects of the subject disclosure may include, for example, a system and method for selecting media content for a group of persons located at a venue. The system and method identify a plurality of viewers in a vicinity of a venue that has one or more display devices from location data and extracts a content viewing preference of each viewer from their profile data. The process includes aggregating the content viewing preference of each of the plurality of viewers to generate an aggregated content profile. Based on the aggregated content profile, a list of content is generated. Next, a first group of viewers approaching a viewing range of a display device are sensed by imaging data. Any conflicts between content viewing preferences of the first group of viewers are detected and resolved based on weighting the viewing preferences of the group. Other embodiments are disclosed.

Abstract: The described technology is generally directed towards a transport protocol for latency sensitive applications. The disclosed transport protocol is “semi-reliable” in that it allows for specification of an importance of data being transmitted, thereby allowing important data to be sent reliably, while other data can be dropped if necessary, e.g., under bad network conditions. A deadline can be specified for such other data, and if the other data cannot be sent prior to the deadline, it can be dropped. Furthermore, the disclosed transport protocol can allow for early discovery of network jitter. A client device can send regular acknowledgments which identify most recently received data packets as well as a number of “heartbeat transmissions” received at the client device. A server device can use the acknowledgments to discover and respond to jitter.

Abstract: In a dataset exchange environment in which datasets are available for exchange or transformation, a dataset validation platform may be configured to update a cryptographically signed record based on each dataset that is available via the data exchange environment. The dataset validation platform may be further configured to control access to the datasets based on whether a request to access a particular dataset is compliant with an availability requirement of the particular dataset. The dataset validation platform may be further configured to update the cryptographically signed record based on requests to access the datasets, transformations that are based on the datasets, or modifications to the availability requirement of the datasets, such as a modification to a privacy limitation or other availability requirement indicating a criteria for usage of the requested dataset.

Abstract: Distributed firewalls in a network are disclosed. Example firewall controllers disclosed herein are to instruct a first network node of a software-defined network to implement a first firewall instance of a distributed firewall, the first network node to implement the first firewall instance with a first virtual machine. Disclosed example firewall controllers are also to configure a second network node of the software-defined network to route network traffic through the first firewall instance and, after at least some of the network traffic is dropped by the first firewall instance, instruct the second network node to implement a second firewall instance of the distributed firewall, the second network node to implement the second firewall instance with a second virtual machine.

Abstract: Aspects of the subject disclosure may include, for example, connecting a plurality of subscriber networks via switched, shared, or dedicated Ethernet connections using a wired network, where the plurality of subscriber networks includes a first network and a second network, providing a provisioning and activation application that enables a user to selectively activate or deactivate a connection to one or more of the plurality of subscriber networks or a cloud service provider, as a first orderable item, and select a plurality of network configuration attributes, as a second orderable item, and based on a request for the connection to the one or more of the plurality of subscriber networks or the cloud service provider, activating the connection that follows the selected plurality of network configuration attributes. Other embodiments are disclosed.