Abstract: When virtual printers are collectively registered with a plurality of print services through one operation, a virtual printer may be registered also with print services not utilized. In the present invention, by acquiring information regarding print services, provided by a plurality of print services, and information regarding virtual printers registered with the print services, it is determined, on a basis of the information regarding the virtual printers and a printer ID of the local printer, whether or not the local printer has been registered as a virtual printer with the print services. Information regarding the print service with which the local printer is determined not to have been registered is displayed, and when instructed by a user to register the local printer with the displayed print service as a virtual printer, the local printer is registered as the virtual printer with the instructed print service.

Abstract: A messaging meta broker gateway for publish-subscribe messaging environments can provide connectivity, message routing, and subscription management between large numbers of clients and large numbers of brokers. The messaging meta broker gateway can provide access to large numbers of brokers to a client through a single connection. To a broker, the messaging meta broker gateway provides extremely wide fan-in and fan-out to gateway clients. To a service provider, the messaging meta broker gateway is a single system providing easy scaling with lightweight replication of instances, and shared, private, or virtual messaging environments supporting multiple customers and applications. The meta broker gateway can also connect gateway clients with other clients of the brokers, and also with archiving facilities. Protocol translation, security, and statistics logging are supported. The messaging meta broker gateway is suitable for cloud-based Internet-of-Things environments.

Abstract: A server in a content delivery (CD) network that distributes content on behalf of one or more subscribers. Responsive to a request from a client for a particular resource, if the particular resource is already in a cache on the server, serving the particular to the client from the cache; otherwise if the particular resource is not already cached on the server, when a count value exceeds a first threshold value, obtaining, caching, and serving the particular resource. When the count value is less than a second threshold value, obtaining and serving the particular resource. When the count value is: (i) not less than the second threshold value, and (ii) not greater than the first threshold value, then obtaining the particular resource and selectively caching the particular resource; and serving the particular resource to the client.

Abstract: Embodiments of a portable data storage device and a method of protecting data stored in the portable data storage device are provided. In one embodiment, the portable data storage device includes a device identification unique to the portable data storage device, a rights object containing information indicative of access rights and a verification identification, a memory to store the device identification and the verification identification, and controller logic. The memory is partitioned into a plurality of areas of memory, including: a first area as a protection area to store an instruction code, a second area as a partition table area to store a partition table, and a third area as a file area to store data files. In response to a request from a client external to the portable data storage device, the controller logic compares the verification identification with the device identification to allow the client to access of the data files if the verification identification matches the device identification.

Abstract: Methods, apparatus and systems are disclosed for managing streamed communication (such as video, audio, or audio-visual communication) between client devices and remote devices via a digital data communication network in situations where the data communication network comprises one or more routers operable to receive streamed data from one or more client devices and/or from one or more other routers, and to forward such streamed data to one or more remote devices and/or to one or more other routers such as to enable the client device and potentially-varying subsets of the one or more remote devices to participate in a communication session.

Abstract: A method and an apparatus reduce overhead for data integrity checks in a wireless communication system. When receiving a message, a first Integrity Check Value (ICV) is compared with a second ICV to detect an integrity error in the message. When the integrity error exists in the message, a frequency of the integrity error is counted. When the frequency of the integrity error is more than a threshold, a key update procedure is performed. Therefore, the overhead of the information for integrity check may be reduced in the wireless communication system.

Abstract: Techniques, described herein, may enable a software defined network (SDN) to determine application program interfaces (APIs) for providing network services. For instance, when a customer submits a request to access media content (e.g., images, music, videos, etc.), the SDN may determine the APIs to enable the network service to be provided to the user with little or no operator involvement. In some implementations, the APIs may be derived by the network dynamically. In some implementations, the APIs may be derived from API records that are stored by the SDN. Additionally, when new APIs are derived for a network service, the APIs may be recorded in case the same request for network services is later received (e.g., from another customer) in which case the record may be promptly used to determine the appropriate APIs for the requested network service.

Abstract: Method and systems using stateful encryption for non-bypassable FPGA configuration including receiving, at an FPGA, FPGA-configuration data comprising a cryptographic state to initialize a cryptographic state of the FPGA, and decrypting, at the FPGA, the FPGA-configuration data, wherein decrypting the FPGA-configuration data yields at least a second cryptographic state and decrypted FPGA-configuration data. Embodiments can include receiving, at the FPGA, a challenge message, processing, at the FPGA, the challenge message to yield at least a third cryptographic state and a response, and transmitting the response from the FPGA.

Abstract: Techniques for managing message transmission in a large networked computer system that includes multiple individual networked computing systems are disclosed. Message passing among the computing systems include a sending computing device transmitting a message to a receiver computing device and a receiver computing device consuming that message. A build-up of data stored in a buffer at the receiver can reduce performance. In order to reduce the potential performance degradation associated with large amounts of “waiting” data in the buffer, a sending computer system first determines whether the receiver computer system is ready to receive a message and does not transmit the message if the receiver computer system is not ready. To determine whether the receiver computer system is ready to receive a message, the receiver computer system, at the request of the sending computer system, checks a counting filter that stores indications of whether particular messages are ready.

Abstract: A content delivery network has at least a first tier of servers. A content delivery method includes, at a first server in the first tier of servers, obtaining a request from a client for a resource. If the resource is available at the first server or at a peer of the first server, then the resource is served to the client from the first server. Otherwise, it is determined whether the resource is popular, and if the resource is determined to be popular, then the first server obtains the resource and the first server serves the resource to the client. If the resource is determined not to be popular, the server contacts a second server to obtain the resource, not in the first tier of servers, and the second server provides the resource to the first server. The first server is instructed not to cache the unpopular content.

Abstract: A controller node in a network implementing software defined networking (SDN) proactively detects network overload conditions in a target node and subsequently prevents the conditions from developing by launching a new virtual network node. The detection and prevention are based on the determination of a probability of failure of the target node as a weighted function of information from the target node and probabilities of failure of related nodes.

Abstract: Systems and methods to rotate security assets used for secure communication are described. The system retrieves security assets from a security asset repository, the security assets including a first version of the certificate and a second version of the certificate. Further, the system receives, over a network, a third certificate, at a client machine, the third certificate being received from the first remote server machine of the plurality of remote server machines. Further, the system identifies, at the client machine, whether a first remote server machine associated with the first subject name is trusted by identifying whether the third certificate matches any one of the first version of the certificate and the second version of the certificate. Finally, the system establishes a secure communication session with the first remote server machine based on identifying that the first remote server is trusted.

Abstract: A method comprising: A. forming a consortium blockchain network using domain network nodes and selecting committee members from top-level domain nodes; B. the committee member who received most votes packs the genesis block and generates a random number; C. the housekeeper having the same number as the random number packs the current block and generates a random number for selecting a next housekeeper to pack the next block, each block is approved by more than half of the committee members; D. during the duty cycle, each housekeeper takes turns packing blocks and generating random numbers and the process is repeated. If a block is not approved, the housekeeper with the next number is requested to repack the block; and E. the last random number generated by a housekeeper before the duty cycle ends is used to select the housekeeper to pack the first block of the next duty cycle.

Abstract: In a transient storage device (TSD) with multiple authentication silos, a host computing device connected to the TSD is configured by the TSD to discover and act upon various types of authentication information in the silos. One or more logical combinations of authentication silos are switched to the authenticated state to grant access to an associated storage area. A particular ordering of authentication silos may be required to achieve a valid combination of authenticated silos. Ordering may be suggested by configuration information in the TSD. Ordering may also be based upon whether or not user input is required for authenticating a given authentication silo, the environment of use of the TSD, or a hierarchy from most trusted to least trusted authentication silo. With this information, the host proceeds with the most efficient authentication sequence leading to a grant of access to the storage area.

Abstract: A system comprises a first computing device including a processor programmed to define a plurality of download slots during a download session, each of the download slots being a predetermined period of time. The processor further selects download slots from the plurality of download slots during which a first amount of data in the download buffer remained greater than or equal to a first predetermined threshold. For each of the selected download slots, the processor determines a first download throughput rate. The processor calculates a session download throughput rate based on the first download throughput rates, and reports the session download throughput rates to a second computing device.

Abstract: A set of asset signatures can be analyzed. Each asset signature can be associated with an asset. Derelict assets can be discovered based on the asset signatures. The asset can represent a fundamental structural unit of an information technology (IT) environment. A multi-stage screening process can be performed to discover derelict assets. In a first stage, assets having a normal state are able to be changed to a suspect state based on results of analyzing the corresponding asset signature. In a second stage, assets having a suspect state are able to be selectively changed in state to a normal state or to a derelict state. An asset management system record can be maintained for each of the set of assets. Each record of the asset management system can be a configuration item (CI), which indicates whether each of the set of assets is in a normal state, a suspect state, or a derelict state. The asset management system can periodically reclaim resources consumed by derelict assets.

Abstract: Techniques and technologies for mapping user identifiers between different device ecosystems are described. In at least some embodiments, a system includes a processing component, a memory, and a mapping engine configured to map a first identifier associated with a user with a second identifier, at least one of the first or second identifiers being associated with a first device ecosystem; and map a third identifier associated with a second device ecosystem with at least one of the first identifier or the second identifier, the second device ecosystem different from the first device ecosystem, based at least partially on (i) a plurality of first co-location occurrences of the third identifier with the first identifier, and (ii) a plurality of second co-location occurrences of the third identifier with the second identifier. The mapping engine may provide an indication of an association of the third identifier with the user.

Abstract: A content delivery network has at least a first tier of servers. A content delivery method includes, at a first server in the first tier of servers, obtaining a request from a client for a resource. If the resource is available at the first server or at a peer of the first server, then the resource is served to the client from the first server. Otherwise, it is determined whether the resource is popular, and if the resource is determined to be popular, then the first server obtains the resource and the first server serves the resource to the client. If the resource is determined not to be popular, the server contacts a second server to obtain the resource, not in the first tier of servers, and the second server provides the resource to the first server. The first server is instructed not to cache the unpopular content.

Abstract: Embodiments of the present invention provide a method, system and computer program product for supporting weak password authentication in a multi-user application environment. In an embodiment of the invention, a method for supporting weak password authentication in a multi-user application environment can be provided. The method can include acquiring log in data for a log in attempt by an end user amongst end users in a multi-user application. The method also can include messaging the log in data to others of the end users for subjective analysis by the others of the end users in detecting an unauthorized log in attempt.

Abstract: An entitlement system includes at least two computing devices and a management controller which all include a trusted platform module. Each of the trusted platform modules include a non-volatile storage for storing entitlement records. A management unit of each computing device includes configuration means to enable and disable computing resources of the respective computing device based on entitlement records. The management controller receives ensemble entitlement records in encrypted form and distributes sub-entitlement records in a second encrypted form to the management units of the computing devices.