Abstract: Embodiments are directed to a multi-tenant cloud system. Embodiments receive a request for an authentication action for a user and create an authenticate target action. Embodiments register a cache listener to listen for a target action response that is responsive to the authenticate target action and initiate the authentication action for the user at an on-premise active directory (“AD”) via a bridge. Embodiments wait for a cache callback and, at the cache callback, receive a target action response comprising a result of the authentication action.

Abstract: An instantiated application includes both a runtime instantiation of an application image, and an administrative service operable to install in the instantiated application at least one security module during runtime of the instantiated application in a container. Prior to runtime, a design time agent can access the application image in a repository, examine the application image, and based on the examining, adding at least one security module to the application image prior to instantiation. During runtime, a runtime agent can query parameters of the container, such as static and dynamic variables available on the machine on which the container is running. The runtime agent processes these parameters in conjunction with predefined rules to determine an action such as starting, stopping, adding, and/or changing the security module, such as the method of packet inspection.

Abstract: A first segment of a probe media item that is transmitted as a first live-stream of an event is received. After a first delay period, whether the first segment of the probe media item is similar to a first segment of a first reference media item that is transmitted as a second live-stream of the event and received subsequent to the probe media item is determined. Responsive to determining, after the first delay period, that the first segment is similar to the first segment of the first reference media item, a remedial action in association with the probe media item is performed.

Abstract: Technology for characterizing internet application performance is described. An example method may involve, analyzing client requests from a plurality of internet service providers, the client requests comprising requests to access media items and being associated with internet service provider identities; identifying a set of the client requests that are associated with a first internet service provider; determining for at least one client request of the set: a request time, a payload data quantity, and an elapsed time; calculating a transfer rate comprising an application level throughput for the at least one client request, the transfer rate being based on the payload data quantity and the elapsed time; and calculating a performance measurement of the first and second internet service providers, the performance measurements being based on the transfer rate and on a portion of the set of client requests that have a transfer rate meeting a transfer threshold.

Abstract: Methods, systems, and apparatus for root cause analysis in a communication network. In one aspect, a method includes providing a quantum computer with data representing a topology of the communication network, the topology comprising a graph of vertices representing network devices and edges representing connections between network devices; receiving, from the quantum computer, data representing a first subset of network devices, wherein the first subset comprises a dominating set of vertices or a vertex cover for the graph; monitoring network devices in the first subset to generate alarm data representing triggered network device alarms; providing the alarm data to a quantum computer; receiving, from the quantum computer, data representing a second subset of network devices, wherein the second subset comprises a set cover for the alarm data and the network devices in the second subset comprise diagnosed sources of failures in the communication network.

Abstract: Systems and methods for capturing and distributing a live audio stream of a live event in real-time to a plurality of mobile computing devices are described. The system comprises at least one memory configured to store computer-executable instructions and processing device(s) coupled to the at least one memory and at least one audio input device configured to receive the live audio stream. Upon receipt of the live audio stream, the processing device(s) generate, in real-time, a plurality of discrete audio data packets from the live audio stream, and transmit that respective discrete audio data packet over a first network for receipt by the mobile computing devices. In respect of each one of the discrete audio data packets, a copy of the discrete audio data packet is transmitted for receipt by each one of the mobile computing devices prior to transmitting another one of the discrete audio data packets.

Abstract: A resource allocation method can be applied to a terminal, and include: determining an application currently running on the terminal and determining network resources required by the application; requesting and acquiring resources allocated by a network side according to the network resources required by the application. By applying to the network device according to the network resources required by the application, waste of resources and power consumption can be reduced.

Abstract: An embodiment detects, by a packet detection module on a first worker node, a first synchronization message (SYN) issued from a client pod on the first worker node and directed to a first server pod on a second worker node and generates a first SYN record in a connection table stored on the first worker node. The embodiment detects, by the packet detection module, a second SYN issued from the client pod and directed to the first server pod and generates a server pod status record stored in memory on the first worker node indicative of the first server pod having an unhealthy status. The embodiment identifies an available server pod having a healthy status and generates a detour routing rule in a routing table on the first worker node indicative of a revised connection in which the identified available server pod replaces the first server pod.

Abstract: Systems and methods for call direction detection on Session Initiation Protocol (SIP) Internet Protocol (IP) Multimedia Subsystem (IMS) include monitoring SIP register messages, such as “401 UNAUTHORIZED” messages inside the IMS core to detect and log the IP addresses of the Proxy-Call Session Control Function (P-CSCF). The systems and methods include monitoring SIP registration messages; determining and storing addresses of P-CSCFs based on the monitoring of the SIP registration messages, wherein P-CSCF addresses are determined from any SIP registration messages having cipher or encryption keys therein; monitoring SIP INVITE messages; and, for a specific call associated with a SIP INVITE message, determining a direction of the specific call based on a comparison of address in the SIP INVITE messages with the stored addresses of the P-CSCFs.

Abstract: A chatbot server that provides an instant messaging service using a virtual chatbot linked to multiple real chatbots includes a receiving unit that receives, from a messenger server, a question message relevant to a service selected from multiple services by a user device and service account information corresponding to the selected service; a derivation unit that derives an answer to the question message using the virtual chatbot corresponding to the service account information; and a transmission unit that transmits the answer to the messenger server, wherein the virtual chatbot transfers the question message to a selected real chatbot of the multiple real chatbots linked to the virtual chatbot, and the selected real chatbot derives the answer to the question message and transfers the answer to the virtual chatbot.

Abstract: The present invention relates to a method for controlling access to a user service (Svc1) intended to control a home-automation installation (Su) comprising at least one home-automation device (D) and at least one central control unit (U), the method being implemented by a managing unit (Sv) and comprising the following steps: a step (Escv118) of receiving from a maintenance user (Usr2) a request to access the user service (Svc1) as a final user (Usr1), based on an identifier of the final user (Usr1ID) and an authentication token (Tk1D); a step (ESvc119) of verifying the validity of the authentication token (Tk1D) via a repository (SvAuth) for authenticating token validity, in order to authenticate as a final user (Usr1) with a view to access to the user service (Svc1); and a step (ESvc122) of authorising access of the maintenance user (Usr2) to the user service (Svc1) as final user (Usr1) if the identification token (Tk1D) is observed to be valid.

Abstract: In accordance with some embodiments, systems, apparatus, interfaces, methods, and articles of manufacture are provided for providing information about individuals, such as capabilities in the context of meetings. In various embodiments, data is captured about an individual, such as via feedback from others. Based on the data, individuals may be identified and invited to meetings.

Abstract: A method of delivering content to a user equipment (UE). The method comprises collecting radio operation data by a monitor application executing on a communication processor of the UE; sending the radio operation data by the monitor application to a data analysis application executing on a computer system; analyzing the data by the data analysis application to determine a device technology of the UE, a history of high throughput radio usage of the UE, a history of medium throughput radio usage of the UE, a history of low throughput radio usage, a history of communication latency, and a history of cell sites the UE attached to; and providing a report on the UE including the device technology of the UE and the history of radio usage of the UE by the computer system to a third party for use in delivering content in a format selected based on the report.

Abstract: Apparatuses, methods, and systems are disclosed for establishing a connection with a dual registered device. One method includes receiving a first request to establish an internet protocol multimedia subsystem session with a first device, wherein the first device is dual registered to: a first network access supporting 5G core network connectivity; and a second network access supporting evolved packet core network connectivity and circuit switched network connectivity, wherein the first device has connectivity to an internet protocol multimedia subsystem via either the first network access or the second network access. The method includes determining first information corresponding to a network access connectivity selected from the first network access and the second network access through which the first device has internet protocol connectivity with the internet protocol multimedia subsystem. The method includes transmitting a second request to a first network function to retrieve second information.

Abstract: Techniques are described that enable users to configure the mirroring of network traffic sent to or received by computing resources associated with a virtual network of computing resources at a service provider network. The mirrored network traffic can be used for many different purposes including, for example, network traffic content inspection, forensic and threat analysis, network troubleshooting, data loss prevention, and the like. Users can configure such network traffic mirroring without the need to manually install and manage network capture agents or other such processes on each computing resource for which network traffic mirroring is desired. Users can cause mirrored network traffic to be stored at a storage service in the form of packet capture (or “pcap”) files, which can be used by any number of available out-of-band security and monitoring appliances including other user-specific monitoring tools and/or other services of the service provider network.

Abstract: The disclosure is directed to a method and system including a first node that stores a first multipoint mesh VPN database including a plurality of underlay addresses in an underlay network for a plurality of nodes, respectively, and a plurality of VPN addresses in a multipoint mesh VPN for the plurality of nodes, respectively. The first node also receives a second multipoint mesh VPN database from a second node, the second multipoint mesh VPN database including underlay and VPN addresses for the third node. The first node further receives a third multipoint mesh VPN database from the third node, the third multipoint mesh VPN database including underlay and VPN addresses for the second node. The first node additionally compares the databases to determine if underlay addresses and VPN addresses are missing from the first multipoint mesh VPN database.

Abstract: A method, a system and a storage medium for network failure protection belonging to the field of network technologies. The method comprises: allocating, for each forwarding link of the ring topology, a protection ring bit position opposite to the direction of a working path; newly adding BRFT for storing adjacent forwarding table entries related to forwarding along the direction of the protection ring bit position; and when a BIER message is forwarded along the working path, if a BFR detects that the downstream adjacency fails, searching for entry content of the BTAFT, finding the correlation between the link bit position of the fault forwarding link and the protection ring bit position, and forwarding, on the basis of entry content of the BRFT, the BIER message to the opposite end fault point of the opposite end along the direction of the protection ring bit position.

Abstract: An instantiated application includes both a runtime instantiation of an application image, and an administrative service operable to install in the instantiated application at least one security module during runtime of the instantiated application in a container. Prior to runtime, a design time agent can access the application image in a repository, examine the application image, and based on the examining, adding at least one security module to the application image prior to instantiation. During runtime, a runtime agent can query parameters of the container, such as static and dynamic variables available on the machine on which the container is running. The runtime agent processes these parameters in conjunction with predefined rules to determine an action such as starting, stopping, adding, and/or changing the security module, such as the method of packet inspection.

Abstract: A system is described herein. The system includes an agent and a transmitter. The agent is to a capture room specific data signals from peripheral devices within a conference room, operating system data signals, and application data signals, wherein the application data signals are obtained from a conferencing service application and wherein the agent is to package the room specific data signals, the operating system data signals, and the application data signals with system metadata into room health data. The transmitter is to transmit the room health data to a management cloud via a communications broker.

Abstract: A method of dynamic staging in a client device includes: receiving, at the client device, a staging profile identifier definition; generating a staging profile identifier corresponding to one of a plurality of staging data files stored at a server, by: detecting a dynamic field in the staging profile identifier definition; retrieving a local parameter from a memory of the client device according to the dynamic field; and replacing the dynamic field with the local parameter to generate the staging profile identifier; and retrieving the one of the plurality of staging data files by transmitting a request to the server including the staging profile identifier.