Abstract: Disclosed are methods, systems, and apparatus for remote reprogramming of an automotive controller and determining and reporting vehicle carbon emissions using a local device, a client device, a technician device and a system server. The local device is connected to the automotive controller and is wirelessly connected to the client device. The client device is connected to the technician device through a system server. Programming configurations, including firmware, settings, and parameter updates, are selected from a technician device, sent to the system server, and uploaded to local device using J2534 communication protocol. The client device receives the fuel consumption data from the local device and sends the data to the system server. The system server determines the carbon emissions based on the fuel consumption and reports the emissions to a third-party to certify carbon offset.

Abstract: A system and method are provided to facilitate securing windows discretionary access control. During operation, the system determines a Windows domain model including: user-specified desired effective permissions as capability assignments of principals on resources, wherein a respective capability assignment comprises a permission of a respective principal to a respective resource and wherein a respective principal comprises a user or a group of users; and user-specified policies and rules for relationships between principals, groups, and resources. The system creates a domain graph and an access control graph based on the Windows domain model. The domain graph maps paths between nodes representing users, groups, and resources based on the policies and rules. The access control graph allows for calculation of actual permissions of principals on resources based on the desired effective permissions.

Abstract: To reduce a processing load at a reception side in a case where a plurality kinds of audio data items are transmitted. A container in a predetermined format having a predetermined number of audio streams including coded data items of a plurality of groups is transmitted. For example, the coded data items of the plurality of groups include either or both of channel coded data items and object coded data items. Attribute information indicating respective attributes of the coded data items of the plurality of groups is inserted into a layer of the container and/or a layer of an audio stream. For example, stream correspondence relation information indicating which audio stream includes each of the coded data items of the plurality of groups is further inserted.

Abstract: Methods and systems for managing storage of data are disclosed. To manage data storage, one or more access management frameworks may be used. One of the access management frameworks may be a storage array side framework that limits access to data based on user reservations. The user reservations may indicate the data subject to access limitation, the entity that requested the user reservation, and the extent of the access limitation. The user reservations may be used by the storage array to process receive input-output.

Abstract: A request to resolve a name of a domain of an identifier of web content is received. It is automatically determined that the name of the domain is to be resolved using a blockchain. A request is sent to a smart contract of the blockchain to obtain one or more resolution records for the domain. The one or more resolution records of the domain are received. The received one or more resolution records are utilized to resolve the name of the domain.

Abstract: Provided is a data recording apparatus including a key exchange unit for exchanging a first encryption key with a system in response to authentication by the system, a data collection unit for collecting measurement data obtained by measuring a physical quantity associated with a measurement target, a data recording unit for recording the measurement data, and a data transmission unit for transmitting the measurement data encrypted using the first encryption key to the system. In addition, provided is a system including a key management unit for exchanging a first encryption key with a data recording apparatus in response to authentication of the data recording apparatus, a data obtaining unit for obtaining measurement data obtained by measuring a physical quantity associated with the measurement target encrypted by the data recording apparatus using the first encryption key, and a data management unit for managing the measurement data using a distributed ledger technology.

Abstract: A system and method for generating a security graph utilizing a unified model based on multiple cloud environments are provided. The method includes receiving data from a first cloud environment pertaining to: resources, principals, and permissions; generating for each resource a corresponding resource node in the security graph, the corresponding resource node including an identifier of the resource, wherein the resource is a cloud entity deployed in the first cloud environment; generating for each principal a corresponding principal node in the security graph, the corresponding principal node including an identifier of the principal, wherein the principal is a cloud entity in the first cloud environment that generates an operation request in the first cloud environment; and generating a connection between at least a principal node and at least a resource node in the security graph, in response to detecting a permission indicating that a principal can access a resource.

Abstract: An improved AR/VR operation includes receiving, by a server computing device, encrypted AR/VR user data and cleartext metadata associated with the encrypted AR/VR user data from a client computing device; getting server data based at least in part on cleartext metadata; encoding the server data; performing an AR/VR process on the encrypted AR/VR user data and the encoded server data to generate encrypted AR/VR results; and sending the encrypted AR/VR results to the client computing device.

Abstract: A set of Internet Protocol (IP) addresses is received wherein each IP address is associated with a corresponding set of features. For an IP address in the set, the IP address is evaluated based at least in part on a set of inclusion criteria. For the IP address in the set, a likelihood that the IP address is residential or non-residential is generated based at least in part on the corresponding set of features and the evaluation of the IP address based at least in part on the set of inclusion criteria. For the IP address in the set, a training sample is generated that includes the IP address, at least some of the corresponding set of features, and a label. A labeled training data set is output that includes the training sample, where an IP address classifier is trained using the labeled training data set.

Abstract: The present disclosure discloses a sensing function control node for an Internet of Things (IoT), and relates to technical field of electrical communication. The node includes an accessing module for sensors and actuators, a data format analyzing and integrating module and a transmission accessing and connecting module. Software-defined optical access technologies are utilized to control original sensing data in the IoT to access the accessing module for the sensors and the actuators. Status information of modules in the node is sensed in real time through a software-defined unified control plane, to adjust upload rates of modules and control the connections between sensing function control node and EAN. The original sensing data in IoT are transmitted to the transmission accessing and connecting module after being pre-processed. The pre-processed data are transmitted to EAN through upload channels between the sensing function control node and EAN established.

Abstract: This disclosure relates to techniques for providing paging for a remote wireless device to a relay wireless device in a wireless communication system. A cellular base station may receive an indication from a relay wireless device of a relay link between the relay wireless device and a remote wireless device. The cellular base station may provide paging information for the remote wireless device to the relay wireless device based at least in part on the indication of the relay link between the relay wireless device and the remote wireless device.

Abstract: A lightweight and extensible information model for machine-to-machine systems is disclosed. A service layer information management architecture uses three categories of atomic objects, subjects, actions, and descriptions. Information for use within the model is built using the atomic information objects. Application programming interfaces are used to perform operations and information processing by different nodes. Common service functions are used in the model as instances of a generic common service information model.

Abstract: A device implementing a system for initiating a business messaging session includes at least one processors configured to receive a selection of a telephone number on a device. The at least one processor is further configured to transmit an encoded identifier corresponding to the telephone number to a server. The at least one processor is further configured to determine whether the telephone number is registered for a business messaging system based at least in part on a response received from the server. The at least one processor is further configured to provide a first display element for initiating communication with the telephone number via the business messaging system when the telephone number is registered for the business messaging system, otherwise providing a second display element for initiating communication with the telephone number via a user messaging system.

Abstract: A system for cross cloud workload identity virtualization including a program having instructions to route a first network call from a workload in a first cloud computing environment addressed to a first cloud computing environment instance metadata service (IMS) having destination data with an IP address of 169.254.169.254 to a universal IMS (UIMS) different from the first cloud computing environment IMS, route a second network call from the workload addressed to a destination other than the first cloud computing environment IMS to the destination indicated by the second network call, respond to the first network call with credentials valid for accessing a cloud service provided in a second cloud computing environment. The workload can access the cloud service from the first cloud computing environment, and access the cloud service from a third cloud computing environment different from the first cloud computing environment.

Abstract: An example system includes a processor to partition an arithmetic circuit representing a homomorphically encrypted (HE) code into a number of execution blocks. The processor can generate, for each of the number of execution blocks, manifests describing access patterns for a number of different machine environments. The processor can then dynamically execute the HE code by selecting successive blocks to execute based on an access pattern calculated for the execution block corresponding to a detected current machine environment.

Abstract: Users can be logged in to modern workspaces using different cloud identity providers and single sign-on. A login manager can be provided on a user computing device to obtain a user's login credentials via a custom login screen. The login manager can then inject the login credentials into an authentication interface of a cloud identity provider to authenticate the user for purposes of logging in to the user computing device. The login manager can leverage this authentication to perform single sign-on for all resources of a modern workspace such that the user can be logged in to the modern workspace via any cloud identity provider.

Abstract: An anomalous behavior detector has been designed to detect novel behavioral changes of devices based on network traffic data that likely correlate to anomalous behaviors. The anomalous behavior detector uses the local outlier factor (LOF) algorithm with novelty detection. After initial semi-supervised training with a single class training dataset representing stable device behaviors, the obtained model continues learning frontiers that delimit subspaces of inlier observations with live network traffic data. Instead of traffic variables being used as features, the features that form feature vectors are similarities of network traffic variable values across time intervals. A feature vector for the anomalous behavior detector represents stability or similarity of network traffic variables that have been chosen as device identifiers and behavioral indicators.

Abstract: A security architecture system includes a plurality of subsystems. The plurality of subsystems include a secure element subsystem. A first subsystem of the plurality of subsystems includes a trusted computing platform that has a trusted platform control module. The first subsystem is configured to, for a running object in one or more subsystems other than the first subsystem in the plurality of subsystems, use the trusted platform control module to perform security measurement on the running object based on a measurement strategy and a measurement benchmark value to obtain a measurement result. The measurement result is used to control a running state of the running object in one or more subsystems other than the first subsystem in the plurality of subsystems.

Abstract: An electronic device includes at least one processor and at least one memory storing instructions executable by the at least one processor. The at least one processor operates to obtain a credential value string indicating a sequence of credential values entered by a user through a user interface as a part of a credential key. The at least one processor operates to obtain an input order string indicating an order in which individual ones of the sequence of credential values were separately entered by the user through the user interface as another part of the credential key. The at least one processor operates to validate the credential key based on the credential value string and based on the input order string.

Abstract: There is provided a method performed by a user plane core network function for a wireless communication network. The user plane core network function is configured with a range of Internet Protocol addresses for allocation to user equipments. The method comprises: transmitting a message to a control plane core network function, the message comprising an indication of a usage level of the range of IP addresses.