Abstract: Co-browsing allows a providing party to access visual content on a computing device for sharing with one or more other parties. The parties receiving the shared image may have dissimilar security authorizations. Accordingly, systems and methods are provided that enable shared content, such as a document, web page viewed in a browser, etc., to automatically be redacted to block those parties who are not authorized to view the content. For example, a neural network may be utilized to scan the document and provide specific redacted copies to the parties so each can view the image of the content with unauthorized content redacted.

Abstract: A method and apparatus for centralized policy programming and distributive policy enforcement is described. A method comprises centrally maintaining a plurality of policy definitions for one or more subscribers, generating policy configurations using the plurality of policy definitions, each of the policy configurations being specific to one of the plurality of policy definitions, and disseminating the policy configurations to the appropriate ones of the subscribers' networks.

Abstract: Disclosed are various examples for facilitating enrollment of a client device into more than one management framework. A client device can be enrolled with a management service as a fully managed device. The client device can also be enrolled with the management service as a personal or bring-your-own-device (BYOD), which causes a workspace to be created on the device that is segregated from the rest of the client device. Both enrollments can be managed by a remotely executed management service.

Abstract: Systems, methods, and computer-readable media for offloading session management processing into a forwarding plane. In some examples, a subscriber is coupled to a network endpoint through a session manager during a network session of the subscriber in a network environment. A session manager offloading system of the session manager can be maintained in a vector packet processing system in a forwarding plane of the network environment. The session manager offloading system can be configured to offload processing from the session manager into the forwarding plane. Further, at least a portion of subscriber traffic in a stream between the subscriber and the network endpoint through the session manager can be intercepted. Subsequently, the at least the portion of the subscribed traffic that is intercepted can be processed at the session manager offloading system as part of offloading the processing from the session manager into the forwarding plane.

Abstract: A video player for playing a video stream that receives a master playlist identifying at least one variant playlist identifying a video file encoded as a series of video frames that when decoded provide the video stream. The video player based upon a configuration tag in the master playlist selectively determining whether the video file is to be processed in a trusted execution environment. The trusted execution environment of the video player selectively includes at least one of (i) hack one, only hack one; (ii) output and link protection; (iii) hardware root of trust; and (iv) forensic watermarking, and decrypts and/or decodes the video stream in such an environment.

Abstract: Generally discussed herein are devices, systems, and methods for identifying a purpose of a communication. A method can include receiving a communication including communication content and communication context, the communication content a first portion of the communication and the communication context a second, different portion of the communication. The method can include identifying, by a machine learning (ML) model, based on the communication content and the communication context, one or more purposes associated with the communication, the one or more purposes indicating respective actions to be performed by a user that generated or received the communication. The method can include providing data indicating the purpose of the first portion of the content.

Abstract: Systems and methods for managing content delivery functionalities based on machine learning models are provided. In one aspect, content requests are routed in accordance with clusters of historical content requests to optimize cache performance. In another aspect, content delivery strategies for responding to content requests are determined based on a model trained on data related to historical content requests. The model may also be used to determine above-the-fold configurations for rendering responses to content requests. In some embodiments, portions of the model can be executed on client computing devices.

Abstract: Techniques for automatically configuring necessary parameters of a device to be coupled to a network with minimum human intervention are disclosed. In one embodiment, a wired and/or wireless Ad-hoc network is established to facilitate communications among a group of devices. When a new device is added to the network, a rudimentary communication path is initially established between one of the devices in the network and the new device such that necessary parameters (e.g., SSID, WEP security, channel frequency) can be exchanged for the new device to function properly in the network. To ensure the parameters are exchanged in a secure fashion, an additional public security procedure can be used between the two devices.

Abstract: In one embodiment, a request to join an electronic chat room is received from a requester. A selection of an access control level for the requester is received via a user interface in order to grant the requester access to the electronic chat room according to a condition for granting access. The user interface is used to assign a selected access control level to the requester, thereupon granting access to the requester. The requester's access to content available in the electronic chat room being limited based on the selected access control level. Related methods, apparatus, and systems are also described.

Abstract: Network architectures interface with several real-time streams that control network operation. The network can analyze stream data by storing incoming raw stream data, processing the data, and controlling network operations based thereon. Specific packets, bits, flags, fields, or messages may be targeted, including HL7 ADTs. Data is queued for processing in a FIFO manner to avoid timeline mistakes. The network sets a configuration value based on the data analyzed in this time ordering, and a relational database can be updated in real-time with these values as stream data is incoming. Separate clean-up functions separately manage the database by adjusting the values as they become old. Timeline information is generated and selectively broadcast based on the operations value, potentially with additional information from the targeted data. The network selectively provides this information to users interfaces and displays as dictated by the operating value and information calculated therefrom.

Abstract: A decision engine includes: a genetic algorithm framework including a knowledge base of standard configurations, a candidate selector generator and a selector to select a candidate configuration from a plurality of preferred standard configurations in response to the candidate selector generator; a parallelized reasoning framework including an attack surface reasoning algorithm module to compute the security and cost tradeoffs of an attack surface associated with each candidate configuration; and a user interface framework including a web service engine where users can interact and provide feedback on direction of an evolution used in a genetic algorithm search for evolving defenses.

Abstract: Methods, devices and program products are provided to track communications event (CE) identifiers associated with the communications events for a device. The method determines whether communications events are associated with a common CE identifier, and performs a contact update utilizing content from at least one communications event associated with the common CE identifier to update a contact. The device comprises a processor, a user interface, and a local storage medium. The device determines whether communications events are associated with a common CE identifier and performs a contact update utilizing content from at least one of the communications events associated with the common CE identifier to update the contact. The computer program product comprises a non-signal computer readable storage medium comprising computer executable code to track CE identifiers associated with the communications events for a device and a contact update.

Abstract: A method performed at a server system includes providing to a device a media content item included in a listening session. The method includes receiving from the device characteristics of the listening session corresponding to a first time and determining, based on the characteristics, a default decision as to whether to provide a media content clip after the media item. The method includes receiving characteristics of the listening session corresponding to a second time and initiating a determination of a first decision as to whether to provide the media content clip after the media item. In accordance with the first decision being reached within a latency period, the media content clip is provided in accordance with the first decision. In accordance with the latency period being lapsed without the first decision being reached, the media content clip is provided in accordance with the default decision.

Abstract: A message processing method includes: acquiring an unread message in the communication software; identifying contents of the unread message to obtain summary information of the unread message; and outputting the summary information.

Abstract: Techniques for automatically configuring necessary parameters of a device to be coupled to a network with minimum human intervention are disclosed. In one embodiment, a wired and/or wireless Ad-hoc network is established to facilitate communications among a group of devices. When a new device is added to the network, a rudimentary communication path is initially established between one of the devices in the network and the new device such that necessary parameters (e.g., SSID, WEP security, channel frequency) can be exchanged for the new device to function properly in the network. To ensure the parameters are exchanged in a secure fashion, an additional public security procedure can be used between the two devices.

Abstract: In one aspect, a playback device is configured to (i) receive a first stream of audio data representing audio content from a computing system, (ii) detect an indication that a source of the audio content is to switch from the computing system to a user device; (iii) after detecting the indication, establish a point-to-point wireless link with the user device over which to receive a second stream of audio data; (iv) receive the second stream of audio data representing the audio content; (v) determine a future time at which to transition from playing back the audio content using the first stream of audio data to playing back the audio content using the second stream of audio data; and (vi) at the future time, transition from playing back the audio content using the first stream of audio data to playing back the audio content using the second stream of audio data.

Abstract: In association with a virtual area, a first network connection is established with a first network node present in the virtual area and a second network connection is established with a second network node present in the virtual area. Based on stream routing instructions, a stream router is created between the first network node and the second network node. The stream router includes a directed graph of processing elements operable to receive network data, process the received network data, and output the processed network data. On the first network connection, an input data stream derived from output data generated by the first network node is received in association with the virtual area. The input data stream is processed through the stream router to produce an output data stream. On the second network connection, the output data stream is sent to the second network node.

Abstract: Methods and systems are described for a media guidance application that limits the incentive for authorized users to share content with unauthorized users, while still allowing users to access content virtually anywhere. Specifically, the media guidance application allows an authorized user to receive only a portion of a media asset that he or she is authorized to access on a different device, after a designated time period, and/or when the remaining portion of the media asset is inaccessible.

Abstract: The technology disclosed relates to causing delivery of Segmentation as a Service™ (SegAAS) instrumentation code and segment processing code to run on a user's machine and generate data that tracks a user session on a website, receiving and processing data from the user session and invoking callback function code, configured to run on the user's machine, that performs actions specified by the website's operator, as triggered by delivery of segment codes. Also included is receiving readings from the user session, analyzing the data to track progress of the session, and generating segment codes that characterize results of the analysis in an actionable way specified by rules provided by the website operator. Further included are repeatedly causing delivery of updated lists of the segment codes based on the analyzing of the progress and timing delivery of unsolicited actions directed to retaining the visitor and extending the user session with the website.

Abstract: A system for broadcast data recovery of data stream transmission, the system having a broadcast distribution network transferring the data stream from a sender to a plurality of receivers, the system having: a transmission center receiving the data stream from the sender and sending stamped RTP packets in an IP reference RTP stream to the IP distribution network and sending stamped RTP packets as an RTP broadcast data stream to a broadcast network, the broadcast network including: a satellite and an RF link; at least one registered/assigned recovery server connected to the IP distribution network and assigned to the plurality of receivers, the at least one recovery server receiving a protected IP stream from the transmission center; the plurality of receivers sending a recovery request to the at least one recovery server when the respective receiver detects an erroneous/missing packet; and wherein the at least one recovery server then sends a recovery data stream to the at least one of the plurality of receiv