Abstract: Methods, systems, and devices for network maintenance are described. A controller may receive an indication that the performance of a network device has decreased. The indication may include case identification data associated with the network device. The controller may request proactive network maintenance (PNM) data associated with the network device based on receiving the case identification data. The controller may transmit the PNM data to a machine learning (ML) engine. The ML engine may transmit, to the controller, an indication of a predetermined operation predicted to improve the performance of the network device. The controller may transmit the predetermined operation to a client device based on receiving the indication of the predetermined operation. The ML engine may receive feedback indicating whether an execution of the predetermined operation improved the performance of the network device. The ML engine may a training data set based on the feedback.

Abstract: Technologies are provided for providing a dashboard interface corresponding to one or more datacenter components for information originating from one or more proprietary applications. A selection of information corresponding to the one or more datacenter components is initially received. Upon receiving the selection, an application programming interface (API) call request is made for the information corresponding to the one or more datacenter components from the one or more proprietary applications. As the information corresponding to one or more datacenter components from the one or more proprietary applications is received, it is aggregated and provided within the dashboard interface.

Abstract: Disclosed herein are systems and methods for securing cloud meetings using containers. In one aspect, an exemplary system comprises, a device comprising a processor, an OS operable in a user mode and a kernel mode, and a kernel driver for performing operations while in kernel mode, the kernel driver having a kernel driver interceptor configured to: register for a process notification callback for user applications used for web-based meetings, monitor to determine when a process notification callback is received, receive a process notification callback and a command line in the callback, and analyze and transmit the command line to a service that secures the meeting, wherein the securing is performed by: configuring a container for executing the user application in an isolated virtual environment, transferring, to the container, all resources needed to run the user application, and executing the user application in the container.

Abstract: A machine transmits a message to one or more client devices indicated in a destination tag of the message to configure the one or more client devices to display the message. The machine determines that a client device of the one or more client devices is not connected to a local network that includes a computing node configured to create a message pipe. The machine creates the message pipe from a server to the client device upon the client device joining a video conference in response to determining that the client device is not connected to the local network. The message pipe transmits the message to the client device upon a latter of the client device joining the video conference or accessing the message at the server.

Abstract: A method for containerized workload scheduling can include monitoring network traffic between a first containerized workload deployed on a node in a virtual computing environment to determine affinities between the first containerized workload and other containerized workloads in the virtual computing environment. The method can further include scheduling, based, at least in part, on the determined affinities between the first containerized workload and the other containerized workloads, execution of a second containerized workload on the node on which the first containerized workload is deployed.

Abstract: Provided is a system for time synchronization between a server and an Internet-of-Things (IoT) device. The system may include a server configured to broadcast a time-point synchronization signal including absolute time point information; and an IoT device configured to receive the broadcast time-point synchronization signal and calculate absolute time point information by using the absolute time point information included in the time-point synchronization signal, computation time information according to an internal computation operation, and transmission time information required to receive the time-point synchronization signal.

Abstract: This disclosure relates to a method for vertical federated learning. In multiple participation nodes deployed in a multi-way tree topology, an upper-layer participation node corresponds to k lower-layer participation nodes. After the upper-layer participation node and the k lower-layer participation nodes exchange public keys with each other, the upper-layer participation node performs secure two-party joint computation with the lower-layer participation nodes with a first public key and second public keys as encryption parameters to obtain k two-party joint outputs of a federated model. Further, the upper-layer participation node aggregates the k two-party joint outputs to obtain a first joint model output corresponding to the federated model. As such, a multi-way tree topology deployment-based vertical federated learning architecture is provided, improving the equality of each participation node in a vertical federated learning process.

Abstract: Embodiments for bounded broadcast encryption key management in a peer-to-peer network are described. To realize bounded broadcast encryption key management, a second peer of the peer-to-peer network receives a first broadcast message from a first peer. The first broadcast message includes at least a public key associated with the first peer. The second peer then generates a key seed in response to receiving the first broadcast message, and creates a second message that includes the key seed encapsulated with the public key. The second peer then transmits the second message to the first peer, and in response to the transmission of the second message, receives a packet from the first peer. The packet includes data encrypted using a secret key derivable from the key seed and one or more portions of the second message.

Abstract: A method, a system, and a device for switching a service unit are provided. The method includes: determining a target service unit; and triggering the target service unit to publish first routing information according to configuration information of a first service unit for a first load balancing task, so as to replace the first service unit to provide a traffic distribution service for the first load balancing task. When the entire service network needs to perform disaster tolerance switching and capacity dispatching, the method provided in the embodiments of this application can effectively improve the real-time performance of traffic switching, and avoid the problem of relatively poor real-time performance of traffic switching caused by the influence of DNS cache in the existing technologies.

Abstract: System, apparatus, and methods are described for monitoring communication sessions and determining to merge two or more of the communication sessions sharing a common ground into a common communication session. A common communication channel may be determined for the common communication session. The two or more communication sessions may be merged to generate the common communication session using the common communication channel.

Abstract: A method for boundary based edge device compliance includes receiving a request to process data and identifying a cluster of edge devices to process the data located within a boundary area. The method includes applying compliance rules to the cluster of edge devices and instructing the cluster of edge devices to perform computations while adhering to the compliance rules associated with the boundary area. In response to determining that a first edge device from the cluster of edge devices is relocating outside of the boundary area, the method includes instructing the first edge device to transfer data to a second edge device from the cluster of edge devices prior to crossing the boundary to adhere to the compliance rules.

Abstract: According to one or more embodiments of the disclosure, a device in a network identifies a packet sent via the network towards an endpoint as being a control packet for the endpoint. The device extracts one or more control parameter values from the control packet. The device compares the one or more control parameter values to a policy associated with the endpoint. The device initiates a corrective measure, based on a determination that the one or more control parameter values violate the policy associated with the endpoint.

Abstract: Systems and methods for processing checks with machine-readable optical labels are disclosed. In one embodiment, a method for processing checks with machine-readable optical labels may include (1) receiving, by a presenting bank computer program executed by an electronic device, a check comprising a machine-readable optical label printed thereon, wherein the machine-readable optical label comprises a payor bank routing number that is encrypted with a private key for a payor bank; (2) reading, by the presenting bank computer program, the machine-readable optical label; (3) decrypting, by the presenting bank computer program, the machine-readable optical label using a public key corresponding to the private key; (4) identifying, by the presenting bank computer program, the payor bank routing number from the machine-readable optical label; and (5) routing, by the presenting bank computer program, the check to the payor bank associated with the payor bank routing number.

Abstract: A method and an apparatus for actively defending against backdoor attacks under an edge computing scenario.

Abstract: Digital media distribution frequency management systems and methods are disclosed for reducing digital media across digital networks and platforms. A set of impression identifiers (IDs) is determined for a digital media asset as displayed on graphic user interfaces (GUIs) of open web digital channel(s). An identifier of a user is determined as well as an impression count of the user based on the set of impression IDs and an open web ID of the user. An impression frequency message is pushed to an application programming interface (API) of an online based digital media content distribution platform. The impression frequency message may comprise the identifier of the user. The online based digital media content distribution platform is configured to suppress or allow the digital media asset to be displayed to the user on a GUI of the online based digital media content distribution platform based on the impression frequency message.

Abstract: Approaches presented herein relate to the management of secure secrets, such as digital certificates. When an operation is performed by a certificate authority (CA) with respect to a digital certificate, information for the operation is written to a blockchain (or other distributed and verifiable ledger) in addition to a secure database accessible to the CA. The ability of an external party to access the blockchain and independently verify information about a digital certificate can help to increase a level or assurance in the integrity of the CA, which can be important when an entity wants to act as (or offer) their own private certificate authority. Information in the blockchain can also help to identify “dark” certificates, which may appear valid but were not issued by a CA using a valid and secure process, and thus can be identified by a lack of valid transactions included in the corresponding blockchain.

Abstract: Various embodiments of the present invention provide a method and electronic device for supporting an edge computing service (e.g., a multi-access edge computing (MEC) service). An electronic device according to various embodiments comprises a network interface, and a processor, wherein the processor is configured to: acquire, using the network interface, information relating to applications which can be provided within a base station or to at least one external server connectable through the base station by the at least one external server; select an external server including an application corresponding to a specified condition, on the basis of the information relating to the applications; and perform data transmission with the selected external server. Various embodiments are possible.

Abstract: A device, having executed a single sign-on operation, may maintain a private device key in volatile memory. A client application may request an authentication artifact as part of obtaining authentication credentials for the device. Responsive to the request, an artifact may be signed with the private device key to generate the requested authentication artifact. The single sign-on operation may be authenticated using an authentication device and a wrap key generated and applied by a secure cryptographic processor using an identifier based on an attestation certificate obtained from the authentication device after successful authentication. The wrap key may be used to decrypt the private device key stored on a persistent device storage.

Abstract: A communication server supports automatic content receipt and distribution. The communication server receives a set of content objects, where a content object of the set is associated with a set of target group identifiers. A content object of the set may include different versions of content for ABn and/or multivariate testing. The communication server generates target segment identifier combinations and distributes versions of messages proportionally to each user identifier associated with the target segment combinations. The server generates engagement metrics corresponding to interaction by the user identifiers with the messages. The metrics may be generated for each message version, each group of users, and each group combination.

Abstract: The present invention proposes a scheme for realizing a structure and a technology which can support direct linkage between services in an inter-MEC environment, the services being mounted in different MEC systems, respectively.