Abstract: A system for managing network alarms generated by element manager modules responsive to corresponding faults/malfunctioning affecting network nodes or links of a telecommunication network is provided.

Abstract: A message ID decoding method is provided for a system comprising multiple components interlinked by a Controller Area Network bus (CAN-bus) through which messages are sent. The method includes acquiring a CAN-bus message data stream including multiple CAN-bus messages, each including a CAN ID indicating a component from which the corresponding CAN-bus message originated; storing the CAN-bus messages in a first datastore; acquiring an electricity consumption signal indicative of the consumption of the component; storing the electricity consumption signal in a second datastore; generating multiple time-stamp bins each corresponding to an interval in time; selecting the CAN ID and a portion of the electricity consumption signal being from the interval in time corresponding to the time-stamp bin; and determining a regression coefficient, R, indicating a level of relatedness between the selected CAN ID and portion, thereby correlating the CAN ID of the selected CAN-bus message with the component.

Abstract: A method, computer system, and computer program product for utilizing crowdsourcing of images captured by individuals to determine the status of a subject is provided. The embodiment may receive, by a processor associated with a broad beacon, an impulse. The embodiment may also transmit a request to each client device within a preconfigured distance through the broad beacon based on the received impulse. The embodiment may further, in response to an acceptance of the transmitted request by a user associated with a client device, initializing a pairing sequence between the client device and an aimable beacon. The embodiment may also transmit information to identify a subject of photographic capture from the aimable beacon to the client device. The embodiment may further receive an image captured by the user based on the received information.

Abstract: In some implementations, a head Level 2 (L2) node of an intermediate system-intermediate system (IS-IS) flood reflection (FR) network may determine an end-to-end path from the head L2 node to a tail L2 node of the IS-IS FR network. The IS-IS FR network includes a plurality of L2 nodes and a plurality of FR clusters that each comprise a plurality of Level 1 (L1) nodes and a plurality of L1 and L2 (L1/L2) nodes connected by a plurality of L1 links. The head L2 node may send information associated with the end-to-end path to another node identified in the end-to-end path to cause a label switched path (LSP) to be established from the head L2 node to the tail L2 node, wherein the LSP traverses one or more L1 links within an FR cluster of the IS-IS FR network.

Abstract: In one embodiment, a global domain name system (DNS) server processes a DNS query based on an internal network policy. Upon receiving a DNS query that is associated with a source IP address, the global DNS server identifies a client subnet based on the DNS query. The client subnet is associated with an internal device on an internal network. The global DNS server selects an internal network policy from multiple predetermined policies based on the source IP address and the client subnet. The global DNS server then tailors one or more DNS resolution operations that generate a response to the DNS query based on the selected internal network policy. Advantageously, the client subnet provides the global DNS server with visibility into the internal network. Such visibility enables the global DNS server to apply policies selectively at the granularity of individual devices on the internal network.

Abstract: Disclosed are systems, methods, and computer-readable media for assuring tenant forwarding in a network environment. Network assurance can be determined in layer 1, layer 2 and layer 3 of the networked environment including, internal-internal (e.g., inter-fabric) forwarding and internal-external (e.g., outside the fabric) forwarding in the networked environment.

Abstract: Methods, systems, and computer program products for managing Internet of Things (IoT) network-connected devices.

Abstract: To reduce overhead generated by maintaining a full mesh network with static spoke-to-spoke tunnels while providing the efficiency of spoke-to-spoke communication, BGP configuration is automated to provide for dynamic establishment of spoke-to-spoke tunnels. A virtual Internet Protocol (VIP) address is assigned to each spoke in the network. Spokes advertises their VIP address to the hub for communication to the other spokes. A spoke sets the route next hop in its routing table for a remote spoke to the VIP of the remote spoke. Establishment of a tunnel between spokes is initiated after detecting data is to be communicated between the spokes while data is temporarily routed through the hub. Data is routed directly to the receiving spoke through the dynamic tunnel once the tunnel is active. Tunnels between spokes are terminated dynamically after a period of inactivity to reduce overhead caused by consistent maintenance of dynamic tunnels with low use.

Abstract: A client cookie management system is disclosed that includes capabilities for securely managing a session between a web-based application and a user interacting with the web-based application using session cookies. The system receives a request from a user to access a resource provided by a web server and forwards the request to the web server. The web server generates a session cookie comprising a session identifier associated with a session created for the user. The system receives the session cookie from the web server and generates a new session cookie comprising a new session identifier and transmits the new session cookie to the client application. The system receives a second request to access a different resource from the client application. The second request comprises the new session cookie. Upon determining that the new session cookie is not modified, the system transmits the second request to the web server.

Abstract: A collaboration system includes a first group display and a first group display computer, the first group display computer to receive mobile device data streams from at least two mobile devices over a wireless access protocol and to output a first group display data stream over a network, a second group display and a second group display computer, the second group display computer to receive mobile device data streams from at least two mobile devices, different from the at least two mobile devices streaming to the first group display computer, over the wireless access protocol and to output a second group display data stream over the network, a common display computer to receive the first and second group display data streams from the network, and a common display to display data streamed from the first and second group display computers in first and second group display windows.

Abstract: A method scalably authorizes requests. A request to authorize access to a resource is received. A plurality of policies controlling the request is identified. The plurality of policies are concurrently processed. A decision for a policy is received. The decision is of a plurality of decisions corresponding to the plurality of policies. The policy is of the plurality of policies. The decision is determined using a machine learning model and the request. An aggregate decision is generated from the plurality of decisions. A token to access the resource is transmitted in response to the aggregate decision.

Abstract: Various arrangements for autonomous servicing of a network device are presented. A backend server system may receive status data from various devices. The backend server system may determine, based at least in part on the received status data, a triggering event associated with a first device. In response to the determined triggering event, location information associated with the first device may be sent to an unmanned aerial vehicle (UAV). The UAV may send security information directly to the first device. The first device may be required to validate the security device, then the UAV may modify a physical component of the first device.

Abstract: Display methods and devices are disclosed. An exemplary display method may comprise: displaying a session list page, the session list page comprising a session page entry corresponding to a communication session in which a local end user participates; determining a read/unread status of a sent communication message by the local end user in the communication session; and displaying, in a display area of the session page entry corresponding to the communication session, a status identifier corresponding to the read/unread status.

Abstract: In some implementations, a network device may obtain a switchover indication associated with a switchover of a group of subscriber sessions from a first user plane subscriber access device to a second user plane subscriber access device. The network device may provide, to the first user plane subscriber access device or the second user plane subscriber access device, an indication to provide, to an internet protocol (IP) address allocation entity for which the network device serves as a relay, an indication to prioritize a path from the IP address allocation entity to the second user plane subscriber access device over a path from the IP address allocation entity to the first user plane subscriber access device.

Abstract: Embodiments herein describe a describe an interface shell in a SmartNIC that reduces data-copy overhead in CPU-centric solutions that rely on hardware compute engine (which can include one or more accelerators). The interface shell offloads tag matching and address translation without CPU involvement. Moreover, the interface shell enables the compute engine to read messages directly from the network without extra data copy—i.e., without first copying the data into the CPU's memory.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for exchanging metadata between applications. One example method includes providing a metadata service defining a service metadata model for exposing metadata of data objects defined at one or more applications. A connection to a data source associated with a first application is established from a separate application to acquire the metadata from the data source for one or more data objects related to the first application. In response to establishing the connection, a view of content from the data source is provided that includes a list of entities from the service metadata model. A query defined based on the list of entities is received for acquiring metadata associated with the one or more identified entities. The query is evaluated at a backend of the first application and the metadata for the identified entities from the data source is provided.

Abstract: A method is disclosed for distributed routing data with latencies using relay nodes. The method includes automatically measuring one-way latencies between a plurality of nodes comprising a first node, a second node, and a relay node, producing a first signal associated with a proof of uptime for the relay node, producing a second signal associated with a proof of bandwidth for the relay node, after the proof of uptime and the proof of bandwidth of the relay node are validated, automatically identifying a relayed data routing path from the first node to the second node via the relay node based on the one-way latencies between the plurality of nodes, in response to a command to transfer data from the first node to the second node, and transferring data from the first node to the second node along the relayed data routing path.

Abstract: A cloud-native architecture for containerized systems using consistent hashing routing is described. A reverse proxy server executing on a container-based cluster of compute nodes managed using a container orchestration service may determine a current data grid topology. The reverse proxy server may receive a first request from a first client device to retrieve first data from the container-based cluster of compute nodes. The request may be parsed to determine a key of a key-value pair and a hash value may be computed using the key. A consistent hashing algorithm may be executed to determine a node associated with the hash value. The first data may be retrieved from the node using the hash value. The first data may be sent to the first client device.

Abstract: The present invention relates to methods and apparatus for detecting, minimizing and/or preventing message processing faults and in particular message processing fault avalanches at a single processing device and among a cluster of message processing devices. An exemplary method embodiment includes: enabling message blocking at a Session Border Controller (SBC) for Session Initiation Protocol (SIP) messages including a first key value in response to a first threshold number of SIP messages including the first key value having caused a SIP message processing failure; receiving, at the SBC, a SIP message including at least one key value; determining if message blocking is enabled for one or more key values included in the SIP message; and dropping by the SBC the SIP message in response to determining that message blocking is enabled for one or more key values included in the SIP message, but otherwise processing the SIP message by the SBC.

Abstract: A device associated with a network may receive a service profile for a network slice of the network, where the service profile includes one or more service characterizations of the network slice. The device may determine, based on thresholding rules and for each service characterization, whether the service characterization requires selection from a plurality of building blocks, to obtain a group of service characterizations requiring selection. The device may select, based on selection rules and for each service characterization of the group of service characterizations requiring selection, a building block from the plurality of building blocks, to obtain selected building blocks, where the selection rules map attributes of service characterizations to building blocks. The device may stack, based on stacking rules, the selected building blocks, to obtain a slice infrastructure for the network slice. The device may deploy the slice infrastructure for the network slice in the network.