Abstract: To reduce overhead generated by maintaining a full mesh network with static spoke-to-spoke tunnels while providing the efficiency of spoke-to-spoke communication, BGP configuration is automated to provide for dynamic establishment of spoke-to-spoke tunnels. A virtual Internet Protocol (VIP) address is assigned to each spoke in the network. Spokes advertises their VIP address to the hub for communication to the other spokes. A spoke sets the route next hop in its routing table for a remote spoke to the VIP of the remote spoke. Establishment of a tunnel between spokes is initiated after detecting data is to be communicated between the spokes while data is temporarily routed through the hub. Data is routed directly to the receiving spoke through the dynamic tunnel once the tunnel is active. Tunnels between spokes are terminated dynamically after a period of inactivity to reduce overhead caused by consistent maintenance of dynamic tunnels with low use.

Abstract: A client cookie management system is disclosed that includes capabilities for securely managing a session between a web-based application and a user interacting with the web-based application using session cookies. The system receives a request from a user to access a resource provided by a web server and forwards the request to the web server. The web server generates a session cookie comprising a session identifier associated with a session created for the user. The system receives the session cookie from the web server and generates a new session cookie comprising a new session identifier and transmits the new session cookie to the client application. The system receives a second request to access a different resource from the client application. The second request comprises the new session cookie. Upon determining that the new session cookie is not modified, the system transmits the second request to the web server.

Abstract: A collaboration system includes a first group display and a first group display computer, the first group display computer to receive mobile device data streams from at least two mobile devices over a wireless access protocol and to output a first group display data stream over a network, a second group display and a second group display computer, the second group display computer to receive mobile device data streams from at least two mobile devices, different from the at least two mobile devices streaming to the first group display computer, over the wireless access protocol and to output a second group display data stream over the network, a common display computer to receive the first and second group display data streams from the network, and a common display to display data streamed from the first and second group display computers in first and second group display windows.

Abstract: A method scalably authorizes requests. A request to authorize access to a resource is received. A plurality of policies controlling the request is identified. The plurality of policies are concurrently processed. A decision for a policy is received. The decision is of a plurality of decisions corresponding to the plurality of policies. The policy is of the plurality of policies. The decision is determined using a machine learning model and the request. An aggregate decision is generated from the plurality of decisions. A token to access the resource is transmitted in response to the aggregate decision.

Abstract: Various arrangements for autonomous servicing of a network device are presented. A backend server system may receive status data from various devices. The backend server system may determine, based at least in part on the received status data, a triggering event associated with a first device. In response to the determined triggering event, location information associated with the first device may be sent to an unmanned aerial vehicle (UAV). The UAV may send security information directly to the first device. The first device may be required to validate the security device, then the UAV may modify a physical component of the first device.

Abstract: Display methods and devices are disclosed. An exemplary display method may comprise: displaying a session list page, the session list page comprising a session page entry corresponding to a communication session in which a local end user participates; determining a read/unread status of a sent communication message by the local end user in the communication session; and displaying, in a display area of the session page entry corresponding to the communication session, a status identifier corresponding to the read/unread status.

Abstract: In some implementations, a network device may obtain a switchover indication associated with a switchover of a group of subscriber sessions from a first user plane subscriber access device to a second user plane subscriber access device. The network device may provide, to the first user plane subscriber access device or the second user plane subscriber access device, an indication to provide, to an internet protocol (IP) address allocation entity for which the network device serves as a relay, an indication to prioritize a path from the IP address allocation entity to the second user plane subscriber access device over a path from the IP address allocation entity to the first user plane subscriber access device.

Abstract: Embodiments herein describe a describe an interface shell in a SmartNIC that reduces data-copy overhead in CPU-centric solutions that rely on hardware compute engine (which can include one or more accelerators). The interface shell offloads tag matching and address translation without CPU involvement. Moreover, the interface shell enables the compute engine to read messages directly from the network without extra data copy—i.e., without first copying the data into the CPU's memory.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for exchanging metadata between applications. One example method includes providing a metadata service defining a service metadata model for exposing metadata of data objects defined at one or more applications. A connection to a data source associated with a first application is established from a separate application to acquire the metadata from the data source for one or more data objects related to the first application. In response to establishing the connection, a view of content from the data source is provided that includes a list of entities from the service metadata model. A query defined based on the list of entities is received for acquiring metadata associated with the one or more identified entities. The query is evaluated at a backend of the first application and the metadata for the identified entities from the data source is provided.

Abstract: A method is disclosed for distributed routing data with latencies using relay nodes. The method includes automatically measuring one-way latencies between a plurality of nodes comprising a first node, a second node, and a relay node, producing a first signal associated with a proof of uptime for the relay node, producing a second signal associated with a proof of bandwidth for the relay node, after the proof of uptime and the proof of bandwidth of the relay node are validated, automatically identifying a relayed data routing path from the first node to the second node via the relay node based on the one-way latencies between the plurality of nodes, in response to a command to transfer data from the first node to the second node, and transferring data from the first node to the second node along the relayed data routing path.

Abstract: A cloud-native architecture for containerized systems using consistent hashing routing is described. A reverse proxy server executing on a container-based cluster of compute nodes managed using a container orchestration service may determine a current data grid topology. The reverse proxy server may receive a first request from a first client device to retrieve first data from the container-based cluster of compute nodes. The request may be parsed to determine a key of a key-value pair and a hash value may be computed using the key. A consistent hashing algorithm may be executed to determine a node associated with the hash value. The first data may be retrieved from the node using the hash value. The first data may be sent to the first client device.

Abstract: The present invention relates to methods and apparatus for detecting, minimizing and/or preventing message processing faults and in particular message processing fault avalanches at a single processing device and among a cluster of message processing devices. An exemplary method embodiment includes: enabling message blocking at a Session Border Controller (SBC) for Session Initiation Protocol (SIP) messages including a first key value in response to a first threshold number of SIP messages including the first key value having caused a SIP message processing failure; receiving, at the SBC, a SIP message including at least one key value; determining if message blocking is enabled for one or more key values included in the SIP message; and dropping by the SBC the SIP message in response to determining that message blocking is enabled for one or more key values included in the SIP message, but otherwise processing the SIP message by the SBC.

Abstract: A device associated with a network may receive a service profile for a network slice of the network, where the service profile includes one or more service characterizations of the network slice. The device may determine, based on thresholding rules and for each service characterization, whether the service characterization requires selection from a plurality of building blocks, to obtain a group of service characterizations requiring selection. The device may select, based on selection rules and for each service characterization of the group of service characterizations requiring selection, a building block from the plurality of building blocks, to obtain selected building blocks, where the selection rules map attributes of service characterizations to building blocks. The device may stack, based on stacking rules, the selected building blocks, to obtain a slice infrastructure for the network slice. The device may deploy the slice infrastructure for the network slice in the network.

Abstract: Technologies are described related to communication interfaces for wearable devices. User experience with wearable devices may be enhanced through tailored views for communications, calendar items, actions associated with those, where the views and presentations may be dynamically selected and adjusted based on context, user, location, and device capabilities. Smart notifications and user-friendly note taking functionality may be enabled also based on context, user, location, and device capabilities. Other scenarios may be unlocked based on proximity and/or sensor data.

Abstract: After a host client establishes a multimedia stream with a guest client, host data is received from a host application. A state machine is updated using the host data. The host application executes on the host client. Guest data is received from a guest application. The state machine is updated using the guest data. The guest application executes on the guest client. Transaction data is propagated between the host application and the guest application. The transaction data is presented with the multimedia stream. The transaction data includes the host data and the guest data. Provider data is generated responsive to updating the state machine with the host data and the guest data. The provider data is sent to the guest client. The provider data is presented with the multimedia stream by the guest application on the guest client.

Abstract: Techniques for establishing a network connection with a client device and responding to composite requests from the client device. For a composite request identifying a first action associated with a first data plugin component and a second action associated with a different second data plugin component, the first action is performed by executing a first portion of the data plugin component and transmitting corresponding response data in a first transmission to the client device via the network connection, and the second action is performed by executing a second portion of the data plugin component and transmitting corresponding response data in a second transmission separate from the first transmission to the client device via the network connection.

Abstract: A request is received associated with a review. Within first content, a first field of interest and a second field of interest are identified and within second content, a third field of interest and a fourth field of interest are identified. A review is generated that includes a first indication of the first field of interest and a second indication of the second field of interest within the first content, as well as a third indication of the third field of interest and a fourth indication of the fourth field of interest within the second content. The review is transmitted to a device of a reviewer for reviewing the content.

Abstract: A novel design of a gateway that handles traffic in and out of a network by using a datapath daemon is provided. The datapath daemon is a run-to-completion process that performs various data-plane packet-processing operations at the edge of the network. The datapath daemon dispatches packets to other processes or processing threads outside of the daemon by utilizing a user space network stack.

Abstract: An information processing apparatus is provided, the apparatus comprises a first communication interface for performing wireless communication via a network provided by an external access point; a second communication interface for performing wired communication; a unit for setting, in a case where a user operation to set a first communication function for connecting to the external access point via the first communication interface to perform wireless communication has been accepted, a setting indicating that a second communication function for performing wired communication will not be used, and unit for setting, in case where a user operation to cancel the setting of the first communication function has been accepted before the information processing apparatus belongs to the network provided by the external access point, a setting indicating that the second communication function will be used.

Abstract: A system and method that allows for information relating to data and communication resource usage to be gathered and analyzed such that particular data transactions and usage can be classified based on purpose and/or type. Further, the system and method provide reporting based on amount of usage and/or purpose or type of usage so that associated costs and usage can be calculated applied and allocated to particular accounts, divisions, groups or individuals within and outside of a company or entity. Further, the system may restrict data usage of devices to data usage that can be allocated to particular accounts based on purpose, source, destination or other.