Abstract: Configuration management persistent storage contains entries representing configuration items and relationships between pairs of the configuration items. Event management persistent storage contains entries representing alert records. Change request persistent storage contains change records respectively referring to changes made to the configuration items.

Abstract: Methods, systems, and apparatuses for improved content delivery are described herein. During delivery of content to one or more user devices of a content distribution network (CDN), a content session may be created for each user device. During each content session, each user device may send one or more upstream communications, such as heartbeat signals and bitrate requests, to the CDN. A monitoring module of the CDN may aggregate the upstream communications into session data. The monitoring module may use the session data to determine an impairment associated with content delivery to the one or more user devices.

Abstract: A computing platform may train, using historical information classification information, an information classification model, which may configure the information classification model to classify information and identify, based on the classification, a storage location. The computing platform may receive, from a user device, a request to store information. The computing platform may identify, using the information classification model, a cloud based storage location for the information. The computing platform may generate an NFT representative of the first cloud based storage location. The computing platform may direct a cloud based storage system to store the information at the cloud based storage location. The computing platform may send, to the user device, the NFT. The computing platform may receive, from the user device, the NFT and a request to access the information. Based on validating the NFT, the computing platform may grant the user device access to the information.

Abstract: Managing access to stored objects includes receiving, by a storage OS in a computing system, an access key identifier (ID) and access key associated with a user of an object storage service (OSS); determining, by a directory service, whether the user is a member of a group authorized to access a storage object in at least one of a network accessible storage (NAS) volume and an OSS bucket, based at least in part on the access key ID; in response to the user being a group member, attempting to authenticate the user by the storage OS with the directory service based at least on the access key ID and the access key; and in response to the user being authenticated by the directory service, allowing, by the storage OS, access by the user to the storage object stored in at least one of the NAS volume and the OSS bucket.

Abstract: Aspects relate to dynamic link speed switching of a link between a device and an additional device based on the current utilized bandwidth on the link. The device may be configured to calculate the current utilized bandwidth and compare the current utilized bandwidth to the current link speed of the link. The device may further be configured to modify or switch the current link speed to a new link speed that is nearest to and greater than the current utilized bandwidth by at least a threshold amount.

Abstract: A computing device may receive a request to store a content segment(s). The request may include an estimated storage size. The computing device may determine a plurality of storage devices based on an estimated capacity of each of the storage devices to store the content segment(s). The computing device may cause each of the storage devices to allocate storage for the content segment(s). The allocated storage may be tracked and/or retrieved based on location metadata indicative of the allocated storage that may be stored at a cache and/or metadata repository.

Abstract: In one embodiment, a method includes accessing a rule set for a group of networking assets; creating, based on the rule set, a primary automaton including a set of keys, each key including (1) a string identifying a network asset from the group of network assets (2) a separator character following the string and (3) a key branch number identifying a state. The method further includes creating, based on the rule set, one or more secondary automata by creating a secondary automaton for each type of result classification in the rule set; and for each secondary automaton, populating that secondary automaton with a set of values, each including (1) a value branch number identifying a state of that secondary automaton, each value branch number corresponding to a specific key branch number in the primary automaton, and (2) a string identifying a domain identified in the rule set.

Abstract: A microphone of a primary client device is used to capture audio for a conference participant. During the conference, audio is sampled from the microphone of the primary client device and from microphones of one or more secondary client devices at the same location as the primary client device. Based on a score calculated for the audio sampled from the secondary client device being higher than a score calculated for audio sampled from the primary client device, the microphone of the secondary client device is selected for audio capture for the remote conference participant. The audio is output through conferencing software to which the primary client device is connected via a user interface tile for the conference.

Abstract: A server and a device can support secure sessions with both (i) post-quantum cryptography (PQC) key encapsulation mechanisms (KEM) and (ii) session resumption. In an initial secure session, the device and server can mutually generate a first shared secret key K1 from a first KEM based on a device PKI key pair. The device and server can mutually generate a second shared secret key K2 from a second KEM based on a server PKI key pair. The device and server can mutually generate a symmetric ciphering key S2 from both K1 and K2. The server can encrypt an identity for a “pre-shared” secret key (PSK-ID) with S2. The device and server can (i) mutually generate a PSK from both K1 and K2 and (ii) close the initial secure session. The device can transmit a message to resume the session, where the message includes the PSK-ID and a MAC value.

Abstract: A system may include a device that may communicate data associated with the device. The data may include an authentication key generated via a circuit configured to generate the authentication key based on a presence of a signal. The system may also include a sensor device that may output the signal to the device based on a determination of tampering of a housing of the device. The system may also include a server device that may receive a request to publish the data, verify the authentication key, and store the data in a storage component in response to verifying the authentication key.

Abstract: A secure inter-cloud authentication system uses time-synchronized tokens for verifying user access requests across multiple cloud providers. By generating an authentication token that includes a timestamp and time-based one-time password (TOTP), synchronized with a Network Time Protocol (NTP) server, the system ensures that each access request is valid only within a specific time window. When a user requests data access, the token is verified by each participating cloud provider against the synchronized timestamp, allowing secure, time-sensitive validation across platforms. An identity provider (IdP) manages token issuance and synchronization, centralizing the authentication process while maintaining precise time alignment across clouds. This time-sync verification reduces the risk of replay attacks and ensures that only legitimate requests are processed, enabling secure, synchronized data access in multi-cloud environments.

Abstract: A protocol-layer governance system is disclosed for controlling execution of autonomous computational processes at the session layer. The system establishes a non-bypassable enforcement sequence in which behavioral qualification, authorization token issuance, directive propagation, and execution reconciliation occur in a fixed, canonical order. A protocol enforcement boundary ensures that execution requests cannot proceed unless derived from a verified protocol session state, and authorization is bound to behavioral qualification rather than identity or policy inference. The system generates immutable execution lineage records and prevents replay, substitution, privilege escalation, reordering, or parallel execution outside the defined sequence.

Abstract: A data storage method and system comprising: at least one encrypted server that comprise a storage volume and configured to run an operating system designated to host data accessible and exposable over a data plane (DP) network, at least one orchestrator configured to interact with each of said server and designated to control a control plane (CP) of said DP network, wherein the orchestrator is configured to manage the encryption by storing at least one key in its database such that the key is stored separately from the server, and wherein the orchestrator is configured to deliver the key to the server using a tunnel without exposing the key to the server.

Abstract: In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The method may be performed by a device. In certain configurations, the device autonomously manages, by a device compute orchestrator (DCO), orchestration of compute resources and network connectivity resources in a network. The device is capable of creating a first cluster for an application executed on the user device and functioning as a master node and a worker node in the first cluster, and joining a second cluster for another application executed on another user device and functioning as a worker node in the second cluster for sharing compute resources and network connectivity resources of the device in the second cluster.

Abstract: It is possible to enable a reception side to easily recognize that metadata is inserted into an audio stream. A metafile including meta information for acquiring an audio stream into which metadata is inserted through a reception device is transmitted. The identification information indicating that the metadata is inserted into the audio stream is inserted into the metafile. At the reception side, it is possible to easily recognize that the metadata is inserted into the audio stream based on the identification information inserted into the metafile.

Abstract: Embodiments of the systems described herein can implement one or more processes remotely delivering customized code to a host application and/or computing device. The host application may be configured as an Application Programming Interface with a customized code processing library that may configure the host application to receive further instructions remotely. The host application may be further configured to execute host code and/or third-party code. The host application may be configured to receive remote application logic, after the host application has been installed on a computing device, and to execute the received application logic to alter the behavior of the host application, such as selectively tracking end user interactions.

Abstract: Methods, systems, and devices for wireless communications are described. A user equipment (UE) may receive, at a first modem and from a first device, one or more data packets. Based on an explicit congestion notification (ECN) capable transport (ECT) codepoint indication in respective header portions of the data packets, the UE may route the data packets from the first modem to two or more queues associated with a second modem of the UE. Based on receiving buffer and link state information associated with the second modem, the UE may perform a congestion indication procedure that is associated with congestion of a communication link associated with the UE. The UE may thereafter transmit, to a second device, packet data from the two or more queues associated with the second modem of the UE based on a respective priority associated with the two or more queues.

Abstract: The present invention is a method for detecting unregistered L2 (Layer-2) switches in a network, comprising of: a first step of collecting switch-port information from L2 switches Sj (1?j) registered in the management table by monitoring apparatus H, wherein, in the management table, the MAC addresses of L2 switches Sj are registered; a second step of detecting MAC addresses M(Zi) (1?j) of one or more unregistered apparatuses existing between L2 switches Sx and Sy registered in the management table based on said switch-port information collected from L2 switches Sx and Sy in the first step, wherein said MAC addresses M(Zi) are detected by identifying the MAC addresses that are contained in the collected switch-port information of both L2 switches Sx and Sy; a third step of identifying MAC addresses M(Xk) (1?k) of one or more L2 switches Xk from among said MAC addresses M(Zi) detected in the second step; a fourth step of registering said MAC addresses M(Xk) identified in the third step in the management tab

Abstract: An approach for enhancing class participation is disclosed. The approach comprises establishing a classroom user group including an instructor user and one or more student users. The approach further comprises providing a feed to the one or more student users, wherein the feed relates to a subject designated for the classroom user group. The approach further comprises monitoring for feedback information by each of the one or more student users in response to the feed. The approach also comprises attributing a participation credit to corresponding one or more of the student users based on the feedback information. The approach further comprises generating a participation score for each of the one or more students according to the attributed participation credit.

Abstract: A conference support device includes: a main conference management unit configured to set a main conference and manage connection of terminal devices participating in the main conference; and an individual conference management unit configured to associate a plurality of individual conferences with the main conference and manage connection of the terminal devices participating in each of the plurality of individual conferences. When first utterance data indicating an utterance content with respect to the main conference has been received from the terminal device, the main conference management unit transmits the first utterance data to the individual conference management unit. When the first utterance data has been received from the main conference management unit, the individual conference management unit transmits the first utterance data to the terminal devices participating in each of the plurality of individual conferences.