Abstract: A data obtaining method and system, and an apparatus thereof. A network data analytics network element determines a data source to which to-be-obtained data belongs. Based on first information, an object identifier that is of the data source and that is in an operation, administration, and maintenance OAM system is determined. The network element sends a first request to the OAM system. The first request includes the object identifier. The first request is for requesting to obtain the to-be-obtained data.

Abstract: A rogue Wi-Fi 6E access points are identified by on-wire data traffic of authorized Wi-Fi 6E access points. Data traffic is monitored across all access points for the rogue Wi-Fi 6E access points according to an SSID/BSSID scan table. In response, modified CSA values are sent from spoofed action frames that have a source BSSID of the rogue access points rather than the authenticated access point that transmits.

Abstract: The terminal implements a method for requesting a personalized service by a communication terminal, said method comprising, following an unlocking of access to a personalized service request device, said device being implemented in the communications terminal: an acquisition of an anonymous unique identifier, adapted to be transmitted by said terminal, in association with a service query, to a service query personalization device, the service query being intended for the service provision device.

Abstract: A list is received from the Wi-Fi controller of rogue Wi-Fi 6E access points identified by BSSID within a vicinity of the Wi-Fi 6E access points based on RSSI measurements sent to the Wi-Fi controller. A rogue Wi-Fi 6E access point of the Wi-Fi controller list from the periodic beacon scanning. In response, prior to connection of any station to the rogue Wi-Fi 6E access point, broadcasts spoofed beacons on behalf of the rogue Wi-Fi 6E access point, using SSID and BSSID over the current operating channel of the rogue Wi-Fi 6E access point. The beacons are spoofed by modifying the MFP field value to indicate no encryption capability and also to indicate no encryption requirement for management frames.

Abstract: The techniques disclosed herein enable systems to generate intuitive security reports that illustrate security events that occur during a predefined time period (e.g., thirty days). The security report visual can include a pair of parallel axes where the first axis includes a plurality of time-series segments respectively representing security event types (e.g., obfuscation, phishing) and the second axis includes two time-series segments representing security events that are not remediated and security events that are remediated. A plurality of first lines originating at respective points along the first axis and terminating within a GUI element can represent security events of various types that occur at a particular time unit (e.g., a day) within the predefined time period. A plurality of second lines originating within the GUI element and terminating at respective points along the second axis can represent security events that are either remediated or not remediated.

Abstract: A verifier peer system transmits a request to an application of another peer system to obtain integrity data of the application. In response to the request, the verifier peer system obtains a response that includes kernel secure boot metrics of the other peer system and integrity data of the application and of any application dependencies. If the verifier peer system determines that the response is valid, the verifier peer system evaluates the integrity data and the kernel secure boot metrics against a set of Known Good Values to determine whether the integrity data and the kernel secure boot metrics are valid. If the integrity data and the kernel secure boot metrics are valid, the verifier peer system determines that the other peer system is trustworthy.

Abstract: A system and a method are provided for enabling a user to connect a serial port of a device server to a serial device, query and capture data and settings pertaining to the serial device such that the device server can communicate and exchange data with the serial device without requiring customized programming. The device server may periodically query and capture user-specified data from the serial device. A poll configuration feature may be used to specify one or more commands which the device server will periodically query from the serial device. The response to each poll may be further sliced into a multiplicity of smaller portions according to user-specified filter rules. The captured data may be presented to other users online by way of a Web Manager, and the device server may establish machine-to-machine communications by way of XML and a Command Line Interface.

Abstract: A group definition is received via a network interface. Communications are transmitted to destinations, the communications comprising an invitation to associate with the a content sharing group. Authentication data associated with users that accept the invention is encrypted. The accepting users are associated with the content sharing group. A content gallery definition is received. A communication is received that the content gallery is to be shared with the content sharing group. The content gallery is caused to be instantiated on devices of users associated with the group. A content request for the content sharing group is received and the content request is transmitted accordingly to users associated with the group. A content item is received in response the request and the content item is transmitted to user devices associated with the group and enabled to appear in instantiations of the content gallery on the user devices.

Abstract: A controller configured to maintain a global virtual private cloud network (global VPC), which comprises a plurality of regions including a first region and a second region. The first region features at least a first workload and a first spoke subnetwork including a first set of spoke gateways. The second region features at least a second workload and a second spoke subnetwork including a second set of spoke gateways. These sets of spoke gateways are part of the cloud overlay network. Responsive to the first workload operating as a source for transmission of a first message to a first destination external to the global VPC, the logic is configured to (i) direct the first message from the first workload to a spoke gateway of the first set of spoke gateways residing withing the first region and (ii) preclude transmission of the first message to the second spoke subnetwork.

Abstract: A host server of a digital platform, such as a virtual world or augmented reality platform, receives a request to graphically indicate an affiliation between a user of an avatar and an organization or other entity. The host server queries an authenticating server to authenticate the affiliation between the user and the entity. Accordingly, the host server generates for display a logo, or other indication, to indicate the authenticated affiliation. Other users of the digital platform can learn whether the user of the avatar is actually affiliated with the entity. Access to digital spaces, virtual objects and some interactions of the avatar may be controlled according to an access policy of the entity.

Abstract: This disclosure describes techniques for diagnosing a presence or malfunction of a network node. In an example method, a first network node receives an indication of a diagnostic transmission originating from a second network node. The second network node further receives a forwarded transmission corresponding to the diagnostic transmission. The first network node diagnoses at least one of a presence or a malfunction of an intermediary node between the first network node and the second network node based on at least one of the indications of the diagnostic transmission or the forwarded transmission.

Abstract: Disclosed embodiments herein related to a message management server that provides a platform for message publishers to build message series with different messages that are transmitted to message recipients via different channels. A message publisher may specify triggering conditions for a message series. The message management server may automatically identify message recipients to receive an initial message. The message management server may continue to monitor event notifications related to the message recipients and send subsequent messages in the series to the message recipients when conditions are met. Each message may be sent via a different channel as specified by the message recipients. The platform may include a graphical user interface to provide previews of the messages as rendered in various end user device models when the messages are delivered via the specified channels.

Abstract: Systems, methods, and computer-readable storage media for enabling secure transfer of Internet domains between registrars. An example method can include receiving, at a registry, a request from a first registrar for information associated with an object recorded in the registry and registered by the first registrar, then generating, at the registry, an authorization code, the authorization code having an expiration. The registry can then transmit, to the first registrar, the authorization code, which in turn can be given to the registrant. The registrant can forward the authorization code to the second registrar, and the registry can receive, from a second registrar before the expiration has been reached: the authorization code and a transfer request for the object, the transfer request identifying a transfer of the object from the first registrar to the second registrar.

Abstract: A method for providing a secure user interface on a computing device comprising: receiving, from a user application, a request to utilise a secure user interface on the computing device; obtaining, by a first countermeasure module, first information associated with a security context of the computing device; generating, by the first countermeasure module, a first security assessment based on analysis of the first information; determining, by a security determination module, whether to permit the request to utilise the secure user interface based on the first security assessment; and responsive to a positive determination, enabling access by the user application to the secure user interface.

Abstract: An apparatus, method, system, and computer-readable medium are provided for enhancing the quality of content. A determination may be made that a portion of the content received using a base feed or bitrate completed early. In response to that determination, an attempt may be made to download that portion of the content using a differential bitrate or feed corresponding to a higher quality. Another determination may be made whether the differential bitrate or feed download completed early, and if so, then the differential bitrate or feed may be used as a new base bitrate or feed for downloading additional portions of the content. The differential bitrate or feed download may also provide for a secondary playback of the content at higher quality.

Abstract: In one embodiment, a method includes receiving, by a first node of a node cluster in a software-defined wide area network (SD-WAN), traffic from a wide area network (WAN), assigning, by the first node of the node cluster, flow ownership of the traffic to the first node, and communicating, by the first node of the node cluster, the traffic to a local area network (LAN). The method also includes receiving, by the first node of the node cluster, return traffic from a second node of the node cluster and detecting, by the first node of the node cluster, a diversion of the return traffic. The method further includes relinquishing, by the first node of the node cluster, the flow ownership and assigning, by the first node of the node cluster, the flow ownership to the second node of the node cluster.

Abstract: Systems, apparatuses, and methods are described herein for a communication bus that virtualizes physiological data. Sensors and/or physiological data acquisition devices have different physical connectors which provide physiological data from a patient to a shared interface such as a display or patient monitor. A transfer interface within a mount can receive and interpret data streams associated with one or more physiological data acquisition devices. The transfer interface can prioritize the various data streams associated with the one or more physiological data acquisition devices and generate a single, combined data stream based on the assigned prioritization. The transfer interface can provide the combined data stream for transmission to a patient monitor via an interchangeable transport medium. Another transfer interface can process and/or virtualize the data streams from the physiological data acquisition devices.

Abstract: This disclosure describes systems, methods, and devices related to service function chaining in wireless networks. A communications system may include a communication control function to select one or multiple communication service functions associated with establishing service function chaining (SFC) services for telecommunications; a service orchestration and chaining function (SOCF) to establish the SFC services; and a service orchestration exposure function (SOEF) to expose the SFC services to an application function (AF) of the system.

Abstract: Disclosed is a system for implementing indirect certificate pinning. The system comprises a client device configured to execute client application having a public signing key pinned thereto, and a certificate information server communicably coupled with client device. Upon execution, the client application is configured to: send, to certificate information server, a connection request; receive, from certificate information server, a security certificate of certificate information server and signing information pertaining to the security certificate, wherein signing information comprises: signatures of security certificate for at least one signing key pair that is valid at a time of receiving connection request, a version number of the at least one signing key pair, expiration details of the at least one signing key pair; and validate the signatures using the security certificate and the public signing key, for enabling connection of the client device with the certificate information server.

Abstract: Some embodiments of the invention provide a method for deploying software-implemented resources in a software defined datacenter (SDDC). The method initially receives a hierarchical API command that, in a declarative format, specifies several operation requests for several software-defined (SD) resources at several resource levels of a resource hierarchy in the SDDC. The method parses the API command to identify the SD resources at the plurality of resource levels. Based on the parsed API command, the method deploys the SD resources by using a deployment process that ensures that any first SD resource on which a second SD resource depends is deployed before the second resource. In some embodiments, a second SD resource depends on a first SD resource when the second SD resource is a child of the first SD resource. Alternatively, or conjunctively, a second SD resource can also depend on a first SD resource in some embodiments when the second SD resource has some operational dependency on the first SD resource.