Abstract: Techniques are presented to enable the instantiation of a service chain that is comprised of service functions belonging to one or more administrative domains. A service chain consisting of one or more service functions in one administrative domain is made available to another administrative domain through an advertisement. This enables the building of inter-domain service chains without the need to share between the administrative domains details about the service chains and service functions in the respective administrative domains.

Abstract: Systems, methods, and non-transitory computer-readable media can cause a first computing system to receive an obscured version of a first media content item from a second computing system. Access to the obscured version of the first media content item can be provided by the first computing system. Access to an unobscured version of the first media content item can be prevented by the first computing system. An unobscured version of a second media content item can be acquired by the first computing system using at least one sensor. The first computing system can transmit to the second computing system at least one of the unobscured version of the second media content item or an obscured version of the second media content item generated based on the unobscured version. Access to the unobscured version of the first media content item can be provided by the first computing system.

Abstract: Techniques described herein enable a client to store information indicating whether various hosts (e.g., servers, web domains) support a preferred security protocol, such as a False Start-modified TLS or SSL protocol. The client may then use this information to dynamically determine whether to use the preferred protocol when connecting to a particular host. When the client attempts a handshake to establish a secure connection with a host for the first time, the client does so using the preferred protocol. If the handshake fails, the client locally stores domain or other identifying information for the host so that the client may employ a non-preferred protocol in subsequent connection attempts. Thus, a client may avoid performance degradation caused by attempting a preferred-protocol connection with a host that does not support the preferred protocol. Stored information may include a time stamp enable periodic checks for host capability updates.

Abstract: A storage area network controlled, part, by performing the following steps: (i) for each host link of a plurality of host links in a storage area network (SAN), determining a maximum possible data transfer rate; (ii) for each host link of a plurality of host links in a storage area network, determining a maximum permitted data transfer rate based on the maximum possible data transfer rate; (iii) making a plurality of data transfers, through SAN fabric of the SAN and between a storage controller module of the SAN and various host links of the plurality of host links; and (iv) for each data transfer, controlling the data transfer so that a data transfer rate for the data transfer does not exceed the maximum permitted data transfer rate.

Abstract: A system, apparatus and method for selecting one or more synchronization stations, or masters, in a peer-to-peer communication environment. Synchronization (or sync) stations broadcast periodic synchronization frames to advertise future availability windows, during which devices rendezvous for discovery and communication. Devices that can act as sync stations advertise preference values, which indicate their preference or suitability for the role. All devices execute the same algorithm to sort the preference values and identify a root sync station and any number of branch sync stations; leaf devices synchronize with the root or a branch sync station. This passive synchronization scheme allows individual devices to conserve power, because they need not actively discover other devices and services, and can power off their radios for periods of time without sacrificing discoverability.

Abstract: Methods, products, apparatuses, and systems may provide and/or receive relevant commentary for media content. Additionally, the relevant commentary may be provided and/or received in response to rendering a section of the media content. In addition, the relevant commentary may be provided and/or received based on one or more of a preference for a temporal perspective, a preference for a viewpoint, and/or a preference for a state of a social network. Moreover, the relevant commentary may be provided and/or received based on a topic related to the section of the media content. The relevant commentary may be provided and/or received based on an authorship independent of a media content access event by an author of the relevant commentary. In addition, an ambiguous section of the media content may be clarified, and/or an interactive commentary session may be simulated.

Abstract: A method, system, and computer program product are provided for utilizing target of opportunity to perform at least one special operation while a key session is opened with a key manager for another purpose. The method of recognizing a target of opportunity includes receiving a command to be performed on a removable storage medium and determining if the command requires interaction with the encryption key manager. If it is determined that the command requires interaction with the key manager the command is held off. A request is sent to the encryption key manager. A target of opportunity is recognized by determining if at least one special operation may be performed. If it is determined that at least one special operation may be performed then the at least one special operation and the request are performed.

Abstract: A computer-implemented method for storing a conversation as a record in a records management server is provided. The computer-implemented method comprises, capturing one or more instant messages exchanged among a plurality of participants as a conversation. The computer-implemented method further comprises, storing the conversation as a record in a records management system, in response to a determination that the conversation meets a predetermined criteria.

Abstract: An apparatus for defining a data interchange protocol may include a processor and memory storing executable computer code causing the apparatus to at least perform operations including defining a data interchange protocol document including one or more objects including instances of data encoded in a syntax. The computer program code may further cause the apparatus to assign a type and a name to the instances of data corresponding to respective objects. The computer program code may further cause the apparatus to enable provision of one or more of the instances of data or the data interchange protocol document to one or more communication devices to enable the communication devices to interpret the instances of data based in part on analyzing the assigned type and name of the instances of data. Corresponding methods and computer program products are also provided.

Abstract: A content management system synchronizes content items across client computing systems connected by a network. Client devices connected to peer devices on a LAN utilize peer-to-peer synchronization to synchronize content items. Client devices on the LAN broadcast namespaces synchronized on the client devices with other devices on the LAN. Client devices on the LAN connect to a subset of client devices that share a namespace with the connecting client device based on the broadcasts. Upon receiving a notification from the content management system that a new content item has been synchronized with the namespace a client device sends requests for a block comprising a content item to a subset of the connected devices. Additional block requests are sent in the order of randomized blocklist.

Abstract: To prevent improper authentication, a authentication device includes a visual-line detecting unit configured to detect a visual line direction of a user, an authentication-permission visual-line direction setting unit configured to set an authentication permission visual-line direction, a biometric deciding unit configured to execute authentication by deciding whether a detected visual line direction is an authentication permission visual-line direction, and a display control unit configured to cause a display unit to display an image showing a type of a visual line direction in setting an authentication permission visual-line direction and configured to cause the display unit not to display the image in executing authentication.

Abstract: A method, system, and computer program product for tokenized domain name resolution are provided. The method includes receiving a tokenized domain name, where the tokenized domain name includes a domain name with one or more embedded tokens. The method also includes parsing the tokenized domain name to identify the one or more embedded tokens. The method further includes extracting the one or more embedded tokens from the tokenized domain name, and performing at least one predefined process in response to extracting the one or more embedded tokens. The method may also forward control to the domain name.

Abstract: A scheme for managing conflict resolution in an ABR streaming environment with respect to a bandwidth pipe serving a customer premises. In one aspect, when a session request is received from a new ABR client launched in the customer premises that includes one or more existing ABR clients having corresponding streaming sessions, a bandwidth forecasting module is configured to forecast bandwidth requirements with respect to the corresponding ABR streaming sessions after accounting for a bandwidth requirement for the new ABR client's session request. A conflict condition may be detected if any of forecasted bandwidth requirements violates a bitrate threshold policy relative to the corresponding ABR streaming sessions and/or the new session being requested. If there is a conflict, an interactive session may be launched with one or more clients for facilitating user selection of one or more options relative to the impending conflict condition.

Abstract: System, method and apparatus for securely distributing content via an encrypted file wherein a Publisher Key (PK) associated with an authorized publisher enables presentation of the content by the authorized user via a Limited Capability Viewer (LCV), the LCV lacking the capability to forward, print, copy or otherwise disseminate the content to be presented. Various embodiments provided enhanced user authentication or authorization, VPN functions, collaboration techniques, automatic distribution of licenses, watermarking of documents, rules pertaining to content transfer between secure and insecure domains and combinations thereof.

Abstract: A method and apparatus for moving a web object based on an intent is provided. A primary device may identify a web object supporting movability on a loaded web page, and may determine whether the identified web object can be moved to a secondary device based on movability information of the identified web object. The primary device may re-render the web page in a web browser, aside from the web object supporting movability, while maintaining a full layout of the web page. In the movement of the web object, the primary device may push, to a push server, movement of the web object to the secondary device.

Abstract: Bandwidth usage for an existing communication tunnel between a first device and second device is monitored. A determination is made that additional bandwidth is required for communication between the first network device and the second network device. A determination is made that for the addition of the additional bandwidth would exceed available bandwidth for the existing tunnel. Additional bandwidth is established between the first network device and the second network device.

Abstract: Managing a blocked-originator list for a messaging application, including: detecting, by a list management module, a list management initiation event for a blocked-originator list, the blocked-originator list including a plurality of originators from which incoming messages are blocked; determining a number of entries in a blocked-originator list; determining a maximum number of entries in the blocked-originator list; determining whether the number of entries in the blocked-originator list is equal to the maximum number of entries in the blocked-originator list; and responsive to determining that the number of entries in the blocked-originator list is equal to the maximum number of entries in the blocked-originator list: deleting an entry from the blocked-originator list in dependence upon entry removal rules; and adding the new entry to the blocked-originator list.

Abstract: A split architecture eMBMS with distributed BMSCs providing the same eMBMS service allows for a centralized key service where each BMSC is able to derive a set of MTKs from the MSK using the MTK-IDs as the differentiating input. This avoids the need to send MTKs to the BMSCs.

Abstract: A computer-implemented method for providing security for synchronized files may include (1) synchronizing, using a cloud folder synchronization service, a backend server with both a client folder on a client machine and an additional client folder on an additional client machine, (2) propagating a file from the client folder to the backend server through the cloud folder synchronization service, (3) identifying, using the cloud folder synchronization service, a result of a security scan of the propagated file, and (4) adjusting, using the cloud folder synchronization service, the synchronization of the file with the additional client folder based on the result of the security scan. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method and system is disclosed for encrypting and decrypting data, with decryption contingent upon user-defined conditions being met. The encryption process comprises a method for using pointers to indicate the locations and sizes of encryption components, utilizing randomly determined patterns to be used for a random number of characters of text data being encrypted. For each randomly determined block of text, a randomly determined pattern is selected, which specifies how to combine the encryption components, including the shuffled and encrypted text, and references to that block's seed key, the size and composition of which are randomly determined. Decryption comprises of a methodology for reversing the process to decode encrypted text, iteratively extracting the decryption components in accordance with the pattern indicator identified for each block of encrypted text, as determined by the pointers, and dependent upon satisfying all user-defined conditions necessary to enable decryption.