Abstract: Various example embodiments for supporting multicast are presented herein. Various example embodiments for supporting stateless multicast may be configured to support stateless multicasting of packets based on encoding of multicast path information within the packets. Various example embodiments for supporting stateless multicasting of packets based on encoding of multicast path information within the packets may be configured to use a recursive scheme of encoding the multicast path information within the packets such that the header that arrives at each node of the multicast path informs the node of the outgoing links over which the packet is to be sent and the headers to be sent on the outgoing links (e.g., each node of the multicast tree is able to recognize each of its outgoing links from the received header and send the appropriate subtree encoding down each of its outgoing links).

Abstract: The present disclosure generally discloses an Internet security mechanism configured to provide security for Internet resources of the Internet using an Internet blockchain. The Internet blockchain may be configured to provide security for Internet resources of the Internet by supporting various types of verification related to Internet resources of the Internet, which may include verification of Internet resource ownership, verification of Internet resource transactions, and so forth. The Internet blockchain may be configured to enable Internet participants (e.g., Internet registries, Domain Name Service (DNS) entities, Autonomous Systems (ASes), or the like) to verify Internet resource ownership of Internet resources (e.g., Internet Protocol (IP) addresses, AS numbers, IP prefixes, DNS domain names, or the like) by Internet participants, to verify Internet resource transactions (e.g.

Abstract: A method for controlling packet routing in a network includes identifying segment identifications (IDs) for a number of switches and arranging a first number of the segment IDs into a multi-protocol label switching (MPLS) label field. The method further includes identifying an output port of a respective one of the number of switches located along a network path between source and destination nodes. The switches may route the packet based on corresponding ones of the segment IDs in the MPLS label field. In performing this routing operation, each switch may modify the MPLS label field with remaining ones of the segment IDs that have been shifted in position and padded with zeros, after the segment ID corresponding to the switch has been popped from the MPLS label field. The method therefore presents a technique for performing segment routing through network equipment designed to support MPLS routing.

Abstract: Various embodiments relate to a method for accelerating blockchains, the method comprising the steps of waiting for an event to occur, receiving a block, determining whether the block is valid, adding the block to a block tree, determining whether the block is a singular candidate, starting a timer for the block, determining whether the timer has expired for the block, determining whether the block is still singular after the time has expired for the block and processing the singular block.

Abstract: A method for controlling packet routing in a network includes identifying segment identifications (IDs) for a number of switches and arranging a first number of the segment IDs into a multi-protocol label switching (MPLS) label field. The method further includes identifying an output port of a respective one of the number of switches located along a network path between source and destination nodes. The switches may route the packet based on corresponding ones of the segment IDs in the MPLS label field. In performing this routing operation, each switch may modify the MPLS label field with remaining ones of the segment IDs that have been shifted in position and padded with zeros, after the segment ID corresponding to the switch has been popped from the MPLS label field. The method therefore presents a technique for performing segment routing through network equipment designed to support MPLS routing.

Abstract: Various embodiments relate to a method for managing information in a database. The method includes injecting a transaction into a first blockchain and injecting the transaction into a second blockchain, where the first blockchain and the second blockchain are in a same blockchain network. The first blockchain processes the transaction based on a first set of rules and the second blockchain processes the transaction based on a second set of rules different from the first set of rules. The second blockchain is a private blockchain that excludes one or more participants of the first blockchain.

Abstract: A resource assignment capability is presented. A resource specification associated with a plurality of elements is received. The resource specification includes, for each of the elements, a resource request including an indication of a quantity of resources requested by the element and a resource offer including an indication of a quantity of resources offered by the element for use by one or more other elements. A resource assignment, including an indication of an association between the resources requests and the resource offers, is determined using a resource assignment process. The resource assignment process may be a greedy assignment process or a maximum flow resource assignment process. The maximum flow resource assignment process includes constructing a maximum flow resource graph based on the one or more resource specifications and applying a maximum flow process to the maximum flow resource graph to determine thereby the resource assignment.

Abstract: Various embodiments relate to a method for accelerating blockchains, the method comprising the steps of waiting for an event to occur, receiving a block, determining whether the block is valid, adding the block to a block tree, determining whether the block is a singular candidate, starting a timer for the block, determining whether the timer has expired for the block, determining whether the block is still singular after the time has expired for the block and processing the singular block.

Abstract: Various embodiments relate to a method, device, and machine-readable storage medium including: instructions for receiving a configuration request from an edge device, wherein the configuration request identifies a traffic flow between at least two end devices other than the edge device; instructions for assigning a virtual local area network (VLAN) identifier to the traffic flow; instructions for configuring the edge device to add the assigned VLAN identifier to outgoing frames associated with the traffic flow, wherein the outgoing frames are frames that will be transmitted by the edge device to a core network. Various embodiments additionally include instructions for configuring, in response to assigning the VLAN identifier, at least one additional edge device to remove the VLAN identifier from incoming frames associated with the traffic flow, wherein the incoming frames are frames that have traversed at least one core node of the core network.

Abstract: In general, a capability for forwarding packets based on path encoding is presented. The capability for forwarding a packet based on path encoding may be configured to enable forwarding of a packet along a network path by determining a path encoding label for the network path, associating the path encoding label for the network path with the packet, and forwarding the packet along the network path based on the path encoding label associated with the packet. The network path for a packet may include an ordered sequence of node output interfaces of an ordered sequence of nodes. The path encoding label for the network path includes an ordered sequence of node interface labels corresponding to the ordered sequence of node output interfaces of the nodes of the network path. The nodes of the network path forward the packet along the network path based on the path encoding label.

Abstract: The present disclosure generally discloses multicast communication support capabilities configured to support multicast communications of a multicast group using a multicast tree. The multicast communication support capabilities may include a unicast branching based multicast capability. The unicast branching based multicast capability may be configured to support determination and establishment of, as well as communication via, a multicast tree that is composed of unicast branches. The unicast branching based multicast capability may be configured to preserve the multicast information of multicast transmissions transported via the multicast tree even though the multicast transmissions are transported via unicast branches of the multicast tree.

Abstract: An illustrative example surveillance system designed according to an embodiment of this invention includes a plurality of cells that respectively include a surveillance network including at least one detector that is configured to detect at least one type of subject. The cells have respective detection areas within which a subject may be detected by the at least one detector of that cell. A controller of the cell determines information regarding tracking of a detected subject that is in that cell. The controller hands off tracking of the subject to a second one of the cells based upon an indication that the tracked subject is moving toward the detection area of the second one of the cells.

Abstract: The present disclosure generally discloses an Internet security mechanism configured to provide security for Internet resources of the Internet using an Internet blockchain. The Internet blockchain may be configured to provide security for Internet resources of the Internet by supporting various types of verification related to Internet resources of the Internet, which may include verification of Internet resource ownership, verification of Internet resource transactions, and so forth. The Internet blockchain may be configured to enable Internet participants (e.g., Internet registries, Domain Name Service (DNS) entities, Autonomous Systems (ASes), or the like) to verify Internet resource ownership of Internet resources (e.g., Internet Protocol (IP) addresses, AS numbers, IP prefixes, DNS domain names, or the like) by Internet participants, to verify Internet resource transactions (e.g.

Abstract: A resource assignment capability is presented. A resource specification associated with a plurality of elements is received. The resource specification includes, for each of the elements, a resource request including an indication of a quantity of resources requested by the element and a resource offer including an indication of a quantity of resources offered by the element for use by one or more other elements. A resource assignment, including an indication of an association between the resources requests and the resource offers, is determined using a resource assignment process. The resource assignment process may be a greedy assignment process or a maximum flow resource assignment process. The maximum flow resource assignment process includes constructing a maximum flow resource graph based on the one or more resource specifications and applying a maximum flow process to the maximum flow resource graph to determine thereby the resource assignment.

Abstract: A managed Universal Serial Bus (USB) service capability is disclosed. The managed USB service capability is configured to use a mobile computing device (e.g., a smartphone or other suitable mobile computing device) to support a set of services for a computer (e.g., a desktop, a laptop, and the like) capable of connecting to the mobile computing device via a USB connection. The managed USB service capability enables local and/or remote control of the mobile computing device to operate in various USB device classes, such that the mobile computing device can provide various managed USB services for the computer via the peripheral connection. In this manner, the mobile computing device may be dynamically configured to operate as one or more of a network interface, a virtual private network (VPN) client, a smart card, a serial console, a mass-storage device, a booting device, and the like.

Abstract: A resource assignment capability is presented. A resource specification associated with a plurality of elements is received. The resource specification includes, for each of the elements, a resource request including an indication of a quantity of resources requested by the element and a resource offer including an indication of a quantity of resources offered by the element for use by one or more other elements. A resource assignment, including an indication of an association between the resources requests and the resource offers, is determined using a resource assignment process. The resource assignment process may be a greedy assignment process or a maximum flow resource assignment process. The maximum flow resource assignment process includes constructing a maximum flow resource graph based on the one or more resource specifications and applying a maximum flow process to the maximum flow resource graph to determine thereby the resource assignment.

Abstract: Various embodiments relate to a method, device, and machine-readable storage medium including: instructions for receiving a configuration request from an edge device, wherein the configuration request identifies a traffic flow between at least two end devices other than the edge device; instructions for assigning a virtual local area network (VLAN) identifier to the traffic flow; instructions for configuring the edge device to add the assigned VLAN identifier to outgoing frames associated with the traffic flow, wherein the outgoing frames are frames that will be transmitted by the edge device to a core network. Various embodiments additionally include instructions for configuring, in response to assigning the VLAN identifier, at least one additional edge device to remove the VLAN identifier from incoming frames associated with the traffic flow, wherein the incoming frames are frames that have traversed at least one core node of the core network.

Abstract: Provided is a method and devices for asynchronous virtual machine replication. The method includes determining a class corresponding to a data packet associated with the virtual machine and one of buffering the packet and transmitting the packet based on the determined class.

Abstract: An illustrative example software-defined network (SDN) switch includes a switch portion including an input port for receiving at least one packet. The switch portion includes an output port for forwarding the at least one packet. The switch portion includes at least one stored rule. The switch portion forwards the at least one packet based on the at least one stored rule based on a determination that the packet is of a first type corresponding to the stored rule. A controller cache includes information indicating how the switch portion should forward the at least one packet based on a determination that the packet is of a second type that does not correspond to the at least one stored rule. The switch portion communicates with the controller cache to obtain an indication of how to forward the packet based on a determination that the packet is of the second type.

Abstract: In general, a capability for forwarding packets based on path encoding is presented. The capability for forwarding a packet based on path encoding may be configured to enable forwarding of a packet along a network path by determining a path encoding label for the network path, associating the path encoding label for the network path with the packet, and forwarding the packet along the network path based on the path encoding label associated with the packet. The network path for a packet may include an ordered sequence of node output interfaces of an ordered sequence of nodes. The path encoding label for the network path includes an ordered sequence of node interface labels corresponding to the ordered sequence of node output interfaces of the nodes of the network path. The nodes of the network path forward the packet along the network path based on the path encoding label.