Abstract: The technology disclosed herein enables resiliency of routing between NFs when degraded 5G NF topology information is provided to an SCP by an NRF. In a particular example, a method includes transmitting requests for NRF status from a Service Communications Proxy (SCP) to NRFs in a 5G network. The NRFs exchange messages with each other to determine whether Network Function (NF) topology information is available from the NRFs. The method further includes receiving responses to the requests in the SCP. The responses indicate a number of the NRFs from which the NF topology information is available. The method also includes identifying one or more failed NRFs of the NRFs that are in a failed state based on the responses. The NF topology information is aggregated from operative NRFs should one or more of the NRFs still be operative.

Abstract: A method for prioritizing among alternate network function (NF) instances includes registering a first NF profile of a first NF instance with a first NF repository function (NRF), and defining, as part of the first NF profile, alternate NF instance information identifying a plurality of individual alternate NF instances to function as backups in response to unavailability of the first NF instance and specifying, for each alternate NF instance, a priority attribute value indicating a relative priority of the alternate NF instance with respect to the other alternate NF instances. The method further includes, at a first consumer NF or SCP, discovering, from the first NRF, the first NF profile of the first NF instance, detecting unavailability of the first NF instance, and, using the alternate NF instance information in the first NF profile to select and contact one of the alternate NF instances identified by the alternate NF instance information.

Abstract: A self-aligning mechanical fastener includes an active apparatus and a passive apparatus and is configured to have locked and unlocked states. The active apparatus includes a motor that drives a shaft in first direction to advance a plunger towards the passive apparatus to transition the fastener to the locked state. The plunger includes a tapered distal end that mechanically engages a locking body. The locking body is moved laterally by the tapered distal end to apply a force to a locking frame that is located in a slot defined in a housing of the passive apparatus. The force causes the mechanical fastener to be locked. To unlock the mechanical fastener, the motor drives the shaft in a second direction to retract the plunger away from the passive apparatus.

Abstract: The present disclosure relates to systems, methods, and computer-readable media for receiving usage data for a virtual device (or other virtual service), analyzing the usage data to determine a usage bucket characteristic of usage of the virtual device over a period of time, and determining a usage score for the virtual device. The systems described herein further involve causing a deployment of the virtual device to be upgraded, downgraded, or otherwise modified based on the usage bucket and associated usage score. The features and functionalities described herein can provide an efficient mechanism for administrating a tenant deployment as well as implementing a more efficient utilization of cloud computing resources for a variety of virtual services.

Abstract: Certain aspects of the present disclosure provide techniques for performing machine learning computations in a compute in memory (CIM) array comprising a plurality of bit cells, including: determining that a sparsity of input data to a machine learning model exceeds an input data sparsity threshold; disabling one or more bit cells in the CIM array based on the sparsity of the input data prior to processing the input data; processing the input data with bit cells not disabled in the CIM array to generate an output value; applying a compensation to the output value based on the sparsity to generate a compensated output value; and outputting the compensated output value.

Abstract: Certain aspects of the present disclosure provide techniques for performing machine learning computations in a compute in memory (CIM) array comprising a plurality of bit cells, including: determining that a sparsity of input data to a machine learning model exceeds an input data sparsity threshold; disabling one or more bit cells in the CIM array based on the sparsity of the input data prior to processing the input data; processing the input data with bit cells not disabled in the CIM array to generate an output value; applying a compensation to the output value based on the sparsity to generate a compensated output value; and outputting the compensated output value.

Abstract: Systems and methods for discovering caller paths in a micro-service graph are disclosed. The system can receive a first request to interact with a first node, wherein the first node is associated with a software application. The system can generate a first bit encoding indicative of the first node. The system can transmit, from the first node, a second request to a second node associated with the software application, wherein the second request is associated with the first request. The system can generate, based on the first bit encoding, a second bit encoding indicative of the first node and the second node. The system can determine, based on the second bit encoding, a sequence of requests.

Abstract: Some embodiments address technical challenges arising from efforts to identify and mitigate security risks, in particular but not only, risks that sensitive data will be exfiltrated. Some embodiments provide or utilize an anomaly detector which is configured to detect a security anomaly in data based on at least a distribution of sensitive information type documents in a collection of documents and classifications of documents by trainable classifiers based on machine learning. Some embodiments provide or utilize a security policy generator which is configured to proactively and automatically generate security policy recommendations, rank at least two of the security policy recommendations, and present at least one top-ranked generated security policy recommendation in a user interface. Some embodiments generate a security policy in a managed computing system based on at least an anomaly score, and then configure the managed computing system according to the generated security policy.

Abstract: A method for error information propagation from an SCP to a NF to support a circuit breaker design at the consumer NF includes receiving, at the SCP and from the consumer NF, a first SBI service request message. The method further includes attempting, by the SCP, to forward the first SBI service request to N producer NF instances. The method further includes detecting, by the SCP, an error involving the N producer NF instances. The method further includes performing, by the SCP, successful alternate routing of the first SBI service request message to an (N+1) th producer NF instance. The method further includes receiving, by the SCP, a success response message from the (N+1) th producer NF instance. The method further includes propagating, by the SCP, with the success response message and to the consumer NF, error information regarding the N producer NF instances.

Abstract: A method for automatically configuring service-based interface (SBI) timeouts includes determining, by a service communication proxy (SCP), latency measurements for SBI interfaces with producer network functions (NFs). The method further includes maintaining, by the SCP, a database of the latency measurements for the SBI interfaces with the producer NFs. The method further includes communicating, by the SCP, the latency measurements to an element management system (EMS) for automatically configuring, at consumer NFs, timeouts for the SBI interfaces associated with the producer NFs.

Abstract: A self-aligning mechanical fastener includes an active apparatus and a passive apparatus and is configured to have locked and unlocked states. The active apparatus includes a motor that drives a shaft in first direction to advance a plunger towards the passive apparatus to transition the fastener to the locked state. The plunger includes a tapered distal end that mechanically engages a locking body. The locking body is moved laterally by the tapered distal end to apply a force to a locking frame that is located in a slot defined in a housing of the passive apparatus. The force causes the mechanical fastener to be locked. To unlock the mechanical fastener, the motor drives the shaft in a second direction to retract the plunger away from the passive apparatus.

Abstract: A method for providing service based interface (SBI) support for network elements (NEs) not supporting SBI service operations includes receiving SBI configuration parameters for an NE not supporting SBI service operations. The method further includes establishing a connection with the NE not supporting SBI service operations. The method further includes registering, with a network function (NF) repository function (NRF) and using the SBI configuration parameters, the NE not supporting SBI service operations. The method further includes monitoring, over the connection, status of the NE not supporting SBI service operations. The method further includes updating, with the NRF, the status of the NE not supporting SBI service operations.

Abstract: Data may contain personal information and be subject to privacy requirements. The data may be encrypted and only a secure enclave may be able to decrypt the encrypted data. The secure enclave may be used to generate a report based on the encrypted data and a first set of added noise. The report may be subject to audit requirements and satisfy a differential privacy guarantee. The encrypted data may be stored for a first period. After the first period, the secure enclave may be used to generate a private synopsis based on the encrypted data and a second set of added noise. The private synopsis may satisfy the differential privacy guarantee. The private synopsis may be encrypted and only the secure enclave may be able to decrypt the encrypted private synopsis. The encrypted data may be expunged, and the encrypted private synopsis may be retained for a second period.

Abstract: A method for delegated authorization at a security edge protection proxy (SEPP) includes intercepting, from a consumer network function (NF) that does not support access token based authorization, a service based interface (SBI) service request for accessing a service provided by a producer NF that requires access token based authorization. The method further includes operating as an access token authorization client to obtain a first access token on behalf of the consumer NF. The method further includes using the first access token to enable the consumer NF to access the service provided by the first producer NF. The SEPP may also operate as an access token authorization server on behalf of an NRF that does not support access-token-based authorization.

Abstract: Various embodiments include devices and methods for a multi-bit multiplier-accumulator (MAC). Some embodiments may include an analog adder having a first adder capacitor. The first adder capacitor may add a plurality of single-bit MAC outputs by receiving the plurality of single-bit MAC outputs from a plurality of single-bit MACs, and storing the plurality of single-bit MAC outputs. In some embodiments, the analog adder may output a multi-bit MAC output based on addition of the stored plurality of single-bit MAC outputs.

Abstract: A secure enclave may be used to satisfy privacy requirements and audit requirements. Code may be loaded into the secure enclave. The code may generate a predefined report based on data and added noise. The pre-defined report may be subject to audit requirements. The data may be subject to the privacy requirements. The secure enclave may generate an encryption key and a decryption key based on the code. Only the secure enclave may have access to the decryption key. And the secure enclave may allow only a verified copy of the code to access the decryption key. With the added noise, the report may satisfy a pre-defined differential privacy guarantee. Encrypting the code and ensuring that the report satisfies the differential privacy guarantee may satisfy the privacy requirements. Retaining the report, the code, the secure enclave, and the encrypted data may satisfy the audit requirements.

Abstract: A power detector includes a first current mirror that receives an input signal and generates a mirrored input signal, a first oscillator that reverses a first current of the mirrored input signal based on a voltage of the mirrored input signal reaching a threshold, and a first counter that generates a first count of each period generated by the first oscillator. The power detector also includes a second current mirror that receives a reference signal and generates a mirrored reference signal, a second oscillator that reverses a second current of the mirrored reference signal based on a voltage of the mirrored reference signal reaching the threshold, and a second counter that generates a second count of each period generated by the second oscillator. A processor then determine the power of the input signal based on the first count and the second count.

Abstract: Certain aspects provide an apparatus for signal processing in a neural network. The apparatus generally includes computation circuitry configured to perform a convolution operation, the computation circuitry having multiple input rows, and an activation buffer having multiple buffer segments coupled to the multiple the multiple input rows of the computation circuitry, respectively. In some aspects, each of the multiple buffer segments comprises a first multiplexer having a plurality of multiplexer inputs, and each of the plurality of multiplexer inputs of one of the first multiplexers on one of the multiple buffer segments is coupled to a data output of the activation buffer on another one of the multiple buffer segments.

Abstract: The subject matter described herein includes a method for reducing the likelihood of successful denial of service (DoS) attacks by validating overload control information (OCI) scope information against network function (NF) profile information obtained using target resource identification information. The method includes receiving a service based interface (SBI) request message, obtaining, from the SBI request message, target resource identification information, obtaining NF profile information using the target resource identification information and storing the NF profile information, receiving an SBI response message including overload control information and scope information for the overload control information, using the stored NF profile information to determine whether the scope information for the overload control information is valid, and, in response to determining that the scope information for the overload control information is invalid, rejecting the SBI response message.

Abstract: A method for optimizing network traffic distribution using timeslot-based tracked producer network function (NF) performance during producer NF selection is performed at a service communication proxy (SCP) including at least one processor. The method includes tracking a performance characteristic of producer NFs across different timeslots. The method further includes receiving, from a consumer NF, a service based interface (SBI) service request. The method further includes identifying eligible producer NFs capable of handling the SBI service request. The method further includes selecting, from the eligible producer NFs, in a manner that at least partially overrides priorities of the eligible producer NFs, and based on the tracked performance characteristic across the different timeslots, a producer NF to handle the SBI service request. The method further includes forwarding the SBI service request to the producer NF.