Abstract: A method at a network element for securely sharing services across domains, the method including receiving a request at the network element to add a first domain and an edge domain to a system; provisioning a public key of the network element to the first domain and the edge domain; receiving a public key of the first domain; populating, in the network element, a table with services provided by the first domain or the edge domain; populating, in the network element, a second table with applications installed at the first domain or edge domain and permissions for services for the applications; and controlling access to the services by the applications.

Abstract: A method at a first domain for obtaining at least one insight from a second domain, the method including registering an application with an anchor in the first domain; providing, from the anchor to the application, a first message signed by the anchor; sending, from the first domain to a network domain, the signed message; receiving, from the network domain, at least one signed token, each of the at least one signed token being for a synthetic sensor on the second domain, where the synthetic sensor provides an insight; sending a request message to the second domain, the request message requesting the insight and including the at least one token; and receiving the insight from a synthetic sensor associated with the at least one token.

Abstract: A method at a vehicle computing device for identifying a driver, the method including receiving a first indicator at the vehicle computing device; obtaining, based on the first indicator, a presumed driver identity; receiving at least one second indicator at the vehicle computing device; and verifying the presumed driver identity using the at least one second indicator.

Abstract: A method at a network element for securely sharing services across domains, the method including receiving a request at the network element to add a first domain and an edge domain to a system; provisioning a public key of the network element to the first domain and the edge domain; receiving a public key of the first domain; populating, in the network element, a table with services provided by the first domain or the edge domain; populating, in the network element, a second table with applications installed at the first domain or edge domain and permissions for services for the applications; and controlling access to the services by the applications.

Abstract: A method at a computing device for finding an association between data objects in a structure, the method including selecting a coordinate location from a grid, the grid defining locations within the structure; finding whether a data object having a data object type is located at the coordinate location; when the data object is located at the coordinate location, associating the data object with other data objects at the coordinate location; and when the data object is not located at the coordinate location: determining through an explicit association that the data object at a second location services the first location; and associating the data object with the coordinate location.

Abstract: A method at a vehicle computing device for identifying a driver, the method including receiving a first indicator at the vehicle computing device; obtaining, based on the first indicator, a presumed driver identity; receiving at least one second indicator at the vehicle computing device; and verifying the presumed driver identity using the at least one second indicator.

Abstract: A method at an analytics module on a computing device, the analytics module being at a tier within a hierarchy of analytics modules and data sources, the method including receiving a first data set from a data source or a lower tier analytics module; analyzing the first data set to create a second data set; providing the second data set to at least one higher tier analytics module, the second data set being derived from the first data set; and providing at least one of an inference and an interdiction to the lower tier analytics module

Abstract: A method at a vehicle computing device for identifying a driver, the method including receiving a first indicator at the vehicle computing device; obtaining, based on the first indicator, a presumed driver identity; receiving at least one second indicator at the vehicle computing device; and verifying the presumed driver identity using the at least one second indicator.

Abstract: Example methods, apparatus, articles of manufacture and systems for providing secondary coverage in a mobile communication system are disclosed. Example methods for a first device to provide secondary coverage in a mobile communication system include transmitting a secondary coverage signal and receiving a presence indication from a second device. Such example methods can also include reporting the presence indication to an access node of the mobile communication system. Such example methods can further include receiving information from the access node to enable relay node functionality in the first device in response to reporting the presence indication to the access node.

Abstract: A computer-implemented method comprises receiving a subscription request from at least one subscriber, the subscription request defining one or more subscription parameters; obtaining one or more events from at least one publisher; marshalling the one or more events according to the one or more subscription parameters; and delivering the one or more events to the subscriber based on the marshalling.

Abstract: A method at a first domain for obtaining at least one insight from a second domain, the method including synchronizing a permissions table at the first domain with a master permissions table at a network element; receiving a request for an insight from an application at a bridge in the first domain; confirming an identity of the application; verifying, at the bridge, application permissions using the permissions table at the first domain, the verifying confirming that the application has permission to access the insight; sending a request message from the first domain to the second domain, the request message being signed by a private key of the first domain and requesting the insight; and receiving the insight from the second domain.

Abstract: A method at a network element for securely sharing services across domains, the method including receiving a request at the network element to add a first domain and an edge domain to a system; provisioning a public key of the network element to the first domain and the edge domain; receiving a public key of the first domain; populating, in the network element, a table with services provided by the first domain or the edge domain; populating, in the network element, a second table with applications installed at the first domain or edge domain and permissions for services for the applications; and controlling access to the services by the applications.

Abstract: A method at a first domain for obtaining at least one insight from a second domain, the method including registering an application with an anchor in the first domain; providing, from the anchor to the application, a first message signed by the anchor; sending, from the first domain to a network domain, the signed message; receiving, from the network domain, at least one signed token, each of the at least one signed token being for a synthetic sensor on the second domain, where the synthetic sensor provides an insight; sending a request message to the second domain, the request message requesting the insight and including the at least one token; and receiving the insight from a synthetic sensor associated with the at least one token.

Abstract: A guest operating system executing on a virtual machine hosted by a host operating system may forward information about the state of the guest operating system to the host operating system for analysis regarding security threats. The host operating system may also forward information about the state of the host operating system to the guest operating system for analysis regarding security threats. One or both of the guest operating system and the host operating system may also forward the information about their state(s) to a remote server for analysis regarding security threats to the machine running the host operating system and hosting the virtual machine running the guest operating system. Security threats may be identified based on a detection of abnormal behavior. Abnormal behavior may be detected using machine-learning models. The machine-learning models may be trained/refined over time based on collected state information.

Abstract: A method at an analytics module on a computing device, the analytics module being at a tier within a hierarchy of analytics modules and data sources, the method including receiving a first data set from a data source or a lower tier analytics module; analyzing the first data set to create a second data set; providing the second data set to at least one higher tier analytics module, the second data set being derived from the first data set; and providing at least one of an inference and an interdiction to the lower tier analytics module.

Abstract: Example methods, apparatus, articles of manufacture and systems for providing secondary coverage in a mobile communication system are disclosed. Example methods for a first device to provide secondary coverage in a mobile communication system include transmitting a secondary coverage signal and receiving a presence indication from a second device. Such example methods can also include reporting the presence indication to an access node of the mobile communication system. Such example methods can further include receiving information from the access node to enable relay node functionality in the first device in response to reporting the presence indication to the access node.

Abstract: A computer-implemented method comprises receiving a subscription request from at least one subscriber, the subscription request defining one or more subscription parameters; obtaining one or more events from at least one publisher; marshalling the one or more events according to the one or more subscription parameters; and delivering the one or more events to the subscriber based on the marshalling.

Abstract: A method at a remote proxy on a first node, the method including receiving, at the remote proxy, a first message from a first module on the first node, the first message being directed to a second module on a second node; verifying the first message at the remote proxy utilizing operating system verification; determining, based on a manifest at the remote proxy, the second node; signing, using a private key for the first node, the first message; and sending the first message to the second node.

Abstract: A computer-implemented method comprises receiving a subscription request from at least one subscriber, the subscription request defining one or more subscription parameters; obtaining one or more events from at least one publisher; marshalling the one or more events according to the one or more subscription parameters; and delivering the one or more events to the subscriber based on the marshalling.

Abstract: A method and privacy protection system for ambiguating and disambiguating data collected for machine learning. The method comprising receiving data from an endpoint, the data including identifying information for the endpoint and non-identifying information; obfuscating the identifying information in the received data to generate obfuscated data including the non-identifying information and obfuscated identifying information; transmitting the obfuscated data to one or more machine learning providers; receiving an actionable inference message based upon the non-identifying information in the obfuscated data from the one or more machine learning providers; resolving the obfuscated identifying information in the received actionable inference message to recover the identifying information; and transmitting the resolved actionable inference message to the endpoint associated with the identifying information.