Abstract: In some examples, a client accesses an AI-enabled web solution through an edge device. The edge device has one or more locally cached faster first AI models, and is also connected to a remotely stored slower, but more accurate and complex, second AI model. The edge device may execute an inference operation using one of the simpler models, but its result may deviate from that of the complex cloud based model. In embodiments, to improve the accuracy and still obtain the benefit of faster response time from a locally cached model, an intelligent cache decision maker is provided. The cache decision maker includes a third AI model, trained to determine, on a per request basis, whether one of the simpler models at the edge may be used, or whether it is necessary to use the more complex cloud based model to respond to the client request.

Abstract: Embodiments of the present disclosure include a method, computer program product, and system for determining to push a data packet to a device. A processor may receive a first data packet. The processor may execute the first data packet in a secure environment. The secure environment may simulate a first state of a device. The device may include a firewall. The processor may determine, from the execution of the first data packet, that the first state changed to a second state. The processor may identify that the second state is a predetermined secure state. The processor may push the data packet to the device in response to identifying that the second state is the predetermined secure state.

Abstract: Embodiments are disclosed for a method for a wearable secure data device. The method includes setting an operational mode for the wearable secure data device that stores a plurality of secure data items. The method also includes receiving a request for at least one of the secure data items from a client device that is communicating with a third-party device. Additionally, the method includes determining if the operational mode is associated with allowing access to the secure data items. Further, the method includes providing a response based on the determination.

Abstract: A method is provided of using a set of servers to provide deferential services that have a pre-negotiated time for notice to release the servers. The method includes defining a virtual checkpoint frame interval that is constrained to a duration of up to half of the pre-negotiated time for notice to release the servers. The method includes, responsive to an end of the interval, (i) writing, to a shared state database, a state of processing of the packets and transactions occurring during the interval that are processed by a current one of the servers, and (ii) releasing the packets and transactions occurring during the interval. The method includes copying the packets and transactions occurring during the interval, and the state, from the current server to another server for subsequent processing, responsive to an indication of an instance loss on the current server.

Abstract: Personalization with on-device privacy preservation is provided by receiving, at a user device, a generalized recommendation from a remote provider backend, which include a plurality of candidate items responsive to a request from an application running on the user device; generating a plurality of candidate vectors corresponding to the plurality of candidate items representing a corresponding candidate item in a binary format across a plurality of metrics associated with the plurality of candidate items; generating a user vector based on personal data stored on the user device, the user vector representing a user in a binary format across one or more metrics associated with the personal data; determining interaction propensities based on the user vector and the plurality of candidate vectors according to a global model run on the user device; and displaying, on the user device, the plurality of candidate items according to the interaction propensities.

Abstract: Methods and systems for detecting events. A satellite image is obtained and the satellite image is processed using a first convolutional neural network (CNN) to produce a satellite vector that identifies at least one fire. A mobile sensor is automatically directed to a mobile location based on the satellite vector.

Abstract: Distributed machine learning employs a central fusion server that coordinates the distributed learning process. Preferably, each of set of learning agents that are typically distributed from one another initially obtains initial parameters for a model from the fusion server. Each agent trains using a dataset local to the agent. The parameters that result from this local training (for a current iteration) are then passed back to the fusion server in a secure manner, and a partial homomorphic encryption scheme is then applied. In particular, the fusion server fuses the parameters from all the agents, and it then shares the results with the agents for a next iteration. In this approach, the model parameters are secured using the encryption scheme, thereby protecting the privacy of the training data, even from the fusion server itself.

Abstract: Regulating a flow of data from an electronic device comprises generating a user profile associated with a user. Further, a resource profile is generated and is associated with one or more resources external to the electronic device. Additionally, a context profile is generated and describes an outcome of one or more previous interactions between the user of the electronic device and one or more resources. Rules are generated based on a comparison the user profile, the context profile and the site profile. Further, data sent from an electronic device is modified based on the set of rules.

Abstract: A network management method, system, and non-transitory computer readable medium, include a data center gateway including a set of rules for moving target defense and communicates with a service provider and a cloud gateway including the set of rules to communicate with the data center gateway by satisfying the moving target defense such that a client receives a service from the service provider when the cloud gateway requests the service from the data center gateway.

Abstract: In an embodiment, a method includes detecting a set of domain name system (DNS) requests from a device in an Internet of Things (IoT) network. In an embodiment, a method includes identifying a set of identification information associated with the set of DNS requests. In an embodiment, a method includes predicting, based on the set of identification information, a device type of the device. In an embodiment, a method includes determining, in response to predicting the device type, a network configuration setting for the device type. In an embodiment, a method includes reconfiguring, in response to determining a network configuration setting, a network configuration of the device.

Abstract: A computer-implemented method includes: receiving, using a processor, multiple data session records (DSRs); storing the multiple DSRs in a memory communicatively coupled to the processor; analyzing, using the processor, the stored multiple DSRs for temporal and spatial data; and determining, using the processor, quality degradation by using the temporal and spatial data for the stored multiple DSRs.

Abstract: An example operation may include one or more of hosting a first virtual node in a blockchain-as-a-service (Baas) provider, hosting a second virtual node in the Baas provider, and controlling transmission of information between the first virtual node and the second virtual node along an internal signal path of the Baas provider, wherein the information corresponds to a block in a blockchain that includes an entry for the first and second virtual nodes.

Abstract: An example operation may include one or more of determining data at a first node satisfies a condition, obtaining a pointer to a shared storage area for the data, controlling generation of a block including the pointer, and appending the block to a blockchain without the data, wherein the first node corresponds to first virtual node hosted by blockchain-as-a-service (Baas) provider and wherein the first virtual node receives the data from a network coupled to the Baas provider.

Abstract: An example operation may include one or more receiving an entry at a blockchain-as-a-service (Baas) provider, determining whether the entry satisfies a first set of policies, and controlling placement of the entry into a first queue when the first set of policies is satisfied and into a second queue when the first set of policies is not satisfied, wherein the first queue is to store confirmed entries to be submitted for consensus without validation and the second queue is to store pending entries that require validation before consensus.

Abstract: A method is provided for transmitter authentication including generating a noise vector using a generative adversarial network generator model, wherein a signature of a first transmitter is embedded into a signal output by the first transmitter based at least on the noise vector; and using the signature to identify the first transmitter.

Abstract: A method includes configuring worker services to operate in a stateless manner and providing support services that enable the worker services to operate in the stateless manner. The support services include (i) a management service for providing notifications of server removal and addition, (ii) a state maintenance service for maintaining state information in a central location, and (iii) a load balancer service for distributing requests among worker services. The method includes altering a number of servers allocated to at least one worker service, responsive to a notification from the management service. A private protocol is used between the worker services and load balancer service (a) to send, from the worker services to the load balancer service, a respective pointer to the state information associated with the requests, and (b) to include the respective pointer in the requests when any of the requests are forwarded to any worker service.

Abstract: A method includes configuring worker services to operate in a stateless manner and providing support services that enable the worker services to operate in the stateless manner. The support services include (i) a management service for providing notifications of server removal and addition, (ii) a state maintenance service for maintaining state information in a central location, and (iii) a load balancer service for distributing requests among worker services. The method includes altering a number of servers allocated to at least one worker service, responsive to a notification from the management service. A private protocol is used between the worker services and load balancer service (a) to send, from the worker services to the load balancer service, a respective pointer to the state information associated with the requests, and (b) to include the respective pointer in the requests when any of the requests are forwarded to any worker service.

Abstract: A method is provided of using a set of servers to provide deferential services that have a pre-negotiated time for notice to release the servers. The method includes defining a virtual checkpoint frame interval that is constrained to a duration of up to half of the pre-negotiated time for notice to release the servers. The method includes collecting packets and transactions occurring during the interval that are processed by a current server. The method includes, responsive to an end of the interval, (i) writing, to a shared state database, a state of processing of the packets and transactions occurring during the interval, and (ii) releasing the packets and transactions occurring during the interval. The method includes copying the packets and transactions occurring during the interval, and the state, from the current server to another server for subsequent processing, responsive to an indication of an instance loss on the current server.

Abstract: Embodiments for network virtualization of user equipment (UE) in a wireless communication network. A trigger may be received from a user equipment (UE) indicating potential UE mobility away from a remote virtual machine (VM) instance on a host server collocated on an eNodeB in the wireless communication network. One or more identifiers (ID) of one or more potential host servers collocated on one or more alternative eNodeBs may be determined for receiving the UE. VM replication may be provided to the one or more potential host servers to enable continuation of the remote VM instance.

Abstract: Embodiments of the invention are directed to a computer-implemented method of distributed learning using a fusion-based approach. The method includes determining data statistics at each system node of a plurality of system nodes, wherein each system node respectively comprises an artificial intelligence model. The method further includes determining a set of control and coordination instructions for training each artificial intelligence model at each system node of the plurality of system nodes. The method further includes directing an exchange of data between the plurality of system nodes based on the data statistics of each system node of the plurality of system nodes. The method further includes fusing trained artificial intelligence models from the plurality of system nodes into a fused artificial intelligence model, wherein the trained artificial intelligence models are trained using the set of control and coordination instructions.