Abstract: A query-set is used to obtain recommendation results from different recommendation algorithms available locally on a device. The same query-set is used to obtain recommendation results from a remote, well-established online recommendation system using an unknown recommendation algorithm. Distances are measured between the recommendation results from the online recommendation system and the recommendation results from each of the local recommendation algorithms. The local recommendation algorithm having generated recommendation results with a smallest distance to the recommendation results from the online recommendation system is selected for generation of recommendations based on a local recommendation algorithm.

Abstract: A query-set is used to obtain recommendation results from different recommendation algorithms available locally on a device. The same query-set is used to obtain recommendation results from a remote, well-established on- line recommendation system using an unknown recommendation algorithm. Distances are measured between the recommendation results from the online recommendation system and the recommendation results from each of the local recommendation algorithms. The local recommendation algorithm having generated recommendation results with a smallest distance to the recommendation results from the online recommendation system is selected for generation of recommendations based on a local recommendation algorithm.

Abstract: An apparatus and method for securely accessing a web service by a web application running in a browser on a user device is disclosed. A user device sends a request for accessing a web service by addressing a generic name. In response, the user device receives a global name that uniquely identifies a local device hosting a web service. The global name is further associated with a certificate. The user device receives the global name and verifies the certificate associated with the global name to securely access the web service.

Abstract: In an access point, data communication of network devices between the network devices and a wide area network or between the network devices is monitored. Change points are detected in the monitored data. If a change point coincides with a removal/addition of a network device, configuration settings on the gateway for a network device may be automatically changed, transferred to another network device and/or reset to a default, possibly more restrictive configuration. Network management and data protection are facilitated and improved.

Abstract: To determine if a device is open to the Internet, the device, storing a statistically unique identifier for the device or a group of devices including the device, sends a search request comprising the statistically unique identifier to an Internet search engine, receives a response to the search request from the Internet search engine, determines from the search response whether the statistically unique identifier was found by the Internet search engine, and in case the statistically unique identifier was found found by the Internet search engine, performs an action intended to disable access to the statistically unique identifier from the Internet via the communication interface. The device can also update statistically unique identifier in case the statistically unique identifier was found in the search response.

Abstract: Gateways monitor communications between their LAN devices and the WAN and count the number of requests per LAN device to target IP addresses. If the number of requests for a LAN device to a target IP address exceeds a first value X, an alert message is transmitted at destination to all other gateways, the message including the target IP address. Gateways monitor the sum of request counter values based on alert messages received per target IP address. If the sum exceeds a second value VALUE_DDOS, a DDoS attack is detected. Gateways having detected a DDoS attack verify if they have a LAN device which transmitted a number of requests to the attacked IP address that exceeds value X and where appropriate puts such LAN device in quarantine by blocking data communication from the device to the WAN.

Abstract: A method of monitoring a transfer of a block of content from a first device to a second device in a peer-to-peer network is described. A monitoring device performs a smart contract in the peer-to-peer network by receiving a reusable proof of work related to a transfer of the block of content from the first device and from the second device; receiving a proof of possession of the block of content from the second device; and logging a result of the data transfer on a blockchain for transfer of blocks of content.

Abstract: A device such as a gateway comprises a communication interface configured to receive an inbound connection via a network, memory configured to store a list of domain names corresponding to web search engines and at least one hardware processor configured to obtain an IP address of a device from the inbound connection, obtain, for example using reverse DNS, a domain name corresponding to the IP address, determine that the device is open to the network if the domain name is on the list of domain names corresponding to web search engines and, in case the device is open to the network, perform a mitigating action.

Abstract: A plurality of watcher gateways in a network measure network characteristics of target gateways. The watcher gateways can elect a leader and send the measurements to the leader that verifies the consistency of and concatenates the measurements, preferably in a predetermined order, before hashing the concatenation. The resulting hash value is then stored, possibly with identifiers of the watcher gateways, in a blockchain maintained by the target gateway and the concatenation is stored in a log storage.

Abstract: A device and a method for authorizing access to a service on a first device upon detection of a second device located in near proximity, while preferably using broadcast transmission, is disclosed. The second device broadcasts on a second broadcast network a message comprising at least a group identifier common to the set of devices that can access the service and a time reference value corresponding to the emission time of the message, according to a common time reference received by all devices from a first broadcast network. The first device authorizes access to the service only if the group identifier received from the message is the same as the group identifier of the device and if the delay between the measured arrival of the message and its emission time is lower than a threshold.

Abstract: A device and a method for authorizing access to a service on a first device upon detection of a second device located in near proximity, while preferably using broadcast transmission, is disclosed. The second device broadcasts on a second broadcast network a message comprising at least a group identifier common to the set of devices that can access the service and a time reference value corresponding to the emission time of the message, according to a common time reference received by all devices from a first broadcast network. The first device authorizes access to the service only if the group identifier received from the message is the same as the group identifier of the device and if the delay between the measured arrival of the message and its emission time is lower than a threshold.

Abstract: It is provided a method for checking plausibility of a value received from a device. It comprises receiving, by a neighbor of the device at a current time instant, a current output value and a previous output value of the device (S410) and; determining, by the neighbor of the device, that a value evolution between the current output value and the previous output value of the device is implausible according to the value evolution.

Abstract: A method and apparatus to identify co-entities in an establishment. Given a set of points in a three dimensional space, along with identification information from mobile devices and a timestamp, a times series for each device may be captured. Time series that overlap may be generated, and the intersecting time series portions may be extracted. Based on the extracted overlapping time series, a determination may be made that two or more entities are likely to be co-entities.

Abstract: A method for securely accessing a web service by a web application running in a browser on a user device through a network is disclosed. The web service is hosted by at least a device among which a local device is being accessed by the user device. The local device comprises a global name that uniquely identifies the local device and a certificate associated to the global name.

Abstract: Distributed detection of isolated anomalies, without resulting in overloading an anomaly management system in case of large-scale anomalies occurring and that does not rely on user intervention. Isolated anomalies are detected through insertion of devices rendering a service in different quality of service buckets, and if a device changes from one (or source) quality bucket to another (or destination) quality bucket, the device counts the number of devices in the destination quality bucket that have made the same move.

Abstract: The present invention generally relates to distributed data storage systems. In particular, the present invention is related to a method of data storing in a distributed data storage system that comprises a clustering of data blocks and the use of random linear combinations of data blocks that makes the distributed data store system efficient in terms of storage space needed and inter-device communication costs, both for the storage method, as for the associated repair method.

Abstract: The present disclosure relates to a method for selecting nodes in networks, especially in complex networks with a great number of interconnected nodes and edges, by using a first centrality computation to filter the nodes and deliver a sub-network with a smaller number of nodes, to which can be applied a second centrality computation.

Abstract: A replication set of k storage devices is defined, that stores a particular data item. Each device in the replication set has an associated timer for which a timeout value for disconnection is determined based on individual downtime data distribution of the device. A new device for storing the data item is added to the replication set when the timer expires for a device in the replication set, and if the number of devices in the replication set that are still connected is below a predetermined threshold. Timeout values are adapted according to a factor of criticalness determined for the replication set, resulting in a more reactive, or on the contrary, a less reactive replacement of devices in the replication set. The factor of criticalness is determined according to a difference between the connected devices in the replication set and the predetermined number k.

Abstract: A system for establishing a client/server type relationship in a hybrid peer to peer network connects a first peer (20a) to a second peer (20d) implementing a predetermined function (F) in that peer to peer network. To this end, the first peer (20a) has a superpeer (10a) capable of establishing a list (LF) of the active peers (20d, 20e) implementing the function (F) in the service of the peers of the network and of sending that list (LF) to its peer (20a). The first peer (20a) can then establish a client/server type relationship with a second peer (20d) selected in that list (LF).

Abstract: A map reduce frame work for large scale data processing is optimized by the method of the invention that can be implemented by a master node. The method comprises reception of data from worker nodes on read pointer locations pointing to input data of tasks executed by these worker nodes and stealing of work from these tasks, the work being stolen being applied to input data that have not yet been processed by the task from which work is stolen.