Abstract: The technology described herein includes receiving a global demand to process a workflow; determining if one or more virtual resources are available to process the workflow; in response to the one or more virtual resources being available to process the workflow, determining if the one or more virtual resources have available timeslots for a class of service of the workflow; and in response to the one or more virtual resources having available timeslots for the class of service of the workflow, selecting a starting timeslot and scheduling the workflow on a selected one or more of the one or more virtual resources, accepting the workflow, and sending one or more local demands corresponding to the workflow to one or more local resource managers managing the selected one or more of the one or more virtual resources.

Abstract: Provided herein are exemplary systems and methods for an architecture for converged industrial control and real time applications, the architecture comprising a physical network port, a switching module, an embedded ARM core, a network interface controller, and a multi-core computing module. According to further exemplary embodiments, the physical network port is an ethernet port capable of supporting a real-time field bus. The switching module may be configured to support a multiport ethernet switch. The switching module may also be configured to enable a backplane mesh to interconnect multiple foglets. Additionally, the embedded ARM core may be within the switching module, and the embedded ARM core may be configured to support virtualization.

Abstract: A method in one embodiment includes intercepting a message in an on-board unit (OBU) of a vehicular network environment between a source and a receiver in the vehicular network environment, verifying the message is sent from the source, verifying the message is not altered, evaluating a set of source flow control policies associated with the source, and blocking the message if the set of source flow control policies indicate the message is not permitted. In specific embodiments, the message is not permitted if a level of access assigned to the source in the set of source flow control policies does not match a level of access tagged on the message. In further embodiments, the method includes evaluating a set of receiver flow control policies associated with the receiver, and blocking the message if the set of receiver flow control policies indicates the message is not permitted.

Abstract: Adaptive scheduling of compute functions in a fog network is described herein. An example method includes synchronizing kernel and hypervisor scheduling of applications used to control one or more edge devices using a global schedule, wherein the global schedule comprises timeslots for applications, and adapting the timeslots in real-time or near real-time based on application-based time related feedback that is indicative of time delays.

Abstract: Disclosed herein are enhancements for operating an input/output (I/O) management cluster with end I/O devices. In one implementation, a method of operating an I/O cluster includes, in a first I/O management node of the I/O management cluster, executing a first application to manage data for an I/O device communicatively coupled via at least one switch to the first I/O management node. The method further provides identifying a failure in the first I/O management node related to processing the data for the I/O device and, in response to the failure, configuring the at least one switch to communicate the data for the I/O device with a second I/O management node of the I/O management cluster. The method also includes, in the second I/O management node and after configuring the at least one switch, executing a second application to manage the data for the I/O device.

Abstract: Enterprise grade security for integrating multiple computing domains with a public cloud is provided herein. An example system a forwarder that provides one-way data publishing to a public cloud and a data bus that provides domain-to-domain messaging between a plurality of domains. At least one of the plurality of domains includes operational technology infrastructure devices and operational technology virtual machines. The operational technology virtual machines are communicatively coupled to the operational technology infrastructure devices using one or more operational technology switches. The operational technology switches isolates the operational technology infrastructure devices and facilitates one-way communication and prevents bidirectional communication to the operational technology infrastructure devices from the public cloud.

Abstract: Provided herein are exemplary systems and methods for a fog computing facilitated flexible factory including establishing a physical production process as part of a work cell, establishing a sensing process as part of the work cell for the physical production process, establishing a monitoring process for the sensing process and the physical production process, establishing a managing process for the monitoring process, the sensing process and the physical production process, establishing a planning process for the managing process, the monitoring process, the sensing process and the physical production process, and establishing a fog node as part of the work cell for all of the processes.

Abstract: In one embodiment, a router operating in a hierarchically routed computer network may receive collected data from one or more hierarchically lower devices in the network (e.g., hierarchically lower sensors or routers). The collected data may then be converted to aggregated metadata according to a dynamic schema, and the aggregated metadata is stored at the router. The aggregated metadata may also be transmitted to one or more hierarchically higher routers in the network. Queries may then be served by the router based on the aggregated metadata, accordingly.

Abstract: In one embodiment, a method comprises detecting, by an access network computing node, a network service provided by a service provider for one or more identified endpoint devices via a wide area network connection, the access network computing node within an access network providing connections for the one or more identified endpoint devices to access the network service via the wide area network connection; detecting an unavailability of the network service via the wide area network connection; and supplying, by the access network computing node, at least a substitute of the network service for the one or more identified endpoint devices in response to the detected unavailability of the network service via the wide area network connection.

Abstract: A device includes a multistage filter and an elephant trap. The multistage filter has hash functions and an array. The multistage filter is operable to receive a packet associated with a candidate heavy network user and send the packet to the hash functions. The hash functions generate hash function output values corresponding to indices in the array. The elephant trap is connected to the multistage filter. The elephant trap includes a buffer and probabilistic sampling logic. The probabilistic sampling logic is operable to attempt to add information associated with the packet to the buffer a particular percentage of the time based in part on the result of the multistage filter lookup. The buffer is operable to hold information associated with the packet, counter information, and timestamp information.

Abstract: Adaptive scheduling of compute functions in a fog network is described herein. An example method includes synchronizing kernel and hypervisor scheduling of applications used to control one or more edge devices using a global schedule, wherein the global schedule comprises timeslots for applications, and adapting the timeslots in real-time or near real-time based on application-based time related feedback that is indicative of time delays.

Abstract: Provided herein are exemplary systems and methods for an architecture for converged industrial control and real time applications, the architecture comprising a physical network port, a switching module, an embedded ARM core, a network interface controller, and a multi-core computing module. According to further exemplary embodiments, the physical network port is an ethernet port capable of supporting a real-time field bus. The switching module may be configured to support a multiport ethernet switch. The switching module may also be configured to enable a backplane mesh to interconnect multiple foglets. Additionally, the embedded ARM core may be within the switching module, and the embedded ARM core may be configured to support virtualization.

Abstract: In one embodiment, a method comprises detecting, by an access network computing node, a network service provided by a service provider for one or more identified endpoint devices via a wide area network connection, the access network computing node within an access network providing connections for the one or more identified endpoint devices to access the network service via the wide area network connection; detecting an unavailability of the network service via the wide area network connection; and supplying, by the access network computing node, at least a substitute of the network service for the one or more identified endpoint devices in response to the detected unavailability of the network service via the wide area network connection.

Abstract: A method in one embodiment includes intercepting a message in an on-board unit (OBU) of a vehicular network environment between a source and a receiver in the vehicular network environment, verifying the message is sent from the source, verifying the message is not altered, evaluating a set of source flow control policies associated with the source, and blocking the message if the set of source flow control policies indicate the message is not permitted. In specific embodiments, the message is not permitted if a level of access assigned to the source in the set of source flow control policies does not match a level of access tagged on the message. In further embodiments, the method includes evaluating a set of receiver flow control policies associated with the receiver, and blocking the message if the set of receiver flow control policies indicates the message is not permitted.

Abstract: The present invention provides improved methods and devices for managing network congestion. Preferred implementations of the invention allow congestion to be pushed from congestion points in the core of a network to reaction points, which may be edge devices, host devices or components thereof. Preferably, rate limiters shape individual flows of the reaction points that are causing congestion. Parameters of these rate limiters are preferably tuned based on feedback from congestion points, e.g., in the form of backward congestion notification (“BCN”) messages. In some implementations, such BCN messages include congestion change information and at least one instantaneous measure of congestion. The instantaneous measure(s) of congestion may be relative to a threshold of a particular queue and/or relative to a threshold of a buffer that includes a plurality of queues.

Abstract: In one embodiment, a method comprises detecting, by an access network computing node, a network service provided by a service provider for one or more identified endpoint devices via a wide area network connection, the access network computing node within an access network providing connections for the one or more identified endpoint devices to access the network service via the wide area network connection; detecting an unavailability of the network service via the wide area network connection; and supplying, by the access network computing node, at least a substitute of the network service for the one or more identified endpoint devices in response to the detected unavailability of the network service via the wide area network connection.

Abstract: A method in one embodiment includes intercepting a message in an on-board unit (OBU) of a vehicular network environment between a source and a receiver in the vehicular network environment, verifying the message is sent from the source, verifying the message is not altered, evaluating a set of source flow control policies associated with the source, and blocking the message if the set of source flow control policies indicate the message is not permitted. In specific embodiments, the message is not permitted if a level of access assigned to the source in the set of source flow control policies does not match a level of access tagged on the message. In further embodiments, the method includes evaluating a set of receiver flow control policies associated with the receiver, and blocking the message if the set of receiver flow control policies indicates the message is not permitted.

Abstract: Enterprise grade security for integrating multiple computing domains with a public cloud is provided herein. An example system a forwarder that provides one-way data publishing to a public cloud and a data bus that provides domain-to-domain messaging between a plurality of domains. At least one of the plurality of domains includes operational technology infrastructure devices and operational technology virtual machines. The operational technology virtual machines are communicatively coupled to the operational technology infrastructure devices using one or more operational technology switches. The operational technology switches isolates the operational technology infrastructure devices and facilitates one-way communication and prevents bidirectional communication to the operational technology infrastructure devices from the public cloud.

Abstract: Disclosed herein are enhancements for operating an input/output (I/O) management cluster with end I/O devices. In one implementation, a method of operating an I/O cluster includes, in a first I/O management node of the I/O management cluster, executing a first application to manage data for an I/O device communicatively coupled via at least one switch to the first I/O management node. The method further provides identifying a failure in the first I/O management node related to processing the data for the I/O device and, in response to the failure, configuring the at least one switch to communicate the data for the I/O device with a second I/O management node of the I/O management cluster. The method also includes, in the second I/O management node and after configuring the at least one switch, executing a second application to manage the data for the I/O device.

Abstract: A method includes establishing communication channels between an on-board unit (OBU) of a vehicle and a plurality of nodes, tagging each of a plurality of data from the plurality of nodes with a priority level, storing the plurality of data in a priority queue according to respective priority levels, selecting a medium to present a first data of the plurality of data to a user, and presenting the first data to the user via the medium. In the method, the plurality of nodes includes a remote node and an in-vehicle device. Another method includes receiving a data from a remote node, generating a plurality of data streams from the data and transmitting the plurality of data streams across a plurality of wireless interfaces. Another method includes enhancing audio signals from a plurality of microphones and speakers. Yet another method includes various gesture based user interfaces coupled to the OBU.