Abstract: A system may include one or more tangible, non-transitory computer-readable media having stored thereon instructions, the instructions when executed to instruct one or more processors to: receive a platform-independent access binding data structure (a PIAB data structure), the PIAB data structure comprising a platform-independent representation of a subject class, a verb, an object, and a binding comprising a permission for the subject class to perform the verb on the object; convert the PIAB data structure to a first platform-specific binding for a first target platform; and cause the first platform-specific binding to be implemented on the first target platform.

Abstract: A system may include one or more tangible, non-transitory computer-readable media having stored thereon instructions, the instructions when executed to instruct one or more processors to: receive a platform-independent access binding data structure (a PIAB data structure), the PIAB data structure comprising a platform-independent representation of a subject class, a verb, an object, and a binding comprising a permission for the subject class to perform the verb on the object; convert the PIAB data structure to a first platform-specific binding for a first target platform; and cause the first platform-specific binding to be implemented on the first target platform.

Abstract: A computing fabric includes one or more host computing platforms and a plurality of partitions instantiated across the one or more host computing platforms, each of the plurality of partitions allocated computing resources of the one or more host computing platforms. The computing fabric further includes a hypervisor installed on the one or more host computing platforms and managing interactions among the plurality of partitions. The plurality of partitions includes a persistent partition to which one or more storage devices are allocated, the persistent partition executing software loaded from a trusted storage location and executing from a non-volatile memory.

Abstract: Systems and methods for non-stop computing in a virtualization fabric are disclosed. One system includes a computing fabric comprising a plurality of host platforms, the plurality of host platforms including at least a first host platform and a second host platform communicatively connected to the first host platform. The system also includes an interconnect service partitions residing on the first host platform. The system includes a plurality of guest partitions distributed across the plurality of host platforms. The system further includes a DNS server instance managed by at least one of the plurality of interconnect service partitions and defining at least one zone, the at least one zone including one or more partitions from among the plurality of guest partitions distributed across the plurality of host platforms.

Abstract: Embodiments of the disclosure provide methods, systems, apparatuses, and computer program products for facilitating communications between a plurality of devices and subsystems on a first network (for example, a first cable network) and one or more devices and subsystems on a second network (for example, a second cable network) using an integration system on the first network. In one embodiment, the integration system may allow for deployment of new systems or infrastructures that can cooperatively operate with legacy systems already deployed on the first or second networks. Particular embodiments of the subject matter may reduce the cost associated with deploying, upgrading and/or maintaining the devices and systems on the first and/or second networks.

Abstract: A system for providing a system for providing network communications organized using communities of interests defined by a common encryption key. IoT devices are located at the edge of a network while providing secure and isolated communications for its applications and data through a common network infrastructure. The system's functionality provides the IoT network with secure communications to obtain data from devices by host applications over public networks. The data may be organized and segmented in a manner that isolates and protects the data with only authorized applications gaining access the data to see its existence and read its contents.

Abstract: Embodiments of the disclosure provide methods, systems, apparatuses, and computer program products for facilitating communications between a plurality of devices and subsystems on a first network (for example, a first cable network) and one or more devices and subsystems on a second network (for example, a second cable network) using an integration system on the first network. In one embodiment, the integration system may allow for deployment of new systems or infrastructures that can cooperatively operate with legacy systems already deployed on the first or second networks. Particular embodiments of the subject matter may reduce the cost associated with deploying, upgrading and/or maintaining the devices and systems on the first and/or second networks.

Abstract: A Forward Fabric platform system for coupling to a data center platform. The Forward Fabric platform system includes a plurality of nodes, an interconnect backplane coupled between the nodes, and a Forward Fabric Manager (FFM) coupled to the nodes via the interconnect backplane for controlling and managing the Forward Fabric platform system. The Forward Fabric manager creates at least one secure partition (s-Par) application executing within at least one of the nodes. At least one of the nodes having a secure partition (s-Par) application executing therein also includes a software defined network (SDN) controller executing therein for receiving configuration information and providing at least one secure and non-stop Forward Fabric endpoint on the Forward Fabric platform system for connecting with at least one endpoint on the data center platform. At least one of the nodes having a secure partition (s-Par) application executing therein also includes a traffic control component and a router switch component.

Abstract: Methods and systems for securing memory within a computing fabric are disclosed. One method includes allocating memory of one or more host computing systems in the computing fabric to a partition, the partition included among a plurality of partitions, the computing fabric including a hypervisor installed on the one or more host computing platforms and managing interactions among the plurality of partitions. The method includes defining an address range associated with the memory allocated to the partition, receiving a memory operation including an address within the address range, and, based on the memory operation including an address within the address range, issuing, by the hypervisor, an indication that the memory operation is occurring at an encrypted memory location. The method also includes performing the memory operation, and performing an encryption operation on data associated with the memory operation.

Abstract: Embodiments of the disclosure provide methods, systems, apparatuses, and computer program products for facilitating communications between a plurality of devices and subsystems on a first network (for example, a first cable network) and one or more devices and subsystems on a second network (for example, a second cable network) using an integration system on the first network. In one embodiment, the integration system may allow for deployment of new systems or infrastructures that can cooperatively operate with legacy systems already deployed on the first or second networks. Particular embodiments of the subject matter may reduce the cost associated with deploying, upgrading and/or maintaining the devices and systems on the first and/or second networks.

Abstract: A system for providing a system for providing network communications organized using communities of interests defined by a common encryption key. IoT devices are located at the edge of a network while providing secure and isolated communications for its applications and data through a common network infrastructure. The system's functionality provides the IoT network with secure communications to obtain data from devices by host applications over public networks. The data may be organized and segmented in a manner that isolates and protects the data with only authorized applications gaining access the data to see its existence and read its contents.

Abstract: Embodiments of the disclosure provide methods, systems, apparatuses, and computer program products for facilitating communications between a plurality of devices and subsystems on a first network (for example, a first cable network) and one or more devices and subsystems on a second network (for example, a second cable network) using an integration system on the first network. In one embodiment, the integration system may allow for deployment of new systems or infrastructures that can cooperatively operate with legacy systems already deployed on the first or second networks. Particular embodiments of the subject matter may reduce the cost associated with deploying, upgrading and/or maintaining the devices and systems on the first and/or second networks.

Abstract: Methods and systems for managing reset of a physical function of an I/O device in a computing system are disclosed, where the physical function is included in a single-root PCI manager. One method includes maintaining a count of active virtual functions associated with the physical function included in the single-root PCI manager, and, upon determining that no active virtual functions are associated with the physical function, allowing the physical function to be reset within the single-root PCI manager. The method further includes while resetting the physical function, persisting a configuration memory space associated with the physical function, and associating the persisted configuration memory space with the physical function after the physical function is reset.

Abstract: A computing fabric includes one or more host computing platforms and a plurality of partitions instantiated across the one or more host computing platforms, each of the plurality of partitions allocated computing resources of the one or more host computing platforms. The computing fabric further includes a hypervisor installed on the one or more host computing platforms and managing interactions among the plurality of partitions. The plurality of partitions includes a persistent partition to which one or more storage devices are allocated, the persistent partition executing software loaded from a trusted storage location and executing from a non-volatile memory.

Abstract: Methods and systems for securing memory within a computing fabric are disclosed. One method includes allocating memory of one or more host computing systems in the computing fabric to a partition, the partition included among a plurality of partitions, the computing fabric including a hypervisor installed on the one or more host computing platforms and managing interactions among the plurality of partitions. The method includes defining an address range associated with the memory allocated to the partition, receiving a memory operation including an address within the address range, and, based on the memory operation including an address within the address range, issuing, by the hypervisor, an indication that the memory operation is occurring at an encrypted memory location. The method also includes performing the memory operation, and performing an encryption operation on data associated with the memory operation.

Abstract: A reduced service partition system and method for a host computing device having a host processor and system resources including memory divided into most privileged system memory and less privileged user memory. The system includes a virtualization boot application that operates in the less privileged user memory and divides the host computing device into a resource management partition, at least one virtual service partition and at least one virtual guest partition. The virtual guest partition provides a virtualization environment for at least one guest operating system. The virtual service partition provides a virtualization environment for the basic operations of the virtualization system. The resource management partition maintains a resource database for use in managing the use of the host processor and the system resources.

Abstract: One system includes one or more host computing systems, each host computing system including at least one execution core and a system memory. The system includes a plurality of virtual partitions executing on the one or more host computing systems and including a first partition having at least a portion of the system memory associated with at least one of the one or more host computing systems and configure to store a database therein. The system also includes an interconnect layer communicatively connecting the plurality of virtual partitions, the interconnect layer providing a programming interface by which direct memory access operations between partitions are coordinated. In response to database commands received at the first partition, the data stored in the database is provided to a requesting partition a direct memory access operation.

Abstract: A Forward Fabric platform system for coupling to a data center platform. The Forward Fabric platform system includes a plurality of nodes, an interconnect backplane coupled between the nodes, and a Forward Fabric Manager (FFM) coupled to the nodes via the interconnect backplane for controlling and managing the Forward Fabric platform system. The Forward Fabric manager creates at least one secure partition (s-Par) application executing within at least one of the nodes. At least one of the nodes having a secure partition (s-Par) application executing therein also includes a software defined network (SDN) controller executing therein for receiving configuration information and providing at least one secure and non-stop Forward Fabric endpoint on the Forward Fabric platform system for connecting with at least one endpoint on the data center platform. At least one of the nodes having a secure partition (s-Par) application executing therein also includes a traffic control component and a router switch component.

Abstract: Methods and systems for allocating, one or more virtual functions of a plurality of virtual functions associated with physical functions of I/O interface devices of a computing device are described. One method includes managing one or more physical functions of an I/O interface device within an interconnect partition of a multi-partition virtualization system implemented at least in part on the computing device. The method further includes, during a boot process of a second partition on the computing device, parsing a file to determine an assignment of one or more virtual functions to the second partition and associate each of the one or more virtual functions to corresponding physical functions.

Abstract: Systems and methods for non-stop computing in a virtualization fabric are disclosed. One system includes a computing fabric comprising a plurality of host platforms, the plurality of host platforms including at least a first host platform and a second host platform communicatively connected to the first host platform. The system also includes an interconnect service partitions residing on the first host platform. The system includes a plurality of guest partitions distributed across the plurality of host platforms. The system further includes a DNS server instance managed by at least one of the plurality of interconnect service partitions and defining at least one zone, the at least one zone including one or more partitions from among the plurality of guest partitions distributed across the plurality of host platforms.