Abstract: Novel tools and techniques are provided for implementing intent-based service configuration, conformance, and auditing. In various embodiments, a computing system might receive a request for network services from a customer, the request for network services comprising desired characteristics and performance parameters for the requested network services, without information regarding specific hardware, hardware type, or network for providing the requested services. The computing system might analyze first metadata regarding resource attributes and characteristics of unassigned network resources to identify network resources among unassigned network resources for providing the requested network services, the first metadata having been striped to entries of the unassigned network resources in resource database(s).

Abstract: Novel tools and techniques are provided for implementing network experience shifting, and, in particular embodiments, using either a roaming or portable hypervisor associated with a user or a local hypervisor unassociated with the user. In some embodiments, a network node in a first network might receive, via a first network access device in a second network, a request from a user device to establish roaming network access, and might authenticate a user associated with the user device, the user being unassociated with the first network access device. Based on a determination that the user is authorized to access data, content, profiles, and/or software applications that are accessible via a second network access device, the network node might establish a secure private connection through a hypervisor or container communicatively coupled to the first network access device to provide the user with access to her data, content, profiles, and/or software applications.

Abstract: Novel tools and techniques might provide for implementing extension of customer local area networks (“LANs”) and/or implementing isolated service overlays over a network. In some embodiments, a network service point that is located external to a demarcation point at each of a plurality of customer premises might establish a connection between a service provider network and a customer LAN, which has already been established within a customer premises. The system subsequently extends the customer LAN, via this connection, to span between the network service point and the customer premises. Alternatively, or additionally, the system might establish two or more isolated service overlays across the customer LAN between the network service point and the customer premises, each of the two or more isolated service overlays having network traffic that is isolated from network traffic transmitted along another of the two or more isolated service overlays.

Abstract: Novel tools and techniques are provided for implementing intent-based service configuration, conformance, and auditing. In various embodiments, a computing system might receive a request for network services from a customer, the request for network services comprising desired characteristics and performance parameters for the requested network services, without information regarding specific hardware, hardware type, or network for providing the requested services. The computing system might analyze first metadata regarding resource attributes and characteristics of unassigned network resources to identify network resources among unassigned network resources for providing the requested network services, the first metadata having been striped to entries of the unassigned network resources in resource database(s).

Abstract: Novel tools and techniques are provided for implementing Internet of Things (“IoT”) functionality. In some embodiments, an IoT-capable personal tracking device might receive sensor data from each of a plurality of sensors, and might analyze the sensor data to identify one or more external IoT-capable devices with which to interact and to determine one or more tasks to be performed by the identified IoT-capable devices, each based at least in part on the sensor data. In some cases, the plurality of first sensors might comprise at least one of one or more sensors that monitor physical conditions of a user's body and/or one or more sensors that monitor environmental conditions external to the user's body. The personal tracking device might subsequently autonomously send, via machine-to-machine communication, control instructions to each of the identified external IoT-capable devices, based on the determined tasks. Multiple personal tracking devices may also be used.

Abstract: A system and method for utilizing a secured service provider memory are disclosed. An electronic device is associated with a subscriber and is in communication with a data distribution network configured to deliver data by a service provider to the subscriber. The data distribution network comprises a server in communication with the data distribution network and the server configured to deliver a stream of data over the data distribution network. The electronic device comprises a first memory communicatively connected to the server. The first memory is configured to receive and store data from the server and it is accessible by the subscriber. A second memory is also communicatively connected to the server. The second memory is configured to receive and store data from the server, though the second memory is accessible only by the service provider.

Abstract: Novel tools and techniques might provide for implementing intent-based network services orchestration. In some embodiments, a computing system might receive, over a network, a request for network services from a customer. The request for network services might include desired performance parameters for the requested network services, without information regarding any of specific hardware, specific hardware type, specific location, or specific network for providing the requested network services. The computing system might allocate network resources from one or more networks, based at least in part on the desired performance parameters. Based on a determination that at least one network can no longer provide at least one network resource having the desired performance parameters, the computing system might allocate at least one other network resource from at least one second network, based at least in part on network performance metrics, and based at least in part on the desired performance parameters.

Abstract: Novel tools and techniques might provide for implementing extension of customer local area networks (“LANs”) and/or implementing isolated service overlays over a network. In some embodiments, a network service point that is located external to a demarcation point at each of a plurality of customer premises might establish a connection between a service provider network and a customer LAN, which has already been established within a customer premises. The system subsequently extends the customer LAN, via this connection, to span between the network service point and the customer premises. Alternatively, or additionally, the system might establish two or more isolated service overlays across the customer LAN between the network service point and the customer premises, each of the two or more isolated service overlays having network traffic that is isolated from network traffic transmitted along another of the two or more isolated service overlays.

Abstract: Novel tools and techniques might provide for implementing remote application access, and, in some cases, by instantiating an application or service close to the intended recipient or user of the application or service, from a networking perspective. A network might provide connectivity between a first computer and a second computer. A file (comprising an application and data) might be transmitted, over the network, from the first computer. A node in the network, which might be on a path between the first and second computers, might determine that the file contains the application and the data, and, based on such determination, might capture the file (before the second computer can receive it). An instance of the application might be instantiated on a compute surface in the network as a service for the second computer, such that the compute surface can operate on the data with the instance of the application.

Abstract: Novel tools and techniques are provided for implementing intent-based service configuration, conformance, and auditing. In various embodiments, a computing system might receive a request for network services from a customer, the request for network services comprising desired characteristics and performance parameters for the requested network services, without information regarding specific hardware, hardware type, or network for providing the requested services. The computing system might analyze first metadata regarding resource attributes and characteristics of unassigned network resources to identify network resources among unassigned network resources for providing the requested network services, the first metadata having been striped to entries of the unassigned network resources in resource database(s).

Abstract: Novel tools and techniques are provided for invoking virtualized network functions. In some embodiments, a programmable service backbone might comprise at least one virtualized network function, and might provide virtualized network functions required to provision a service offering. In some cases, at least one application programming interface might be configured to invoke the at least one virtualized network function of the programmable service backbone. An application programming interface gateway might be configured to manage access to the at least one application programming interface, and the application programming interface gateway might comprise a security layer.

Abstract: A system and method for utilizing a secured service provider memory are disclosed. An electronic device is associated with a subscriber and is in communication with a data distribution network configured to deliver data by a service provider to the subscriber. The data distribution network comprises a server in communication with the data distribution network and the server configured to deliver a stream of data over the data distribution network. The electronic device comprises a first memory communicatively connected to the server. The first memory is configured to receive and store data from the server and it is accessible by the subscriber. A second memory is also communicatively connected to the server. The second memory is configured to receive and store data from the server, though the second memory is accessible only by the service provider.

Abstract: Novel tools and techniques might provide for implementing intent-based network services orchestration. In some embodiments, a computing system might receive, over a network, a request for network services from a customer. The request for network services might include desired performance parameters for the requested network services, without information regarding any of specific hardware, specific hardware type, specific location, or specific network for providing the requested network services. The computing system might allocate network resources from one or more networks, based at least in part on the desired performance parameters. Based on a determination that at least one network can no longer provide at least one network resource having the desired performance parameters, the computing system might allocate at least one other network resource from at least one second network, based at least in part on network performance metrics, and based at least in part on the desired performance parameters.

Abstract: Novel tools and techniques might provide for implementing virtual platform media access control (“MAC”) address-based layer 2 and layer 3 network switching. In some embodiments, a method might comprise receiving, at a network node in a network, a data packet having a header comprising a MAC destination address, and routing, with the network node, the data packet over open systems interconnection (“OSI”) model layer 3 or network layer of the network, based at least in part on the MAC destination address in the header of the data packet. The MAC destination address comprises a first portion comprising an organizationally unique identifier (“OUI”) and a second portion comprising an identifier for a destination network interface controller (“NIC”) and/or virtual NIC (“VNIC”), which might be associated either with the same service provider associated with the network node or the network or with a different service provider, content provider, and/or application provider.

Abstract: Novel tools and techniques might provide for implementing remote application access, and, in some cases, by instantiating an application or service close to the intended recipient or user of the application or service, from a networking perspective. A network might provide connectivity between a first computer and a second computer. A file (comprising an application and data) might be transmitted, over the network, from the first computer. A node in the network, which might be on a path between the first and second computers, might determine that the file contains the application and the data, and, based on such determination, might capture the file (before the second computer can receive it). An instance of the application might be instantiated on a compute surface in the network as a service for the second computer, such that the compute surface can operate on the data with the instance of the application.

Abstract: A license manager includes a processor and non-transitory computer readable media having encoded thereon a set of instructions executable by the at least one processor to receive a request, from a virtual machine, to reserve an individual license of the set of authorized licenses for a vendor software instance, determine the availability licenses for the requested vendor software, register a unique identifier of the virtual machine in association with an available individual license, grant the individual license to the virtual machine, and prevent the granted individual license from concurrent use by other virtual machines or devices.

Abstract: Novel tools and techniques are provided for invoking virtualized network functions. In some embodiments, a programmable service backbone might comprise at least one virtualized network function, and might provide virtualized network functions required to provision a service offering. In some cases, at least one application programming interface might be configured to invoke the at least one virtualized network function of the programmable service backbone. An application programming interface gateway might be configured to manage access to the at least one application programming interface, and the application programming interface gateway might comprise a security layer.

Abstract: Novel tools and techniques might provide for implementing extension of customer local area networks (“LANs”) and/or implementing isolated service overlays over a network. In some embodiments, a network service point that is located external to a demarcation point at each of a plurality of customer premises might establish a connection between a service provider network and a customer LAN, which has already been established within a customer premises. The system subsequently extends the customer LAN, via this connection, to span between the network service point and the customer premises. Alternatively, or additionally, the system might establish two or more isolated service overlays across the customer LAN between the network service point and the customer premises, each of the two or more isolated service overlays having network traffic that is isolated from network traffic transmitted along another of the two or more isolated service overlays.

Abstract: Novel tools and techniques are provided for remotely configuring and orchestrating multifunctional cloud devices located on customer premises, in some cases, using a smart cloud adaptive device. In some embodiments, the smart cloud adaptive device, which might have one or more wireless programmable radios configured to communicate with a network termination device, might communicate with a cloud configuration server over a network via the one or more wireless programmable radios (and, in some embodiments, through the network termination device). The smart cloud adaptive device might transmit device identification information associated with a customer and/or service codes indicative of services to be provided to the customer. The smart cloud adaptive device might receive one or more configuration files from the cloud configuration server based on the service codes, and enable functionality among a plurality of functionalities to provision the services, based on the one or more configuration files.

Abstract: Novel tools and techniques might provide for implementing virtual platform media access control (“MAC”) address—based layer 2 and layer 3 network switching. In some embodiments, a method might comprise receiving, at a network node in a network, a data packet having a header comprising a MAC destination address, and routing, with the network node, the data packet over open systems interconnection (“OSI”) model layer 3 or network layer of the network, based at least in part on the MAC destination address in the header of the data packet. The MAC destination address comprises a first portion comprising an organizationally unique identifier (“OUI”) and a second portion comprising an identifier for a destination network interface controller (“NIC”) and/or virtual NIC (“VNIC”), which might be associated either with the same service provider associated with the network node or the network or with a different service provider, content provider, and/or application provider.