Abstract: Approaches are described herein for securely initializing a TRANSEC-enabled terminal (TET) in a satellite communication network. At a secure location, a unique Terminal Master Key and Electronic Serial Number, are securely burned into the terminal's memory. Upon booting, the terminal verifies its identity using a signed TE file and encrypted keys. When deployed, the terminal initially sends an unallocated burst with a fake ESN to obtain bandwidth allocation (e.g., from an inroute bandwidth allocator). The terminal proceeds with an initial association request using a randomly generated identifier, followed by a transport-layer-secure registration process (e.g., with a network management system over HTTPS). After successful registration, the TET receives link-layer key materials and shifts to using its real ESN with link-layer security (LLS) for subsequent communications.

Abstract: Systems and methods for operating a multi-band satellite terminal are disclosed. One aspect disclosed features a method, comprising: controlling a multi-band satellite terminal capable of receiving signals on a plurality of frequency bands to receive a signal transmitted by a satellite on a first frequency band of the plurality of frequency bands; determining link conditions of the first frequency band based on the received signal; generating an estimate of link conditions of a second frequency band of the plurality of frequency bands, wherein the estimate is generated based on the link conditions of the first frequency band; selecting the second frequency band based on the estimate of the link conditions of the second frequency band; and controlling the multi-band satellite ground terminal to receive the signal transmitted by the satellite on the second frequency band.

Abstract: A system comprising an accelerator including a first physical port couplable to a first module and a second physical port configured to communicate with a wide-area network. The accelerator is programmed to receive outbound data from user devices via the first module, and route the outbound data to either the first physical port or the second physical port. The first module is a separate unit from the accelerator. The first module includes an indoor unit configured for satellite internet.

Abstract: A system comprising an accelerator including a first physical port couplable to a first module and a second physical port configured to communicate with a wide-area network. The accelerator is programmed to receive outbound data from user devices via the first module, and route the outbound data to either the first physical port or the second physical port. The first module is a separate unit from the accelerator. The first module includes an indoor unit configured for satellite internet.

Abstract: Systems, methods, and apparatus, including computer-readable media, for deploying and updating machine learning models over a communication network. In some implementations, a system receives log data from a plurality of devices in a communication network. Each of the plurality of devices stores a local copy of a machine learning model and uses the machine learning model to manage network traffic at the device. The system trains the machine learning model based on the received log data to change parameters of the machine learning model, for example, to more accurately predict a network traffic management parameter in response to receiving input indicating characteristics of the network traffic flows. The system broadcasts an update for the machine learning model to the plurality of devices using a multicast transmission, with the update being based on the changed parameters of the machine learning model.

Abstract: A server computer can receive, from a terminal via a satellite, a configuration request that includes a location of the terminal. The server computer can select, based on the location, configuration data including a specification of communications by the terminal, and then send the configuration data to the terminal via the satellite.

Abstract: Systems and methods for operating a multi-band satellite terminal are disclosed. One aspect disclosed features a method, comprising: controlling a multi-band satellite terminal capable of receiving signals on a plurality of frequency bands to receive a signal transmitted by a satellite on a first frequency band of the plurality of frequency bands; determining link conditions of the first frequency band based on the received signal; generating an estimate of link conditions of a second frequency band of the plurality of frequency bands, wherein the estimate is generated based on the link conditions of the first frequency band; selecting the second frequency band based on the estimate of the link conditions of the second frequency band; and controlling the multi-band satellite ground terminal to receive the signal transmitted by the satellite on the second frequency band.

Abstract: Systems and methods for operating a multi-band satellite terminal are disclosed. One aspect disclosed features a method, comprising: controlling a multi-band satellite terminal capable of receiving signals on a plurality of frequency bands to receive a signal transmitted by a satellite on a first frequency band of the plurality of frequency bands; determining link conditions of the first frequency band based on the received signal; generating an estimate of link conditions of a second frequency band of the plurality of frequency bands, wherein the estimate is generated based on the link conditions of the first frequency band; selecting the second frequency band based on the estimate of the link conditions of the second frequency band; and controlling the multi-band satellite ground terminal to receive the signal transmitted by the satellite on the second frequency band.

Abstract: Systems and methods for operating a multi-band satellite terminal are disclosed. One aspect disclosed features a method, comprising: controlling a multi-band satellite terminal capable of receiving signals on a plurality of frequency bands to receive a signal transmitted by a satellite on a first frequency band of the plurality of frequency bands; determining link conditions of the first frequency band based on the received signal; generating an estimate of link conditions of a second frequency band of the plurality of frequency bands, wherein the estimate is generated based on the link conditions of the first frequency band; selecting the second frequency band based on the estimate of the link conditions of the second frequency band; and controlling the multi-band satellite ground terminal to receive the signal transmitted by the satellite on the second frequency band.

Abstract: A server computer can receive, from a terminal via a satellite, a configuration request that includes a location of the terminal. The server computer can select, based on the location, configuration data including a specification of communications by the terminal, and then send the configuration data to the terminal via the satellite.

Abstract: An approach is provided for reliable provision of targeted, status-based messaging to a client terminal in a computer network, such as a wide area resource-based network. A terminal node receives a message originating from a client terminal, wherein the terminal node serves as an entry point to, and services communications connections over, a wide area network for the client terminal. The terminal node determines that the message comprises an initiation request for establishing a communications connection over the wide area network between the client terminal and a remote server, and that an intercept state is in effect. The terminal node establishes the communications connection as a local connection between the client terminal and the terminal node, and services the communications connection via a local server function, wherein the servicing of the communications connection via the local server function comprises a provision of status-based messaging to the client terminal.

Abstract: An approach is provided for reliable provision of targeted, status-based messaging to a client terminal in a computer network, such as a wide area resource-based network. A terminal node receives a message originating from a client terminal, wherein the terminal node serves as an entry point to, and services communications connections over, a wide area network for the client terminal. The terminal node determines that the message comprises an initiation request for establishing a communications connection over the wide area network between the client terminal and a remote server, and that an intercept state is in effect. The terminal node establishes the communications connection as a local connection between the client terminal and the terminal node, and services the communications connection via a local server function, wherein the servicing of the communications connection via the local server function comprises a provision of status-based messaging to the client terminal.