Abstract: Described embodiments provide systems and methods for using unencrypted communication tunnels. A first device intermediary between a client and a server may maintain an encrypted tunnel and an unencrypted tunnel with a second device intermediary between the client and the server. The first device may communicate, with the second device, at least one network address translation (NAT) rule via the encrypted tunnel. The first device may translate address information of a first packet, using the at least one NAT rule. The first device may send the first packet with the translated address information via the unencrypted tunnel, to the second device to reverse the translation of the address information using the at least one NAT rule.

Abstract: Methods and systems for secure authentication in an extended reality (XR) environment are described herein. An XR environment may be output by a computing device and for display on a device configured to be worn by a user. A first plurality of images may be determined via the XR environment. The first plurality of images may be determined based on a user looking at a plurality of objects, real or virtual, in the XR environment. The first plurality of images may be sent to a server, and the server may return a second plurality of images. A public key and private key may be determined based on different portions of each of the second plurality of images. The public key may be sent to the server to register and/or authenticate subsequent communications between the computing device and the server.

Abstract: A computing system may store a first file in a system repository that is to be synchronized with at least a first repository associated with a first client device and a second repository associated with a second client device. The computing system may determine that the first repository is to receive a downloaded copy of at least a portion of the first file, and may cause a copy of the at least a portion of the first file to be downloaded from the system repository to the first repository. Based at least in part on the computing system determining that the first repository is to receive the downloaded copy, an identifier of the at least a portion of first file may be stored in the second repository without storing a copy of the at least a portion of the first file in the second repository.

Abstract: A method may involve receiving, by a computing system, an input indicative of an individual with whom a user of a client device is to communicate. The computing system may determine data of a plurality of applications, the data being indicative of the individual being available with at least one of the plurality of applications. The computing system may select, based at least in part on the data, a first application, from among the plurality of applications, for communication with the individual, and may cause the client device to output an indication that the first application can be used to communicate with the individual.

Abstract: Described embodiments provide for dynamically optimizing the number of application layer streams that may be multiplexed into a single transport layer connection, providing the advantages of application layer multiplexing without incurring unnecessary congestion-based network delays. A device may monitor net bandwidth and packet loss rates for a connection, and may dynamically increase and decrease a number of concurrent application layer streams to balance throughput and congestion avoidance. As congestion increases, the device may reduce concurrent stream limits in order to spawn additional transport layer connections, allowing faster congestion recovery and reduced performance impairment.

Abstract: Described embodiments provide systems and methods for remapping connections to tunnels selected based on a security level of the communications. A first network device may be in communication with a second network device via a plurality of communication tunnels. The plurality of communication tunnels may include an encrypted communication tunnel and an unencrypted communication tunnel. The first network device may receive a packet, the packet including header information and a payload. The first network device may determine whether the received packet is encrypted to meet a threshold level of security. The first network device may, responsive to determining that the packet is to meet the threshold level of security, communicate an identifier of the payload and the header information to the second network device via the encrypted communication tunnel, and communicate the payload to the second network device via the unencrypted communication tunnel.

Abstract: A user may, when using an application of a first computing device, intend to share data with other computing devices. To share the data, sharing processes may be performed by the first computing device, any device that the data is to be shared with, and one or more network locations. The sharing processes may determine whether the data is available at any of the devices or at any of the one or more network locations. Any device or network location where the data is available may be selected as a source of the data. Any device where the data is unavailable may be sent the data from one or more sources. Once received, the data may be stored to enable access by an application.

Abstract: Disclosed is a computing system capable of performing a method that involves determining that a first user is authorized to use each of a first device and a second device to access the computing system. The computing system may receive, from the first device, a file transfer request that identifies a first file, and may determine, based at least in part on the file transfer request, that the first file is to be transferred between the computing system and the second device. In response to the file transfer request and based at least in part on the first user being authorized to use each of the first and second devices to access the computing system, the computing system may cause the first file to be transferred between the computing system and the second device.

Abstract: The present disclosure describes a system and method to reduce the overall time taken to complete distributed process workflows. Each workflow can include multiple actions that are completed by or at different client devices. The actions of a workflow can be dependent on prior actions in the workflow. For example, a second client device may not be able to complete a second action until a first client device completes a first action in the workflow. The system can predict time periods and the geolocations where client devices are most likely to complete an assigned action. Using the selected time periods and geolocations, the system can transmit notifications to the client devices when the action is most likely to be completed.

Abstract: A computing device may include a processor and a memory. The processor may be configured to provide an encrypted second portion of a key to a client device in response to a match between data decrypted from an encrypted first portion of the key and a first portion of the key, the match being indicative of an absence of a proxy device. The processor may be configured to detect a loss in connectivity between the computing device and the client device based upon a mismatch between a decrypted second portion of the key and a second portion of the key, the mismatch being indicative of the proxy device.

Abstract: A computing system may perform a method that involves receiving an input indicating at least one person, other than a user of a computing device, is proximate to the computing device, determining that the person is within a threshold distance of the computing device based on the received input, and modifying an output of the computing device in response to determining that the person is within the threshold distance from the computing device, so as to inhibit the person from receiving content from the computing device.

Abstract: A computing system may perform a method that involves receiving, from a first computing device, a request for a file, where the request identifies at least one user who has access to the file and includes information indicative of the file. The method further includes identifying, based at least in part on the received request, the file within a repository of files, sending, to a second computing device, a first indication of the request to access the file, receiving, from the second computing device, a second indication that the file is to be made accessible via the first computing device, and causing the file to be transferred from the repository to the first computing device.

Abstract: Techniques proactively deploy analytics to a computerized edge device. The techniques involve receiving data from the edge device. The data is conveyed through the edge device from a set of sensors disposed at a particular location. The techniques further involve performing analytics on the data to identify a set of edge device rules that defines a set of actions for the edge device to carry out under a set of predefined conditions potentially sensed by the set of sensors. The techniques further involve providing a command to the edge device. The command (i) includes the set of edge device rules and (ii) directs the edge device to, at a future time, start operating according to the set of edge device rules to protect against unsuccessful deployment of the command to the edge device due to subsequent delayed communication between the processing circuitry and the edge device.

Abstract: Disclosed is a computing system capable of performing a method that involves determining that a first user is authorized to use each of a first device and a second device to access the computing system. The computing system may receive, from the first device, a file transfer request that identifies a first file, and may determine, based at least in part on the file transfer request, that the first file is to be transferred between the computing system and the second device. In response to the file transfer request and based at least in part on the first user being authorized to use each of the first and second devices to access the computing system, the computing system may cause the first file to be transferred between the computing system and the second device.

Abstract: A user may, when using an application of a first computing device, intend to share data with other computing devices. To share the data, sharing processes may be performed by the first computing device, any device that the data is to be shared with, and one or more network locations. The sharing processes may determine whether the data is available at any of the devices or at any of the one or more network locations. Any device or network location where the data is available may be selected as a source of the data. Any device where the data is unavailable may be sent the data from one or more sources. Once received, the data may be stored to enable access by an application.

Abstract: Described embodiments provide for dynamically optimizing the number of application layer streams that may be multiplexed into a single transport layer connection, providing the advantages of application layer multiplexing without incurring unnecessary congestion-based network delays. A device may monitor net bandwidth and packet loss rates for a connection, and may dynamically increase and decrease a number of concurrent application layer streams to balance throughput and congestion avoidance. As congestion increases, the device may reduce concurrent stream limits in order to spawn additional transport layer connections, allowing faster congestion recovery and reduced performance impairment.

Abstract: Described embodiments provide systems and methods for remapping connections to tunnels selected based on a security level of the communications. A first network device may be in communication with a second network device via a plurality of communication tunnels. The plurality of communication tunnels may include an encrypted communication tunnel and an unencrypted communication tunnel. The first network device may receive a packet, the packet including header information and a payload. The first network device may determine whether the received packet is encrypted to meet a threshold level of security. The first network device may, responsive to determining that the packet is to meet the threshold level of security, communicate an identifier of the payload and the header information to the second network device via the encrypted communication tunnel, and communicate the payload to the second network device via the unencrypted communication tunnel.

Abstract: A server for detecting a proxy device in a communications path may include a processor and a memory associated therewith. The processor may obtain an encrypted first portion of an encryption key from the client device. The encryption key may be based upon user-input credentials for a given user. The processor may also communicate an encrypted second portion of the encryption key to the client device based upon determining that the encrypted first portion matches a corresponding first portion of the encryption key indicative of an absence of the proxy device in the communications path. The processor may also detect a loss in connectivity between the server and the client device in response to the client device determining that the decrypted second portion of the encryption key does not match a corresponding second portion of the encryption key indicative of a proxy device in the communications path.

Abstract: Methods and systems for providing files of variable sizes based on device and/or network conditions are described herein. A computer device may convert a file into a first modified file that includes content of the file and a second modified file that includes the content of the file. The first modified file may have a first file size and be associated with a first bandwidth range. The second modified file may have a second file size different from the first file size and be associated with a second bandwidth range different from the first bandwidth range. Based on a bandwidth available to a user device, the first modified file or the second modified file may be provided for download by the user device.

Abstract: Methods and systems for securely sharing files with user devices based on location are described herein. A server may detect an endpoint device in response to receipt, from a user device, of a request to share a file, the endpoint device being proximate to the user device. An identifier indicative of the detected endpoint device may be generated by the server. The identifier may distinguish the detected endpoint device from other endpoint devices proximate to the user device. The server may send the identifier to the user device to enable the user device to share the file with the detected endpoint device.