Abstract: A method for detecting spoofing comprises monitoring GNSS satellite signals with a GNSS receiver; obtaining current time, current orbital information values, Doppler shift, and/or dilution of precision from the GNSS receiver, with the current orbital information values comprising orbital position with respect to a current position of the GNSS receiver; retrieving past orbital information values comprising orbital position, and calculating predicted orbital information values based on the past orbital information values, with respect to the current time from the receiver, with the predicted orbital information values comprising orbital position with respect to the current position of the receiver.

Abstract: A temperature sensor includes a sensing element and a load. Multiple different currents pass through the sensing element in a sequential manner. Based on each current that passes through the sensing element, the sensing element outputs a complementary-to-absolute-temperature (CTAT) voltage and another current. Further, the currents that pass through the sensing element and the currents that the sensing element output separately pass through the load and result in the generation of multiple load voltages across the load. A current density ratio of the temperature sensor is determined based on the load voltages generated across the load. Further, a temperature value indicative of a temperature sensed by the temperature sensor is generated based on the current density ratio and the CTAT voltages outputted by the sensing element based on the different currents that pass therethrough.

Abstract: Techniques and architecture are described that utilize switchport protected flags to provide switchport protected functionality across network devices, e.g., switches, routers, etc., in fabric networks. For example, a first port of a first network device of a fabric network receives a packet from a first host destined for a second host. The second host is onboarded to the fabric network via a second port of a second network device. It is determined (i) if a first protected flag associated with the first port of the first network device is set as true and (ii) if a second protected flag associated with the second host is set as true. Based at least in part on (i) the first protected flag associated with the first port being set as true and (ii) the second protected flag being set as true, the first network device drops the packet.

Abstract: Techniques for a Software-Defined Networking (SDN) controller associated with a multisite network to implement jurisdictional data sovereignty polices in a multisite network, route network traffic flows between user sites and destination services over one or more provider sites, and/or perform a routing operation on the network traffic flow(s) based on the jurisdictional data sovereignty policies. The jurisdictional data sovereignty polices may be implemented using destination group tags (DGTs) and/or source group tags (SGTs). A secure access service edge (SASE) associated with the network controller may generate, store, and distribute the DGTs to provider sites and/or the SGTs to user sites. Based on the SGT and/or DGT associated with a network traffic flow, one or more services may be applied to the network traffic flow, and the network traffic flow may be routed through a particular region of a software-defined access (SDA) transit.

Abstract: Methods and mechanisms for performing idle mode mobility procedures are provided. According to one aspect of the present disclosure, a method for wireless communication performed by a user equipment (UE) includes: receiving, from a base station (BS) on a first cell, system information indicating a first cell reselection priority configuration; receiving, from the BS, dedicated signaling indicating a dedicated cell reselection priority configuration, wherein the dedicated cell reselection priority configuration is empty; and connecting, while in an idle mode and in response to the dedicated cell reselection priority configuration being empty, to a second cell different from the first cell based on the first cell reselection priority configuration received in the system information.

Abstract: A vehicle location accuracy enhancement system is provided. A digital active phased array radar is configured to generate a profiled terrain including terrain altitude information. A controller is configured to implement operating instructions in memory to conduct profile matching between the generated profiled terrain from the at least one digital active phased array radar and terrain altitude profile information in a terrain database to determine profiled location solutions. The controller is further configured to at least augment sensor location solutions from at least one other location determining system, including a GNSS, with the profiled location solutions to enhance accuracy of the sensor location solutions. The controller is also configured to determine location errors in the GNSS based on the profiled location solution and to broadcast the determined location errors.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for calculating an available balance amount for allocation to a user. A request from a user for an advance payment associated with a requested period of time is received by a platform service. The platform service is integrated with a plurality of systems storing data for employees of an enterprise. The requested period of time includes working days of the user. The user is identified as an employee of the enterprise in at least one of the plurality of systems. In response to the received request, an available balance amount that can be allocated to the user for the requested period of time is calculated. Calculating the available balance amount comprises determining data associated with the requested period of time to provide a base for calculating the available balance amount.

Abstract: Methods, systems, and devices for wireless communications are described. A user equipment (UE) may establish multiple wireless connections, such as a wireless connection for a first subscriber identity module (SIM) and a wireless connection for a second SIM, that share time-frequency resources. The UE may communicate data packets with another device during a communication session on the wireless connection for the first SIM. The UE may determine to pause the communication session for a duration based on receiving an indication from the other UE or based on a user input to pause communication. The UE may communicate data packets on the wireless connection for the second SIM for at least a portion of the duration using the shared time-frequency resources based on pausing the communication session.

Abstract: A molded semiconductor package includes: a semiconductor die; a substrate attached to a first side of the semiconductor die; a plurality of leads electrically connected to a pad at a second side of the semiconductor die opposite the first side; a heat sink clip thermally coupled to the pad; and a molding compound encapsulating the semiconductor die, part of the leads, part of the heat sink clip, and at least part of the substrate. The molding compound has a first main side, a second main side opposite the first main side and at which the substrate is disposed, and an edge extending between the first main side and the second main side. The leads protrude from opposing first and second faces of the edge of the molding compound. The heat sink clip protrudes from opposing third and fourth faces of the edge of the molding compound.

Abstract: In one embodiment, dynamic user private networks are virtually segmented within a shared virtual network. A network control system maintains the dynamic logical segmentation of the shared virtual network. User entities (e.g., user devices and/or services) are communicatively coupled to respective personal virtual networks via endpoints of access devices. Each of these endpoints is associated with a corresponding user private network. Responsive in real-time to automated processing of a received electronic particular user request, the network control system automatically modifies the dynamic logical segmentation of the shared virtual network to move a particular user entity on the shared virtual network to newly being on the first dynamic user private network without being disconnected from the shared virtual network. One embodiment uses different user private network identifiers (UPN-IDs) associated with endpoints and received packets to identify their respective user private network.

Abstract: Techniques and architecture are described for service and/or application specific underlay path selection in fabric access networks. An egress tunnel router (ETR) registers service requirements of a connected application server, e.g., an end point known by host/device detection, config, or CDC type protocols, to a fabric control plane, e.g., a map server/map resolver (MSMR). The fabric control plane, while replying to a map request from an ingress tunnel router (ITR), sends service parameters in the map reply. While installing a tunnel forwarding path in hardware, i.e., map cache, the ITR may utilize a probing mechanism to ensure that the ITR chooses the right underlay adjacency, e.g., routing locator(s) (RLOC(s)), that can satisfy the service requirements provided by the fabric control plane. Only RLOC(s) that comply with the service requirements are installed in the map cache along with the required service parameters.

Abstract: Methods and apparatus relating to data streaming accelerators are described. In an embodiment, a hardware accelerator such as a Data Streaming Accelerator (DSA) logic circuitry performs data movement and/or data transformation for data to be transferred between a processor (having one or more processor cores) and a storage device. Other embodiments are also disclosed and claimed.

Abstract: Routing of a traffic in a fabric network may be provided. A first traffic may be received at a first node. It may be determined that the first traffic is coming from a provider virtual network. In response to determining that the first traffic is coming from the provider virtual network, it may be determined that a first subnet associated with the first traffic is associated with a subscriber virtual network. In response to determining that the first subnet associated with the first traffic is associated with the subscriber virtual network, a first virtual network associated with the first traffic may be changed to the subscriber virtual network. A lookup for the first traffic may be changed to a first virtual routing and forwarding of the subscriber virtual network.

Abstract: A technique of executing a task related to a target object robustly against a change in a visual feature is provided. A task execution system includes: a database management unit configured to record in advance a contextual relationship database indicating a spatial contextual relationship of a plurality of objects including a target object; an imaging unit configured to acquire image data that is data obtained by adding, to an image, position information indicating a position at which the image is captured; an object detection unit configured to detect objects from the image; a segmentation unit configured to extract the objects from the image; a contextual relationship extraction unit configured to extract a spatial contextual relationship of the objects extracted from the image; and a task execution unit configured to execute a task related to the target object.

Abstract: This disclosure describes techniques for implementing network address translation as a distributed service over the nodes of a logical network fabric, such as a software-defined network fabric. A method includes registering, by an edge node of a network, an IP address of a client device. The method further includes forwarding, by the edge node, the registered IP address to a control plane of the network. The method further includes checking, by the control plane, a network address translation policy. The method further includes recording, by the control plane, translations between the registered IP address and an allocated IP address in a translation table, each of the translations being related to the edge node. The method further includes returning, by the control plane, the translations between the registered IP address and the allocated IP address to the edge node.

Abstract: A method and system determine network based access to restricted systems. The method includes receiving a request for a permission access status of a party seeking access to one of the restricted systems. A database of periodically updated lists of entities is accessed. A name of the party is extracted from the request. A determination is made whether the name does not match one of the entities. The name is decomposed into parts if the name not matching one of the entities. A determination is made whether any of the parts of the name matches one of the entities. A denial of access status is forwarded from the computer server to an external computing device if any of the parts of the name matches one of the entities.

Abstract: Systems, methods, and computer-readable media for discovering silent hosts in a software-defined network and directing traffic to the silent hosts in a scalable and targeted manner include determining interfaces of a fabric device that are connected to respective one or more endpoints, where the fabric device is configured to connect the endpoints to a network fabric of the software-defined network. At least a first interface is identified, where an address of a first endpoint connected to the first interface is not available at the fabric device. A first notification is transmitted to a control plane of the software-defined network based on identifying the first interface, where the control plane may create a flood list which includes the fabric device. Traffic intended for the first endpoint from the network fabric is received by the fabric device can be based on the flood list.

Abstract: Techniques are described herein for service chaining in fabric networks such that hardware resources can be preserved without service nodes needing additional capabilities. The techniques may include storing a first configuration associated with a first VRF instance of a service forwarding node that is connected to a first service of a service chain sequence. The first configuration may indicate an identifier and a type associated with a second service of the service chain sequence where traffic is to be sent after the first service. Additionally, the techniques may also include storing a second configuration associated with a second VRF instance of the service forwarding node that is connected to the second service. The second configuration may indicate that the second service is a last service of the service chain sequence. When traffic is received at the service forwarding node, the service forwarding node can determine whether the traffic is pre-service traffic or post-service traffic.

Abstract: This disclosure describes techniques to operate a control plane in a network fabric. The techniques include determining a stateless rule corresponding to communication between a first segment of the network fabric and a second segment of the network fabric. The techniques further include configuring the control plane to enforce the stateless rule.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed for text extraction from a receipt image. An example apparatus for clustering vertices, the apparatus comprises machine-readable memory, instructions, and processor circuitry to execute the machine-readable instructions to calculate a centroid corresponding to coordinates, calculate distances for respective ones of the coordinates relative to the centroid, calculate differences between the distances, determine whether ones of the differences satisfy a set of thresholds, in response to determining that ones of the differences satisfy the set of thresholds, calculate bearing angles for ones of the coordinates, determine an efficiency metric associated with respective ones of the bearing angles, sort each of the bearing angles based on the associated efficiency metric, and form coordinate clusters based on the sorted bearing angles.