Abstract: A method involving a serial interconnection system having a first node, a second node, a plurality of calibration nodes that are electrically connected in series by the serial interconnection system, and a plurality of connection nodes corresponding to the plurality of serially connected calibration nodes and electrically connected in series by the serial interconnection system, the method involving: for each of the plurality of calibration nodes performing a measurement procedure involving: injecting a corresponding reference signal into that calibration node; and while the corresponding reference signal is being injected into that calibration node, determining a summation of the phases of signals appearing at the first and second nodes; from the determined phase summations for the plurality of calibration nodes, computing phase corrections for each of the plurality of calibration nodes; and applying the phase corrections to the corresponding plurality of connection nodes.

Abstract: Minimizing information leakage during modular exponentiation using random masks is disclosed Minimizing information leakage during elliptic curve point multiplication is disclosed with windowing by using point randomization is disclosed. Elliptic curve point multiplication with windowing calculates and stores multiple points based on the point being multiplied and then processes multiple bits of the multiplier at a time is also disclosed.

Abstract: A flexible aes instruction set for a general purpose processor is provided. The instruction set includes instructions to perform a “one round” pass for aes encryption or decryption and also includes instructions to perform key generation. An immediate may be used to indicate round number and key size for key generation for 128/192/256 bit keys. The flexible aes instruction set enables full use of pipelining capabilities because it does not require tracking of implicit registers.

Abstract: Technologies for cryptographic protection of I/O data include a computing device with one or more I/O controllers. Each I/O controller may generate a direct memory access (DMA) transaction that includes a channel identifier that is indicative of the I/O controller and that is indicative of an I/O device coupled to the I/O controller. The computing device intercepts the DMA transaction and determines whether to protect the DMA transaction as a function of the channel identifier. If so, the computing device performs a cryptographic operation using an encryption key associated with the channel identifier. The computing device may include a cryptographic engine that intercepts the DMA transaction and determines whether to protect the DMA transaction by determining whether the channel identifier matches an entry in a channel identifier table of the cryptographic engine. Other embodiments are described and claimed.

Abstract: An information processing apparatus is provided that performs information processing for encrypting data using AES, which includes performing a process of generating round key data on a one-byte-by-one-byte basis, performing a row shift transformation that is a process of performing row shifting for the data by use of a row shift table, performing a byte substitution transformation that is a process of performing byte substitution for the data having undergone the row shift transformation by use of a byte substitution table that is a one-dimensional array, performing a column mix transformation that is a process of performing column mixing for the data having undergone the byte substitution transformation based on equivalent expressions, performing a key add transformation that is a process of performing an exclusive-OR operation based on the round key data and the data having undergone the column mix transformation, wherein the row shift transformation, the byte substitution transformation, the column mix tr

Abstract: The present disclosure describes systems and methods for verification of data, including updates to applications, firmware, operating system libraries or other such data. This may be done through the use of a distributed ledger system to provide a secure anti-tamper mechanism for software and firmware updates that may be independently accessed and verified by any device. Distributed ledger systems, sometimes referred to as block chains, are online data storage systems with cryptography-based architecture providing links between records stored in “blocks”. Each block contains a hash of a previous block, providing a chain of linked blocks that are immutable: any alteration of a record changes the hash of the subsequent block, which changes the hash of the next subsequent block, etc. Accordingly, any modification of data is easily detectable.

Abstract: A data device controls distribution of data to user devices through an edge router via an encryption scheme. The data device encrypts data using a first key and a public key, and sends the data to the edge router. The edge router encrypts the encrypted data with a second key and sends the re-encrypted data to a user device. The data device then authenticates the user device and issues a decryption key derived from a private key corresponding to the public key, the first key, and the second key to the user device. The user device uses the decryption key to decrypt and access the data.

Abstract: One of n?2 servers, connectable via a network, implements a cryptographic protocol using a secret key K which is shared between the n servers, and includes first and second server compartments. The first is connectable to the network, adapted to implement the cryptographic protocol, and stores a current key share of the secret key K. The second is inaccessible from the network in the operation of the server, stores a set of master keys, and is adapted, for each of successive time periods, to unilaterally generate a new key share of the secret key K and to supply it to the first as the current key share for that time period. The new key share includes a random share of a predetermined value p which is shared between the n servers, and the random share includes a function of the set of master keys.

Abstract: A system and method for supporting encryption key retrieval. A first digital key is created. A first protected key is created by applying a first protection algorithm based on a first user provided password to the first digital key. A first unlock key is created that is separate from the first digital key. A second protected key is created by applying a second protection algorithm based on the first unlock key to the first digital key. The first protected key and the second protected key are stored. The first unlock key is sent to a remote storage and no copy of the unlock key is retained after the sending the first unlock key.

Abstract: Methods and systems according to the present disclosure improve upon known biometric security systems by not permanently storing (e.g., for later comparison as in known systems) the actual image of the biometric characteristic. Instead, an image of a biometric identifier (e.g., retina, fingerprint, etc.) may be used to form a key which may be used to secure and provide access to data. The key may be formed, in embodiments, using a neural network and/or a random input (e.g., a vector of random characters), for example. The image of the biometric identifier may be discarded, and thus may not be vulnerable to theft. In an embodiment, the key may be used in a key-based encryption system.

Abstract: Electronically signed data is persistently stored in data storage. After the passage of time, the data may be accessed and presented to a trusted entity for verification of the data. The trusted entity may have access to secret information used to sign the data. The trusted entity may use the secret information to verify an electronic signature of the data. One or more actions may be taken based at least in part on a response provided by the verification system.

Abstract: Techniques are disclosed for reducing the amount of data associated with code signing files in a cloud-based computing environment. In one embodiment, a cloud-based code signing component receives a request to sign a current version of a file. The request includes differences between the current version of the file and a previous version of the file. The cloud-based code signing component reconstructs the current version of the file based on the differences between the current version of the file and the previous version of the file. The cloud-based code signing component signs the reconstructed file, and determines differences between the signed file and the reconstructed file. The cloud-based code signing component transfers the differences between the signed file and the reconstructed file to a user.

Abstract: Method for converting an original paper document into an original information object, and for subsequent electronic transmission, storage, and retrieval of verifiable copies of the stored original information object without the Trusted Repository relinquishing control of the original information object. The user first converts the blue-ink-signed paper document into an electronic information object. On deposit of this information object into the Trusted Repository, the user is required to destroy or permanently designate the blue-ink-signed paper document and locally-retained files as copies. The Trusted Repository then requires the user to establish the authenticity of the electronic information object by verifying that it is now the only authoritative and original copy. The Trusted Repository then creates the original authenticated information object by appending a date-time stamp and its digital signature and certificate (signature block).

Abstract: Example implementations relate to key revocation. For example, a system for key revocation may comprise a processor, an embedded controller, a non-volatile memory storing a system instruction signing key authorization data element, wherein the data element includes a system instruction signing key, a signing key number and a signature. The embedded controller may include a plurality of keys to verify the data element, and a one-time programmable (OTP) memory and a key among the plurality of keys that is revocable using the OTP memory, wherein revocation of the key permanently prevents the embedded controller from utilizing the key.

Abstract: Techniques for detecting and/or handling target attacks in an enterprise's email channel are provided. The techniques include receiving aspects of an incoming email message addressed to a first email account holder, selecting a recipient interaction profile and/or a sender profile from a plurality of predetermined profiles stored in a memory based upon the received properties, determining a message trust rating associated with the incoming email message based upon the incoming email message and the selected recipient interaction profile and/or the sender profile; and generating an alert identifying the incoming email message as including a security risk based upon the determined message trust rating.

Abstract: In general, techniques are described for simplifying admission control signaling between subscriber devices, access nodes, and service edge routers to facilitate subscriber-specific admission control for multicast streams. In one example, a service edge router receives a service request and accesses a subscriber profile to determine whether the requesting subscriber is authorized to receive the service. Upon authorization, the service edge router returns the service request to the access node in a substantially similar form in which the service request was received. The access node receives the service request on a service edge router-facing interface, indicating the service edge router has granted authorization for the subscriber device to receive multicast traffic associated with the multicast group identified within the service request.

Abstract: A set of assumptions about scheduled settings in a home automation system which control devices in a home is provided. An input from a sensor coupled to the home automation system is received. The input indicates that activity has occurred in the home. Suggestions in the user interface are presented for changing a first assumption of the set of assumptions based on the input. The first assumption is for controlling a device separate from the sensor which produced the input.

Abstract: A method of controlling another device by a gateway device is provided. The method includes recording, if user operation information for an operation of a device is received from an user device, device state information received from a device group during a recording period, determining device state information recorded a predetermined number of times for a predetermined time period as common device state information, and generating, if device state information received from the device group matches the common device state information, a request for executing the operation corresponding to the user operation information to the device.

Abstract: A modem system may include modems that have multiple upstream transmitters for transmitting signals upstream in a communication network. In some embodiments herein, one or more of those upstream transmitters may be retasked to transmit downstream signals for reception at devices within a modem's premises. The downstream signal may be modulated differently from its original modulation as received by the modem, and may be modulated in a manner that can be received by legacy components on the premises, such as analog televisions.

Abstract: Wireless access points detect neighboring wireless access points in different subnets. Upon connecting with a wireless client, a wireless access point determines predictive roaming information for the wireless client. Predictive roaming information identifies the wireless client; its home network subnet; and includes connection information associated with the wireless client. The wireless access point forwards the predictive roaming information associated with a wireless client to neighboring wireless access points while the wireless client is still connected with the wireless access point. Neighboring wireless access points store received predictive roaming information. Upon connecting with a wireless client, a neighboring wireless access point determines if the wireless client matches the stored predictive roaming information.

Abstract: The present disclosure relates to a method and a device for transferring data between multiple clients and a destination node. The method includes: receiving request data sent by the plurality of clients, adding a unique label to the request data sent by each client, and sending the labeled request data to the second node; removing the labels from the request data, and sending the request data with the labels removed to the destination node for processing; receiving processing result data returned by the destination node, adding unique labels to the processing result data, and returning the processing result data with the labels to the first node; removing the labels from the processing result data and returning the processing result data with the labels removed to the clients corresponding to the labels.

Abstract: A method for reporting a channel state of a terminal performed by the terminal is disclosed. The method includes receiving a channel state information-reference signal (CSI-RS) configuration for verifying validity of channel estimation using only a part of two-dimensional (2D) array antenna ports configured for the terminal, verifying the validity of the channel estimation using CSI-RS configuration and obtaining a channel estimation validity indicator, and transmitting the channel estimation validity indicator and channel state information based on the channel estimation validity indicator.

Abstract: The present disclosure relates to a 5G or a pre-5G communication system to be provided in order to support a higher data transmission rate than a beyond 4G communication system such as LTE. A method for estimating a channel, by a terminal, in a wireless communication system supporting beamforming using a plurality of antenna elements, which embodiments of the present disclosure provide, comprises: a step of receiving, from a base station, a set of reference beams including a plurality of reference beams; a step of selecting at least one effective beam from the plurality of reference beams included in the set of reference beams; a step of estimating a channel between the base station and the terminal on the basis of the selected effective beam; a step of generating channel information regarding the estimated channel; and a step of transmitting the generated channel information to the base station.

Abstract: A communication device determines a format according to which a data unit is to be generated, and selects a pilot sequence to be used for generating the data unit. The pilot sequence is selected from a plurality of pilot sequences corresponding to a plurality of data unit formats, and the pilot sequence is selected based on the determined format. The communication device generates the data unit to include the selected pilot sequence, and transmits the data unit.

Abstract: Methods and apparatus for soft MIMO detection of high order QAM with initial candidate reduction are described. A method includes receiving a plurality of signals including Q-order quadrature amplitude modulation (QAM) symbols; determining, based on linear minimum mean square error (MMSE) estimation using detection of I and Q signs around a target layer, a reduced candidate set including C potential candidates, where C is less than Q; calculating Euclidean distances (EDs) based on the reduced candidate set; and generating log-likelihood ratio (LLR) information based on the calculated EDs.

Abstract: A system and method for backchannel closed loop feedback for channel equalization over Ethernet. Closed loop backchannel feedback for real-time transmitter adaptive equalization is provided for a pair of non-ideal duplex communication channels. The real-time transmitter adaptive equalization enables use of low cost relaxed specification transmitter modules at high data rates.

Abstract: An apparatus is described that includes a receiver. The receive includes a data sampler, a positive error sampler and a negative error sampler each having respective inputs coupled to a same differential channel. The receiver also includes circuitry to drive the respective inputs, the circuitry to place a same calibration voltage on the differential channel to calibrate each of the data sampler, positive error sampler and negative error sampler with the same calibration voltage.

Abstract: Embodiments of a method and a system controlling an amplifier of a communications device are disclosed. In an embodiment, a method for controlling an amplifier of a communications device involves checking for a data reception at the communications device and freezing a gain of the amplifier if the data reception is detected.

Abstract: A method for processing a signal modulated with a variable carrier frequency includes calculating a coefficient for demodulation of the signal. The method also includes demodulating the signal by calculating discrete intermediate values utilizing the coefficient for a predefined maximum number of steps and calculating the signal with the aid of the intermediate values of the coefficient. The value of the coefficient is respectively calculated on the basis of carrier frequencies for each step.

Abstract: Embodiments are directed to systems and methods for communicating between nodes in a mobile ad hoc network. In one scenario, a node in a mobile ad hoc network communicates with another node in the network using both code division multiple access (CDMA) and frequency division duplexing. The communication is coded prior to transmission to the other node, and includes applying direct sequence spread spectrum (DSSS) modulation to a transmission signal at a specified bit rate over a specified spectrum. The DSSS coding is applied in accordance with a processing gain which spreads the spectrum relative to the bit rate of the transmission. The coded communication is then transmitted over a specified frequency band allocated to the node over which the node transmits data and over which the other node receives the data.

Abstract: A transmitter in a Digital Subscriber Line (DSL) system includes a rate encoder configured to generate a first set of encoded bits using a set of least significant bits, a trellis shaper configured to generate a second set of encoded bits using a most significant bit and the first set of encoded bits, a first constellation mapper configured to generate a first point described by integer coordinates in a complex plane based on the first set of encoded bits obtained from the rate encoder, a second constellation mapper configured to generate a second point described by integer coordinates in the complex plane after interleaving two bits from the second set of encoded bits obtained from the trellis shaper, and a merger module configured to merge the first point with the second point to generate a symbol. The symbol represents a third point described by integer coordinates in the complex plane.

Abstract: A method for reserving agents for handling calls in a distributed contact center environment. A first module identifies, through interactions with other modules, an agent suitable for handling the call. A second module executes a hash function to identify a third module responsible for the agent, makes a request to the third module, to reserve the agent, and routes the call to the third module if the request is granted.

Abstract: An override subsystem on the host side of a serial data link between the host and a peripheral detects and diagnoses link errors by comparing the states of the port's link-layer component and physical layer. An override controller accesses a data-store containing stored policies for responding to particular errors. After selecting the appropriate policy, the override controller takes control of the physical layer, the link-layer component, or both, reconfigures them according to the policy to correct the errors, and returns control of the physical layer to the host controller and link-layer component. As well as error recovery, the override subsystem may be used by applications or drivers to asynchronously manage power consumed by the link.

Abstract: The present disclosure provides a system and a method of adjusting data collection frequency. the system includes a server, a gateway and a sensor. The gateway is communicated with the server for data transmission. The sensor is configured to transmit the sensor data to the gateway, wherein the gateway transmits the sensor data to the server based on a first frequency, and is triggered to transmit the sensor data and a historical sensor data based on a second frequency in case the server or the gateway detects an alert event when processing the sensor data, wherein the historical sensor data is related to the alert event, so that the server analyzes the historical sensor data to get a diagnostics on the alert event, wherein the second frequency is higher than the first frequency.

Abstract: An apparatus comprising an application cross-stratum optimization (CSO) gateway (ACG) coupled to an application layer that handles a plurality of servers, a network CSO gateway (NCG) coupled to a network layer that handles a plurality of network nodes and configured to communicate with the ACG using a CSO protocol (CSOP), and a CSO interface established between the ACG and the NCG that enables the exchange of a plurality of CSOP messages to allow joint application-network resource allocation, provisioning, and optimization. Also disclosed is a network apparatus implemented method comprising sending a user profile from a user plane to an application plane, sending an application profile from the application plane to a network plane via a CSO interface between an ACG and a NCG, and sending network capability information from the network plane to the application plane via the CSO interface.

Abstract: Technology is described for sharing device capabilities between a plurality of Internet of Things (IoT) devices. A first IoT device within a localized network may identify a desired device capability that is capable of augmenting device capabilities of the first IoT device. The first IoT device may identify a second IoT device within the localized network that possesses the desired device capability. The first IoT device may identify the second IoT device using a registry of device capabilities stored in the localized network. The first IoT device may obtain access to the desired device capability of the second IoT device to augment the device capabilities of the first IoT device.

Abstract: Various embodiments associated an inter-network policy that is implemented for use across multiple networks are described. Individual networks can have individual policies that govern how communications are handled, how resources are allocated, and other metrics. When individual networks work together, these networks can experience problems if their individual policies conflict with one another. Therefore, the inter-network policy can be generated that facilitates the individual networks working together.

Abstract: Apparatuses, methods, and systems for controlling a hybrid node are disclosed. A network includes a plurality of first nodes, wherein sectors of the plurality of first nodes are configured to simultaneously transmit wireless signals or receive wireless signals, a plurality of second nodes, wherein sectors of the plurality of second nodes are configured to simultaneously transmit wireless signals when all of the one or more sectors of the plurality of first nodes are receiving wireless signals, or receive wireless signals when all of the one or more sectors of the plurality of first nodes are transmitting wireless signals, and a plurality of hybrid nodes, wherein at least a subset of sectors of the plurality of hybrid nodes are controllably selected to operate as one of the plurality of first nodes or to operate as one of the plurality of second nodes.

Abstract: Systems and methods for performance and security management of the computing infrastructure that supports an application deployed in a hosted computing environment are described. In one embodiment, for example, a system comprises agents installed on hosts. The agents capture and record system events from operating systems on the hosts that result from application component processes executing on the hosts. The system further includes a collection and analysis engine that obtains captured and recorded system events from the agents, identifies captured and recorded system events that pertain to an application transaction, and produces, from the identified system events, metric data reflecting quantity of computing resources used by the application component processes to process the application transaction. The system also includes a web dashboard that presents the metric data to a user, for example, on a web page.

Abstract: A performance management engine may be implemented to continuously detecting entity performance issues. The performance management engine may calculate one or more key performance indicators (KPIs) that measure performance of an entity. The performance management engine may further receive one or more additional sources of data regarding the entity via a data management platform that interfaces with multiple data sources. The performance management engine may aggregate the KPIs and the one or more additional sources of data into datasets according to one or more grouping parameters. The data in one or more datasets may be analyzed by the performance management engine to generate one or more comprehensive performance indicators. The comprehensive performance indicators are then provided for display on a user device. Each KPI or comprehensive performance indicator measures performance of a device, a component, a node, or a service of the entity.

Abstract: Methods recommend to data center customers those attributes of a data center infrastructure and application program that are associated with service-level objective (“SLO”) metric degradation and may be recorded in problem definitions. In other words, a data center customer is offered to “codify” problems primarily with atomic abnormality conditions on indicated attributes that decrease the SLO by some degree that the data center customer would like to be aware. As a result, the data center customer is warned of potentially significant SLO decline in order to prevent unwanted loss and take any necessary actions to prevent active anomalies. Methods also generate patterns of attributes that constitute core structures highly associated with degradation of the SLO metric.

Abstract: A post incident analysis system and method includes a system management module coupled to a communications link and digital data storage containing a database of multiple survey questions, each question associated with an application criteria statement and auto populate instructions. The module conducts post incident analysis responsive to a network incident. After the incident receives a given status, the module generates a post incident survey. Survey questions are identified by applying the application criteria statement associated with each question. The module pre-completes selected ones of the identified survey questions by executing the auto populate instructions associated with the selected survey question to identify and retrieve answers to the question from predefined data sources specified in the auto populate instructions. The post incident survey includes, at minimum, survey questions for which the pre-completion was not successful. The survey is transmitted to the participants via the link.

Abstract: Describe herein are techniques for providing cloud-based discovery. For example, a device may be configured to provide device registration and de-registration notifications to a cloud-based discovery service. The cloud-based discovery service may be configured to respond to discovery request by identifying registered devices that meet the criteria of the discovery request. The cloud-based discovery service may also be configured to provide endpoint information associated with registered devices in response to the discovery request, such that a device is able to utilize the endpoint information to connect with one or more of the registered devices.

Abstract: Embodiments of the present invention provide systems and methods for monitoring action records in virtual space. The systems and methods for monitoring action records in virtual space display recorded activity on an avatar within the virtual space by communicating in a virtual space with a user account. The recorded activity is analyzed and processed in order to compile information on the avatar and display an avatar (which is a reflection of the compiled information).

Abstract: Systems, methods, and computer-readable media for collector high availability. In some embodiments, a system receives, from a first collector device, a first data report generated by a capturing agent deployed on a host system in a network. The system can also receive, from a second collector device, a second data report generated by the capturing agent deployed on the host system. The first and second data reports can include traffic data captured at the host system by the capturing agent during a period of time. The system can determine that the first data report and the second data report are both associated with the capturing agent, and identify duplicate data contained in the first data report and the second data report. The system can then deduplicate the first and second data reports to yield a deduplicated data report.

Abstract: A method for monitoring a network device is described. The method includes analyzing a traffic log that records network activity between the network device and a cloud server. The method also includes determining that the network device is offline based on the traffic log analysis. The method further includes sending an alert to a user device indicating that the network device is offline.

Abstract: This application discloses a service chain fault detection method and an apparatus. The method includes: obtaining, by a service forwarding entity SFE, a first fault tracing detection request packet, and then determining to communicate with a first service function SF node, where the first fault tracing detection request packet includes a path identifier ID and an address of a device for initiating fault detection, and the path ID is used to identify a path of a service chain; obtaining, by the SFE, an ID of the first SF node; and sending, by the SFE, a first fault tracing detection response packet to the device for initiating fault detection, where the first fault tracing detection response packet includes the path ID, the ID of the first SF node, and the address of the device for initiating fault detection.

Abstract: A system and method include determining, by a processing device, a first quantity associated with usage of a hardware resource on which a virtual machine is instantiated in a cloud, determining, by the processing device from the virtual machine, a second quantity associated with usage of a software resource utilized on the virtual machine, and determining usage of the cloud in view of the first quantity and the second quantity.

Abstract: A system includes a first processor and a second processor coupled to the first processor through a high speed connection and a low speed connection. The first processor and the second processor are disposed within a first device. The first processor and the second processor exchange heartbeat signals therebetween through the low speed connection. The first processor communicates a first reset signal through a reset line to the second processor when the first processor does not receive a first heartbeat signal of the heartbeat signals from the second processor. The second processor resets in response to the first reset signal.

Abstract: A method, apparatus, and computer program product are disclosed to provide host-independent resource monitoring for distributed networks. The method includes determining, from a set of jobs, one or more jobs to execute that monitor the status of resources within a distributed network. The method determines one or more environments in which to run the one or more jobs, and instantiates the one or more jobs with one or more environment variables for the determined one or more environments such that the one or more jobs are configured for operation in the determined one or more environments. The method accordingly displays, using a graphical user interface, a job environment matrix including a list of the set of jobs in conjunction with a running status of each of the jobs in each of one or more environments. A corresponding apparatus and computer program product are also provided.