Abstract: A computer-implemented method of generating a security policy for a microsegmented computing system is provided. The method includes generating a port service map that indicates inbound packet activity by port for a plurality of network addresses within the microsegmented computing system and a port distribution map that indicates inbound packet activity by port for a plurality of network addresses within the microsegmented computing system, and generating a list of security policy recommendations based on the port service map and/or the port distribution map.

Abstract: Systems, methods, and computer-readable media for elastic policy scaling in multi-cloud fabrics. A method can involve deploying a cluster of policy agents on a hub virtual private cloud (VPC) that interconnects spoke VPCs in a cloud associated with a multi-cloud fabric, and mapping endpoints in the spoke VPCs to the policy agents. The method can involve distributing groups of policies for the endpoints across the policy agents based on the mapping of endpoints to policy agents, and advertising, by each policy agent to a respective first set of virtual gateways in the spoke VPCs, routes associated with endpoints mapped to the policy agent and preventing the policy agent from advertising routes associated with a second set of virtual gateways in the spoke VPCs. The method can involve applying, via the policy agent, a group of policies on the policy agent to traffic received by the policy agent.

Abstract: An example method of migrating a firewall policy between a first virtual data center and a second virtual data center includes: generating a static firewall from a firewall document at a first firewall server in the first virtual data center, the firewall document defining polices applied to groups of objects in the first virtual data center, the static firewall including firewall rule tuples; sending the static firewall from the first firewall server to a second firewall server in the second virtual data center; migrating a plurality of virtual machines (VMs) from the first virtual data center to the second virtual data center; and importing the firewall document from the first firewall server to the second firewall server by mapping the policies of the first firewall to groups of objects in an inventory of the second virtual data center.

Abstract: One or more embodiments provide a firewall policy between a first virtual data center and a second virtual data center. A method includes: establishing a communication link between a first firewall server in the first virtual data center and a second firewall server in the second virtual data center over a network, the first firewall server having a first firewall defined by polices applied to groups of objects in the first virtual data center; obtaining, at the first firewall server, an inventory of objects in the second virtual data center from the second firewall server; determining firewall rule tuples by mapping the policies of the first firewall to groups of objects in the inventory of the second virtual data center; and sending the firewall rule tuples to enforcement points in the second virtual data center.

Abstract: A method manages data traffic within a network having controllers that each control a part of the network having a forwarding element (FE), the controllers being connected to a reference monitor (RM) for enforcing a security policy. The method includes: receiving a rule request by a controller and transmitting it its RM; the RM checking the rule request for policy compliance and authorizing a poly compliant part of the rule request. When the rule request has an outside modification: the controller contacts controllers impacted by the outside modification for obtaining an authorization, and upon receipt of authorization, sending the controller sends the modifications and authorizations to the impacted controllers to implement the modification in their FE.

Abstract: A uniform wireless network service selection information exchange interface system is provided to facilitate a consistent user experience across multiple wireless networks that may have different service plan activation or service plan purchase processes. Network detection of service usage anomalies based on device-based data usage reports is provided to enable the network to determine whether an end-user device is likely operating in accordance with the established policy, or whether the end-user device may be operating fraudulently.

Abstract: Methods and apparatus for providing a messaging server within a premises device e.g., a home or enterprise gateway device. In one embodiment, a system is described that includes a premises device that acts as a centralized client messaging platform providing messaging services between a content provider and client devices, and also between client devices within a premises network. The premises device enables client-to-client communication that bypasses the long trip and propagation delay over the Internet by connecting the message across the premises network. The premises device enables messages to be communicated between a content provider outside the premises network and the client devices via a single connection to minimize the number of Internet connections that need to be opened, and the number of messages communicated with servers outside of the premises network via both upstream aggregation and downstream dis-aggregation, which collectively save both network bandwidth and device reaction time.

Abstract: According to one or more embodiments of the disclosure, a local network device establishes a communication session with a remote network device in the communication network, and designates at least one program from a plurality of programs executable by the local network device for access by the remote network device to yield a designated program. The local network device further generates a shared display object, and associates each designated program with the shared display object to permit display thereof. The local network device further instantiates one or more shared control objects associated with the shared display object, and facilitate access to each designated program for the remote network device using at least one of the one or more shared control objects.

Abstract: Technologies for audiovisual communication include an audiovisual server and a number of audiovisual client devices, including a presenter device and a number of audience devices. Each audience device captures an audiovisual stream and transmits the audiovisual stream to the audiovisual server. Each audience device also captures sensor input data such as eye tracking data or facial expression data and transmits abstracted sensor input data to the audiovisual server. The abstracted sensor input data may be based on the captured audiovisual stream. The audiovisual server determines an interestingness rating associated with each audience device based on the sensor input data, and selects one or more audiovisual streams based on the interestingness ratings. The audiovisual server transmits the selected audiovisual streams to the presenter device. The audiovisual server may update the interestingness rating algorithm based on feedback from the presenter device or the audience devices.

Abstract: In a computing environment having a multiple input detection system including a detector that detects and transmits multiple simultaneous user inputs from different users at a same time, a method for processing inputs from different users across multiple application windows of one or more applications displayed on a single display of a user interface, resulting in a multi-user graphical user interface (GUI), the computing environment running an operating system (OS) designed to run with a single user GUI, the method including determining, in a primary application, separate from the OS, that a first user input corresponds to a first window and a second user input corresponds to a second window, the primary application sending the first and second user inputs to first and second secondary applications that run in parallel with the primary application, the first and second secondary applications being designed to run with the OS.

Abstract: A method or apparatus that incorporates teachings of the present disclosure may include, for example, a method for retrieving a plurality of sensory information from an environment of a device. A digital representation of the environment of the device is identified corresponding to the plurality of sensory information from the environment of the device. A media presentation element of the device associated with media content of the device is identified. A user interface of the media presentation element is adapted to modify a presentation of the media content by the media presentation element of the device according to the digital representation of the environment of the device. Other embodiments are disclosed.

Abstract: Methods and systems are provided for collaborating in the discovery of Head-Mounted Devices (HMDs) configured for hosting a co-located virtual, augmented, or mixed reality (xR) session. An HMD issues a request to join a co-located xR session. Participating in a co-located xR session requires a joining HMD to obtain authorization from a host HMD. A joining HMD may be located such that direct communications between the joining HMD and the host HMD are either unreliable, or beyond the capabilities of two HMDs. The joining HMD may collaborate with neighboring HMDs to obtain authorization from a host HMD. The host HMD aggregates information from joining HMDs to determine the authorized HMDs and to determine the most reliable forms of direct communication between each pair of HMDs participating in the xR session.

Abstract: A method includes receiving an input media stream at a hardware encoder. The method also includes executing, at a processor of the hardware encoder, a headless browser to retrieve an instance of a dynamic web page that includes additional content. The method also includes storing the additional content at a memory that is accessible to the processor and encoding circuitry of the hardware encoder. The method further includes retrieving, at the encoding circuitry, the additional content from the memory and encoding the input media stream to generate an output media stream. At least one frame of the output media stream includes at least a portion of the additional content in conjunction with at least a portion of a corresponding frame of the input media stream.

Abstract: A method utilized in a wireless device used to wirelessly receive and play audio information includes: receiving a data packet stream transmitted from an audio source; monitoring a data amount of at least one buffer of a memory of the wireless device; and tuning an audio clock frequency dedicated for playing audio samples if the data amount of the at least one buffer deviates from a specific data amount level.

Abstract: Systems, methods, and computer readable media for delivery of content are provided. In some embodiments, systems for controlling delivery of content are provided, the systems comprising processing circuitry configured to: receive a request to stream the content, the request being received from a user equipment device; determine a first location of the user equipment device; determine a count of user equipment devices that are located at the first location and are currently streaming the content; determine whether the count meets a threshold; and responsive to determining that the count meets the threshold, add a first content delivery network to a pool of one or more content delivery networks that are used to stream the content.

Abstract: Techniques for framing data in various data transmission contexts are described. A data framing technique may include a transmitter sending a data stream including repeating bits in alternating forward and reverse order. A receiver of the data stream may fold the data stream, and correlate portions of the folded data stream for purposes of validating the data stream and/or identifying an ID in the data stream. In at least some instances, once the receiver validates the data stream, the receiver may accept payload accompanying the data stream.

Abstract: A client device includes a memory and at least one processor configured to cooperate with the memory. The at least one processor receives a virtual disk change notification from a server, with the virtual disk change notification including a new configuration for a virtual disk image. At least one change to the virtual disk image is determined based on a comparison of the virtual disk image with the new configuration of the virtual disk image. The virtual disk image is modified based on the determined at least one change.

Abstract: The present invention is directed to processes and systems for high availability Voice Over Internet Protocol telephony. Exemplary embodiments comprise a VOIP proxy cluster in communication with an IP private branch exchange cluster in communication with a PSTN VOIP gateway cluster, all at a first call cluster locale. In exemplary configuration, nodes within each of the clusters mount a database node from the database cluster, and store and retrieve persistent telephony operation data within the database cluster. Embodiments employ the clustering mechanisms to separate telephony elements in a cluster to cluster topology. In exemplary usage, multiple physically separate call cluster locales are deployed for higher availability.

Abstract: The present invention relates to a method for uploading a file from a user device (10) to a data storage service (20, 30, 40). According to the method, a category of a set of categories is assigned to the file based on at least one characteristic of the file characterising a content of the file. Furthermore, a data storage service (20, 30, 40) from a set of data storage services is assigned based on the assigned category and the file is uploaded to the assigned data storage service (20, 30, 40).

Abstract: Performing blockchain operations on behalf of a capability limited device that is unable to perform the blockchain operations. The method includes hosting a digital twin for the capability limited device on a system capable of performing the blockchain operations. The capability limited device includes a unique device identifier. The digital twin also includes the unique device identifier, such that actions performed by the digital twin are attributable to the capability limited device. The method further includes receiving input for a set of blockchain operations at the system capable of performing the blockchain operations, from the capability limited device. The method further includes performing the set of blockchain operations at the system capable of performing the blockchain operations using the digital twin and the unique device identifier, such that performance of the set of blockchain operations is attributed to the capability limited device.

Abstract: A method includes receiving, at a model and optimization framework, a request, rendered in a first format, for a service to be implemented on a subset of a software-defined network. The request includes at least one constraint affecting implementation of the service. The method includes producing an optimized solution, rendered in a second format, for implementing the service based on the at least one constraint. The method includes translating the optimized solution to the first format and providing instructions for a cloud manager to implement the service consistent with the translated optimized solution.

Abstract: Methods, systems, and computer program products are provided that automatically scale an application between private and public cloud computing platforms, while simultaneous enforcing policies ensuring private data is persistently stored on the private cloud computing platform, but not the public cloud computing platform. A traffic manager on the public platform routes traffic to instances of a web app executing on a private platform. A traffic monitor on the private platform monitors performance criteria of the private platform, and reports traffic telemetry to the traffic manager. Based on the traffic telemetry, the traffic manager may instantiate one or more instances of the web app on the public platform to handle traffic. Private data gathered by such instantiated instance(s) is persisted to storage in the private platform, but not in the public platform.

Abstract: Load balancing across hosts in a computer system is triggered based on pairwise comparisons of resource utilization at different host. A method for load balancing across hosts includes the steps of determining a resource utilization difference between first and second hosts, wherein the first host has a higher resource utilization than the second host, comparing the resource utilization difference against a threshold difference, and upon determining that the resource utilization difference exceeds the threshold difference, selecting a workload executing in the first host for migration to the second host.

Abstract: Enhanced packet redirect capabilities are disclosed herein for draining traffic to a server. In an implementation, a server in an infrastructure service receives a packet from a stateless load balancer. The packet may comprise a request for content. A user space program on the server determines whether a connection identified in the packet belongs to the server. If the connection belongs to the server, the user space program handles the request for the content. If not, the server forwards the packet to a secondary server in the infrastructure service. The secondary server, to which the connection may belong, can then handle the request.

Abstract: A database proxy includes a computing device and a hardware-accelerated database proxy module. The computing device includes one or more processors, memory, a first bus interface, and a network interface coupling the database proxy to one or more networks. The database proxy module includes a second bus interface coupled to the first bus interface via one or more buses, and a request processor. The database proxy is configured to receive a database read request from a client via the one or more networks and the network interface; forward the database read request to the request processor using the one or more buses; process, using the request processor, the database read request; and return results of the database read request to the client. In some embodiments, the computing device or the database proxy module further includes a flash memory interface for accessing one or more flash memory devices.

Abstract: Technology is disclosed for bridging clouds of computing devices for compute and data storage. The technology can receive a virtual routing table (VRT), wherein the VRT indicates an association with a virtual local area network (VLAN) and defines neighbors for each route wherein at least one neighbor is defined for each of the two different cloud service providers, wherein the route definition creates a private transitive network between the neighbors; receive from a first node a first message destined for a second node; determine that the first message employs the route specified by the VRT; forward the first message to the second node; receive from a third node a second message destined for the second node; determine that the second message does not employ the route specified by the VRT; and fail to forward the second message to the second node.

Abstract: A method, system, and computer-readable storage medium for a reconfigurable computing system are disclosed. One method involves configuring one or more computing resources (selected according to a workflow that specifies an application to be executed) of a computing node and executing, using the one or more computing resources, at least a portion of an application at the computing node. At least one of the one or more computing resources is a reconfigurable logic device, and the configuring, at least in part, configures the reconfigurable logic device according to a configuration script of the workflow. The executing comprises performing one or more operations. The one or more operations are performed by the reconfigurable logic device. The reconfigurable logic device is configured to perform the one or more operations by virtue of having been configured according to the configuration script.

Abstract: A system may include a first processor for storing, in a key-value column-based database, data records from data sources of a cellular network that is transformed into a single format. Customer identifiers may be used as key-values for indexing the data records in the key-value column-based database. The system may include a second processor for creating session records from the data records. Each session record may include a velocity of an endpoint device associated with a session and a number of inter-cell handoff attempts for the session. Each session record may also be labeled with a session identifier comprising a customer identifier and a timestamp. The system may further include a third processor for creating cell-level records from the session records. Each cell-level record may include a plurality of key performance indicators for a cell site of the cellular network segregated by a plurality of endpoint device types.

Abstract: One mode of the present invention is configured to acquire sensor-side metadata including a first label corresponding to a label showing a name given in order to identify event data, to acquire app-side metadata including a second label that is an event condition showing a condition of an event and corresponds to the label, to determine, in a case where sensing data satisfies a requirement of an application, whether the first label and the second label are identical, and to transmit, in the case where these labels are identical, a dataflow control command including information specifying a sensor, information specifying the application and the event condition included in the app-side metadata.

Abstract: The present application relates to the technical field of industrial data processing, and in particular relates to a field data processing method, apparatus and system, which are used to realize the timely processing of field data. In the embodiments of the present application, a field data processing apparatus located on an industrial site of an industrial system receives field data from at least a field apparatus on the industrial site, and processes the received field data and provides the processing result of the field data. In this way, untimely processing of field data can be avoided.

Abstract: A method for Internet of Things (IoT) traffic management in a communication network supporting a plurality of network slices, in particular a 5th generation wireless communication network, includes dynamically assigning, by a network slice management component, network resources to a number of network slices. One or more of the network slices are dedicated IoT network slices being adapted to enable IoT-related communications between an IoT platform and IoT devices or IoT gateways. The method also includes the network slice management component, interacting with an IoT broker associated with the IoT platform and, based on the interaction, performing actions with respect to an allocation of network resources to the number of network slices and/or triggering actions on the IoT broker with respect to a configuration of IoT data traffic.

Abstract: An electronic apparatus and method of controlling the electronic apparatus are provided.

Abstract: The present disclosure relates to the field of communication management, more particularly, communication management methods and systems for session visit auto-bookmarking. In one disclosed embodiment, a communication management server is disclosed. The communication management server comprises a memory storing a set of instructions, and at least one processor configured to execute the instructions to receive communication messages from a plurality of user devices, store the communication messages in a communication content database, provide communication content for display on the user device, receive a display suspension instruction, and generate a visit bookmark indicating a last displayed message in the communication content.

Abstract: A client device may connect to a remote browsing server, which may browse to a Uniform Resource Identifier, render a web service or other content, and stream the content back to the client device. The client device may have a web browser through which the server may stream rendered images and which may capture various inputs, such as mouse operations, keyboard inputs, and other input. The remote browsing server may receive the inputs from the browser, then transmit the inputs to the web service through a server browser, which may render the images transmitted to the client device. The remote browsing server may be a virtual machine that may be created for a limited use, such that the virtual machine and browser may be wiped clean with each use.

Abstract: This embodiments of the application provides a redirection method and a control plane network element to quickly obtain the content requested by a terminal device. The method may include obtaining, by a control plane network element, a content transmission request sent from a content server; determining, by the control plane network element based on the content transmission request, a cache node configured to store to-be-transmitted content and an aggregation user plane network element associated with the cache node. The method may also include sending, by the control plane network element, a traffic flow matching parameter to the aggregation user plane network element, where the traffic flow matching parameter is used to match a traffic flow of the to-be-transmitted content and determine a connection used to transmit a matched traffic flow.

Abstract: A wireless communication system includes an external provider subsystem and an electronic network subsystem in operable communication with the external provider subsystem. The electronic network subsystem is configured to provide a first microservice and a second microservice different from the first microservice. The wireless communication system further includes an in-home subsystem (i) separate from the external provider subsystem, (ii) in operable communication with the electronic network subsystem, and (iii) including a first micronet and a second micronet different from the first micronet. The first micronet is configured to operably interact with the first microservice, and the second micronet is configured to operably interact with the second microservice. The wireless communication system further includes at least one electronic device configured to operably connect with one of the first micronet and the second micronet.

Abstract: Disclosed are systems and methods for improving interactions with and between computers in controlling external programs executed by a browser application. The disclosed systems and methods provide systems and methods for automatically identifying an external program in a document definition used in rendering a document display in a user interface of the browser application. In response to detecting inactivity in connection with the document display, the disclosed systems and methods generate a first modified document definition, by modifying the document definition, to suspend execution of the external program in a first modified document display based on the first modified document definition.

Abstract: Client-side Quality-of-Service (QoS) for viewing of Adaptive Bitrate (ABR) streams may be provided. First, a plurality of Adaptive Bitrate (ABR) objects corresponding to a first video rendition of a content program may be downloaded from a Content Delivery Network (CDN) in non-real-time. The plurality of ABR objects may comprise a portion of ABR objects comprising the content program. Next, the plurality of ABR objects downloaded in non-real-time may be stored in a cache. At least a portion of the content program may then be retrieved in real-time using ABR streaming. Retrieving the at least a portion of the content program may comprise obtaining a first ABR object corresponding to the content program and a second ABR object corresponding to the content program.

Abstract: Generally discussed herein are systems, devices, and methods for data management in a reverse content data network (rCDN). A component of the rCDN may include a memory to hold content received from a first sensor device of a plurality of sensor devices of the rCDN and first attributes that describe properties of the content. The component may include processing circuitry to receive second content from a second sensor device of the plurality of sensor devices, the second content including a plurality of second attributes that describe properties of the second content, and forward, in response to a determination, based on the first and second attributes, that there is insufficient space to store the second content on the memory, the second content to a node of the rCDN that is fewer hops away from a backend cloud than the component.

Abstract: A content delivery network has at least a first tier of servers. A content delivery method includes at a first server in the first tier of servers, obtaining a request from a client for a resource. If the resource is available at the first server or at a peer of the first server, then the resource is served to the client from the first server. Otherwise, it is determined whether the resource is popular, and if the resource is determined to be popular, then the first server obtains the resource and the first server serves the resource to the client. If the resource is determined not to be popular, the server contacts a second server to obtain the resource, not in the first tier of servers, and the second server provides the resource to the first server. The first server is instructed not to cache the unpopular content.

Abstract: A method of reducing download requirements for display of content includes transmitting, by a client device to a content server, a content request, the request including an identifier for each of one or more pre-cached media files stored on the client device, the transmission being carried out whilst the client device is connected to a first network. The method further includes receiving, by the client device from the content server, a response comprising instructions to display a selected one of the pre-cached media files, the response including additional display instructions for display of the selected pre-cached media file, and displaying, by the client device, the pre-cached media file according to the additional display instructions.

Abstract: A computer system including program instructions to receive a message at a source gateway of the local network, the message includes message data corresponding to a plurality of message elements, assign a unique group ID based on the type of message received at the source gateway, extract a message format from the received message, the message format defines how the message data is organized with respect to the message elements, and associate the extracted message format with the unique group ID. The computer system further including program instructions to store locally, the extracted message format together with the associated unique group ID, establish a dedicated connection between the source gateway and a target gateway of the remote network based on the unique group ID, encode the message based on the extracted message format, and send the encoded message from the source gateway to the target gateway across the dedicated connection.

Abstract: A computer system including program instructions to receive a message at a source gateway of the local network, the message includes message data corresponding to a plurality of message elements, assign a unique group ID based on the type of message received at the source gateway, extract a message format from the received message, the message format defines how the message data is organized with respect to the message elements, and associate the extracted message format with the unique group ID. The computer system further including program instructions to store locally, the extracted message format together with the associated unique group ID, establish a dedicated connection between the source gateway and a target gateway of the remote network based on the unique group ID, encode the message based on the extracted message format, and send the encoded message from the source gateway to the target gateway across the dedicated connection.

Abstract: A content delivery network may provide content items to requesting devices using a popularity-based distribution hierarchy. A central analysis system may determine popularity data for a content item stored in a first caching device. At a later time, the central analysis system may determine that a change in the popularity data is beyond a threshold value. The central analysis system may then transmit an instruction to move the content item from the first caching device to a second caching device in a different tier of caching devices than the first caching device. The central analysis system may update a content index to indicate that the content item has been moved to the second caching device. A user device may then be redirected to request the content item directly from the second caching device.

Abstract: The system is a self-serve platform, which delivers user uploaded media and multimedia files, of varying playback duration, to a client computer connected to a digital display; which is set to receive executions for a scheduled playlist and punctually presents the playback of media and/or multimedia files in said playlist record. The system's included functions for schedule generation, schedule selection, and playlist creation contain unique, and embedded automatic functions, provide the capacity for making scheduling and delivery of media and multimedia files reliable, accessible, and cost efficient.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: A network node and a method performed by a network node for providing a recommendation associated with a service to a wireless device are provided. The network node is operable in a wireless communication network. The method includes obtaining bandwidth information associated with a radio interface between a radio access node of a Radio Access Network, RAN, of the wireless communication network and the wireless device; and obtaining bandwidth information associated with a transport network of the wireless communication network. The method further includes determining available bandwidth for providing the service to the wireless device based on the obtained bandwidth information associated with the radio interface and the obtained bandwidth information associated with the transport network.

Abstract: A RF transceiver for a mesh network node is described. The RF transceiver includes a RF transmitter and a RF receiver coupled to the processor. The RF transceiver is configured in a normal mode of operation as a network node in a wireless mesh network and is configured in a service mode of operation as a network node in a tree network.

Abstract: Systems and methods for cloud-based management of reservoir simulation projects are provided. A cloud-based application server may receive from a client device over the communication network information defining a reservoir simulation project for a wellsite in a hydrocarbon producing field. The reservoir simulation project may include at least one reservoir simulation job to be performed by the cloud-based application server. The information may include one or more parameters for the reservoir simulation job. The cloud-based application server may perform the reservoir simulation job according to the one or more parameters. The cloud-based application server may provide results of the simulation job to the client device over the communication network for display within a graphical user interface (GUI) provided at the client device for a cloud-based reservoir simulation application executable by the application server.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).