Abstract: The present disclosure includes, responsive to a request from a user device, performing a security check based on policy associated with the user device, wherein the policy includes setting related to content filtering and security; responsive to the security check, performing one of: directly allowing the request to the Internet based on the security check determining the request is allowed by the settings; directly blocking the request based on the security check determining the request is disallowed by the settings; and forwarding the request to a system for inline inspection based on the security check determining the request includes suspicious content, wherein responsive to the inline inspection, the request is one of allowed and blocked.

Abstract: The disclosure relates generally to methods, systems, and apparatuses for managing network connections. A system for managing network connections includes a storage component, a decoding component, a rule manager component, and a notification component. The storage component is configured to store a list of expected connections for a plurality of networked machines, wherein each connection in the list of expected connections defines a start point and an end point for the connection. The decoding component is configured to decode messages from the plurality of networked machines indicating one or more connections for a corresponding machine. The rule manager component is configured to identify an unexpected presence or absence of a connection on at least one of the plurality of network machines based on the list of expected connections. The notification component is configured to provide a notification or indication of the unexpected presence or absence.

Abstract: Arrangements for detecting, evaluating and controlling intelligence threat data feeds are provided. In some examples, a plurality of threat intelligence data feeds may be received. The threat intelligence data feeds may be received and evaluated to identify one or more feeds that are considered to provide valuable information to the entity implementing the evaluation. For instance, the evaluation may identify one or more feeds or providers that provides accurate data, timely data, and the like. In some examples, based on the evaluation, one or more data feeds may be removed (e.g., data might not be received), one or more alerts may be generated or dismissed, alerts generated for potential threats may be prioritized (e.g., alerts generated based on data from more accurate feeds are prioritized over alerts generated based on data from less accurate feeds).

Abstract: A network device receives a first message that includes an identifier (ID) of a first User Plane Function (UPF), serving a first device, in a wireless network, where the first message invites a second device to engage in a session with the first device and where the first UPF supports packet routing and forwarding within the wireless network. The network device extracts the ID of the first UPF from the first message and determines a closest media resource function (MRF) to the first UPF, where the MRF processes and routes media streams between devices. The network device assigns the determined MRF as an anchor, in a network path between the first device and the second device, for processing and routing of media streamed between the first device and the second device.

Abstract: Technologies for casting digital media content include a source computing device communicatively coupled to a destination computing device. The source computing device is configured to transmit a set of identifiers of the source computing device to the destination computing device and receive a set of identifiers of the destination computing device from the destination computing device. Each set of identifiers includes a version (e.g., hardware or software) associated with the respective computing device and a unique identifier of the respective computing device. The source computing device is additionally configured to determine a subset of casting session parameters from a set of casting session parameters based on the one or more capabilities of the destination computing device which are usable by the destination computing device to establish a casting session and stream digital media content in accordance with the subset of casting session parameters. Other embodiments are described and claimed.

Abstract: This disclosure relates to a communication network within which relays, which are connected to devices participating in a communication session (e.g., a video conference), are dynamically added and removed from the communication session. For instance, when participating in a communication session, a sending network device sends media streams (e.g., audio and/or video media streams) to its associated relay. The relay sends, through a relay communication link, the media streams to one or more receiving relays. The one or more receiving relays then forward the media stream to associated receiving network devices. As additional network devices join the communication session, the additional network devices connect to additional relays, which establish a network of relay communication links with all the relays involved in the communication session. Furthermore, as network devices leave the communication session, relays can be removed from the communication session.

Abstract: Exemplary embodiments described herein include methods of systems for visualization of test cell environments. Exemplary embodiments may include a test cell presence system and method of providing test cell visualization that displays and permits virtual interaction with complex, three-dimensional (3-D) data sets. Exemplary embodiments permit visualization through digital reality, such as Virtual Reality (VR), Augmented Reality (AR), and other display solutions.

Abstract: A hybrid network system, a communication method and a network node are provided.

Abstract: A fault-tolerant, cloud-based system can comprise a redundancy control unit capable of switching between transcoded video streams output by two or more transcoders. The redundancy control unit outputs a manifest from one of the transcoded streams and, upon detecting a fault in the stream, can modify the manifest to switch to another of the transcoded video streams. The redundancy control unit can further modify the manifest to flag the discontinuity in the video stream, which allows the player to switch to the new transcoding video stream without error. Other embodiments can include additional redundancies to help provide additional fault tolerance.

Abstract: Systems and methods for performing bit rate encoding are described. One of the methods includes receiving data indicating a change in a first connection speed that is associated with a first network. The change generates a second connection speed. The method further includes determining whether a media file is being downloaded. The method also includes determining that a current segment of the media file is being downloaded. The current segment is downloaded at a first bit rate and the first bit rate is associated with the first connection speed. The method includes determining whether the media file includes a remaining segment to be downloaded. The current segment precedes the remaining segment. The method includes identifying a second bit rate based on the second connection speed, receiving the remaining segment at the second bit rate, and stitching the remaining segment with the current segment.

Abstract: In one example, the present disclosure describes a device, computer-readable medium, and method for improving media quality at the network edge by encoding the media into a digital stream that is carried, end-to-end, to a peer edge device. For instance, in one example, a method includes initiating, by a first computing device, a connection to a second computing device, selecting, by the first computing device, a codec for encoding data into a data stream, wherein the codec is selected such that the data stream can be decoded by the second computing device without being transcoded by an intermediary, encoding, by the first computing device, the data into the data stream using the codec, and sending, by the first computing device, the data stream to the second computing device.

Abstract: A method mechanism for streaming multi-viewpoint virtual reality (VR) content via Dynamic Adaptive Streaming over Hypertext Transfer Protocol (HTTP) (DASH) is disclosed. The mechanism includes receiving media content including a VR video sequence. A DASH Media Presentation Description (MPD) is generated. The MPD includes an indication specifying that a portion of the media content that is related to a first viewpoint is associated with a timed metadata representation. A request is received from a client for the media content. The DASH MPD, including the indication, is transmitted to the client in response to receiving the request to support communication of the media content to the client.

Abstract: Devices, computer-readable media, and methods for providing a timeout for an adaptive bitrate streaming video chunk download are disclosed. For example, a processing system including at least one processor may determine a first bitrate for a first segment of a video program based upon an occupancy level of a video buffer of a device, request a first video chunk of the first segment encoded at the first bitrate, determine that the first video chunk is not received within a threshold of a duration of time after the requesting of the first video chunk, and request, responsive to the determining that the first video chunk is not received within the threshold of the duration of time, a second video chunk of the first segment encoded at a second bitrate that is lower than the first bitrate.

Abstract: Methods, systems, apparatuses, and computer readable media for providing a network analysis system are disclosed. An example of a system for providing a network analysis system includes at least one satellite device configured to monitor wireless network traffic to determine at least one network communication event, generate an event message based on the at least one network communication event, and transmit the event message. The system also includes a controller device configured to receive the event message, determine an identity of at least one device communicating during the network communication event, determine a network status based at least in part on the identity of the at least one device, and provide the network status via an interface.

Abstract: Systems and method for web control adaptation and hooking for virtual private network integration are provided herein. A client application executing on a client device can modify a scheme support function of a web control application to return a first value in response to a first scheme type. The first value can indicate that the web control application does not support the first scheme type. A custom scheme function can be registered to handle the first scheme type and can intercept requests of the first scheme type. The custom scheme function can transmit the requests to one or more URLs corresponding to one or more applications through a virtual private network (VPN). The custom scheme function can forward, to the web control application for rendering on the client device, the data corresponding to the application retrieved by the custom scheme function through the VPN.

Abstract: A network-accessible service provides an enterprise with a view of all identity and data activity in the enterprise's cloud accounts. The service enables distinct cloud provider management models to be normalized with centralized analytics and views across large numbers of cloud accounts. The service enables an enterprise to model all activity and relationships across cloud vendors, accounts and third party stores. Display views of this information preferably can pivot on cloud provider, country, cloud accounts, application or data store. Using a domain-specific query language, the system enables rapid interrogation of a complete and centralized data model of all data and identity relationships. User reports may be generated showing all privileges and data to which a particular identity has access. Similarly, data reports shown all entities having access to an asset can be generated.

Abstract: A computer implemented method comprises receiving data about a first condition associated with an apps for a first user. It is determined if one or more sets of required conditions are respectively satisfied by the first condition and at least one stored condition. Each set of conditions is associated with content delivery. When a set of conditions is satisfied, the associated content is delivered to a first user device for the first user.

Abstract: Disclosed is a computer program stored in a non-transitory computer readable medium, in which the computer program includes commands which cause a server to execute steps and the steps include: receiving a first signal requesting access to a first file associated with a first program from a first user terminal; if the first signal is received, checking whether a second user terminal is accessing the first file; determining a method for generating a first window in the first program, in which the first window is assigned to the first user terminal, based on whether the second user terminal is accessing the first file; generating a first image for a first area associated with the first window among an entire execution screen in which the first file is loaded through the first program; and transmitting the first image to the first user terminal.

Abstract: Systems and methods cross device application discovery and/or control. Cross device application discovery and/or control can provide for simple detection and activation of applications on remote devices. Cross device application discovery and/or control can provide for the control of remote applications in a master and slave configuration. Responsive to an activation message, an application can execute a task in an application, the task being displayed on a target device. Responsive to an activation message, an application can execute a task in an application on a target device, a task context data for the task being streamed to the source device for presentation on a display. Cross device application discovery and/or control can be enabled on a single operating system, or across a plurality of operating systems.

Abstract: Aspects of the disclosure provide for managing traffic for multiple versions of an application deployed in a computer system. A method of the disclosure includes: determining first workload information relating to a deployment of a first version of an application in a computer system and second workload information relating to a deployment of a second version of the application in the computer system; determining traffic information relating to the deployment of the first version of the application, wherein the traffic information comprises information about traffic handled by the first version of the application during a time frame; and determining an amount of traffic to be routed to the second version of the application in view of the first workload information, the second workload information, and the traffic information.

Abstract: In an online fashion community system (100) users provide personal image content, such as digital user fashion images (104, 700) that include users themselves modeling multiple fashion items as an ensemble, as the basis of community interaction. Users also provide information about the multiple fashion items, including information linking (108) to a provider of each fashion item and fashion data (106) such as brand, color, style, etc. User interface system (116) allows users to search among, access, and interact about the user fashion ensembles.

Abstract: Methods, systems, and media for providing distributed database access during a network split. In some embodiments, the method comprises: receiving, at a node of N nodes, configuration information of the database which indicates which of the N nodes stores replicated shards of the database including master shards and corresponding slave shards, N being an odd number greater than one; identifying, after a network split, a subset of the N nodes which are capable of communicating with each other; receiving, by a proxy, a request to perform a write operation to an object in the database; determining that a second node included in the subset of the N nodes stores a master shard including the object; determining that the subset includes at least (N+1)/2 nodes; and causing the request to perform the write operation to be routed to the second node.

Abstract: Described are system, apparatus, article of manufacture, method, or computer program product embodiments for controlling streaming of media content. An embodiment operates by halting a presentation of future content from a buffer upon determining that the buffer is exhausted of content to present. The embodiment includes receiving one or more packets over a network connection, the one or more packets including media information corresponding to a first portion of streaming media content, in which the first portion corresponds to a second portion of the streaming media content. The one or more packets in a buffer are stored as buffered content. Responsive to determining that the network connection is not experiencing a burst condition, the buffer is trimmed. Then, presentation of buffered content is resumed and the first portion is caused to be presented in sync with the second portion.

Abstract: Automated uploading of user and system data from one or more source computing systems to one or more destination storage repositories is provided. A data uploader module is installed on each computing system or is accessible by each computing system from which user and/or system data may need to be exported to a destination repository. Upon command, a data uploader module reads desired user data or system data from the computing system. The read data is transformed, if required, and the data is then exported to a destination storage repository. The exported data may be stored and analyzed at the destination storage repository from which it may be subsequently exported to other destinations, including back to the source computing system from which it was originally extracted.

Abstract: The inventive subject matter provides apparatus, systems, and methods of pre-loading (or caching) activatable content to several mobile devices for future use by at least one of the mobile devices. The mobile devices are communicatively coupled with each other to form a distribute storage network. The pre-loaded content can be used by applications executed in any one of the mobile devices within the network. A content server is configured to transmit portions of the content to the mobile devices upon detection that a subset of conditions within the multi-conditional content activation criteria has been satisfied. The content server is configured to transmit the entire content when all conditions within the multi-conditional content activation criteria has been satisfied. The content server then activates the content when a content activation event is detected.

Abstract: A wireless communication system includes a plurality of sensors and a device. Each sensor is configured to measure data and communicate over a network using low power signal communication. The device is connected to an in-wall power source and configured to wirelessly communicate over the network using low power signal communication. Further, the device is configured to transmit data from the sensors to a remote gateway using high power signal communication.

Abstract: Techniques for management of Internet of Things (IOT) devices are disclosed. IOT devices may be manufactured with a pre-installed software development kit (SDK) (e.g., in firmware or other storage). At initial startup time (e.g., after device placement), IOT devices may execute the firmware code as provided by the SDK to connect to a corporate network or other network-based control environment, such as a cloud-based service provider infrastructure. Once connected, IOT devices may participate in enterprise computing applications as a consumer or provider of information. Updates to IOT devices and their SDKs may be periodically provided. Virtual IOT devices may be used as placeholders or emulators for unavailable or future IOT devices, such that enterprise applications may be configured and executed without an actual physical IOT device in existence. Virtual IOT devices may also be used to assist with overall device provisioning.

Abstract: Systems and methods for distributed controls via edge devices are provided. The system includes a coordinating device and a plurality of distributed controllers. The coordinating device is configured to determine a current state, assign tasks for performing control specified by a control application to the plurality of distributed controllers, and broadcast a plurality of parameters. The plurality of distributed controllers are configured to perform the control specified by the control application. Each distributed controller is configured to receive a respective task, perform a respective control operation, and control an edge device using a control signal generated from the control operation.

Abstract: Systems and methods for continuous measurement of an analyte in a host are provided. The system generally includes a continuous analyte sensor configured to continuously measure a concentration of analyte in a host and a sensor electronics module physically connected to the continuous analyte sensor during sensor use, wherein the sensor electronics module is further configured to directly wirelessly communicate displayable sensor information to a plurality of different types of display devices.

Abstract: Embodiments of the present invention provide a method, system and computer program product for smart login session management. In an embodiment of the invention, a method of smart login session management includes authenticating an end user into a protected session of a Web application through a primary computing device and additionally authenticating the end user into a protected session of a mobile application of a secondary mobile computing device. The method further includes detecting a timeout condition in the protected session of the Web application for the end user. Finally, the method includes responding to the detection of the timeout condition by automatically logging the end user out of the protected session of the Web application if a timeout condition also exists in the protected session of the mobile application for the end user, but otherwise automatically renewing the protected session of the Web application.

Abstract: A data transmission method includes: receiving a request packet sent by a client through a first TCP connection established with the client; selecting a backend server based on the request packet, and establishing a second TCP connection with the selected backend server; and enabling identification information of the first TCP connection to be included in the request packet, and sending the request packet to the backend server through the second TCP connection to allow the backend server to directly feed back a generated response packet to the client based on the identification information of the first TCP connection, where the identification information of the first TCP connection includes a client address.

Abstract: A method for overcoming intermittent, temporary, or other fetching failures by using multiple attempts for retrieving a content from a web server to a client device is disclosed. The URL fetching may use direct or non-direct fetching schemes, or a combination thereof. The non-direct fetching method may use intermediate devices, such as proxy server, Data-Center proxy server, tunnel devices, or any combination thereof. Upon sensing a failure of a fetching action, the action is repeated using the same or different parameters or attributes, such as by using different intermediate devices, selected based on different parameters or attributes, such as different countries. The repetitions are limited to a pre-defined maximum number or attempts. The fetching attempts may be performed by the client device, by an intermediate device in a non-direct fetching scheme, or a combination thereof. Various fetching schemes may be used sequentially until the content is retrieved.

Abstract: A method for use in managing a networked computing system includes: receiving a trigger for a migration of a plurality of local migration artifacts from a first deployment state associated with an on-premises network management system to a second deployment state; and migrating the plurality of local migration artifacts from the first deployment state associated with the on-premises network management system to the second deployment state associated with the cloud-based provisioning system. The migration is seamless and includes reconciling at least one local migration artifact of the plurality of local migration artifacts with a plurality of remote migration artifacts maintained by the cloud-based provisioning system.

Abstract: A method and system that migrates a subscriber session from a first authentication, authorization, and accounting (AAA) authentication server to a second AAA authentication server, where the first AAA authentication server is stateful. The method includes receiving an authenticate session request from a client application, sending (505) the authenticate session request to the first AAA authentication server, detecting (511) connectivity failure with the first AAA authentication server, and sending (513) a reauthentication required message to the client application.

Abstract: Methods, systems, and computer-readable media for creating and managing a multi-tiered service messaging architecture within a cloud service provider or computing environment. In one or more embodiments, the multi-tiered service messaging architecture may comprise a primary topic configured to receive and manage particular service messages. Services of the cloud are allocated a service topic to receive the service messages managed by the primary topic and may itself subscribe to the primary topic to receive the service messages. Through the subscription to the service topic, the service may receive the service messages provided by the primary topic. Still other sub-topics may subscribe to the service topics for additional subscriptions by services to receive the service messages provided by the primary topic.

Abstract: The present invention provides a system in which, via a web page provided using a web browser by a management server, a management screen provided by a network device can be accessed while the management server does not need to have a private IP address of the network device.

Abstract: A tracking device includes an interface connectable to cameras, each acquiring an image and determining an object location within the image, a distance therefrom, and a time; a memory storing first coordinates indicating a camera location with respect to a reference point in a facility, and a first direction towards which each camera faces; and a processor, upon receipt of the location, the distance, and the time, calculating a second direction from the camera to the object, calculating second coordinates indicating an object location with respect to the camera location, calculating and storing with the time third coordinates indicating an object location with respect to the reference point. When locations calculated from the images acquired by the first and second cameras are associated with the same time, the processor calculates a distance therebetween, and when the distance falls within a predetermined range, recalculates the object location based on the locations.

Abstract: An information feed is provided that surfaces information items that are determined to be interesting or relevant to a user. The information feed may be updated with new information items each time the feed is accessed by the user. Information not surfaced to the user in the feed may be accessed by the user via one or more other means, but only those items having a sufficient importance to the user are surfaced in the feed. Items in the feed are sorted by order of importance or relevance to the user. When new items are added to the feed, they are sorted relative to each other, but are displayed separately from previous groupings of items added to the feed. Items may be reposted to different positions in the feed, and items may be manually removed from the feed if desired.

Abstract: One exemplary system can determine a digital footprint for a user. The system can determine a first transmission pattern in which first content was transmitted to a first user device based at least in part on the digital footprint. The system can determine training data that includes a relationship between (i) one or more characteristics of the first content and (ii) the first transmission pattern. The system can then train a machine-learning-model using the training data to enable the machine-learning-model to predict a second transmission pattern in which to transmit second content that is different from the first content. The system can provide the second content as input to the machine-learning-model to obtain the second transmission pattern as output from the machine-learning-model. The system can cause the second content to be transmitted to the first user device in accordance with the second transmission pattern, which may conserve computing resources.

Abstract: In some embodiments, a method sends a first frame that establishes a first state to push information to a client in a stream based on a first set of characteristics. The method transitions from the first state to a second state that allows pushing of content to the client. Content is pushed for a first time window to the client based on the first set of characteristics without receiving a request for the content in the first time window. The method receives a request to change the first set of characteristics to a second set of characteristics. The request includes information requesting a switch from the second state to the first state. In response to receiving the change, the method sends a second frame to continue pushing content to the client in the stream based on the second set of characteristics and transitions from the second state to the first state.

Abstract: In some embodiments, a method instantiates a proxy that stores first state information for first workloads running on a first computing device. The first computing device receives a migrated workload from a second computing device and second state information for a session associated with the migrated workload. The second state information is generated by a proxy on the second computing device that processed one or more packets for the migrated workload on the second computing device. The method stories the second state information for the proxy on the first computing device and resumes the session associated with the migrated workload using the proxy on the first computing device.

Abstract: A dynamic tagging system facilitates the control, monitoring, and operation of technical components, such as virtual machines, in cloud environments. The dynamic tagging system performs an analysis on unstructured metadata tags linked to the technical components. The unstructured metadata tags may be created for technical components by authorized operators of the technical components, for instance. The dynamic tagging system may analyze an individual unstructured metadata tag or a combination of unstructured metadata tags assigned to a technical component to automatically trigger any pre-configured control, monitoring or operational actions for the technical component. As one example, the dynamic tagging system detects a trigger condition for an action trigger to perform automated electronic communications between any selected entities to convey information about the technical component.

Abstract: A computer device includes a network interface to connect to a computer network, memory, and a processor connected to the network interface and the memory. The processor is to execute instructions stored in the memory. The instructions are to establish a connection with an auxiliary computer device and start a proxy to forward network communications between the auxiliary computer device and the computer network. The instructions are further to start the proxy in response to the computer device receiving a captive portal from the computer network.

Abstract: Example implementations relate to conversion to an Internet Protocol stream. An example method includes capturing, at a device driver level of a virtual machine, a component for which to provide remote access. The example method further includes converting the component to an Internet protocol stream and providing, independently of an operating system of the VM, the remote access to a display device using the IP stream.

Abstract: Enable a CDN server to potentially go forward to any of multiple candidate servers (or other infrastructure) to retrieve a client-requested object, based on periodic testing of such candidate servers or infrastructure for cache hits and network latency (among other things), and scoring thereof. Such candidate servers or infrastructure represent alternative places to get the object. Importantly, a candidate may be a server or infrastructure owned and/or operated by another CDN, including a CDN industry competitor, and may be discovered in a preliminary process that involves detection of multi-CDN arrangements on the Internet where the foregoing approach may be viable.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The tunnel device is selected based on an attribute, such as IP Geolocation. A tunnel bank server stores a list of available tunnels that may be used, associated with values of various attribute types. The tunnel devices initiate communication with the tunnel bank server, and stays connected to it, for allowing a communication session initiated by the tunnel bank server. Upon receiving a request from a client to a content and for specific attribute types and values, a tunnel is selected by the tunnel bank server, and is used as a tunnel for retrieving the required content from the web server, using standard protocol such as SOCKS, WebSocket or HTTP Proxy. The client only communicates with a super proxy server that manages the content fetching scheme.

Abstract: In a method for forming an integrated semiconductor device, a first transistor over is formed on a substrate; an inter-layer dielectric (ILD) layer is deposited over the first transistor; a gate conductive layer is deposited over the ILD layer; a gate dielectric layer is deposited over the gate conductive layer; the gate dielectric layer and the gate conductive layer are etched to form a gate stack; and a 2D material layer that has a first portion extending along a top surface and sidewalls of the gate stack and a second portion extending along a top surface of the ILD layer.

Abstract: An agent can be employed on write filter enabled devices to retrieve a default configuration from a server when a user logs in. The default configuration can define which user configuration settings are persist-able. After the user has customized user configuration settings, the agent can identify customizations to any persist-able user configuration setting and create a delta configuration to define these customizations. The agent can send the delta configuration to a server so that it will be available when the user logs in to any other write filter enabled device. At any subsequent login, the agent can retrieve the delta configuration and use it to customize the user configuration settings. In this way, a set of customized user configurations settings can be persisted and applied on any write filter enabled device that a user may log in to.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: According to some embodiments, methods and systems may include a data storage device that contains user identifiers and associated entitlement values for a plurality of tenants of a cloud computing environment. A provisioning application platform processor may receive a user request for an integration service and access the data storage device. The provisioning application platform processor may then transmit at least one entitlement value to a platform resource manager processor to facilitate creation of a plurality of microservices resulting in implementation of the integration service for the user.