Abstract: Systems and methods are disclosed to mitigate stalling of streaming content due to rebuffering so that, e.g., the content consumer does not experience gaps in playback. In some embodiments, by buffering streaming content simultaneously at two bitrate levels—e.g., one of the lowest bitrates and a better-quality bitrate, within the bandwidth limitations—rebuffering-caused gaps in playback of a higher quality (HQ) stream may be filled with a lower quality (LQ) stream. For instance, client-side dual buffers may store n segments from the HQ stream during a given time and a multiple of n number of segments from the LQ stream, thus allowing for many of the LQ segments to be output if the HQ stream is rebuffering. If a segment of content is beginning to be played back as an LQ segment, there is no reason to buffer the same segment from the HQ stream.

Abstract: Example techniques disclosed herein relate to location-based playlists. In an example implementation, a system receives, from a mobile device, first GPS data indicating that the mobile device is located at a first physical location, wherein an application on the mobile device is registered with a particular user account of the cloud service. The system determines that the first physical location represented in the first GPS data corresponds to a location of a first business associated with one or more first playback devices within the cloud service. The one or more first playback devices are playing back first audio tracks. As each first audio track is at least partially played back, the system adds the respective first audio track to a location-based playlist associated with the particular user account of the cloud service. The computing system causes the mobile device to display an indication of the location-based playlist.

Abstract: A multi-media video conferencing platform and method which includes a user database configured to store usernames and details; a processor configured route multiple media streams to a user location; and a compiler configured to present a multimedia template at a client workstation, the template having a plurality of tiles, where each tile corresponds to a different media type, and the compiler is configured to identify a media type of an incoming media stream or media presentation. The processor routes the incoming media to a tile having a matching media type so that the media stream or presentation displays in the tile corresponding to its media type. The template presented by the compiler has tiles corresponding to at least incoming streaming video, incoming still media, and two-way interactive video.

Abstract: A system is provided for dynamically managing a media production work package. The system includes a media production work package generator that builds a media production work package that includes media processing functions; and a processing function manager that generates function trackers that are each assigned to a respective one of the plurality of media processing functions and comprise a unique identity. Moreover, the system includes a function deployment manager that embeds the function trackers in the respective media processing functions, and deploys the media processing functions to resources available in a cloud computing network that includes both physical resources and software resources.

Abstract: The embodiments of the disclosure disclose an information indicating method and apparatus, an electronic device and a storage medium, where the method includes: acquiring a first position parameter of first target information in a current page, where the current page is a page in a shared file shared by a sharer client; acquiring a second position parameter of second target information in a display page of the sharer client; and determining an indication identifier according to the first position parameter and the second position parameter, and indicating the second target information according to the indication identifier.

Abstract: The current document is directed to efficient, distributed-search methods and subsystems within distributed computer systems, including computer systems distributed over multiple sets of geographically distributed data centers, each comprising multiple discrete computer systems, such as multi-processor servers. In one implementation, the distributed-search methods and subsystems are implemented locally within participating entities as well as within one or more distributed-search engines. Each search is directed, by a participant, to identify attribute-associated entities within, provided by, connected to, or otherwise accessible to a distributed computing system having attribute values specified or indicated by the search query. Certain attribute values are continuously collected and centrally stored by the one or more centralized distributed-search engines while other attribute values are obtained through information requests distributed among participating entities.

Abstract: Object-based transportation between tenants may provide advantages over persistence layer-based transportation on a cloud platform in situations where persistence layer storage space is limited. Object based transportation involves obtaining a selection from the target tenant application of a set of objects from the plurality of objects and determining objects identifiers for each of the selected set of objects. For each object in the selected set of objects, a request is sent to a source tenant. The requests includes the corresponding object identifier for that object. Corresponding object data is received from the source tenant. At least a portion of the corresponding object data is stored in a target tenant database. An existing object may be updated or a new object may be created.

Abstract: The present disclosure generally relates to leveraging DNS (Domain Name Service) based client-side load balancing that directs IoT devices (clients) to network load balancer IP addresses. A management system obtains socket usage information about publicly accessible network load balancers. The system then uses socket thresholding information to determine whether individual network load balancers are exhausting a fixed set of available sockets. The system can then implement remedial actions to reduce individual network load balance presence to ensure that the IoT devices are equally distributed across all first layer network load balancers to maximize usage of capacity.

Abstract: A method for linking multiple services in a distributed server cluster system, comprising: receiving a processing request for a second service from a first server which belongs to a first server cluster to which a first service is distributed, wherein the processing request includes identification information for a transaction generated by the first server and request data for processing one or more services according to a client device request, processing a task for the second service according to the received processing request, determining a service to be processed next to the second service based on the request data, determining whether there is the first server having a history which participates in the transaction among servers of a server cluster to which the determined service is distributed, and delivering the processing request for the determined service to the first server when the first server having the history participates in the transaction.

Abstract: Techniques for operationalizing workloads at edge network nodes, while maintaining centralized intent and policy controls. The techniques may include storing, in a cloud-computing network, a workload image that includes a function capability. The techniques may also include receiving, at the cloud-computing network, a networking policy associated with an enterprise network. Based at least in part on the networking policy, a determination may be made at the cloud-computing network that the function capability is to be operationalized on an edge device of the enterprise network. The techniques may also include sending the workload image to the edge device to be installed on the edge device to operationalize the function capability. In some examples, the function capability may be a security function capability (e.g., proxy, firewall, etc.), a routing function capability (e.g., network address translation, load balancing, etc.), or any other function capability.

Abstract: In a running distributed data storage system that actively processes I/Os, metadata nodes are commissioned and decommissioned without taking down the storage system and without introducing interruptions to metadata or payload data I/O. The inflow of reads and writes continues without interruption even while new metadata nodes are in the process of being added and/or removed and the strong consistency of the system is guaranteed. Commissioning and decommissioning nodes within the running system enables streamlined replacement of permanently failed nodes and advantageously enables the system to adapt elastically to workload changes. An illustrative distributed barrier logic (the “view change barrier”) controls a multi-state process that controls a coordinated step-wise progression of the metadata nodes from an old view to a new normal. Rules for I/O handling govern each state until the state machine loop has been traversed and the system reaches its new normal.

Abstract: A gateway system is described for use as a gateway between a client device and a remote server. The client device may stream a data stream via the gateway system to the remote server for remote processing. The gateway system may receive the data stream and markers which identify respective blocks of packets in the data stream, wherein each identified block of packets is independently processable. In response to an instruction or configuration to effect a migration of the remote processing from the remote server to a further remote server, the gateway system may determine a block of packets in the data stream from which block of packets onwards the further remote server is to start processing the data stream so as to effect or initialize the migration, and when received, stream the determined block of packets and subsequent blocks of packets of the data stream to the further remote server.

Abstract: Migration of a user of a computing device to accept an updated version of a software feature to the exclusion of a prior version of the software feature is implemented without user friction. Telemetry data corresponding to use of the updated version and of the prior version is stored. The telemetry data is evaluated utilizing a trained machine learning model trained using external telemetry data with respect to use of the updated version and to use of the prior version. A migration acceptance value indicative of whether the user will accept use of the updated version to exclusion of the prior version is calculated. The migration acceptance value is compared to a threshold value determined by the trained model. If the migration acceptance value exceeds the threshold value, the prior version is excluded from the user profile.

Abstract: A server system comprising processing devices, disks and a storage fabric, all arranged to operate according to a storage fabric protocol in order to communicate between the processing devices and the storage devices over the storage fabric, wherein the storage fabric is settable with a mapping determining which of the processing devices are allocated to use which of the storage devices in providing said services to the client systems. The system comprises a control function arranged to dynamically adapt the mapping in response to either: (i) failure or other downtime of one of the processing devices, storage devices, a component of the storage fabric or a connection in the storage fabric; or (ii) a current demand for the services from the client systems.

Abstract: A method for generating a graph data structure comprises receiving, by one or more processors, data associated with a building, generating one or more space nodes in the graph data structure corresponding to spaces within the building based on the data, generating one or more asset nodes in the graph data structure corresponding to assets within the building based on the data, associating sensor data with the one or more asset nodes based on the data, classifying the sensor data based on the data, and generating a relationship between at least two of the one or more space nodes, the one or more asset nodes, and the classified sensor data.

Abstract: A method to distribute and manage virtual reality (VR) content among a plurality of headsets can be provided by receiving VR experience configuration information from an administrator of a VR experience including VR content module information identifying the VR content modules to be executed during the VR experience, transmitting information over a network responsive to the VR experience configuration information to a plurality of headsets to operate the plurality of headsets as part of the VR experience subject to operating limitations of the VR content identified by the VR content module information, receiving information from the plurality of headsets relating to operation of the VR experience and, monitoring the information relating to operation of the VR experience relative to the limitations of the VR content identified by the VR content module information.

Abstract: The disclosed apparatus, systems and methods relate a failover and internet connection monitoring system featuring a cloud server running an API, a probe, a firewall and a policy routing system. The failover connection monitoring system is capable of gathering and analyzing performance data and controlling the flow of packets to and from the internet over one or more connections to optimize performance of the network.

Abstract: A method including transmitting, by a user device to an infrastructure device prior to establishing a virtual private network (VPN) connection with a VPN server, service information indicating one or more VPN services to be received by the user device after establishing the VPN connection with the VPN server; receiving, by the user device from the infrastructure device, information associated with the VPN server that is selected by the infrastructure device to provide the one or more VPN services to the user device based at least in part on the service information; and establishing, by the user device based at least in part on utilizing the information associated with the VPN server, the VPN connection with the VPN server to receive the one or more VPN services is disclosed. Various other aspects are contemplated.

Abstract: Embodiments described herein leverage web cookies to carry messages across cloud application communications, wherein the messages are between entities that are not part of the cloud application itself. For example, in embodiments, a proxy server is interconnected between a client computer that is executing a front-end component of an application and an application server that is executing a back-end component of the application. The proxy server intercepts a request from the front-end component that is intended for the back-end component and generates a response thereto that includes a command to create a web cookie at the client computer, wherein the web cookie includes data to be utilized by a custom code component of the client computer. The proxy server may further cause the custom code component to be injected into the application front-end component for execution by the client computer.

Abstract: Aspects of the subject disclosure may include, for example, receiving, over a communication network via a user interface, a first request for first sample data for a first parameter associated with a first microservice. The first sample data is associated with a first portion of communication equipment. The server is configured to perform the first microservice. Further embodiments include identifying a first group of values for the first parameter based on the first portion of communication equipment and the first microservice. Additional embodiments can include providing, over the communication network, the first group of values for the first parameter to the user interface as the first sample data. The user interface presents the first group of values for the first parameter as the first sample data on a display. Other embodiments are disclosed.

Abstract: An apparatus to facilitate provenance audit trails for microservices architectures is disclosed. The apparatus includes one or more processors to obtain provenance metadata for a microservice from a local blockchain of provenance metadata maintained for the hardware resource executing a task performed by the microservice, the provenance metadata comprising identification of the microservice, operating state of at least one of a hardware resource or a software resource used to execute the microservice and the task, and an operating state of a sidecar of the microservice during the task; access one or more policies established for the microservice; analyze the provenance metadata with respect to the one or more policies to identify if there is a violation of the one or more policies; and generate one or more evaluation metrics based on whether the violation of the one or more policies is identified.

Abstract: A method for controlling tracking elements of a web page is disclosed. The method is performed at an electronic device. The electronic device is configured to communicate to a server device and to a web server. The method comprises obtaining a web page address of the web page to connect to the web server. The method comprises transmitting a web page request to the web server based on the web page address. The method comprises receiving, from the web server, a web page response. The web page response comprises tracking elements. The web page response comprises a control tag configured to control tracking elements of the web page. The method comprises rendering the web page based on the web page response. Rendering the web page comprises invoking the control tag. Invoking the control tag comprises obtaining a first set of tracking tags of the web page.

Abstract: Techniques for encoding metadata representing a policy into a QUIC connection ID are described herein. A metadata-aware network including one or more enforcement nodes, a policy engine, and/or a connection datastore may be utilized to enforce a policy and route communications on a QUIC connection. The policy engine may be configured to encode metadata representing one or more network policies into a QUIC source connection ID (SCID) and/or may store a mapping between the SCID and a corresponding destination connection ID (DCID) in the connection datastore. The policy engine may communicate with a QUIC application server and/or one or more QUIC proxy nodes to encode the SCID into a QUIC packet. The enforcement nodes may access the metadata and enforce the policies via a connection ID included in a QUIC header of a QUIC packet or by performing a lookup in the connection datastore using the connection ID.

Abstract: One or more computing devices, systems, and/or methods for implementing a publish and subscribe communication system utilizing a load balancer and task schedulers are provided. Subscription requests are received from subscribers for subscribing to a topic published by a publisher. An external subscription list is maintained to track communication address information of the subscribers. A number of task schedulers are created based upon a count of subscribers within the external subscription list. The subscribers are assigned to the task schedulers such that a number of subscribers assigned to a task scheduler is limited according to a subscriber assignment limit. In response to the publisher creating data to publish to the topic, the task schedulers are controlled to use the communication address information to directly transfer data of the topic to the subscribers assigned to the task schedulers.

Abstract: Systems and methods are described herein to automate managing of service layer operations comprised of multiple elementary operations and offloading the burden of performing such multi-step operations from a requesting entity to the service layer. A Request Abstraction Service (RAS) is described herein for the autonomous execution of such multi-step operations. Methods and apparatuses are also described herein for a service layer framework for integrating generic and functional user interfaces as services managed by the SL on behalf of requesting entities.

Abstract: A network node (1) is configured to receive an interest message comprising a request for a data object and metadata. The metadata specifies one or more criteria for selecting a subset of a plurality of items. The network node is further configured to determine whether there is a match between the requested data object and a plurality of items (e.g. from a CS or FIB) and select a subset of the plurality of items by applying the one or more criteria if the match has been determined to exist. At least one of the criteria is a preference specified for at least one of: factual properties of the plurality of items, usage data related to the plurality of items, usage data related to the at least one communication interface, an effort to obtain data from another network node, and a position in a range specified in the interest message.

Abstract: Methods and systems are disclosed herein for managing delivery of content fragments to a device in response to a bandwidth determination. In one implementation of the disclosure, when a content player or device requests a content fragments, a local cache may determine a bandwidth or data rate related to transmission of a content fragment from a source to the cache, and send the fragment to the player at a rate corresponding to the determined bandwidth or data rate.

Abstract: A method for determining an internal time of a time-sensitive networking (TSN) network card includes generating at least one initial packet with a launch time parameter at a computing device. The computing device sends the at least one initial packet to a TSN network card for transmission and receives a transmit completion signal from the TSN network card confirming that the TSN network card transmitted the at least one initial packet. The computing device determines an approximate current internal time of the TSN network card using the launch time parameter and the received transmit completion signal.

Abstract: The present technology relates to a wireless communication device and a method that make it possible to transmit, with low delay, the data supplied from an upper layer. The wireless communication device transmits a signal including first data that is supplied from an upper layer and information regarding timing of transmission of second data that is generated in another wireless communication device on the basis of a result of receiving the first data and is transmitted therefrom. The present technology can be applied to a wireless communication device.

Abstract: A communication system includes a first processor that performs processing for transmitting a signal to and receiving a signal from a communication destination device and a second processor that performs processing of an additional function. The second processor includes a decoding unit that decodes a transmission signal encoded by the first processor or a reception signal encoded by the communication destination device, an information acquiring unit that acquires information from the transmission signal or the reception signal decoded by the decoding unit, an additional function executing unit that performs the processing of the additional function using the information acquired by the information acquiring unit, and an encoding unit that performs processing for encoding the decoded transmission signal and outputting a resulting signal to the communication destination device or processing for encoding the decoded reception signal and outputting a resulting signal to the first processor.

Abstract: An encoding method includes: receiving a plurality of messages; encoding the plurality of messages into a polynomial defined by multivariates; and encrypting the polynomial defined by the multivariates to generate a homomorphic ciphertext. The plurality of messages may be multidimensionally packed by using multivariates, and thus, an operation may be performed with low complexity in the process of matrix multiplication for ciphertexts packed with the multivariates.

Abstract: Devices and circuitry for computing hash values.

Abstract: A proprietor terminal stores state data in which an identifier of a contract executed in a blockchain system, a hash value of control target file data that specifies content data managed by the contract, and an identifier of a proprietor and an identifier of a user of the content data in the file management system are associated with one another, and includes a route object generation unit that generates reference destination data having the identifier of the contract and generates route object data having the reference destination data and a link name and the hash value of the control target file data.

Abstract: A collation system 20, which is provided with a client 30 and a server 40, the client 30 includes: a random number generation unit 31 which generates a random number; a concealed information storage unit 32 which stores concealed information generated by concealing registered information and the generated random number using a concealment key; and a concealed index computation unit 33 which, on the basis of the collation information input for collation with the registered information and the concealed information, computes a concealed index, generated by concealing an index indicating closeness between the registered information and the collation information; the server 40 includes a determination unit 41 which uses a release key corresponding to the concealment key and the random number transmitted from the client 30 to determine whether or not the index can be acquired from the concealed index transmitted from the client 30.

Abstract: A method for transmitting data comprising a data requester sends, to a data sender, a data request that carries an identifier of the data requester and a category of requested data. After receiving the data request, the data sender generates an identifier public key using the identifier of the data requester and the category of the data. The data sender encrypts the data requested by the data requester using the identity public key, and sends the encrypted data and identity public key indication information to the data requester. The data requester decrypts the encrypted data using an identifier private key corresponding to the identifier public key to obtain the requested data, and the data requester performs decryption using the identifier private key.

Abstract: A provisioning control apparatus coupled to a provisioning equipment server electrically connectable with electronic components each including a security enclave and a non-volatile memory. The provisioning control apparatus includes a processor configured to encrypt the security sensitive provisioning data using a secure vault encryption key for obtaining encrypted security sensitive provisioning data. The provisioning control apparatus has a communication interface configured to securely provide the secure vault encryption key to the provisioning equipment server for storing the secure vault encryption key in the security enclave of the electronic component.

Abstract: Securely encrypting data using a remote key management service, including: transmitting a local secret to a key management service; transforming an encryption key received from the key management service to generate a key-encrypting key, wherein the encryption key is a one-way cryptographic hash using, as input, the local secret transmitted to the key management service; and decrypting, based on the key-encrypting key, a local data encryption key for encrypting or decrypting local data.

Abstract: Indicating to a receiver node in a network that the receiver node should begin tracking signal to noise ratio (SNR) of a received signal for a new power and rate (PAR) interval for data sent from a transmitter node. A method includes determining that a new PAR interval is beginning. The method further includes adding an identifier to a data block. The identifier corresponds to the new PAR interval. The method further includes sending the data block from the transmitter node to the receiver node, where the receiver node will use the identifier to determine that a new tracking interval of SNR should be performed for the data block and subsequent data blocks having the identifier.

Abstract: An optical encryption terminal for generating and distributing a cryptographic key signal in a cryptography key distribution system having at least two optical encryption terminals. The optical encryption terminal comprises an electronic processing unit and the optical encryption terminal is configured to selectively receive optical input signals generated by a source of electromagnetic radiation and optical input signals generated by a further optical encryption terminal, and to selectively output first optical output signals to a detection element and second optical output signals to the further optical encryption terminal, wherein the first optical output signals are based on the optical input signals generated by the further optical encryption terminal and transformed in accordance with an optical encryption pattern provided at the optical encryption terminal.

Abstract: Dynamic encryption and decryption method among lock control system modules comprise the following steps: step 1. filling hardware ID data, an unlocking communication protocol and a mask variable into an array according to a predefined variable space, and encrypting the array based on the mask variable to obtain an encrypted array; step 2. decrypting the encrypted array based on the mask variable to obtain a decrypted array, executing data division on the decrypted array according to the predefined variable space, matching the divided data with data recorded in advance one by one, and if the divided data are consistent with the data recorded in advance, executing related operations according to the decrypted unlocking communication protocol content; otherwise, executing no operation.

Abstract: The disclosure provides computer-implemented methods, computing apparatuses and computer program products for generating a random number based on genetic information from a biological data source containing at least the genetic information sequenced from a biological organism. In response to receiving a request for a random number at the computing device, a seed value is obtained from an entropy source accessible by the computing device and used to initialize a pseudo random number generator. A sequence of values derived from genetic information for a biological organism is retrieved from a biological data source from which values are read in selected positions in the sequence of values derived from genetic information. The values are encoded to pairs of bits using an encoding scheme and assembled to provide a bit string as a random number. At least one of the selections is based on the pseudo random output.

Abstract: A device for generating a digital random encryption key includes an input unit adding a non-volatile active element for overcoming a limit of a passive element when generating an encryption key, applying a random passive filter, and inputting an analog voltage signal to an encryption key generator, an encryption key generator including a non-volatile active element and a passive filter, connected to the input unit through a connection substrate, and generating a random encryption key from an entropy source, and a converter for converting a signal generated by the encryption key generator into a digital signal and outputting the digital signal is provided, thereby improving robustness of security compared to the case of applying the general passive element, allowing regeneration or random generation, and generating an excellent encryption key working excellently for physical reverse engineering violations.

Abstract: Multivariate encryption systems and methods are provided herein. An example method includes receiving a multivariate input set that includes a plurality of sensitive data objects arranged according to a record template, encrypting the multivariate input set into an encrypted representation, receiving a request for at least a portion of the plurality of sensitive data objects, extracting the at least a portion of the plurality of sensitive data object from the encrypted representation and generating a response message that includes only the at least a portion of the plurality of sensitive data objects that were extracted from the encrypted representation.

Abstract: Systems and methods enable a marketplace system to display, in an interface accessible to a user, first digital tokens maintained in a first token-holding data structure of a first token-holding data structure provider of a blockchain network. A selection of a second token-holding data structure provider and a selection of a second token-holding data structure associated with the second token-holding data structure provider may be received from the user. An authentication message may be received, the authentication message including encrypted information which may be decrypted to extract information for authentication of the user as owner of the second token-holding data structure. Upon authentication, a link to the second token-holding data structure may be established, and information about second digital tokens maintained in the second token-holding data structure may be received via the link to display the first digital tokens and the second digital tokens in the interface.

Abstract: Non-transitory computer readable storage mediums have instructions executed by processors to access a first random data element at a first computing device. A first vector and a second vector are generated at a second computing device. A communication channel is utilized to execute a secure multiparty computation protocol between the first computing device and the second computing device. The first computing device alternately identifies a polynomial relations satisfied state and a polynomial relations unsatisfied state. A first selected instruction set is executed at the first computing device in response to the polynomial relations satisfied state. A second selected instruction set is executed at the first computing device in response to the polynomial relations unsatisfied state.

Abstract: Methods, apparatus, systems, and articles of manufacture to manage application access in networked environments are disclosed. An example method includes monitoring accesses made using a credential to a first set of one or more application programming interfaces (APIs) and with a second set of one or more APIs, the credential associated with a first permission for access to the first set of one or more APIs and a second permission for access to the second set of one or more APIs, determining, based on access to one or more APIs of the first set of one or more APIs using the credential, that the first permission is to be suspended, and in response to the determination that the first permission is to be suspended, suspending the first permission while maintaining the second permission.

Abstract: A method for locating a mobile device which is not in possession of the owner using an owner verification server. A mobile network operator server sends a message to the owner verification server requesting verification of ownership. The owner verification server retrieves ownership status and transmits a request to the mobile network operator server to transmit location tracking data when the ownership status indicates that the device is not in the owner's possession. The owner verification server forwards the location tracking data to the device owner.

Abstract: Disclosed are blockchain type contract terminal and method using position information. There are provided: an input module that is inputted with a contract term regarding an object of contract; a position information collection module that collects, in real time, position information of the object at the time of contract; a contract creation module that creates a contract by using the contract term inputted by the input module and the position information at the time of contract collected in real time by the position information collection module; a blockchain creation module that encrypts the contract created by the contract creation module to create a blockchain; and a blockchain distributed storage control module that transmits the blockchain created at the blockchain creation module to another terminal in a P2P manner for storing on a network in a distributed manner.

Abstract: According to an embodiment of a first aspect of the invention, there is a distributed network comprising a plurality of network nodes. Each of the plurality of network nodes is linked to a first node identity of a plurality of first node identities. Each of the plurality of first node identities comprises a first verification key of a public-key signature scheme. The distributed network is configured to perform a key shuffling step adapted to perform an unlinkable one-to-one mapping between the plurality of first node identities and a plurality of second node identities. Each of the plurality of second node identities comprises a second verification key of a public-key signature scheme. The distributed network is configured to perform a consensus protocol with a subset of the plurality of second node identities. Further aspects of the invention relate to a corresponding computer-implemented method, a network node and a computer program product.

Abstract: Provided herein are methods, systems, and media that leverage blockchain technology and cryptography implemented on decentralized or distributed peer-to-peer networks to provide reliable and secure verification of data integrity.