Abstract: A method and system for detecting malicious behavior from smart appliances within a network. Smart appliances have a certain level of intelligence that allows them to perform a specific role more effectively and conveniently. Network traffic data and identification data is collected about smart appliances within a network. The data is sent to a behavior analysis engine, which computes confidence levels for anomalies within the network traffic that may be caused by malicious behavior. If the behavior analysis engine determines that malicious behavior is present in the network, it sends an instruction to a network traffic hub to block network traffic relating to the anomaly. In some embodiments, network traffic is blocked based on source-destination pairs. In some embodiments, network traffic is blocked from a device outside the network that is determined to be malicious.

Abstract: A method and system are for generating a report for delivery to or access or query by a network operator by determining, by a server-side proxy, optimization efficiency for traffic in a wireless network, tracking, by the server-side proxy, user-related information in the wireless network, generating, based on at least one of the optimization efficiency and the user-related information, a report for delivery to or access by an operator of the wireless network, the report including an alert of viral take-up of a new application, and performing, by the server-side proxy, traffic optimization functions alleviating traffic in the wireless network.

Abstract: An injection descriptor corresponding to a destination node may be stored in memory. A network interface controller (NIC) may determine that one or more messages added to the injection descriptor are to be transmitted to the destination node. The NIC may then lock the injection descriptor so that no additional message can be added to the injection descriptor, and the NIC may load the one or more messages. The NIC may then generate a network packet that includes the one or more messages, and the NIC may transmit the network packet to the destination node.

Abstract: A method of transmitting a broadcast signal is discussed. The method includes generating, by a broadcast transmitter, a plurality of input packets comprising broadcast data, generating, by the broadcast transmitter, link layer packets carrying the input packets, wherein a link layer packet among the link layer packets includes a header and a payload, wherein the header includes information about whether an additional header following the header exists or not, wherein the header includes information indicating least significant bits (LSBs) of a length of the payload, and when the additional header exists, the additional header includes information indicating most significant bits (MSBs) of the length of the payload, and wherein the link layer packets include signaling information for header compression of the input packets when the input packets are compressed internet protocol (IP) packets, and transmitting, by the broadcast transmitter, the generated link layer packets through a physical layer pipe (PLP).

Abstract: A software-defined network multi-layer controller (SDN-MLC) may communicate with multiple layers of a telecommunication network. The SDN-MLC may have an optimization algorithm that helps manage, in near real-time, the multiple layers of the telecommunication network.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for prioritizing network traffic. In one aspect, a method includes collecting, for local networks, traffic data representing communication traffic over the local network for a period of time; determining, for each of the network devices included in the networks, a device type of the network device and at least one device priority value for the network device; training a device prioritization model, using the traffic data and the device priority values of the devices, receiving, by the device prioritization model, for a local network, a list of network devices that are included in the local network; and generating, by the device prioritization model, a prioritization scheme for the local network that prioritizes device traffic among the network devices based on the device types and device priority values of the network devices.

Abstract: Embodiments of an intra-QCI scheduler and method for assisted intra-QCI scheduling are generally described herein for operating within a wireless access network in which data flows are mapped to bearers using quality-of-service (QoS) class identifiers (QCIs). In some embodiments, the intra-QCI scheduler may classify packets of one or more data flows having a same QCI with a sub-QCI based on intra-QCI classification information received from user equipment (UE). The sub-QCI may indicate a scheduling priority for packets of data flows having the same QCI. The intra-QCI scheduler may schedule packets for downlink transmission over a radio bearer between the eNodeB and the UE based on the sub-QCI. The use of sub-QCIs allows the eNodeB to provide QoS support for data flows of applications that have been mapped to a default bearer.

Abstract: A scheduling device for managing a packet queue of a communication gateway includes a receiving portion configured to receive data packets according to at least one communication protocol, a processor, and classification module configured to separate the received data packets into a first traffic queue and a second traffic queue separate from the first traffic queue. The first traffic queue includes a low latency service flow classified to have strict priority. The second traffic queue includes a primary service flow classified as having a classic priority.

Abstract: Methods, systems, and computer-readable media for determining the maximum throughput of a service are disclosed. A first sequence of load tests is initiated for a service host. Individual ones of the load tests comprise determining a respective throughput at the service host for a respective number of concurrent connections to the service host. The number of concurrent connections increases nonlinearly in at least a portion of the first sequence of load tests. The first sequence of load tests is discontinued when the throughput is not increased by a threshold from one of the load tests to the next. An estimated maximum throughput for the service host is determined based at least in part on the first sequence of load tests. The estimated maximum throughput corresponds to a particular number of concurrent connections to the service host.

Abstract: A method for processing concurrent services and a terminal can effectively ensure that a service with a higher service priority maintains better service transmission quality in the concurrent services. The concurrent services include a first service and a second service. A service priority of the first service is higher than a service priority of the second service. The method includes: obtaining, by a terminal, channel quality information of a channel that carries the concurrent services; and blocking, by the terminal, the second service when the channel quality information meets a preset blocking condition.

Abstract: Embodiments of the present disclosure provide a method and apparatus for the transmission of uplink control information, wherein this method comprises: receiving downlink information and using a predefined physical uplink shared channel (PUSCH) format to transmit a hybrid automatic repeat request-acknowledgment (HARQ-ACK) corresponding to the downlink information. The implementation of the present invention solves the problem in prior art of not being able to transmit HARQ-ACK on the PUSCH through its ability to transmit HARQ-ACK on the PUSCH.

Abstract: A fabric back pressure timeout transmitting device may include an arbiter, a first queue to supply packets to the arbiter and a second queue to supply packets to the arbiter, a first timer tracking time since transmission of a packet from the first queue with at least one packet in the first queue and a second timer tracking time since transmission of a packet from the second queue with at least one packet in the second queue. The first queue is designated to receive those packets that have a first number of remaining to destination hops. The second queue is designated to receive those packets that have a second number of remaining destination hops different than the first number.

Abstract: A transmission control method and apparatus for network services and controller. The transmission control method for network services includes: negotiating, before start of the network services, operational modes supported by each of links, and detecting quality of services in the operational modes supported by each of the links; grouping all network services to be transmitted according to requirements of the network services on quality of services and the quality of services in the operational modes supported by each of the links, and allocating links and operational modes for each of the groups; and designating a link for each of the network services in the groups according to the links and operational modes allocated for each of the groups. Hence, abilities of transmission quality detection and adjustment of a multi-carrier optical communication system may be used to satisfy quality requirements of different network services.

Abstract: A network event remediation service receives event logs from network computing devices to identify issues associated with these network computing devices. Based on these issues, the service generates various tasks to address the identified issues. The service obtains historical task data in order to determine whether any tasks do not comport with historical tasks performed by the network computing devices and removing such tasks. The service obtains health data from the network computing devices to calculate device scores for each device. The service uses the device scores to prioritize the tasks for each network computing device. These tasks are then dispatched to the network computing devices.

Abstract: A switching system comprises a controlling switch and multiple port extenders. The controlling switch includes: a plurality of controlling switch ports; and a first packet processor having a first forwarding engine. The first forwarding engine is configured to forward packets received at any controlling switch port to any other controlling switch port. Each of at least some multiple port extenders includes: at least one local upstream port coupled to the controlling switch directly or via another port extender; a plurality of local downstream ports; and a second packet processor having a second forwarding engine and a forwarding database. The second forwarding engine is configured to forward packets i) received at the downstream ports, and ii) for which the forwarding database does not include forwarding information, only to the at least one upstream port. The second packet processor has reduced functionality as compared to the first packet processor.

Abstract: Systems, methods, and apparatus for transmitting additional information over a radio access network are described. A method of wireless communication includes aligning a discontinuous reception (DRx) schedule for a user equipment (UE) with a plurality of token arrival times, determining, at a time based on a first token arrival time, whether a radio frequency (RF) band is available for communication, and transmitting control information on the RF band when the RF band is available for communication. The token arrival time may correspond to a waking time for the UE defined by the DRx schedule.

Abstract: A user equipment (UE) comprises processor circuitry, sensing circuitry, and transmitting circuitry. The processor circuitry is configured to acquire broadcast signaling from a base station, the broadcast signaling including a threshold value list. The sensing circuitry is configured to measure a reception power and to compare the measured reception power with a threshold. The transmitting circuitry is configured to transmit a sidelink transmission if a resource is available according to resource sensing. The threshold is obtained from the threshold value list in dependence upon at least a priority of the sidelink transmission.

Abstract: A virtual networking switch on a host computing device can receive a first data packet of a micro-service data flow from a virtual machine running on the host computing device. The first data packet can include micro-service flow data identifying a first container instance that transmitted the first data packet. The virtual networking switch can provide a subset of the micro-service flow data to a container orchestrator, that utilizes the first subset of the micro-service flow data to assign a label to the first micro-service data flow. The virtual networking switch can pin the first micro-service data flow to a first uplink port of the host computing device based on the label assigned to the first micro-service data flow, causing data packets received from the virtual machine as part of the first micro-service data flow to be forwarded to their intended recipient via the first uplink port.

Abstract: Disclosed is a bandwidth providing method based on multi-flow grouping, which can control multi-terminal and multi-service for a user with a single bandwidth. The bandwidth providing method based on multi-flow grouping comprises a step of receiving a first packet flow and a second packet flow, a step of verifying a flow group comprising the first package flow and the second package flow using a flow group table, and a step of assigning a single bandwidth to the first packet flow and the second packet flow when the first packet flow and the second packet flow are verified as being comprised in the same group, thereby managing the bandwidth. Accordingly, the multi-terminal and multi-service of a user can be efficiently controlled with a single bandwidth.

Abstract: The present invention relates to the field of data transmission, and discloses a method and system for providing a service according to a policy, which are used to resolve a problem that policy information included in information transmitted by different NSEs and different AEs cannot be correctly understood and executed by using an existing M2M system architecture, which results in a data transmission error or transmission failure.

Abstract: A transport software defined networking (SDN) controller comprising a receiver and a processor coupled to the receiver. The processor is configured to cause the transport SDN controller to determine a physical topology based on physical layer adjacency discovery messages received from physical layer network elements (NEs), receive advertisement messages from the physical layer NEs, each advertisement message comprising a mapping between an adjacent network layer NE and a port of the associated physical layer NE, extract a network layer adjacency request from some of the advertisement messages indicating a first network layer NE is requesting a network layer connection with a second network layer NE, and setup a physical layer connection between the first network layer NE and the second network layer NE based on the network layer adjacency request, the advertisement messages, and the physical topology.

Abstract: Methods, systems, and computer readable media for priority routing of Diameter messages are disclosed. In some examples, a method includes determining a Diameter Routing Message Priority (DRMP) priority value for a Diameter message. The method includes marking each of one or more Internet protocol (IP) packets carrying the Diameter message with an IP quality of service (QoS) value for the Diameter message based on the DRMP priority value. The method includes sending the one or more IP packets carrying the Diameter message to a destination Diameter node by way of an IP router on a data communications network providing quality of service using IP QoS values.

Abstract: A method and system for scanning a computing system network for dark matter computing systems and computing devices. The method includes establishing a communication link between a master server and at least one target scanning agent that has at least one network computing system coupled thereto, creating a scanning job for the target scanning agent, building a scanning job command based on the scanning job, sending the scanning job command to the target scanning agent, receiving scanning job results from the target agent, parsing through the received scanning job results for identifying information of hosts in the network computing system detected during the scanning job, determining which detected hosts are known hosts and which detected hosts are unknown hosts based on the identifying information, and comparing the identifying information of the unknown hosts to reference identifying information to determine which of the unknown hosts are dark matter.

Abstract: The technology disclosed relates to differential analysis of sets of time series pairs. In particular, it relates to building estimators of magnitude of difference between two time series. After the basic estimators are built, they are combined into ensemble estimators using linear or nonlinear prediction models to improve their accuracy. In one application, the ensemble is used for estimating the magnitudes of difference over sets of metric pairs observed from distributed applications and systems running over a computer network. The metric pairs are then ranked in decreasing order of magnitude of difference to guide an operator in prioritizing his root cause analysis of faults, thereby reducing the time-to-resolution of problems.

Abstract: In embodiments of the invention when a session request is received the value assigned to that session is compared to present congestion costs in the network at the present time. If the value of the session exceeds the cost then the session is accepted; otherwise it is rejected. It is possible to show mathematically that, provided this strategy is used for all session requests, then, when demand exceeds supply for a given resource, the congestion measurement for that resource rises to become equal to its shadow price. Here, in a model of a capacity constrained network, the shadow price of a capacity constraint is the cost to other users of using one unit of capacity. Congestion measurements can therefore be used to provide a “cost” (to other users) of admitting the flow to the network, which can then be compared against the “value” (to the network operator) of admitting the flow during the admission control evaluation. Additionally, this “cost” vs.

Abstract: Client roaming techniques, such as those set forth in 802.11k, are extended to access point-based client roaming in a distributed multi-band wireless networking system. In particular, access points (APs) implement a series of algorithms that compare signals and make decisions on when to switch a client from one AP to another AP in a distributed multi-band wireless networking system. The invention exploits to advantage the fact that the APs can communicate with each other via the dedicated backhaul.

Abstract: Approaches, techniques, and mechanisms are disclosed for assigning paths to network packets. The path assignment techniques utilize path state information and/or other criteria to determine whether to route a packet along a primary candidate path selected for the packet, or one or more alternative candidate paths selected for the packet. According to an embodiment, network traffic is at least partially balanced by redistributing only a portion of the traffic that would have been assigned to a given primary path. Move-eligibility criteria are applied to traffic to determine whether a given packet is eligible for reassignment from a primary path to an alternative path. The move-eligibility criteria determine which portion of the network traffic to move and which portion to allow to proceed as normal. In an embodiment, the criteria and functions used to determine whether a packet is redistributable are adjusted over time based on path state information.

Abstract: A system for multiple network usage tracking, the system having a policy management platform having one or more processors able to receive and to calculate account usage data associated with an account profile, the policy management platform arranged externally from a network of at least one wireless carrier.

Abstract: Precoding coefficients can be compressed based on user equipment signal interference to noise ratio or path loss in front haul cloud radio access network systems. For example, a baseband unit can compute a precoder matrix from an estimated channel associated with an uplink signal. Once the baseband unit computes the channel, it can determine the coefficients for the linear combination of the basis vectors, which are known at the baseband unit and the radio unit as well. The baseband unit can estimate the path loss and the signal interference to noise ratio and determine the basis vectors. The baseband unit can then compress the coefficients and transmit the coefficients to the radio unit. When the radio unit receives the compressed coefficients, the radio unit can reconstruct the precoder matrix and apply to reference signals and data traffic channels.

Abstract: The present invention increases the efficiency of transmitting data from a plurality of fragmented internet protocol (IP) packets over a computer network. After receiving a plurality of fragmented packets over a computer network interface a computing device may reassemble data from the plurality of packets into an IP packet that includes data from each of the fragmented IP packets. The reassembled IP packet may then be compressed and encrypted before being transmitted to a computer identified in a destination address in each of the plurality of fragmented packets.

Abstract: A method of managing a multipath TCP (MPTCP) connection includes establishing the MPTCP connection as a logical connection between end-points that utilizes multiple network paths with one TCP subflow per network path. At least two subflows of the MPTCP connection are terminated at different end-points.

Abstract: The data transmission rate (DTR) of a data devices (12) connected to a data transmission service is controlled to be within an authorized collective DTR for the data devices, such as the authorized total DTR for a customer. The data devices transfer data to and/or from a data storage system (20) through front end hosts (16). The front end hosts send messages to a controller (22A) reporting the amount of data transferred and the data devices responsible for the data transfer. The controller determines whether the data devices are exceeding the authorized collective DTR and, if so, directs the front end hosts to increase the latency or delay before a front end host acknowledges receipt of data from the data devices and/or to decrease the buffer size in the front end host with respect to those data devices. This brings the DTR within the authorized collective DTR.

Abstract: Examples relate to managing network traffic. In one example, a computing device may: receive voice network traffic from each of a plurality of voice clients; enqueue the received voice network traffic into a voice Wi-Fi Multimedia (WMM) queue; determine a measure of WMM queue utilization based on data queued in the voice WMM queue; determine a measure of radio congestion for a surrounding area; and determine, based on the measure of WMM queue utilization and the measure of radio congestion, to: stop prioritization of newly received voice traffic from new voice clients, or transition at least one of the plurality of voice clients to a neighboring computing device.

Abstract: A method of assigning master controllers is disclosed. The method of assigning master controllers may be performed by any one of a plurality of controllers included in a software-defined network system and may include: establishing an objective function in which the number of flows passing through switches having different master controllers from among the flows entering during a unit duration of time is a decision variable; establishing at least one constraints; and finding a solution that minimizes the decision variable while satisfying the constraints.

Abstract: One exemplary embodiment provides a device comprising: a connection panel configured to accept a removable connection to a telephone of a controlled access residential institution; a network router connected to the connection panel and configured to connect to a remote network; and an access and security module connected to the network router and configured to control access by the telephone to telephone services provided by accessing a remote call processing center via the remote network. The connection panel, the network router, and access and security module can be at least partially enclosed within a portable enclosure. The device may further comprise a power distribution unit within the enclosure and connected to provide power to the network router and to the access and security module.

Abstract: Aspects extend to methods, systems, and computer program products for allocating acceleration component functionality for supporting services. A service manager uses a finite number of acceleration components to accelerate services. Acceleration components can be allocated in a manner that balances load in a hardware acceleration plane, minimizes role switching, and adapts to demand changes. When role switching is appropriate, less extensive mechanisms (e.g., based on configuration data versus image files) can be used to switch roles to the extent possible.

Abstract: A system and method for providing multi-services within a communication network according to various exemplary embodiments can include storing, in a database of a computer, user-defined sets of rules and instructions for providing multi-services to end user devices connected to a communication network comprising a Hybrid Fiber-Wireless (HFW) network having policy management capabilities. The system and method can receive, at one or more processors, the user-defined sets of rules and instructions from a plurality of end users via a plurality of end user devices. The system and method can configure a virtual network for each end user within the communication network using the policy management capabilities based on the user-defined sets of rules and instructions provided by each end user. The user-defined sets of rules and instructions define provisioning and delivery of resources and services provided by the communication network to the end user.

Abstract: The invention relates to a method for the periodic transport of real-time data in a distributed computer system, which computer system comprises node machines (100, 101, 102, 103), in particular a plurality of node machines (100, 101, 102, 103), and distributor units (121, 122), in particular a plurality of distributor units (121, 122), wherein the node machines (100, 101, 102, 103) and the distributor units (121, 122) have access to a global time, and wherein real-time data is transported by means of time-triggered real-time messages.

Abstract: A method for estimating, in a broadband communication system including an access network and a plurality of broadband communication lines associated with the access network, a sustainable speed that can be sustained by a selected broadband communication line of the plurality of lines.

Abstract: An apparatus and a method are provided by which, in an apparatus for setting up and maintaining network functions, identities of first type network functions and second type network functions are stored, wherein the first type of virtual network functions are configured to select one or more of the second type network functions, and, for each first type network function, information regarding second type network functions which are selectable by the corresponding first type network function based on information regarding physical conditions of the first type network functions and the second type of virtual network functions are maintained.

Abstract: A processor (102) implemented in a wireless terminal (1) is configured to perform gateway processing by executing a first application program (34) stored in a memory (19). The gateway processing includes: (a) receiving transmission data of other application programs (31-33); (b) selecting, from a plurality of communication interfaces (51-55), at least one communication interface to which the transmission data is to be transmitted; and (c) sending the transmission data to the selected at least one communication interface. This contributes, for example, to allowing an application program to easily communicate via a communication interface (i.e., communication path) conforming to a communication protocol that is additionally installed on a wireless terminal (e.g., smartphone).

Abstract: Disclosed is a method for controlling a message over a heterogeneous network. The method includes receiving a first message from a first network, generating a plurality of second messages (a “plurality of fragmented messages”) each header including an arbitration field by performing fragmentation on the first message, and increasing priority of at least one remaining fragmented message by controlling the arbitration field of the at least one remaining fragmented message if the transmission of a first fragmented message over a second network is successful. An apparatus for performing the method includes a reception message processing unit, a transmission message processing unit, a transmission network sensing unit, and a message transmission continuity management unit. Accordingly, a method and apparatus for controlling a message over a heterogeneous network can be simplified, message transmission latency can be prevented, and a message transmission sequence can be maintained.

Abstract: A method and a device for defining implementation of a look-up table for a network element of a software-defined network “SDN” is presented. The network element includes hardware for implementing the look-up table in two or more mutually alternative ways. The method includes selecting (301) an optimal, or at least a suitable, one of the mutually alternative ways to implement the look-up table on the basis of a) the hardware available for implementing the look-up table, b) information about one or more look-up keys, and c) at least one of the following: the maximum number of entries of the look-up table, an average time between successive look-ups, an average time between successive modifications of the look-up table. The method enables the network element to be configured in a way that the hardware resources of the network element are utilized in an optimal or at least a suitable way.

Abstract: System and techniques are described for applying selectable applications to process data packets an adaptive private network (APN). Methods to select application specific processing within a WAN ingress processing pipeline begin with receiving a packet from a local area network (LAN) in an adaptive private network (APN) WAN ingress processing stages. The received packet is identified to be separately processed by a selected application that is different than standard ingress processing. Packet processing flow is redirected to the selected application for application specific processing of the received packet in response to the packet being identified to be separately processed. The separately processed packet is returned to the standard ingress processing after completing the separate processing.

Abstract: Technologies are disclosed for determining a runtime length for an A/B experiment, where the experiment evaluates the desirability of a potential change at a website. The experiment is run for an initial period of time and based upon initial data from the initial period of time, an equation is iteratively solved until a minimal amount of time is determined that that indicates when a statistically significant change will be observed in the data. The experiment is then run for the minimal amount of time.

Abstract: A cellular device architecture, including two application processors connectible through a Modem-AP Switch to two modems, each communicating with a respective antenna. A Controller module coupled to the switch and being configured, in response to receipt of data received in the Modem-AP switch as received through an antenna, to command the switch to select a processing route, whereby one of the application processors is switched to connect to one of the modems and to its associated antenna.

Abstract: Systems and methods for port congestion resiliency in a Link Aggregation Group (LAG) including a multi-card LAG and/or a multi-switch LAG. A method includes receiving a packet for egress over the LAG; responsive to determining no congestion over internal ports not part of the LAG, hashing with all member ports in the LAG in a distribution state; and, responsive to determining congestion over the internal ports, hashing with only member ports on a local card in which the packet was received, wherein the hashing determines which member port the packet egresses from in the LAG. The multi-card LAG includes multiple cards where packets ingress and egress from, and the cards communicate via a backplane port which is not part of the LAG. The multi-switch LAG includes multiple chassis where packets ingress and egress from, and the chassis communicate via an inter-switch connectivity port which is not part of the LAG.

Abstract: Profile generation for bandwidth management is provided. A content provider receive a notification regarding a new application or media file. Profile information for the application or media file is determined. Such profile information includes information regarding consumption of bandwidth throughout a time period of usage of the application or media file. The profile may be stored in memory in association with the application or media file. A request is received from a user device regarding access to the application or media file. Access to the requested application or media is provided to the user device; the profile is also provided to the user device for use in evaluating whether bandwidth requirements of the application or media file exceeds an available network bandwidth of a network of the user device.

Abstract: A process is implemented by a network device for enabling the provisioning of explicit trees in a network by reporting link aggregation group (LAG) configuration information to a path computation element (PCE). The network device implements a LAG module and an intermediate system-intermediate system (IS-IS) module that includes an IS-IS path control and reservation module (ISIS-PCR). The process includes reporting LAG configuration by the LAG module to the IS-IS module within the network device, sending a link state protocol data unit (PDU) (LSP) with the LAG configuration in a LAG sub type length value (TLV) by the ISIS-PCR, receiving, by the IS-IS module, an explicit tree that specifies at least one virtual local area network (VLAN) identifier (VID) to an aggregation link of the LAG assignment, and translating, by the ISIS-PCR module, the explicit tree into a LAG configuration, the LAG configuration specifying a conversation to aggregation link assignment.

Abstract: Some embodiments provide a novel network control system that provides publications for managing different slices (e.g., logical and/or physical entities) of a network. The publications are published from publisher controllers in the network control system to subscriber controllers. The network control system uses publications with generation numbers and buffered subscribers to implement the fixed points in order to help maintain a consistent network state. Buffered subscribers buffer the inputs received from a publisher in case the publisher becomes unavailable. Rather than deleting all of the output state that is based on the published inputs, the buffered subscriber allows the subscriber to maintain the network state until an explicit change to the state is received at the subscriber from a publisher (e.g., a restarted publisher, a backup publisher, etc.).