Abstract: This application provides an MDBV determining method, apparatus, and system. The method includes: A first device determines an updated MDBV based on an updated segment packet delay budget, so that an access network device can use the updated MDBV. Therefore, according to an actual requirement of the access network device, a corresponding MDBV is generated for use. This helps ensure communication efficiency of the access network device.

Abstract: This disclosure provides a method for calculating the installation number and installation positions of wireless base stations in accordance with the positions of wireless terminal stations within an installation area. First, when a predetermined number of wireless base stations are temporarily installed within the installation area, a wireless base station accommodating each wireless terminal station in a communication area is determined and the number of wireless base stations accommodating each wireless terminal station is calculated as a “number of conflicts”. Next, wireless base stations successively accommodating starting with an un-accommodated wireless terminal station of a small number of conflicts are successively selected as objects of installation. Then, the installation number and installation positions of the wireless base stations are calculated, with the temporarily installed wireless base stations other than the wireless base stations serving as the objects of installation being excluded.

Abstract: An alert system and method are provided to identify and characterize real-time information transmission anomalies in high-frequency global and local traceroute data. The system includes active network sensors and/or collector devices, which collect traceroute data associated with transmissions to different points in a computer network and provide the traceroute data to a master server. The traceroute data is obtained by the active network sensors by sending probing data packets to numerous computing target devices located locally with respect to the target device and/or globally. The master server determines one or more anomalies from the received traceroute data and characterizes the anomaly in terms of type, severity, location, affected Domain Name System (DNS) server and/or Internet Service Provider (ISP).

Abstract: A system provides for event-driven redirection of IP service flows and receives, by a DHCP server, an add event corresponding to a specified MAC address; provides a new DHCP lease for the specified address; transmits, by the DHCP server and to an Internet gateway, new instructions comprising one or more of a new IP address, subnet mask, and specified DNS servers; and, through DNS services and routing, redirects all network traffic originating from the Internet gateway to a specified destination. Some embodiments receive a remove event corresponding to the specified address; provide a second new DHCP lease for the specified address; transmit to an Internet gateway, second new instructions comprising one or more of a second new IP address, second subnet mask, and second specified DNS servers; and, through DNS services and routing, direct all network traffic originating from the Internet gateway back to unfettered, but monitored, Internet access.

Abstract: A programmable switch includes ports, and circuitry to receive cache messages for a distributed cache from client devices. The cache messages are queued for sending to memory devices from the ports. Queue occupancy information is generated and sent to a controller that determines, based at least in part on the queue occupancy information, at least one of a cache message transmission rate for a client device, and one or more weights for the queues used by the programmable switch. In another aspect, the programmable switch extracts cache request information from a cache message. The cache request information indicates a cache usage and is sent to the controller, which determines, based at least in part on the extracted cache request information, at least one of a cache message transmission rate for a client device, and one or more weights for queues used in determining an order for sending cache messages.

Abstract: A method of throttling data transmissions in a user equipment (UE) includes determining that a current temperature of the UE is greater than a threshold temperature, identifying a set of data transmissions from a plurality of data transmissions occurring at the UE based on a socket priority of each of the plurality of data transmissions, and throttling the identified set of data transmissions for a time duration for which the current temperature is determined to be greater than the threshold temperature.

Abstract: Systems, methods, and computer-readable media are described for auto-configuring a network communication port such as an Ethernet port to which a network device is connected in a manner that eliminates or otherwise dramatically mitigates the manual effort required for port configuration, while at the same time, ensuring that network security is maintained by authenticating the device during the auto-configuration process. Various auto-configuration processes are described that include varying levels of verification processing to ensure that the network device connected to the port to be configured is a device that is authorized to connect to the network. In this manner, the threat of device spoofing is eliminated or otherwise substantially reduced. Auto-configuration of network ports in connection with switching a known network device to a new port or connecting a previously unknown network device to a network port are described.

Abstract: A gateway server situated between a radio access network and a core network is disclosed that includes a radio access network packet interface, a load management module for monitoring load of a management server in the core network coupled to the radio access network packet interface, a packet forwarding module for forwarding requests to the management server coupled to the load management module, and a local packet core module coupled to the load management module and the packet forwarding module, the local packet core module being configured to respond to a mobile device, when an overload is detected at the management server, with a management server message requesting that the mobile device try again at a later time.

Abstract: Methods and apparatuses in a wireless communication system. A method of operating a user equipment (UE) includes generating an indicator indicating that the UE is capable of supporting adjusted quality of service (QoS), wherein the adjusted QoS corresponds to scaling of QoS parameters associated with an existing QoS indicator. The method also includes generating a capability message comprising the indicator. The method also includes transmitting, to a base station (BS), the capability message including the indicator. The method further includes receiving, from the BS, a message comprising an adjusted QoS value based on the scaling of QoS parameters associated with the existing QoS indicator.

Abstract: There is included in one example a switch, including: an ingress port to receive data from a source host; a first egress port to send data to a destination host; a second egress port to send data to the source host; and a congestion notification generator (CNG) including: a congestion detector to compute bandwidth consumption of a flow associated with a packet received on the ingress port and assigned to the first egress port, and determine based on the computed bandwidth consumption that the flow is congested; a flow extractor to extract a flow identifier of the flow from the packet; a throttle calculator to calculate a quantitative flow throttle value for the flow; and a header builder to build a congestion notification packet to instruct the source host to throttle the flow.

Abstract: Described apparatuses and methods enable a receiver of requests, such as a memory device, to control the arrival of future requests using a credit-based communication protocol. A transmitter of requests can be authorized to transmit a request across an interconnect responsive to possession of a credit. If the transmitter exhausts its credits, the transmitter waits until a credit is returned before transmitting another request. The receiver can manage credit returns based on how many responses are present in a response queue. The receiver can change a rate at which the credit returns are transmitted by changing a size of an interval of responses that are being transmitted, with one credit being returned per interval. This can slow the rate of credit returns while the response queue is relatively more filled. The rate adjustment can decrease latency by reducing an amount of requests or responses that are pooling in backend components.

Abstract: Systems and methods for routing trade orders based on exchange latency are disclosed. An example method includes measuring a first latency associated with a first exchange based on a processing time of a first trade order; and routing a second trade order from a trading device to one of the first and a second exchange based on the first latency.

Abstract: A parsing apparatus includes a packet-type identification circuit and a parser. The packet-type identification circuit is to receive a packet to be parsed, and to identify a packet type of the packet by extracting a packet-type identifier from a defined field in the packet. The parser is to store one or more parsing templates that specify parsing of one or more respective packet types. When the packet type of the packet corresponds to a parsing template among the stored parsing templates, the parser is to parse the packet in accordance with the stored parsing template. When the packet type of the packet does not correspond to any of the stored parsing templates, the parser is to parse the packet using an alternative parsing scheme.

Abstract: A method for a wireless communication from a first transportation vehicle to a road infrastructure station including determining the position of the first transportation vehicle, determining the distance of the transportation vehicle to the road infrastructure station, calculating a table containing predicted positions in space and/or time for the first transportation vehicle indicating the respective planned transmission characteristics for the future signal transmissions from the first transportation vehicle to the road infrastructure station at the predicted positions, transmitting the table to the surrounding transportation vehicle or to a network management station, evaluating the table in the surrounding transportation vehicle or the network management station, and adjusting the transmissions from the surrounding mobile station so that interference between the planned signal transmissions of the first transportation vehicle and the surrounding mobile station is reduced.

Abstract: A telecommunication and multimedia management apparatus and method that supports voice and other media communications and that enables users to: (i) participate in multiple conversation modes, including live phone calls, conference calls, instant voice messaging or tactical communications; (ii) review the messages of conversations in either a live mode or a time-shifted mode and to seamlessly transition back and forth between the two modes; (iii) participate in multiple conversations either concurrently or simultaneously; (iv) archive the messages of conversations for later review or processing; and (v) persistently store media either created or received on the communication devices of users. The latter feature enables users to generate or review media when either disconnected from the network or network conditions are poor and to optimize the delivery of media over the network based on network conditions and the intention of the users participating in conversations.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a device may receive traffic data associated with a coverage area and determine that there is network congestion. If there is network congestion, the device may identify a high-consumption user device. The device may perform a corrective action in connection with a load of the high-consumption user device, such as limit a throughput of the high-consumption user device. The device may perform a corrective action based on a policy obtained from a policy and control function.

Abstract: In computer networks, unicast and multicast are information transmission methods. Multicast is when one sender station or device transfers information to all of the other stations or devices in the computer network. Multicast packets sent from devices in a network can be sent directly to a server that will monitor and record the number of multicast packets being submitted from each device in the network. The server may perform actions to regulate the transmission of multicast packets if one or more devices is transmitting too many multicast packets in the network. Thus, the server will be able to monitor and regulate the performance, security, and traffic flow of data in the network, and prevent any deficiency in the network communication due to an excess amount of multicast packets being transmitted.

Abstract: A telecommunication and multimedia management apparatus and method that supports voice and other media communications and that enables users to: (i) participate in multiple conversation modes, including live phone calls, conference calls, instant voice messaging or tactical communications; (ii) review the messages of conversations in either a live mode or a time-shifted mode and to seamlessly transition back and forth between the two modes; (iii) participate in multiple conversations either concurrently or simultaneously; (iv) archive the messages of conversations for later review or processing; and (v) persistently store media either created or received on the communication devices of users. The latter feature enables users to generate or review media when either disconnected from the network or network conditions are poor and to optimize the delivery of media over the network based on network conditions and the intention of the users participating in conversations.

Abstract: Systems and methods for throttling requests to web services are disclosed. A system is configured to receive, at a host, one or more requests during a first time period. Each request is for a web service hosted on a backend. The host is one of a plurality of hosts of an application programming interface (API) gateway to receive a plurality of requests for the web services. The system is further configured to: process at least a portion of the one or more requests for the one or more web services; count, by a local counter in a local cache of the host, the one or more requests received at the host during the first time period; compare a local count of the local counter to a local bucket size associated with the host; and provide an instruction to update a remote count of a remote counter based on the comparison.

Abstract: A method, apparatus and computer-readable mediums relating to the transmission of data packets in a wireless communication network. The method, performed by a node of a wireless communication network, for selecting a feedback scheme associated with transmission of data packets over one or more radio bearers to one or more wireless devices. The method comprises: upon receiving a data packet for transmission to a wireless device, starting a timer associated with the data packet, the timer being set to expire after a period of time which varies as a function of a latency requirement for the data packet; and, in dependence on a remaining time value for the timer, selecting one of a plurality of feedback schemes for transmission of the data packet.

Abstract: A method controls resource allocation in a data center. The method comprises identifying a first computational task to be transferred from a first set of one or more servers. The method also comprises identifying a second set of one or more servers to which the first computational task may be transferred, by using the respective current computational load of the second set of servers to determine that the second set of servers has sufficient available computational resources to implement the computational task and identifying network links for transferring the computational task and using the respective transmission loads of the identified links to determine that there is sufficient network capacity to transfer the computational task from the first set of servers to the second set of servers. The method then comprises transferring the computational task from the first set of servers to the second set of servers.

Abstract: A label management method includes allocating, by a controller, a source label to a data stream, sending, by the controller, a first Border Gateway Protocol (BGP) update packet to an ingress network device on a label switching path (LSP) of the data stream, and sending a second BGP update packet to an egress network device on the LSP of the data stream, where the first BGP update packet includes a stream identifier of the data stream and the source label, and the second BGP update packet includes a mapping relationship between the source label and a source object of the data stream.

Abstract: Some embodiments herein disclose a network node (QQ160) for handling communication in a narrowband internet of things network or a machine type communication network. The network node is configured to transmit an indication to a user equipment, UE, (QQ110) while the UE (QQ110) is in a connected mode or is released from the connected mode, wherein the indication indicates an update of at least a part of a system information, SI, of a service area of the narrowband internet of things network or the machine type communication network.

Abstract: A communication control apparatus includes an observed data rate acquiring unit configured to acquire observed data rates indicating input data rates of queues, the observed data rates being observed in a layer 2 switch, a threshold value storage unit configured to store predetermined threshold values of the queues, a shaping rate determination unit configured to determine a shaping rate of each queue based on both observed data based on an observed data rate of the observed data rates acquired by the observed data rate acquiring unit and a threshold value of the predetermined threshold values stored in the threshold value storage unit, and a shaping rate setting unit configured to set, in the layer 2 switch, the shaping rate of each queue determined by the shaping rate determination unit.

Abstract: Systems and methods for managing network traffic receives, at a grade of service device, network traffic information for a plurality of network traffic channels from a network device separate from the grade of service device. The network traffic information is compared to a threshold to determine a behavior value for each network traffic channel. Each network traffic channel is mapped to a grade of service according to the behavior value.

Abstract: A system and method for detecting unmanned aerial vehicles (UAV) includes capturing a set of wireless data traffic from a wireless transmission and performing frequency spectrum analysis on datagram arrival times to classify the wireless data traffic based upon potential constant-datagram-rate data content that may be indicative that at least a portion of the wireless data traffic is emanating from a UAV. The wireless data traffic may be captured from one or more Wi-Fi receivers and sorted based upon transmission parameters prior to performing the frequency spectrum analysis. Detected peak frequencies may be used to determine if any constant-datagram-rate traffic within the wireless data traffic potentially contains data traffic streaming from a UAV. Directional antennas and/or a phased array of antennas can be used to determine the direction of propagation of the wireless transmission and further classify the wireless data traffic based on potential emanation from a UAV.

Abstract: One or more wireless stations may operate to configure direct communication with neighboring mobile stations, e.g., direct communication between the wireless stations without utilizing an intermediate access point. A mechanism for wireless stations to learn preferred channels of neighboring wireless stations and to schedule channel sequences within a time period based on the learned channels may include advertisement of preferred channels and adaptation of channel sequences, based on the preferred channels, to maximize bandwidth utilization.

Abstract: Techniques for in-situ passive performance measurement are described. In one embodiment, a method includes receiving a data packet at a first network element, determining whether measurement information is to be collected for the data packet, providing one or more measurement fields for the data packet based on a determination that measurement information is to be collected for the data packet in which at least one measurement field identifies a measurement type, and forwarding the data packet to a second network element. The method further includes determining, by the second network element, the measurement type for the data packet, and performing one or more actions based on the measurement type.

Abstract: A computer-implemented method for provisioning a feature associated with a brand of a wireless communication network may include loading a trigger condition in a catalog for triggering the feature, wherein an in-memory cache of the catalog is accessible by a network provisioning engine of the wireless communication network. At the network provisioning engine, the method may further include receiving, from a billing system computer, a transaction request for a subscriber having a rate plan associated with the brand, using a brand indication in the transaction request to locate the in-memory cache of the catalog, and determining whether the transaction request meets the trigger condition. If the transaction request meets the trigger condition, the method may further include determining a network node for provisioning the feature, and sending instructions to the network node to provision the feature in the subscriber's rate plan.

Abstract: Methods, systems, and computer readable media for ingress message rate limiting are disclosed. One method occurs at a first network node of a first network comprises: obtaining, from a transport layer security (TLS) message from a second network node of a second network, an identifier identifying the second network node or the second network; receiving a request message from the second network node or the second network; determining, using the identifier, that an allowed ingress message rate associated with the second network node or the second network has been reached or exceeded; and in response to determining that the allowed ingress message rate associated with the second network node or the second network has been reached or exceeded, performing a rate limiting action.

Abstract: A system has a packet switch for routing network traffic. The packet switch includes a system counter to increment a counter time in predetermined time segments, time stamping logic to associate a received packet with the counter time, and an interval discriminator to assign a received packet to a selected interval counter of a set of interval counters based upon the counter time. A computer is connected to the packet switch. The computer has a memory with instructions executed by a processor to associate the counter time with a time of day, and collect values from the set of interval counters to generate network traffic activity data.

Abstract: Systems and methods provide live broadcasts with real-time feedback from viewers using mobile computing devices. An example method includes providing a live feed broadcast from a source mobile device to a plurality of viewing devices, receiving, during the live feed broadcast, a plurality of feedback signals, each feedback signal being from at least one of the plurality of viewing devices, and associating each feedback signal with a respective time in the live feed broadcast. The method further includes providing, for each feedback signal in the plurality of feedback signals, an indication of the feedback signal to the source mobile device and to each viewing device of the plurality of viewing devices, the indication being used to display a symbol representing the feedback signal as an animation, the animation moving the symbol on a path during display and lasting for a predetermined time subsequent to the respective time.

Abstract: A network management system can include multiple network interfaces. For example, the network management system can include a first network interface that can receive a stream of network packets associated with users. The network management system can include a second network interface for transmitting the received stream of network packets. The network management system can shape the stream of network packets before transmission. The network management system can assign the network packets into classes. The classes may have a configured hierarchical relationship. The classes may also have an operational hierarchy based on bandwidth usage during operation. The network management system can shape the stream of network packets based on operational hierarchy of classes and configured hierarchical relationship.

Abstract: Systems and methods for managing optical network services in an optical network include providing a user interface illustrating a current state of the optical network; performing analysis based on user input related to an event affecting the current state of the optical network to determine a first future state of the optical network; providing an updated user interface illustrating the first future state based on the analysis; performing an updated analysis based on updated user input received in response to the first future to determine a second future state of the optical network; and providing a further updated user interface illustrating the second future state.

Abstract: For carrier's that have a large number of user equipment (UE) devices camped on them, the experience of a user equipment devices that utilize a subscriber prioritization identity (SPID) can be of a lower quality than it would be on another lower priority carrier because of the carrier load. Thus, SPID based UEs can be placed on carriers with the best throughput potential in the uplink. To achieve this, a SPID profile for the SPID based UE can be dynamically changed such the SPID based UE can transition to a carrier of better quality. UE devices are grouped per SPID ranges and each SPID has assigned cell carrier priority. In one embodiment, a system optimization network can monitor and detect UE performance on each cell and determine which cells are underperforming and which cells are performing better than other cells.

Abstract: A packet transfer apparatus is configured to perform packet exchange processing for exchanging multiple continuous packets with low delay while maintaining fairness between communication flows of the same priority level. The packet transfer apparatus includes: a packet classification unit; queues that holds the classified packets for each classification; and a dequeue processing unit that extracts packets from the queues. The dequeue processing unit includes a scheduling unit that controls the packet extraction amount extracted from the queue for a specific communication flow based on information on the amount of data that is requested by the communication flow and is to be continuously transmitted in packets.

Abstract: In one embodiment, a method comprises: determining, by a network device that is configured for joining a local directed acyclic graph (DAG) instance in a data network, an unreachability by the network device to any member of the local DAG instance; generating and broadcasting, by the network device, a request message that identifies the network device requesting to join the local DAG instance, the request message causing a neighboring network device in a global DAG instance of the data network to rebroadcast the request message for reception by a member of the local DAG instance, the neighboring network device a non-member of the local DAG instance; and receiving, by the network device, a reply message indicating a member of the local DAG instance is reachable via the neighboring network device in the global DAG instance.

Abstract: A communication protocol system is provided for reliable transport of packets. In this regard, an initiator entity may determine that outgoing data is to be transmitted to a target entity. The initiator entity may transmit, to the target entity, a solicited push request requesting the outgoing data to be placed at the target entity. In response to the solicited push request, the initiator entity may receive a push grant from the target entity. In response to the push grant, the initiator entity may transmit to the target entity the outgoing data to be placed at the target entity.

Abstract: Methods, systems, and computer readable media for controlling delivery of content are provided. In some embodiments, a system for controlling delivery of content is provided. The system includes processing circuitry configured to: transmit, to a server, a plurality of requests for blocks of the content; while at least some of the plurality of requests are still outstanding: detect a change of a service characteristic of a connection between the system and the server; determine a preferred number of outstanding requests; and cancel at least some of the requests from the plurality that are still outstanding based on the preferred number and a count of the requests from the plurality that are still outstanding.

Abstract: In one example, a responder obtains an Operations, Administration, and Management/Maintenance (OAM) probe packet from a network entity operating as an initiator in a network, provides, to the initiator, a first response to the OAM probe packet over a first network path in the network, and further provides, to the initiator, a second response to the OAM probe packet over a second network path in the network that is different from the first network path. In another example, an initiator provides an OAM probe packet to a network entity operating as responder in a network, obtains, from the responder, a first response to the OAM probe packet over a first network path in the network, and further obtains, from the responder, a second response to the OAM probe packet over a second network path in the network that is different from the first network path.

Abstract: A system and method for bandwidth management by controlling the bit rate of a signal stream in real time according to available link bandwidth. Applications include multiple-channel video data streams over a limited-bandwidth link such as a Digital Subscriber Line. A video signal is transrated at the head end to multiple streams having different bit rates, by a multirating device which sends the multiple streams over a network, along with metadata containing information about the data structure and parameters of the streams. At the network access edge, a demultirating device uses the metadata to select the stream with the highest video quality whose bit rate does not exceed the available bandwidth of the end-user's access link. This scheme provides multiple unicast signals to different end-users in place of a single multicast signal, supports multiple high-definition channels over a limited bandwidth link, and is compatible with standard encryption methods.

Abstract: A network switching device includes: a communication unit; an information collection unit configured to obtain information on a network state of the network from first and second information for packets received through the communication unit; a marking reference calculation unit configured to calculate a marking reference based on the second information when it is determined that the network state has changed based on the first information; and a marking execution unit configured to perform marking indicating a congestion degree on at least a part of the packets received through the communication unit based on the calculated marking reference.

Abstract: Disclosed are a video bit rate determining method and apparatus, an electronic device, a storage medium. The method includes: determining a cancellation parameter ?(k) for cancelling a throughput prediction error of a video block Fk; determining a cache amount prediction value of each of video blocks from the video block Fk to the video block Fk+N?1 at the end of download thereof based on a throughput prediction value of the video blocks and ?(k); determining a video playback quality loss value according to a weight value of the bit rate change between adjacent video blocks requested and a cache prediction error between the cache amount prediction value and a preset cache amount target value of the video blocks at the end of download thereof, requesting the video block Fk at a bit rate that does not exceed a bit rate r(k) when the video playback quality loss value is minimum.

Abstract: A method includes determining, by a computing device of a plurality of computing devices of a storage network, a data processing plan for processing an access request. The method further includes identifying two or more processing units of a plurality of processing units of the storage network based on the data processing plan and availability information, and determining processing capabilities of each of the two or more processing units. The method further includes selecting a processing unit of the two or more processing units to process the access request based on a favorable comparison of the processing capabilities of the processing unit and the data processing plan. The method further includes selecting one or more processing options of the processing unit to process the access request according to the data processing plan, and sending the access request and selection of the one or more processing options to the processing unit.

Abstract: A network dimensioning algorithm for networks, such as DOCSIS 3.1 networks, is described. The present system and method combines per-profile traffic characteristics, available bandwidth, legacy coexistence, and detail overhead contributions of cyclic prefix, pilots, excluded subcarriers, FEC, and bit loading among other parameters.

Abstract: A method comprises receiving information at a user device about one or more types of access and associated barring configuration information. The one or more types of access may comprise programmable access classes. The method further using by the user device one or more of said types of access and respective barring configuration information when determining whether to attempt access to a network.

Abstract: Techniques for interface bandwidth management. A wired interface bandwidth is configured for a wired interface of a router. A cellular interface bandwidth is configured for a cellular interface of cellular interfaces of the router. The cellular interface bandwidth includes an uplink bandwidth. One or more instantaneous uplink throughput values for the cellular interface are determined based on one or more uplink throughput per resource block values for the cellular interface. A predicted average uplink throughput for the cellular interface is determined based on the one or more instantaneous uplink throughput values. The uplink bandwidth is dynamically adjusted based on the predicted average uplink throughput determined for the cellular interface of the router.

Abstract: Embodiments of the present invention may provide a decentralized infrastructure including efficient wireless communication, an infrastructureless communication network, a decentralized private network, securely communicating in a decentralized network perhaps using distributed ledger technology (62), named data networking (63), neural networks (85), or the like. Further embodiments may include consensus processing (150), dynamic smart contracts (151), universal artificial neural network multiplex asset class (3), and perhaps even an artificial neural network multiplex identification system.

Abstract: A method includes measuring input/output traffic for respective hosts that are connected to a Fibre Channel N_Port Virtualizer (FC-NPV) switch, which is in communication with a first N_Port ID Virtualization (NPIV) core switch via a first port channel and with a second NPIV core switch via a second port channel; determining that traffic carried on the first port channel between the FC-NPV switch and the first NPIV Core switch exceeds a predetermined threshold compared to traffic carried on the second port channel; and re-assigning traffic from a given host carried on the first port channel to the second port channel between the FC-NPV switch and the second NPIV core switch.

Abstract: A client system comprises processing circuitry configured to receive, from a user device, a first access request comprising a first instruction to access a protected resource; transmit a token request for an access token to be used for accessing the protected resource; and receive an access token in response to the token request, the access token having a corresponding time to expire. The client system comprises a token storage unit configured to store the access token. The processing circuitry is further configured to receive a rejection message indicating that the access token is not valid for receiving the protected resource; and store, at the token storage unit, an invalidation flag associated with the stored access token, in response to receiving the rejection message.