Abstract: The present invention discloses a method and a device for transferring a bootstrap message, and relates to the field of communications. The invention is intended to solve a problem in the prior art that a public network tunnel needs to be separately created for a bootstrap message, which consumes a tunnel resource. A technical solution provided in an embodiment of the present invention includes: receiving, by a first provider edge router, a bootstrap message sent by a bootstrap router; sending, by the first provider edge router, to a second provider edge router, a border gateway protocol BGP message including message content of the bootstrap message, so that after receiving the BGP message, the second provider edge router sends, to a customer edge router, the message content included in the BGP message. The embodiments of the present invention are applicable to a next generation multicast virtual private network.

Abstract: In general, the disclosure relates to techniques for initiating a targeted LDP session in a manner that includes information specifying one or more application for which a targeted LDP session is being initiated. In one example, a method includes receiving, by a network device, a LDP initialization message to initiate an Label Distribution Protocol (LDP) session with a peer network device, the LDP initialization message including a Targeted Applications Capability (TAC) field specifying one or more applications for which the LDP session is to be used for advertising forwarding equivalence class (FEC)-label bindings between the network device and the peer network device, and determining, by the network device, whether to allow the LDP session to be established based on the one or more applications specified in the TAC field.

Abstract: Various technologies described herein pertain to managing and accessing a community Wi-Fi network. The community Wi-Fi network can include sharer computing devices in differing local networks that share respective network bandwidth capacities with consumer computing devices. Feedback information pertaining to network bandwidth capacity available at different geographic locations covered by the community Wi-Fi network can be collected and evaluated to enable generation of maps for visualizing coverage of the community Wi-Fi network. A consumer computing device can display a map that includes visual information pertaining to the geographic coverage of the community Wi-Fi network relative to a geographic location of the consumer computing device.

Abstract: A process capable of automatically establishing a secure overlay network (“SON”) across different clouds is disclosed. The process, in one aspect, receives a first request from a first node in a first cloud for establishing a SON. After receiving a second request for connecting to the SON from a second node in a second cloud, a first connection is established connecting between the first node and the second node utilizing a network security protocol such as Internet Protocol Security (“IPSec”). After receiving a third request for connecting to the SON from a third node in a third cloud, a second connection is used to connect between the first node and the third node. A third connection is used to connect between the second node and the third node. Each subsequent request for connecting to the SON from a new node results in new connections between the new node and each existing node in the SON forming a full-mesh.

Abstract: In one embodiment, one or more neighboring nodes that neighbor a sending node in a channel-hopping network are determined. Each neighboring node has multiple channels on which a data packet can be received at a particular time according to a channel-hopping receive schedule. Then, a currently active channel of each neighboring node is determined, where a data packet can be received on the currently active channel at the current time. A channel quality of the currently active channel of each neighboring node is computed, and based on the computations, a transmission overhead is estimated for communicating with each neighboring node. A data packet can then be transmitted to the neighboring node that provides a path that minimizes the estimated transmission overhead.

Abstract: The disclosure provides, in one aspect, an integrated controller for a HVAC system is disclosed. In one embodiment, the integrated controller includes: (1) an interface coupled to an auxiliary controller of the HVAC system and configured to communicate therewith, the auxiliary controller having an auxiliary non-volatile memory, (2) a processor, coupled to the interface and configured to direct the operation of the HVAC system, and (3) a main non-volatile memory coupled to the processor and configured to receive a copy of main controller application information associated with the main system controller via the interface and store the main controller application information, the processor further configured to automatically send a copy of the main controller application information during manufacturing of the HVAC system to the auxiliary controller of the HVAC system to store as back-up data on the auxiliary non-volatile memory of the auxiliary controller.

Abstract: A method may include obtaining a match vector that indicates one or more filter rules that are potentially applicable to a packet. The method may include partitioning the match vector into a plurality of segments. The method may include generating a summary vector that identifies one or more portions of the match vector that include one or more match bits. A match bit may indicate one of the one or more filter rules that is potentially applicable to the packet. The method may include obtaining a relevant segment of the match vector. The relevant segment may include at least one of the portions of the match vector identified by the summary vector. The method may include determining a filter rule to apply based on the match vector and based on the one or more match bits. The method may include applying the filter rule to the packet.

Abstract: Systems and methods described herein provide automatic generation of one or more application fingerprints which may be used to identify and recommend one or more technologies and/or technical instructions for use within a WAN environment. Input data describing and an application fingerprint for one or more applications currently used within a network environment, such as a WAN environment, is received and executed against a set of rules by a rules engine. Based on the results, one or more recommendations may be provided that identifies various technologies and/or technical procedures the network manager may implement and/or perform.

Abstract: According to one aspect of the present disclosure, a method is implemented by a server in a server cluster. A request received from a client includes a session identifier (ID) identifying a session between the client and the server, and a correlation ID that is linked to the request. If the correlation ID is not included in an individual server-specific session microcache for the session, the request is processed to determine a response, the response is added to the session microcache, and the response and an indication of the correlation ID are sent to the client. If the correlation ID and a response to the request are stored in the session microcache, the response and an indication of the correlation ID are re-sent to the client. The session ID and session microcache are transferred to another of the plurality of servers in the server cluster to continue the session.

Abstract: A system and method for improved client and server communications, more particularly, an improved protocol that may be used for communication between a client and a server, such as in an email environment. Many features are provided for improved communications. An email server may provide the best message body available for an email message, may transfer an entire data object if requested property or properties are not well defined within the data object, may provide progress data for use in tracking download progress, and may send error information for a data object having an error. Email changes may be optimized at an email server component, even if the email changes occurred at another email server component. An email server may maintain a table of changes that occur to folders at an associated data store, and may notify a subscribed email client component of changes that occur in the table.

Abstract: A computer is configured to receive a request to access an application, the request having a header. The header includes a source address and an encrypted address generated based on the source address. The computer is further configured to generate a decrypted address from the encrypted address. The computer is further configured to determine whether the source address and the decrypted address match, transmit the source address to a data store, and determine whether a customer profile corresponding to the source address is found within the data store.

Abstract: Presented herein are techniques for using uplink transmissions from devices (e.g., wireless tags, clients, etc.) to determine a path loss between neighboring access points. In one example, a wireless controller obtains receive signal strength information of uplink transmissions received at neighboring access points in a wireless network. The wireless controller determines an effective path loss between the neighboring access points based on the receive signal strength information for the uplink transmissions received at the neighboring access points. The wireless controller also performs radio resource management operations in the wireless network using the effective path loss determined based on the uplink transmissions received at the neighboring access points.

Abstract: An apparatus and method for transmitting a multimedia data packet are provided. The method includes receiving Bottom-up Network Abstraction Layer (B-NAL) information from a network entity, determining a media data quality based on the received B-NAL information and generating media data having the determined media data quality, and generating a packet including the generated media data and transmitting the packet to the network entity.

Abstract: In one embodiment, a device in a network obtains information regarding a transmission between the device and a neighbor of the device in the network. The device determines whether to use the information regarding the transmission to update an expected transmission count associated with the neighbor based on a rate of samples used to compute expected transmission counts. The device updates the expected transmission count, in response to determining that the information regarding the transmission should be used to update the expected transmission count. The device selects a routing path in the network based in part on the updated expected transmission count associated with the neighbor.

Abstract: Systems and methods for user device registration are disclosed. In certain embodiments, at least a first edge device in a group of edge devices enters a mass-restart mode. The first edge device receives a request for registration from a user device and determines whether the user device is currently registered through the first edge device. The first edge device generates a notification associated with the user device if the user device is not currently registered through the first edge device. A second edge device in the group of edge devices receives the notification and determines whether the user device is currently registered through the second edge device based on the notification. Registration information about the user device is deleted from the second edge device if the user device is currently registered through the second edge device.

Abstract: A communication device includes a first processing unit that sends a first command to start an activation processing. The communication device also includes a second processing unit that receives the first command from the first processing unit. In addition, the communication device includes an interface between the first processing unit and the second processing unit. The first processing unit activates the interface at a predetermined interface level from among a plurality of interface levels. The second processing unit starts an application in accordance with the activated interface level. The first processing unit and the second processing unit exchange data by the activated application. The first processing unit and the second processing unit perform a deactivation processing of the activated interface.

Abstract: The invention describes the design of an interconnect element in a programmable network processor/system on-chip having multiple packet processing engines. The on-chip interconnection network for a large number of processing engines on a system can be built from an array of the proposed interconnect elements. Each interconnect element also includes local network lookup tables which allows its attached processing engines to perform lookups locally. These local lookups are much faster than the lookups to a remote search engine, which is shared by all processing engines in the entire system. Local lookup tables in each interconnect element are built from a pool of memory tiles. Each lookup table can be shared by multiple processing engines attached to the interconnect element; and each of these processing engines can perform lookups on different lookup tables in run-time.

Abstract: Various techniques for reducing power in a wireless network device are disclosed. In some embodiments, software routines within the device are modified to minimize the time during which the analog circuitry in a radio is powered. In some embodiments, the techniques make use of knowledge of implied delays associated with a particular network protocol. For example, in a CSMA network, there is a defined minimum period before the device can attempt to gain access to the media. The radio may be powered off during this defined period. In other embodiments, modifications to a protocol are disclosed which allow additional power savings.

Abstract: A method and apparatus for configuring a routing path in a wireless communication system are provided. The method includes measuring a first distance between the terminal and a target terminal, transmitting information of the measured first distance to at least one neighboring terminal, receiving a second distance measured for the target terminal with respect to the terminal from the at least one neighboring terminal, and determining a neighboring terminal of which the second distance is the longest as a next terminal of the routing path.

Abstract: Server systems are disclosed that receive content request and respond with hardware-independent graphics commands instead of, or in addition to, unprocessed content items. Some server systems may act as intermediaries between user devices and content sources. The server systems can obtain content pages from content sources, process the content pages (e.g., using a headless browser), and provide hardware-independent graphics commands (e.g., vector graphics commands, that do not require specialized graphics hardware for execution) to user devices in response to requests for content. The hardware-independent graphics commands can be executed by client browsers to generate a representation of the content page that is the same or substantially the same as the representation that would have been generated by processing the content pages locally.

Abstract: There is provided a radio bearer to user equipment on a first component carrier by a first network node and on a second component carrier via a second network node connecting to the first network node. A control plane configuration message is transmitted that indicates an uplink component carrier of a network node that terminates an air-interface protocol linked to the first and/or the second component carrier. The uplink component carrier (it can be more than one) is then used for uplink transmission of data units that include information about reception of data units of the air-interface protocol.

Abstract: A method, system, and apparatus are described for facilitating data roaming. The system is configured to monitor data usage by a mobile device associated with a first communication network when roaming on a second communication network. The system is further configured to receive a request initiated by the second communication network to allocate a roaming resource to the mobile device. The system is further configured to assess at least a portion of the data usage to determine whether or not to grant the request for a roaming resource. The system is further configured to, in response to a determination to grant the request, communicate a reply indicative of the determination.

Abstract: Systems and methods are described for determining broadcast parameters for a transmission. A plurality of broadcast content that comprise a priority level may be received, where each of the plurality of broadcast content may also comprise a timing for broadcasting. For each of the plurality of broadcast content, a number of nodes for broadcasting may be determined based on the priority level and the timing for broadcasting. The plurality of broadcast content may also be ranked based on the timing for broadcasting and the number of nodes for broadcasting. At least one scheduler may be instructed to schedule the plurality of content for broadcasting based on the ranking and the priority level for each of the plurality of broadcast content.

Abstract: A network environment includes a message-processing resource that receives a communication originated by a communication device and transmitted from the communication device over a wireless communication link. By way of non-limiting example, the communication can be a request for retrieval of content from server resource disposed in the network environment. The message-processing resource processes the communication transmitted over the wireless communication link to identify a network address assigned to the communication device. The message-processing resource maps the network address to corresponding status information associated with the communication device.

Abstract: The invention is directed to a clock module and method for distributing a time reference to at least one clock in a packet-switched network. The clock module includes a slave port, a master port and a local clock. The method comprises the steps of receiving a first synchronization packet at the slave port, the first synchronization packet comprising a first master clock timestamp and generating at least one internal signal comprising the first master clock timestamp. The method also includes the steps of transmitting the at least one internal signal to the master port and receiving the at least one internal signal at the master port. Then a method includes determining the internal propagation time of the signal through the clock module and generating a second synchronization packet at the master port comprising a second master clock timestamp, the second master clock timestamp comprising the sum of the first master clock timestamp and the internal propagation time.

Abstract: Embodiments of the present invention provide methods and system to reduce needless data traffic in leaf-spine switch fabric. In embodiments, in a static solution, data rates of data flows having a common destination port may be measured and responsive to the data flows having a combined data rate that exceeding a rate limit of the common destination port, one or more of the data flows may be limited. Embodiments may also comprise a global scheduler to provide dynamic data rate controls of traffic flows from source ports to destination ports in which to reduce the handling of data traffic that would otherwise be discarded due to oversubscription.

Abstract: Techniques to self-optimize a network are disclosed. The link quality of a communications link is assessed to determine if a predetermined link quality level is satisfied. If the link quality level is not satisfied, a link adaptation routine is employed to optimize the communications link. In the event the link adaptation routine fails to optimize the communications link to the predetermined link quality level, a power control routine to adapt signal power is employed. In this way, interference between the link adaptation and power control routines is minimized. The link quality assessment may take into account user profile, application profile, and mobile terminal characteristics. Similarly, the link quality assessment may take into account radio conditions such as air interface, cellular sector and core network characteristics. In turn, the communications terminal may transmit communications link characteristics to the cellular sector to enable the cellular sector to self optimize.

Abstract: A system for optimizing wireless coverage on a wireless device includes a server for receiving performance data related to performance on wireless networks, analyzing the performance data related to performance on the wireless networks, determining optimized settings for the wireless device, and transmitting the optimized settings to the wireless device.

Abstract: A process and apparatus to facilitate communication between callers and callees in a system comprising a plurality of nodes with which callers and callees are associated is disclosed. In response to initiation of a call by a calling subscriber, a caller identifier and a callee identifier are received. Call classification criteria associated with the caller identifier are used to classify the call as a public network call or a private network call. A routing message identifying an address, on the private network, associated with the callee is produced when the call is classified as a private network call and a routing message identifying a gateway to the public network is produced when the call is classified as a public network call.

Abstract: A system, method, and computer readable medium are disclosed. In one embodiment the system includes a remote computer system. The remote computer system has a remote host embedded controller interface (HECI) driver and a HECI simulator. The HECI simulator intercepts commands directed to the HECI driver from software running on the remote computer system and routes the commands as HECI messages to a local computer system also included in the system. The local computer system includes a HECI bridge that is capable of receiving the HECI messages sent from the remote computer system and then can pass the received HECI messages to a local HECI driver to be operated upon.

Abstract: Embodiments of the present invention provide a method and an apparatus for obtaining a destination IP address and are related to the field of communications technologies, for improving a data sending success rate in a network. The method includes: receiving a request sent by a terminal device, obtaining a destination IP address from a network-side device according to the request, and sending the destination IP address to the terminal device. The method and the apparatus for obtaining a destination IP address provided by the embodiments of the present invention are applied in an M2M technology.

Abstract: A method and system are provided for connecting at least three provider peer elements PEs located in two L2 network sites, via a provider network, wherein at least in one of the L2 sites and two of the provider peer elements PEs are connected to a customer equipment CE forming together a dual homing structure. The method and system are characterized in that they rely on the use of only a single PW in the provider network that extends between PEs of the two L2 network sites while ensuring traffic protection for the PW in the provider network, and ensuring that in case of a failure of one of the PEs or its connection to the customer equipment at one of the sites, the other L2 network site remains unaware of the failure, so that once established, traffic communication over the PW is maintained like no failure has happened.

Abstract: An apparatus and method for extending a network are provided. The method includes registering, by a transmission-side remote access agent in a first network, a plurality of transmission channels for transmitting data; receiving, by the transmission-side remote access agent, event request messages each including access information regarding an apparatus from a plurality of apparatuses located in a transmission-side network; storing, by the transmission-side remote access agent, access information included in the received event request messages, which cannot be used in a registered channel of a reception-side network in a second network; and converting, by the transmission-side remote access agent, the event request message to be used in the registered transmission channels, and transmitting the converted event request message to the reception-side network different from the transmission-side network.

Abstract: A relay service enables two peers attempting to communicate with one another to each connect to a publicly-accessible relay server, which servers are associated with an overlay network and are selected by a directory service. After end-to-end connectivity is established, preferably the hosts communicate with each other by relaying data packets via the overlay network relay servers. Communications (both connection control messages and data being relayed) between a host and a relay server occurs at an application layer using a modified version of the TURN protocol.

Abstract: Techniques and solutions for distributing routing updates using timing information are described. For example, inter-device messaging protocols can support timing information (e.g., routing protocols be extended to support timing information). The timing information can comprise an indication of a time at which the routing update is to be put into effect. Using the timing information, a number of routing devices can put the routing update into effect at the same time (e.g., at an update reference time) according to a synchronous mode. Routing updates can be managed between routing devices that support timing information and routing devices that do not support timing information.

Abstract: A flow processing facility, which uses a set of artificial neurons for pattern recognition, such as a self-organizing map, in order to provide security and protection to a computer or computer system supports unified threat management based at least in part on patterns relevant to a variety of types of threats that relate to computer systems, including computer networks. Flow processing for switching, security, and other network applications, including a facility that processes a data flow to address patterns relevant to a variety of conditions are directed at internal network security, virtualization, and web connection security. A flow processing facility for inspecting payloads of network traffic packets detects security threats and intrusions across accessible layers of the IP-stack by applying content matching and behavioral anomaly detection techniques based on regular expression matching and self-organizing maps.

Abstract: In one embodiment, a method comprises generating, by a first provider edge router associated with a first segment identifier, a primary label for reaching a destination, and repair information for reaching the destination if a second provider edge router is unavailable to reach the destination; allocating, by the first provider edge router, a first protected next-hop address associated with the first segment identifier for protected reachability to at least the destination; and sending via a core network, by the first provider edge router, an advertisement specifying the label and the repair information, enabling an ingress provider edge router to insert, into a data packet destined for the destination, the labels from the first provider edge router and the second provider edge router based on the repair information, for fast rerouting to the destination via one of the first or second provider edge router if the other is unavailable.

Abstract: A method for determining a derived geographic location of a target Internet host includes identifying plural landmark Internet hosts communicatively coupled with the target Internet host by a network. The method also includes measuring network latencies of probe packets transmitted to the target and landmark Internet hosts along different network pathways and calculating relative distances between the target Internet host and one or more of the landmark Internet hosts based on the network latencies. The method further includes comparing the relative distances to identify at least one of the landmark Internet hosts that is geographically closer to the target Internet host than one or more other landmark Internet hosts and determining the derived geographic location of the target Internet host based on a geographic location of the at least one of the landmark Internet hosts that is geographically closer to the target Internet host.

Abstract: A method and system for a client device to download media content directly from a group of other client devices which play a role of edge servers placed by a content service provider. According to some embodiments, an end user can use his/her client device to stream or download media content from the source client devices selected based on the geographic locality, network topology, etc. The fractions of data corresponding to a portion of media content are stored on the source client devices such that only a subset of the fractions of data are needed to recreate the corresponding portion. That is, by using the first received of the minimum number of fractions to reconstruct each portion of media content, the system does not need to wait for the slowest fractions to arrive, which contributes in reducing latency.

Abstract: A relay method includes transmitting, by a first apparatus in a ring network, a first control frame in which information of the first apparatus is stored, through a first port different from a second port where a communication failure is detected; receiving, by a second apparatus in the ring network, the first control frame through a third port, when the communication failure does not occur at a side of a fourth port different from the third port: storing information of the second apparatus in the first control frame; and transmitting the first control frame through the fourth port; and when the communication failure occurs at the side of the fourth port, determining whether a data frame flowing into the ring network is affected by the communication failure for every VLAN (virtual local area network) based on the first control frame; and switching a communication path set in an affected VLAN.

Abstract: Disclosed herein is a method for deadlock avoidance in a network comprising partitioning in a module, a set of virtual lanes into deadlock avoidance virtual channels; where each deadlock avoidance virtual channel comprises a plurality of virtual lanes; assigning each incoming packet at the module to one of the deadlock avoidance virtual channels, and within the deadlock avoidance virtual channel to a virtual lane whose relative index corresponds to an absolute index of the virtual lane the packet would have been assigned to if the network was not provisioned with deadlock avoidance virtual channels; and transitioning each packet as it traverses the module from one deadlock avoidance virtual channel to another deadlock avoidance virtual channel when a deadlock avoidance policy so demands it.

Abstract: A system, method and non-transitory computer readable medium comprising instructions for at least one of executing at least two applications on a network device; retrieving available network connections to the network device, transmitting a request for an update responsive to at least one of the at least two applications executing via at least one of the available network connections, transmitting a confirmation request requesting the update, wherein the network device utilizes at least two network adapters and the first network adapter is configured for transmitting the request for update data, via a first network connection, and the second network adapter is configured for transmitting the confirmation request, via a second network connection, wherein the second network connection is a faster data connection than the first network connection; and downloading the update data for the at least two applications via the second network connection.

Abstract: A deadline-aware network protocol is described. In an example, data transfer at a transport layer entity of a packet-based communication network is controlled by receiving a request for network resources for a data flow from a network element and allocating network resources to the data flow. The data flow comprises a number of data packets associated with an application, and the request comprises a factor relating to a time deadline associated with the application. The network resources allocated depend on the factor relating to the time deadline. In examples, the network resource can be a bandwidth or data rate allocated to the data flow, and the factor can be a data rate sufficient to complete the data flow within the time deadline. In examples, the network resources are allocated greedily, such that requests are fully satisfied whenever possible, and the network resources are fully utilized.

Abstract: A global identifier is generated based on the initiation of a communication session in a network. The global identifier is sent during the initiation of the communication session. For example, in a Session Initiation Protocol (SIP) INVITE, the global identifier is passed as the communication session progresses across the network. The communication session is logged based on the global identifier in a communication log. A map of the communication session is built from the session log based on the global identifier. The map includes all the elements that were involved with the communication session. In another embodiment, the global identifier is used to for a communication session that is sent across multiple disparate networks. The global identifier is passed in-band during the establishment of the communication session across the disparate networks.

Abstract: Methods, systems, apparatus and computer program products are provided for generating a shared initialization code for physical channel data scrambling in an LTE Advanced coordinated multipoint transmission network. This Abstract is provided for the sole purpose of complying with the Abstract requirement rules that allow a reader to quickly ascertain the disclosed subject matter. Therefore, it is to be understood that it should not be used to interpret or limit the scope or the meaning of the claims.

Abstract: There is provided methods and apparatus for enabling a fast channel change for a Digital Subscriber Line (DSL) system. A channel change processing unit for enabling a channel change in a DSL system includes a demultiplexer (132) and a selector (134) in signal communication with the demultiplexer. The demultiplexer (132) is for receiving a normal stream and a channel change stream. The selector (134) is for receiving a channel change request and for sending the channel change stream in response to receiving the channel change request. The channel change stream coded pictures are of a lower quality than the normal stream coded pictures.

Abstract: A routing module identifies POIs that can be reached from a route with a cost less than distance m. A routing engine performs a reverse exploration on nodes in the planned route to locate POIs from which the route can be reached with a cost of less than a second cost n. POIs identified as being reachable from the route with a cost of less than m, and from which the route is reachable with a cost less than n are then further filtered to identify a subset of the POIs for which the sum of the time or distance from the route to the POI and the time or distance from the POI back to the route is less than a threshold time or distance, t.

Abstract: A multi-core processor of a network attached storage system processes requests from host computers for services of a file system service. Each core maintains endpoints of respective connection-layer connections to the hosts to affine respective streams of network traffic with the core, and dynamically and preferentially assigns execution threads of the core to process file system service requests of the streams affined with the core. Each core also co-operates with the other cores to dynamically and non-preferentially (a) assign execution threads of the core to process file system service requests of the streams affined with the other cores, and (b) assign execution threads of the other cores to process file system service requests of the streams affined with the core, promoting efficient use of the cores for the processing workload of the file system service.

Abstract: A method of optimizing the delivery of content over a content delivery network to client devices in accordance with optimization rules is provided. Requests for allocation and release of content delivery resources over a content delivery network are monitored, and the processing capabilities of client devices receiving content over the content delivery network are determined. Network resources are re-allocated based on optimization rules and the processing capabilities, and the client devices are directed to use re-allocated resources for reception of content. Apparatus and client devices for performing the method are also disclosed.

Abstract: A network security system including a first-level security profile engine and a second-level security profile engine is disclosed. The first-level security profile engine may assign a first-level security profile for a first user device, the first user device requesting access to a network; the second-level security profile engine assigns a first second-level security profile to the first user device, the first second-level security profile providing first network configuration information for the first user device; a device selection engine receives a selection of a second user device associated with the first-level security profile; and the second-level security profile engine assigns a second second-level security profile to the second user device, the second second-level security profile providing second network configuration information for the second user device.