Abstract: Secure communication between users and resources of an electrical infrastructure and associated systems and methods. A representative secure distributed energy resource (DER) communication system provides for the creation of trust rules that govern the permitted communications between users and resources of an electrical infrastructure system, and the enforcement of the trust rules.

Abstract: A physical layer (PHY) is coupled to a serial, differential link that is to include a number of lanes. The PHY includes a transmitter and a receiver to be coupled to each lane of the number of lanes. The transmitter coupled to each lane is configured to embed a clock with data to be transmitted over the lane, and the PHY periodically issues a blocking link state (BLS) request to cause an agent to enter a BLS to hold off link layer flit transmission for a duration. The PHY utilizes the serial, differential link during the duration for a PHY associated task selected from a group including an in-band reset, an entry into low power state, and an entry into partial width state.

Abstract: Provided is a multiplex transmission system capable of preventing occurrence of a mistake on connection of a client device to a multiplex transmission device.

Abstract: A method is presented for supporting SNCP over a packet network connecting to two SDH sub-networks and transporting one or more SDH paths that are SNCP-protected in both SDH sub-networks. The packet network connects to each of two sub-network interconnection points by a working path and a protection path. The packet sub-network may provide the same type of path protection as an SDH sub-network using SNCP, while avoiding bandwidth duplication.

Abstract: An optical switching apparatus is provided. The apparatus includes one or more input ports, a dispersion assembly, a first lens assembly, a redirection assembly, and one or more output ports. The input ports are configured to input a first beam into a dispersion assembly at a first angle of incidence in a first direction, and to input a second beam into the dispersion assembly at a second angle of incidence in the first direction. A difference between absolute values of the first angle of incidence and the second angle of incidence is not zero, and enables a first region in which spots of the first beam are arranged and a second region in which spots of the second beam are arranged to be separated from each other in the first direction, and enables the first region and the second region to at least partially overlap in a second direction.

Abstract: A management device includes: a reception unit that receives a change request for changing an allocated resource of a user who uses a communication line, from a manager of the communication line, a server managing information related to a use terminal of the communication line, or the user; and a change unit that changes the allocated resource of the user by using a predetermined change method when the reception unit receives the change request.

Abstract: This application provides a data transmission method and apparatus. The method includes: obtaining, by a terminal, information used to indicate a first condition; obtaining to-be-transmitted data; and when the first condition is met, sending, by the terminal over a sidelink, the to-be-transmitted data that is on a first logical channel by using a first carrier frequency and the to-be-transmitted data that is on a second logical channel by using a second carrier frequency. In this method, the same data is sent, over the sidelink, on different carrier frequencies by using two logical channels, and a receiving device can receive the same duplicate data, thereby improving data transmission reliability.

Abstract: The present disclosure is directed to the Viral Orbital Vehicle, called the V-ROVER which is one of the access devices of the Viral Molecular Network that is a high speed, high capacity terabits per second (TBps) LONG-RANGE Millimeter Wave (mmW) wireless network that has an adoptive mobile backbone and access levels. The V-ROVER is one of the devices of the Viral Molecular Network's three-tier infrastructure molecular system connectivity architecture that transports voice, data, video, studio quality and 4K/5K/8K ultra high definition Television (TV) and multimedia information. The V-ROVER is one of the access node communications devices that makes up the Access Network Layer (ANL) of the Attobahn Viral Molecular Network.

Abstract: Disclosed herein are systems, methods, and computer-readable media for enterprise information technology (IT) monitoring. In an embodiment, a method includes collecting system performance data for an enterprise computing environment. The method includes generating at least one cross-stack monitor schema. The cross-stack monitor schema includes at least one of shared services performance data, middleware performance data and infrastructure performance data corresponding to a particular application. The cross-stack monitor schema includes a technology stack component descriptor and a performance parameter. The technology stack component descriptor is identified based on applying reference data to the system performance data. The performance parameter is generated and populated based on the system performance data. The cross-stack monitor schema is linked to an electronic dashboard.

Abstract: Techniques are described for specifying a backend virtual network for a service load balancer. An example orchestrator of this disclosure is configured to receive a service definition for a service implemented by load balancing service traffic for the service among a plurality of backend virtual execution elements, wherein the service definition specifies a first virtual network to use as a backend virtual network for the service, to instantiate, in a selected one of the computing devices, a backend virtual execution element for the service, and to configure, based on the service definition specifying the first virtual network to use as the backend virtual network for the service, a network controller for the virtualized computing infrastructure to configure a load balancer to load balance service traffic to a first virtual network interface, of the backend virtual element, for the first virtual network.

Abstract: A system described herein may provide a technique for providing updated address mapping information associated with a service mesh via which one or more containerized instances communicate. The system may include and/or implement an application programming interface (“API”) via which the service mesh may provide address mapping information, that includes public and private addresses associated with containerized instances that communicate via the service mesh. The updated information may be received on an ongoing basis, and may be provided to another system that has subscribed to receiving updated mapping information associated with one or more containerized instances.

Abstract: The present specification discloses a data processing method, apparatus, medium and device. The method includes: receiving a QUIC data packet that is sent by a first device and that includes a CID; parsing the CID and determining a routing address based on a parsing result; and routing the received QUIC data packet to a second device based on the routing address, so the second device processes the QUIC data packet. When a data packet sent by a transmitting end device is received, a routing address of data transmission is determined by processing the received data packet, to quickly establish a data transmission channel between the transmitting end device and a receiving end device. As such, stored context information is not required, and connection errors caused by exceptions such as restarting and scaling in/out on a load balancer will not occur, thereby effectively improving processing efficiency of data transmission by using the QUIC protocol.

Abstract: Methods and systems for service integrated domain name servers are described. A method for out of path border gateway protocol (BGP) validation includes receiving, at a network component, a prefix announcement. The network component denies acceptance of the prefix announcement. A BGP monitor at the network component sends the prefix announcement to an out of path validation controller. The out of path validation controller evaluates the prefix announcement against one or more validation tests, sends a validation notification based on the one or more validation tests, and programs the network component for a validated prefix announcement.

Abstract: A network traffic manager receives, from an ingress port in a group of ingress ports, a cell of a packet destined for an egress port. Upon determining that a number of cells of the packet stored in a buffer queue meets a threshold value, the manager checks whether the group of ingress ports has been assigned a token for the queue. Upon determining that the group of ingress ports has been assigned the token, the manager determines that other cells of the packet are stored in the buffer, and accordingly stores the received cell in the buffer, and stores linking information for the received cell in a receive context for the packet. When all cells of the packet have been received, the manager copies linking information for the packet cells to the buffer queue or a copy generator queue, and releases the token from the group of ingress ports.

Abstract: Some embodiments provide a method for establishing multiple virtual service networks over multiple datacenters. The method configures, for each virtual service network of the plurality of virtual service networks, a set of machines distributed across the datacenters to implement an ordered set of network services for the virtual service network. The method configures multiple service network selectors executing within the datacenters to receive a data message, select one of the virtual service networks for the data message based on analysis of contents of the data message, determine a location within the datacenters for a machine implementing a first network service of the ordered set of network services for the selected virtual service network, and transmit the data message to the machine implementing the first network service.

Abstract: The invention relates to a method for operating a network, wherein at least two network devices are connected to one another in the network via a data line and exchange data via this data line, wherein each network device is fixedly assigned an independent MAC address, wherein a network management station also controls the configuration and/or the operation of the network, characterised in that a query is sent from the network management station by multicast by means of the SNMP protocol to the network devices so as to query the configuration parameters of the network devices and/or configure the queried network device by SNMP.

Abstract: System and methods are provided for encoding map data. An algorithm pool is synced between a mapping server and a navigation device. The algorithm pool comprises a plurality of different algorithms. Map data is divided into a plurality of chunks of data. Each chunk of data of the plurality of chunks is encoded with a random algorithm from the algorithm pool. The encoded chunks are transmitted to the navigation device.

Abstract: A packet is analyzed at an outbound end of a tunnel from a first data network to determine whether the packet is directed to a first remote target in a first remote data network over a first tunnel or to a second remote target in a second remote data network over a second tunnel. A target address of the packet is present in both the first remote data network and the second remote data network. When the packet is to be directed to the first remote target in the first remote data network, an octet in the target address of the packet is changed from a first value to a second value, the changing forming a modified packet. When the second value is stored in the octet, the modified packet is caused to be sent to the tunnel for delivery to the second data network.

Abstract: A bandwidth allocation device includes a buffer device, a main scheduler, an oversubscription scheduler, a multiplexer and a detecting device. The buffer device is arranged to receive first data units from first ports and second data units from second ports and accordingly output these data units. The main scheduler is configured to schedule the first data units and accordingly output the first data units in sequence. The oversubscription scheduler is configured to schedule the second data units and accordingly output the second data units in sequence. The multiplexer is controlled by the main scheduler to select the first data units outputted by the main scheduler and the second data units outputted by the oversubscription scheduler for outputting. The detecting device is arranged to generate power-related information which the main scheduler relies on to control the multiplexer.

Abstract: Disclosed is a Viral Orbital Vehicle access device configured to provide connectivity to a Viral Molecular Network. The Viral Orbital Vehicle access device may include at least one Viral Orbital Vehicle Port configured to receive at least one digital data stream from at least one user device and an Instinctive Wise Integrated Circuit (IWIC) communicatively coupled to the at least one Viral Orbital Vehicle Port. Further, the IWIC may be configured to place the at least one digital data stream into a plurality of cell frames, place the plurality of cell frames in a plurality of Orbital Time-Slots (OTS), form a plurality of Atto-Second Multiplexing (ASM) frames based on the plurality of OTS and place the plurality of ASM frames in a plurality of Time Division Multiple Access orbital time slots. The Viral Orbital Vehicle access device may include a Radio Frequency (RF) section communicatively coupled to the IWIC.

Abstract: Systems, devices, and methods for a wireless communication reservation bandwidth allocation manager system that includes a device for requesting an out-of-band Quality of Service request following a a set of Application Programming Interfaces for an RSVP. A provider determines if the requested out-of-band Quality of Service is available, a negotiation with a third party service provider for the requested out-of-band Quality of Service, a reservation for the requestor device from the provider when the out-of-band Quality of Service becomes available, and a termination of the reservation when the requesting device notifies the provider that the requested out-of-band Quality of Service is complete.

Abstract: An industrial control systems to control industrial processes and production, there is provided a monitoring assembly for such an industrial control system. The monitoring assembly comprises an industrial control system that includes a communications device which is connectable to a communications network and which is configured to attempt to send a request via the communications network to an internet address. The monitoring assembly also includes a monitoring apparatus that is configured to detect communication of the communications device with the internet address and following such detection provide an alarm notification including an indication that the industrial control system is connected to the Internet.

Abstract: A memory device is configured as single chip to achieve routing control, bandwidth control, traffic monitoring, buffering, and access control of network functions. The memory device includes a search unit that includes a first memory unit and performs a search operation by searching, from the first memory unit, a piece of data corresponding to an input search key, a statistical information processing unit that includes a second memory unit that stores statistical information including the input search key, with which the piece of data has been successfully searched by the search unit, and an address of the piece of data in the first memory unit, and an arithmetic operation unit that updates the statistical information when the search unit successfully searches the pieces of data corresponding to the input search key.

Abstract: The present application describes a system and method for rate limiting traffic of network users, such as virtual machines (VMs). In accordance with the disclosure, transmission queues for the VMs may be assigned to two levels of rate limiting. The first-level rate limit may be an individual rate limit for a particular transmission queue, while the second-level rate limit may be a group rate limit that is applied to a group of transmission queues. The first-level rate limit for some transmission queues may be performed using software rate limiting, while for other transmission queues the first-level rate limit may be performed using hardware rate limiting. The second-level rate limit may be applied to a group of transmission queues that contains both software first-level rate limited transmission queues and hardware first-level rate limited transmission queues.

Abstract: The disclosed computer-implemented method may include (1) identifying, in kernel space on a network device, a packet that is destined for a remote device, (2) passing, along with the packet, metadata for the packet to a packet buffer in kernel space on the network device, (3) framing, by the kernel module in kernel space, the packet such that the packet egresses via a tunnel interface driver on the network device, (4) encapsulating, by the tunnel interface driver, the packet with the metadata, and then (5) forwarding, by the tunnel interface driver, the packet to the remote device based at least in part on the metadata with which the packet was encapsulated. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A network where FC and Ethernet storage traffic share the underlying network. The network extends FC SAN storage specific attributes to Ethernet storage devices. The network is preferably formed of FC switches, so each edge switch acts as an FCoE FCF, with internal communications done using FC. IP packets are encapsulated in FC packets for transport. Preferably, either each outward facing switch port can be configured as an Ethernet or FC port, so devices can be connected as desired. FCoE devices connected to the network are in particular virtual LANs (VLANs). The name server database is extended to include VLAN information for the device and the zoning database has automatic FCOE_VLAN zones added to provide a mechanism for enhanced soft and hard zoning. Zoning is performed with the conventional zoning restrictions enhanced by including the factor that any FCoE devices must be in the same VLAN.

Abstract: A packet rewriting apparatus is arranged between a tunnel end point and a switch that refers to content of the original header to determine processing to be applied to a packet. The packet rewriting apparatus is provided with: a packet rewriting rule storage unit that stores packet rewriting rule(s) for writing information corresponding to a virtual network identifier included in an additional header of a packet outputted from a tunnel end point, to a prescribed region of the original header; and a packet rewriting unit that rewrites, in accordance with the packet rewriting rule, to a packet in which information corresponding to the virtual network identifier is written to the original header of a transmitted packet.

Abstract: Methods and apparatus for providing rating and usage models for IP traffic to and from clients' resource instances in a provider network environment. A service provider may implement rating and usage models that may be used to associate provider network addresses with address ranges of external networks. The models may be provided to or selected by clients and applied to traffic between the clients' provider network addresses and the addresses of user devices that are in the address ranges of external networks associated with the models. Rating models may be applied to provider network clients' usage on the provider network resulting from the clients' customers' accesses of the clients' applications on resource instances in the provider network. Usage models may be applied to the clients' customers' usage on intermediate networks when accessing the clients' applications on resource instances in the provider network.

Abstract: Methods and apparatus that allow clients to establish sub private networks as resources within private networks on a provider network. A sub private network may be owned and controlled by a different entity than the owner of its parent private network. A parent private network controls access to its sub private networks, and each sub private network also controls access to its resources. This enables a layered topology in which a parent private network may establish access control rules for its sub private networks; the sub private networks may supplement the access control according to their specific needs. Sub private networks may share resources of their parent private network, and a sub private network may allow or restrict access to its resources by its parent private network, by its sibling private networks, and/or by its own sub private network(s).

Abstract: A method for defending a DHCP attack is provided. The method includes monitoring packets transmitted by a client terminal coupled to a target port, and determining, in IP addresses allocated for the client terminal coupled to the target port, the number of the IP addresses generating no packet traffic in a preset first time. And the method further includes if the number of the IP addresses generating no packet traffic reaches a preset first threshold, determining that the client terminal coupled to the target port has risk of attacking, and restricting DHCP service of the target port. A device for defending a DHCP attack is also provided.

Abstract: A scheme for managing conflict resolution in an ABR streaming environment with respect to a bandwidth pipe serving a customer premises. In one aspect, when a session request is received from a new ABR client launched in the customer premises that includes one or more existing ABR clients having corresponding streaming sessions, a bandwidth forecasting module is configured to forecast bandwidth requirements with respect to the corresponding ABR streaming sessions after accounting for a bandwidth requirement for the new ABR client's session request. A conflict may be detected if any of forecasted bandwidth requirements violates a bitrate threshold policy relative to the corresponding ABR streaming sessions and/or the new session being requested. If there is a conflict, a conflict notification message to the new ABR client is provided and the session request from the new ABR client is rejected.

Abstract: A mechanism of booting up a system directly from a storage device and a means of initializing an embedded system prior to activating a CPU is presented. The said system is comprised of one or more CPUs, a reset controller, a storage device controller, one or more direct memory access controllers, a RAM and its controller, a ROM and its controller, a debug interface and a power-on reset (POR) sequencer. The POR sequencer controls the overall boot process of the embedded system. Said sequencer uses descriptors (POR Sequencer descriptors) which are used to update the configuration registers of the system and to enable CPU-independent data transfers with the use of DMA controllers. Using a minimal amount of non-volatile memory for booting up a system brings down costs associated with increased silicon real estate area and power consumption. Capability of pre-initializing the system even before a CPU is brought out of reset provides flexibility and system robustness.

Abstract: A network device including a port having register and timing modules. The register module includes first ToD, loadpoint, and compensation registers. The timing module includes a second ToD register and ToD module and operates based on a local clock signal. The register module receives a ToD from a control module, which is separate from the network device and selects an initial hardware time. The ToD is a future time and is based on a grandmaster clock signal. The first ToD and loadpoint registers store the ToD and initial hardware time. The compensation register stores a compensation value from the control module and determined based on a difference between local and grandmaster clock signals. The ToD module, when local and initial hardware times match: transfers the ToD between first and second ToD registers; and updates the ToD in the second ToD register based on the local clock signal and compensation value.

Abstract: The present disclosure relates to a wireless communication device, a high speed, high capacity dedicated mobile network system, and a method for transmitting information streams across a molecular network to end users without using IEEE 802 LAN, ATM or TCP/IP connection-oriented standards and protocols.

Abstract: A switch according to the present invention can have a number of ports in an ASIC greater than the ASIC clock speed divided by the network protocol rate. The switch ASIC contains multiple blocks, each block having a number of ports equal to the ASIC clock speed divided the packet rate of the protocol. Each block has a number of queues equal to the total number of ports on the ASIC to receive packets. The queues are scheduled from each block into a number of outputs equal to the number of blocks. The outputs of each block are received by a scheduler which evaluates the packets available at the outputs of each block to determine the combination of outputs which provides the most connections that are ready for transmission. The combination with the most connections is then utilized to provide packets to the egress section of each block.

Abstract: In an embodiment of the invention, an apparatus comprises an embedded system comprising: a processor configured to execute firmware; a random access memory (RAM) configured to store firmware and a multi-port memory controller configured to interface with the RAM; a power-on reset (POR) sequencer configured to control a boot process of the embedded system; a nonvolatile memory configured to store data used by the POR sequencer in the boot process and a nonvolatile memory controller configured to interface with the nonvolatile memory; a direct memory access (DMA) controller configured initiate and track data transfers; and a configuration and status register (CSR) controller configured to access modules in the embedded system.

Abstract: In general, techniques are described in which a plurality of network switches automatically configure themselves to operate as a single virtual network switch. A virtual switch is a collection of individual switch devices that operate like as single network switch. As described herein, network switches in a network that are capable of participating in a virtual switch may automatically discover one another. The participating network switches may then elect one of the participating switches as a master switch. The master switch may generate forwarding information and store the forwarding information in the participating switches, including the master switch. The forwarding information causes the participating switches to act like a single network switch.

Abstract: Methods and systems are provided for virtual expansion of a fabric network edge to include edge network devices. For example, unique virtual Internet Protocol (IP) addresses may be assigned to a plurality of L2 switches, wherein the L2 switches are connected to one or more fabric edge devices in a fabric, and wherein the L2 switches are located outside of the fabric. Next, the unique virtual IP addresses may be announced in an underlay of the fabric.

Abstract: A network device, such as a network switch, can include an ingress to receive data packets from a network. The ingress can communicate with an egress included in the network device though a fabric included in the network device. At least one of ingress and the egress can enqueue a data packet prior to receipt of all cells of the data packet. The ingress can also commence with dequeue of the cells of the received data packet prior to receipt of the entire data packet from the network. At least one of ingress and the egress can process the data packets using cut-through processing and store-and-forward processing. In a case of cut-through processing of a data packet at both the ingress and the egress of a network device, such as CIOQ switch, the fabric can be allocated to provide a prioritized virtual channel through the fabric for the data packet.

Abstract: A physical computing device is provided that includes a set of processing units and a set of machine readable media (CRM) for execution by the set of processing units. The CRM stores a plurality of data compute nodes (DCNs) deployed by a compute manager of a datacenter, virtualization software, and a network manager agent. The network manager receives a read-only configuration construct for each of a set of logical networks from a network manager of the datacenter, the logical networks configured and managed by the network manager. the agent provisions the set of logical networks on the physical computing device for use by the virtualization software. The agent provides a copy of the read-only construct of each logical network to the compute manager to allow the compute manager to connect one or more DCNs to each of the logical networks.

Abstract: Methods and systems for bridging network packets transmitted over heterogeneous media channels are provided. According to one embodiment, a network device maintains translation data structures defining translations among multiple framing media formats used for transmitting or receiving network packets via multiple supported media transmission channels, including (i) between a first framing media format and an intermediate format and (ii) between the intermediate format and a second framing media format. A virtual bridging application representing a single bridging domain for bridging all network traffic traversing the network device translates ingress network packets from the first framing media format to egress network packets of the second framing media format based the translation data structures.

Abstract: According to an example, a web server receives an access request from one operator network of different operator networks, process the access request, and obtain processing data. The web server determines an output VIP address corresponding to an input VIP address carried in the access request according to a relationship between input VIP addresses and output VIP addresses of VS clusters of the different operator networks, and sends the processing data to a VS cluster indicated by the output VIP address via an internal network. The VS cluster selects one VS, and the VS selected sends the processing data to a user terminal via an external network.

Abstract: Embodiments are described for systems and methods that facilitates dynamic configuration of NPIV virtual ports in a Fiber Channel network. A defined failure detection method in conjunction with certain SCSI target endpoint and NPIV definitions and monitor component operations allows SCSI target virtual endpoints to be dynamically created, deleted and managed during data migration and endpoint disable/enable operations in a backup storage appliance without incurring disruption of other virtual endpoints on the same appliance.

Abstract: Various embodiments provide a method and apparatus for providing migration of cloud components across address domains without the overhead of sending traffic from prior sessions through an anchor. In particular, the networking control plane is decoupled from the packet forwarding data plane using a mobility enablement layer (MEL) that allows creating rules for forwarding elements (FEs) to forward traffic directed to an address within the proper address domain.

Abstract: Communication network architectures, systems and methods for supporting a network of mobile nodes. As a non-limiting example, various aspects of this disclosure provide communication network architectures, systems, and methods for integrating and/or integrating with a communication network comprising a complex array of both static and moving communication nodes (e.g., the Internet of moving things).

Abstract: A system and method for a planned migration of service connections from a first database instance to a second database instance in a clustered database. In accordance with an embodiment, a data source and connection pool enable access by a software application to a service on the first database instance. The data source is associated with a parameter specifying a delay-for-planned-draining, and a parameter specifying a planned-draining-period, which are used to rebalance connections when relocating a service. When a service is stopped on the first database instance, the connection pool receives a “service down” event from a notification service, and maintains the connections up to a time corresponding to the delay-for-planned-draining. When a “service up” event is received, the connection pool spreads migration of the connections from the first to second database instance over the planned-draining-period.

Abstract: An Application Scope Platform and a method for enabling communication between a Web Application, which is adapted to run on a first Processor of a User Device, and which is being accessible via a Web Client of the User Device, and an Application Scope, which is executable on the Application Scope Platform. The Application Scope Platform comprises a Process Manager, adapted to create and manage an event triggered Application Scope, a Web Server and a Communication Interface adapted to enable the Web Application to communicate with the Application Scope Platform via said Web Client. The Application Scope Platform being adapted to run on a second Processor, and to communicate with the Web Application, which is an Application Scope enabled Web Application, irrespective of the state of the Processor, the Web Client and/or said Web Application.

Abstract: A method of migrating a data compute node (DCN) in a datacenter comprising a plurality of host physical computing devices, a compute manager, and a network manager is provided. The method by the network manager configures a plurality of logical networks and provides a read-only configuration construct of at least one of the plurality of logical networks to the virtualization software of each host. The construct of each logical network includes a unique identification of the logical network. The method by the compute manager obtains the unique identification of one or more of the logical networks, determining that a particular logical network is available on first and second hosts based on the unique identification of the particular logical network, and configures a first DCN to move from the first host to the second host based on the determination that the first and second hosts are on the particular logical network.

Abstract: A method, system and computer program product are provided for implementing dynamic adjustment of resources allocated to Single Root Input/Output Virtualization (SRIOV) Remote Direct Memory Access (RMDA) virtual functions (VFs) in Cloud Software Defined Server environments. A hardware management console (HMC), and a hypervisor are used to implement resource allocation to the SRIOV RDMA VFs based on resource usage. The hypervisor checks resource usage for the resource allocations of the SRIOV RDMA VF relative to lower and upper threshold values. Responsive to identifying the resource usage below the lower threshold or above the upper threshold, the hypervisor sends an event to the HMC, and the HMC starts a resource redistribution process.

Abstract: Technologies are generally described for systems, devices and methods effective to allow a network element to retrieve a control command. In some examples, a network controller device may associate an identifier with the control command. The network controller device may send the identifier and the associated control command over a first network with a first level of security to a computing device. The network controller device may send an activation signal to the network element over a second network with a second level of security different from the first level of security. The network controller device may send the identifier to the network element over the second network. The identifier may be effective to allow the network element to retrieve the control command.