Abstract: Embodiments described herein are directed to securing network-based compute resources. The foregoing may be achieved by determining a tag representative of non-malicious network addresses. The tag is determined by analyzing network data traffic received by a plurality of compute resources. Machine-learning based techniques may be used to automatically classify each network address that communicates with a particular compute resource as being malicious or non-malicious. Determined non-malicious network addresses for a particular compute resource are automatically associated with a tag. The tag is used to configure a firewall application to prevent access to a corresponding compute resource by malicious network addresses not represented by the tag. The number of non-malicious network addresses associated with a tag may be expanded by clustering compute resources having a similar set of network addresses that communicate therewith.

Abstract: In accordance with some embodiments, a first apparatus that provides protocol isolation includes a controller, one or more re-configurable data communication devices operable to provide alternative transport of data for a native data communication device on a second apparatus to an external device, and one or more data converters coupled to the one or more re-configurable data communication devices. The protocol isolation method performed by the first apparatus includes establishing a local communication channel with the second apparatus. The method further includes exchanging the data via the local communication channel with the second apparatus according to a first protocol. The method also includes converting the data to a second protocol different from the first protocol.

Abstract: An apparatus is provided which comprises: a first network interface (NI) to receive data from a source; a second NI coupled to a target; and a circuitry to generate a sequence of source timestamps and a sequence of target timestamps, wherein the first NI is to receive the sequence of source timestamps, and associate a first source timestamp of the sequence of source timestamps with the data, and wherein the second NI is to receive: the data with the first source timestamp from the first NI and the sequence of target timestamps from the circuitry, the second NI to generate a timestamp for the data, based at least in part on the first source timestamp and a first target timestamp of the sequence of target timestamps.

Abstract: An operation method of a first end node in a vehicle network supporting a PLCA function is provided. The method includes performing a monitoring operation in a first time interval configured for communication of the first end node and detecting a transmission request signal transmitted from a second end node by the monitoring operation. In response to detecting the transmission request signal, a transmission operation of the first end node in the first time interval is stopped. The first time interval is used for communication of a second end node instead of the first end node.

Abstract: System, method, and various embodiments for providing a network aggregation system are described herein. An embodiment operates by detecting a transmission failure resulting from transmitting a message from a first network operator to a second network operator. A first format of the message is identified. The message content is re-formatted from the first format to a second format. The reformatted message content is re-transmit in the second format to the second network operator.

Abstract: A central cloud server that periodically obtains sensing information and beam alignment information from a plurality of edge devices. The sensing information and the beam alignment information is correlated for different times-of-day such that a connectivity enhanced database is generated that specifies a plurality of time-of-day specific uplink and downlink beam alignment-wireless connectivity relationships for a surrounding area of each of the plurality of edge devices independent of a plurality of different wireless carrier networks. A different subset of information is distributed from connectivity enhanced database to each of the plurality of edge devices according to a corresponding position of each edge device. The different subset of information causes an edge device to service one or more UEs in a motion or stationary state in its surrounding area independent of different wireless carrier networks bypassing an initial access-search on the corresponding edge device.

Abstract: A system and method for operating a communication network having one or more cable modems. Operating the communication network may include displaying one or more messages to a subscriber and making temporary changes to Cable Modem Termination Systems in order to modify the availability of network resources for one or more cable modems assigned to a subscriber without requiring a rebooting of the one or more cable modems.

Abstract: Disclosed herein is a method of connection of home appliance to a network, a network-connection system for home appliances, and an apparatus related to a network-connection setting for home appliances. The network connection method of home appliance includes operations in which a terminal device receives an input of an authentication key of an access point (AP) apparatus and the terminal device or the AP apparatus verifies and authenticates the authentication key; a home appliance is set to be in a state of communicating with the terminal device; the home appliance is interconnected to the terminal device and the terminal device transmits an identification number and the certificated authentication key of the AP apparatus to the home appliance; and the home appliance is connected to the AP apparatus based on the identification number and the authentication key of the AP apparatus.

Abstract: End-to-end latency in a data network containing a succession of network devices through which a data packet passes via data connections is determined by first providing the data packet with a trigger packet. Then each device generates and adds to the trigger packet a respective reception timestamp indicating when the packet is received by the respective device. This added data indicates time needed for travel from the immediately upstream network device such that, when reaching the furthest downstream device of the succession of network devices, the trigger packet holds a plurality of timestamp representing when the trigger packet was received by the network devices. Finally the end-to-end latency is calculated at the furthest downstream network device from all of the time stamps in the trigger packet.

Abstract: Method and apparatus for facilitating accessing home surveillance device data, preferably an IP camera video stream, by a remote user device at the remote user device's instigation, over the Internet through a home router, the facilitating including incorporating a smart gateway in local communication with the home router and in persistent or intermittent communication with a remote Internet server to facilitate communication of data over the Internet at the remote user device's request through direct communication between the remote user device and the smart gateway, the smart gateway in local communication with the home surveillance device such as an IP camera, the direct communication facilitated by a “hole punch” type of technique.

Abstract: In a communication device and a communication method, multiple pieces of QoS control information are stored in a routing information base, each piece of QoS control information, with a terminal wired to the communication device itself as a transmission source, defining a bandwidth control value and a priority degree that correspond to communication data specified by a combination of the transmission source and a destination. When communication data is inputted, a control unit selects QoS control information that matches a combination of the transmission source and the destination of the inputted communication data from among the stored multiple pieces of QoS control information and indicates a bandwidth to a bandwidth control unit on the basis of the selected QoS control information, indicates a priority degree to a DSCP marking unit, and performs wireless transmission.

Abstract: Embodiments of the present application provide a wireless communication method, a terminal device and a network device capable of implementing contention-based access while avoiding conflicts. The method includes: transmitting, by a terminal device, a sounding signal to a network device when there is uplink data to be transmitted, where the sounding signal is used for contending for a first pre-allocated resource; and transmitting, by the terminal device, the uplink data to be transmitted on the first pre-allocated resource, when receiving a first feedback signal sent by the network device in response to the sounding signal, where the first feedback signal is used for indicate that the terminal device has a successful contention for the first pre-allocated resource.

Abstract: In one embodiment, a method includes receiving a request to create a data pipeline by an operating system executing on a computing device. The operating system allocates a shared virtual memory region for the data pipeline. The shared virtual memory region is mapped to a first virtual address space of a first process and a second virtual address space of a second process. The mapping enables the first process and the second process to share data through the shared virtual memory region. Membership information associated with the data pipeline is updated to include the first process and the second process. An access request for accessing the shared virtual memory region is received from the first process, and the access request is granted or denied based on one or more protection policies.

Abstract: A graph processing system for concurrent property graph queries of a property graph implemented in a distributed network computes on respective nodes a subgraph shard represented as edge-sets containing vertices within a certain range. Each node stores data for a subgraph shard that contains a range of local vertices that are a subset of all vertices of the property graph. Each subgraph shard also has boundary vertices having edges that connect the subgraph shard to boundary vertices of another subgraph shard. Upon receipt of concurrent queries of the property graph, a query of the subgraph shards is scheduled in accordance with an initial vertex for each concurrent user query. The property graph is traversed by traversing edge-sets within a subgraph shard on each node and during traversal messaging is used to send values of boundary vertices to at least one other node having another subgraph shard sharing the boundary vertices.

Abstract: A method (10) for deployment of a node (2) in a wireless network (1) is provided. The method (10) is performed in the N node (2) and comprises: receiving (11) configuration data from two or more sets of nodes (31, . . . , 3N; 4) of the wireless network (1), N determining (12) a first number of nodes (31, . . . , 3N) of the first set of nodes (31, . . . , 3N) providing first configuration data and a second number of nodes (4) of the second set of nodes (4) providing second configuration data, and determining (13), based on the first and second number of nodes (31, . . . , 3N; 4), one of the first and second configuration data for use in configuration of the node (2). A node (2), a computer program and a computer program product are also provided.

Abstract: A method is provided in a user equipment for retransmitting a packet data unit, PDU, that has previously been transmitted in an uplink to a receiver, the previously transmitted PDU comprising one or more service data units, SDUs. The method comprises receiving an uplink grant for retransmission, wherein the uplink grant for retransmission comprises a time transmission interval, TTI, duration associated therewith. The method comprises determining whether a SDU of the one or more SDUs of the previously transmitted PDU comprises a TTI duration which is not suited to the TTI duration associated with the uplink grant for retransmission, and, if so repackaging the PDU for retransmission.

Abstract: A transmission device includes a pair of terminals connected to an electrical coupler via a pair of signal lines, a transmission unit connected to the pair of terminals via a pair of capacitor, and a DC power supply, a switch, and inductances, each connected in series between the pair of terminals without interposition of the pair of capacitors. A transmission device includes a pair of terminals connected to an electrical coupler via a pair of signal lines, a reception unit connected to the pair of terminals via a pair of capacitors, and a load resistor and inductances each connected in series between the pair of terminals without interposition of the pair of capacitors.

Abstract: A system and method for determining a position of a first responder in a building, where the first responder is using a radio, and using a distributed antenna system. Each antenna has a level detector to detect and measure a strength of an input signal from the radio of the first responder to produce a level signal, a time tagger to tag the detected input signal with a timing signal, and a communication module to transmit the level signal and timing signal. A sensor processor connected with a signal distribution network is configured to receive the signal level and timing signal from the signal distribution network of each of the plurality of antennas, to determine the position of the radio relative to each of the plurality of antennas according to the level signal and timing signal.

Abstract: Apparatus and methods of managing a virtual area based on communicant capabilities are described. The communicant capabilities are updated based on rules in response to events in the virtual area. An action by one communicant can affect the capabilities of another communicant. Communicant capabilities can be stored in respective server-side proxies and the virtual area can be managed without transmitting any of the capabilities to the communicants' client network nodes. Capability-based permissions checks can be performed against communicant capabilities with wildcarded attribute fields.

Abstract: Methods and systems may use a software-defined network (SDN) based approach for interworking different types of nodes. In an example, an SDN controller may include components that assist in building pseudowires across Ethernet virtual private network (EVPN) nodes and Border gateway protocol-virtual private local area network (LAN) service (BGP-VPLS) nodes.

Abstract: Various systems, processes, and products may be used to filter multicast messages in virtual environments. In one implementation, hardware resources are virtualized to provide a plurality of virtual machines where a number of the virtual machines are configured to receive multicast messages. A network adapter is configured to receive a multicast filtering address from at least one of the number of virtual machines and hash the multicast filtering address to create a hash value. The hash value is linked to the virtual machine via a memory entry.

Abstract: A distributed network controller that is configured in a containerized architecture is described. The network controller includes a plurality of microservices packaged and deployed using respective containers for the microservices, according to a plurality of charts, each chart comprising one or more templates that define a manner in which the microservices, for performing respective operations of the network controller, are deployed on a plurality of servers within the data center. Execution of the microservices of the distributed network controller establishes a virtual network for packetized communications among virtual execution elements executing on the plurality of servers in the data center. Each container that includes one of the plurality of microservices is executed by a server of the plurality of servers as an isolated user-space instance on the server.

Abstract: A method and an apparatus for communication between user equipment (UEs) is disclosed. The method comprises: receiving a data packet from a first UE, the data packet including data and an IP address of a second UE; obtaining a context record for the second UE, the context record including the IP address of the second UE and an identifier of a second user plane; sending the data packet to the second user plane according to the identifier of the second user plane in order to enable the second user plane to send the data packet to the second UE.

Abstract: An internet phone system includes an internet phone main body, an expansion device and a multiple-layer connecting card. The internet phone main body includes a first connecting port. The at least one expansion device includes a second connecting port. One end of the multiple-layer connecting card is connected to the first connecting port, and the other end is connected to the second connecting port such that the internet phone main body can be electrically connected to the expansion device via the multiple-layer connecting card. The expansion device is capable of combining with another expansion device by another multiple-layer connecting card.

Abstract: A method and an apparatus for processing data, and a computer readable storage medium. The method includes: turning on at least one of a floodlight or a laser light, and operating a laser camera to collect a target image in response to a first processing unit receiving an image collection instruction sent by a second processing unit; and performing processing on the target image via the first processing unit, and sending the target image processed to the second processing unit.

Abstract: Disclosed herein is content delivery system that delivers content to one or more remote devices. In some cases, the content that is provided by the content delivery system is protected content. As such, prior to accessing the content, the one or more remote devices may need to register or otherwise be associated with the content delivery system. The content delivery system utilizes a first communication path to allow the one or more remote devices to register with the content delivery system and/or verify that it is authorized to access the content. The content delivery system also utilizes a second communication path to deliver the content to the authorized remote devices.

Abstract: An optical switch plane with one or more switch layers, each layer with multiple switches is provided. In a data center, an optical circuit switch plane is added between the device plane and packet switch plane. Direct speed of light connections may be created between devices, the data center temporally shrunk, remote devices localized, elephant flows kept out of mouse switches, mouse switch spend reduced, stranded resources recovered, layer 1 reconfigured and optimized, bare metal bent, secure tunnels created, networks physically isolated, failure resiliency increased, and packet switch congestion avoided.

Abstract: A system and method for providing wireless network communications between a plurality of remote devices and a site controller are provided. Each network and the site controller communicates using a communications protocol adapted to allow remote devices and the site controller to independently control the communication path for transmissions sent by each device. In some embodiments, remote devices can collect and store information about other remote devices and available communication paths for optimum data transmission. Also, in some embodiments, remote devices can quickly join a preexisting network by communicating with a site controller and/or other remote devices. Other embodiments are also claimed and described.

Abstract: The disclosure relates to radio access systems, and more specifically to methods for media access in radio access systems. The disclosure relates to a method, performed in a first node 20b, 20c, 20d in a wireless communication system, of accessing a shared media for directive signal transmission from the first node, the method comprises three steps. The first step is receiving, from a second node, a pilot signal announcing a directive signal transmission to or from the second node. The second step is predicting based on information in the received pilot signal, a collision rate between an intended directive signal transmission from the first node and the announced directive signal transmission, the information defining the channel resources used by the announced directive signal transmission and the third step is accessing the shared media based on the predicted collision rate.

Abstract: Apparatus and methods for intelligent deployment and transition from a first network infrastructure to a second network infrastructure. Various embodiments of the present disclosure are directed to, among other things, methods and apparatus that leverage tunneling of Ethernet ring network technologies. In one exemplary embodiment, a modified implementation of the ITU-T G.8032 data link protocol is combined with Multiprotocol Label Switching (MPLS) transport networks to provide Carrier Ethernet and Retail Ethernet services. Unlike existing network infrastructure, the exemplary MPLS network aggregates traffic between the base station (BS) and mobile switching center (MSC) within a logical ring network topology.

Abstract: The disclosure relates to radio access systems, and more specifically to methods for media access in radio access systems. The disclosure relates to a method, performed in a first node 20b, 20c, 20d in a wireless communication system, of accessing a shared media for directive signal transmission from the first node, the method comprises three steps. The first step is receiving, from a second node, a pilot signal announcing a directive signal transmission to or from the second node. The second step is predicting based on information in the received pilot signal, a collision rate between an intended directive signal transmission from the first node and the announced directive signal transmission, the information defining the channel resources used by the announced directive signal transmission and the third step is accessing the shared media based on the predicted collision rate.

Abstract: A remote access system for policy-controlled computing with a client device connected to a remote software environment is disclosed. The client device communicates with the remote software environment that securely runs applications. Both the client device and the remote software environment are policy-controlled. User input and sensor information from the client device is passed to remote software environment to spoof local control.

Abstract: The present disclosure relates to a communication apparatus, a communication method, a program, and a communication system that enable more reliable communication. An I3C master receives a max read length and a max write length from an I3C slave. Then, when transmitting/receiving data to/from the I3C slave, the I3C master controls transmission/reception of the data so that the data to be transferred in one data transfer has a data length equal to or shorter than the max read length and the max write length, and transmits transfer length information indicating the data length of the data to be transferred, prior to data transfer of the data. The present technology is applicable to a bus IF, for example.

Abstract: Provided is a method and device for implementing session continuity. The method includes: transmitting indication information to a user equipment (UE), where the indication information is used for informing the UE to release a current first protocol data unit (PDU) session and establish a second PDU session to the same data network; and receiving a request message, initiated by the UE after the indication information is received by the UE, for establishing the second PDU session, where the request message carries a session identifier of the first PDU session for uniquely identifying the first PDU session. The above-mentioned technical solution solves the problem in the related art that it is impossible to determine from which PDU session the newly established PDU session is switched over when the UE is redirected to a new TUPF. Thus the network side is able to determine from which PDU session the newly established PDU session is redirected.

Abstract: Systems, apparatuses, and methods are described for registering a multi-port device. A computing device may receive a registration request from a user device supporting multiple ports. In response, the computing device may send to the user device a message including a plurality of telephone numbers and information of associated ports.

Abstract: In one example, a method comprises receiving, by a forwarding manager for an internal forwarding path executed by at least one packet processor of a forwarding unit of a network device, one or more packet processing operations from a control unit of the network device; generating, by the forwarding manager based on the one or more packet processing operations, a plurality of nodes each comprising a unique token, wherein a first node of the plurality of nodes includes a token reference set to a value for the token of a second node of the plurality of nodes; configuring, by the forwarding manager based on the nodes, the forwarding path to include respective forwarding path elements for the plurality of nodes; and processing, by the packet processor, a packet received by the forwarding unit by executing the forwarding path elements.

Abstract: A communication method in which a first communication device that is a transmission source of data, a second communication device that is a destination of the data, and one or more relay devices that relay the data transmit and receive the data using Segment Routing, wherein the relay device is configured to, when relaying the data, detect whether congestion occurs in the relay device, and when congestion occurs, set a first flag indicating the occurrence of congestion in a segment ID corresponding the relay device out of a plurality of segment IDs contained in a routing header of the data, and the second communication device configured to, when there is a segment ID in which the first flag is set in a routing header of received data, determine that congestion occurs in the relay device corresponding to the segment ID.

Abstract: Techniques for updating a routing table based on a single message are described. One technique includes receiving at a first network device a node message from a second network device. The node message includes a sequence number and a list of link state(s) originated by the second network device. The first network device determines whether to withdraw one or more link states originated by the second network device and maintained in a routing table of the first network device based on the sequence number and the list of the link state(s) within the node message. The routing table is updated based on the determinations.

Abstract: A network system is connected to a first physical network comprising: a first data transmission node that transmits data used for a first service and a second data transmission node that transmits data used for a second service and to a second physical network including at least one apparatus for receiving data from the first and the second data transmission nodes, and constructs a virtual network for each service between the first and the second physical networks.

Abstract: In various examples there is a communications network comprising a plurality of nodes connected via an interconnection medium to form a receive-from-many communications network. The network has a synchronisation mechanism which synchronizes a signal frequency of the nodes. The network has at least one store holding signal amplitude data of signals previously sent between specified pairs of nodes of the communications network. An amplitude controller uses the stored data to adjust amplitudes of signals communicated between at least one of the pairs of nodes of the communications network.

Abstract: Techniques are described in which a centralized controller constructs a service chain between a bare metal server (BMS) and a virtual execution element (e.g., virtual machine or container), or in some instances a remote BMS, across a plurality of networks. In some examples, the controller may construct a service chain between a BMS and a virtual execution element or remote BMS using Ethernet Virtual Private Network (EVPN)—Virtual Extensible Local Area Network (VXLAN) and Internet Protocol Virtual Private Networks (IP VPNs) such as BGP/Multiprotocol Label Switching (BGP/MPLS) IP VPNs.

Abstract: A conference system includes a controller and clusters of media nodes. Each media node performs media packet processing operations and connects with other media nodes and client devices. The controller sends to a client device contact information for candidate clusters. The controller receives from the client device a measure of reachability to each candidate cluster as determined by the client device using the contact information. The controller receives from the client device a request to join a communication session. Responsive to the request, the controller determines a best cluster among the candidate clusters to which the client should connect for the communication session based on the measures of reachability to the candidate clusters, and selects a media node in the best cluster. The controller sends to the client device contact information for the media node to enable the client device to connect to the media node for the communication session.

Abstract: Nodes included in a hybrid network establish cellular links infrequently and at staggered intervals. When a node establishes a cellular link, other nodes can transmit and receive data to a back office using that cellular link. In addition, the node can receive a request from the back office across the cellular link indicating that another node should respond to an on-demand read request. The node can then signal the other node via a wireless mesh network to establish a cellular link in order to respond to the on-demand read request. An advantage of the disclosed approach is that a battery powered node can communicate as often as needed with the back office without frequently establishing a cellular link and without maintaining a continuously active cellular link.

Abstract: The invention provides a provision method performed by a managed device (CPE4) of a first network (R1) to provide an address to a management device (ACS4) for managing the managed device and situated in a second network (R2), the address enabling the management device to request the establishment of a management session with the managed device, there being at least one intermediate device (CGN5) situated between the first and second networks, the method comprising: identifying a server (6) suitable for controlling the intermediate device; sending a request to the server to cause the intermediate device to set up static routing to the managed device to enable packets received by the intermediate device and addressed to a reachability address associated by the intermediate device with the managed device to be conveyed to a contact address of the managed device; receiving a response from the server including the reachability address; and providing the management device with an address including the reachabili

Abstract: A computer system for optimizing bandwidth usage by directly linking two remote devices requests, from a local network gateway, a network port assignment for a services management component within a local network. The system also receives, at the services management component, a network connection directed towards the assigned network port. The network connection is received at the assigned network port regardless of the associated network protocol. The system then identifies a hostname within a data packet received through the network connection. The system also identifies, within a services registry, one or more services registered to receive network connections associated with the identified network protocol. In addition, the system identifies from the one or more services a particular service that is associated with the hostname. The system then forwards the network connection to the particular service.

Abstract: A data packet transmission method includes: obtaining, by a sending device, a data packet; determining, by the sending device, quality of service of the data packet; adding, by the sending device, an identifier and a sequence number to the data packet based on the quality of service of the data packet, where if the quality of service of the data packet belongs to first quality of service, the sending device adds a first identifier and a first sequence number to the data packet; or if the quality of service of the data packet belongs to second quality of service, the sending device adds a second identifier and a second sequence number to the data packet; and sending, by the sending device, the data packet to which the identifier and the sequence number have been added.

Abstract: Systems, methods, and apparatus are disclosed that provide in-service traffic and/or resource migration between processing units in a communications network. An example method includes one or more processing units communicating with at least one processing unit of a plurality of processing units, where the communicating corresponds to a plurality of resources and resource requirements of the plurality of processing units. The one or more processing units evaluate resource utilization and projected traffic of a subset of the plurality of processing units. The one or more processing units determine, based on the resource requirements, to migrate one or more selected interdependent resources for a service from one or more processing units to one or more receiving processing units of the plurality of processing units.

Abstract: The techniques described herein describe diffusing packets through multipath inter-data center networks to identify faulty network apparatuses therein. In an implementation, a method of diffusing packets through a multipath inter-data center network to identify a faulty network apparatus in a source data center is disclosed. The method includes diffusing packets through various paths of a network fabric. Diffusing the packets includes sending out bursts of packets with varying packet header parameters to a set of machines in one or more target data centers. The method further include monitoring packet drops from the bursts of packets, issuing tracerts for each of the packet drops to identify corresponding failed routes, and triangulating the failed routes to identify the faulty network apparatus.

Abstract: Example methods and apparatus for transmitting a signal transmission method and a device are disclosed. One method includes transmitting a signal based on a predefined transmission pattern by a communications device. The transmission pattern defines that a non-first downlink timing boundary in a downlink time domain unit is later than or earlier than a first downlink timing boundary is defined, or that an uplink timing boundary in an uplink time domain unit is earlier than or later than the first downlink timing boundary.

Abstract: Provided is non-transitory computer-readable recording media storing instructions that, when executed by at least one processor, cause the at least one processor to perform a continuity management method that includes sending a heartbeat signal to a service server that provides a service over a network, sending a packet to an echo server in response to failing to receive a response signal to the heartbeat signal from the service server, and determining whether to continue the service based on whether a response to the packet is received from the echo server.