Abstract: Embodiments of systems and methods for data access control and account management are described. In an embodiment, a server can apply flags to user accounts identified as requiring the user to perform an action or, in the case of potentially compromised access credentials, to offer the user the opportunity to authenticate and create new credentials. A user account database and an access report database can store access credentials, flags, and other relevant information for use by the server to perform various administrative, authentication, and protective actions on user accounts.

Abstract: A method and system enables communications with a call center via SMS/MMS and provides an additional communications channel to communicate with the call center in addition to voice, Internet email/IM chat and fax. The call center obtains location information and images from a customer using SMS messages and web pages via a messaging hub.

Abstract: Systems and methods for dynamically and automatically generating digital watermarks are provided. Watermark payloads utilized in generating the digital watermarks are altered based upon changing conditions, such as environmental characteristics associated with playback or distribution of media content. Changing conditions may also encompass a change in the distribution/presentation chain of devices associated with the playback or distribution of the media content.

Abstract: Devices, computer-readable media, and methods for routing traffic of a network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of an identified user are described. A method may determine a network service that an endpoint device is attempting to access and may detect an identity of a user of the endpoint device. The processing system may obtain a plurality of virtual private network configuration preferences of the user, each of the plurality of virtual private network configuration preferences matching a virtual private network configuration preference with one or more of a plurality of network services, and route traffic of the endpoint device for the network service via a virtual private network that is configured in accordance with a virtual private network configuration preference of the plurality of virtual private network configuration preferences.

Abstract: A system comprising a communication activity detecting device, a network selector, and a network control memory structure that operate to detect anomalous communication activity and, in response, send a routing control to a location routing number control memory structure to alter a location routing number, which results in communication activity switching from a first network to a second network. A method including receiving a network switch control to switch communication activity from a first network to a second network, selecting the second network from one or more networks to route the communication activity, and sending a routing control to a location routing number control memory structure. The routing control may include instructions to alter a first location routing number to a second location routing number associated with the second network.

Abstract: A method performed by a network device includes: receiving a first packet by the network device, wherein the first packet is tapped from a network; identifying a session to which the first packet belongs when the first packet has one or more values that at least partially match one or more terms, wherein the act of identifying the session is performed by the network device; receiving a second packet by the network device; determining whether the second packet belongs to the session; and performing a packet processing action by the network device based on the identified session; wherein the session is identified based on a first criterion, and the act of determining whether the second packet belongs to the session is performed based on a second criterion that is different from the first criterion.

Abstract: In one embodiment, a process captures one or more features of an initiated application transaction within an application, and applies the one or more features to one or more application-based policies. In response to determining a policy trigger for the initiated application transaction based on applying the one or more features to the one or more application-based policies, the process may then obtain a network address associated with the application. Once the process maps the particular policy trigger from the one or more application-based policies to one or more corresponding network-based policies, then the process can instruct a network controller to apply the one or more corresponding network-based policies to the network address associated with the application, causing the network controller to configure a computer network to manage network traffic associated with the network address according to the one or more corresponding network-based policies.

Abstract: There is provided a technique for attaining a state in which communication can be made even when the same control program is used in controllers. Each of the controllers includes: a network setting including a corresponding relation between an IP address and an identifier; and a storage device that stores a control program for controlling a drive device. The control program includes a control instruction for controlling the drive device with the identifier being an input. Each of the controller includes: a generation module that generates an IP address to be different from an IP address of another controller on the same network, and that rewrites the IP address in the network setting; and a communication module that communicates with an information processing device on the same network in accordance with the IP address in the network setting.

Abstract: A light emitting diode (LED) which is turned ON by a local area network (LAN) controller, is controlled to be turned ON by a central processing unit (CPU), which executes a program, in accordance with an execution status of the program.

Abstract: Methods, systems, and storage media are described for uplink transmission for multi-panel operation. Other embodiments may be described and/or claimed.

Abstract: A network node comprises a core processing part to perform a core processing function, an ingress processing part to receive incoming signaling messages, an egress processing part to output signaling messages for transmission from the network node, and a message manipulation function to manipulate signaling messages. In a first configuration, the message manipulation function is comprised in the ingress processing part, and in a second configuration the message manipulation function is comprised in the egress processing part. In the first configuration, an egress characteristic is determined, indicative of how an outgoing signaling message is to be outputted, and an incoming signaling message is manipulated based on the egress characteristic. In the second configuration, an ingress characteristic is determined, indicative of how an incoming signaling message has been received, and an outgoing signaling message is manipulated based on the ingress characteristic.

Abstract: A method, an apparatus and a VTEP for synchronizing MAC address are provided. According to the method, first mapping relationship configured on first aggregation/IPP port of first VTEP is notified to second VTEP in a same MLAG system. The second VTEP configures the relationship on second aggregation/IPP port of the second VETP. The relationship represents a mapping relationship of first tag ID of first port of the first VTEP to first VXLAN ID. Second tag ID of second port of the second VTEP differs from the first tag ID. The first VTEP receives a successful configuration message returned by the second VTEP after successfully configuring the relationship on the second IPP port. The first VTEP then sends first MAC address to the second IPP port via the first IPP port, wherein the first MAC address is the MAC address of a device accessing the first VTEP via the first port.

Abstract: Embodiments of the present disclosure may relate to mechanism for tuning to an available channel in a narrow band wireless network. In an embodiment, a base station [104] may transmit a channel list (comprising available channel/s) to a NB-IoT device [102] that may transmit a channel request (comprising operational mode of the NB-IoT device [102]) back to the base station [104]. The base station [102] may define a first parameter and a second parameter based on said operational mode and accordingly determine an allocation scheme. Subsequently, the base station [104] may transmit the allocation scheme indicative of the allocation of the available channels to the NB-IoT device [102] such that the NB-IoT device [102] tunes to the available channel/s. In another embodiment, the NB-IoT device [102] may itself tune to the available channel/s and may transmit a notification message to each of the available channel/s based on said tuning.

Abstract: Disclosed is a method for operating a controller as a bus participant in a bus network, wherein the controller comprises a microcontroller comprising a processor unit and a bus controller cell, and the processor unit is stopped for a sleep mode. If the processor unit is stopped, the bus controller cell receives bus messages from the bus network, the bus controller cell stores at least some of the received bus messages in a memory, the processor unit is activated at predetermined times and checks whether the memory contains a wake-up message for the controller, and, in this case, the controller changes from the sleep mode to a wake mode, and otherwise the processor unit is stopped again.

Abstract: The invention relates to a method for optimizing the use of gateways according to a category of message to be sent by a connected object capable of accessing several gateways. The method includes in particular: a discovery procedure (100) comprising broadcasting (120), by the connected object, a query message (BCM), and receiving (130), by the connected object, response messages (131, 132) sent by each of the available gateways in response to the query message (BCM); a procedure (200) for assigning priority levels to the available gateways per category of message to be sent; and a procedure for ranking (300), by the connected object, the available gateways in order of their respective priority levels depending on the category of message to be sent, with the objective of choosing one of said available gateways for sending data messages.

Abstract: Aspects of the disclosure relate to automated text-based customer query systems. A computing device associated with a text-based query system may receive, from a user communication device, a text input at the user communication device. The computing device may determine, based on the text input, a voice extensible markup language (VXML) application from a plurality of VXML applications. The computing device may determine, based on the VXML application, a text output, and send the text output for display at the user device.

Abstract: A device includes a microcontroller and communications logic to identify data to be sent to another device and encapsulate the data in a data link layer frame of a wireless data link layer protocol. The data link layer frame includes a particular field and the particular field encapsulates Internet Protocol (IP) packet data, and the data is encapsulated in the IP packet data. The device further includes a transmitter to send the data to the other device over a one-hop radio link according to a low power wide area (LPWA) protocol, and the data link layer frame is sent in a physical layer frame of the LPWA protocol.

Abstract: The invention relates to an edge device (10) and to a method for operating an edge device (10), wherein the edge device (10) is supplemented by a unikernel manager (52) and a base unikernel (54), wherein the unikernel manager (52) acts as a means at least for starting and stopping a unikernel (40-46) installed on the edge device (10), and wherein the base unikernel (54), in the form of a standalone unikernel, comprises the base functionality of the edge device (10).

Abstract: Techniques are disclosed relating to managing dependencies between shared data objects in a database system. In various embodiments, a data storage system may maintain a function cache that is operable to store functions that are accessible to one or more applications hosted by a server system. In response to a request to invalidate a first data type utilized by one or more of these functions, various embodiments may include accessing an inverted index that specifies a mapping between data types and corresponding functions, stored in the function cache, which depend on those data types. Using the inverted index, various embodiments include identifying a set of functions that depend on the first data type and invalidating the set of functions in the function cache such that the set of functions are no longer accessible by the applications.

Abstract: Method for producing a bidirectional connection between a device forming a field device and an application in a central facility, wherein a bidirectional connection is produced between the device that forms the field device and the application in a central facility, where a bridge function running on a mobile communication terminal establishes a short-range radio connection with the device, establishes a long-range radio connection with the application in the central facility and establishes a data channel for bidirectional communication between the application in the central facility via the long-range radio connection and the device via the short-range radio interface.

Abstract: A system and method to support identity theft protection and, in particular, to a system and method for supporting identity theft protection as part of a distributed service oriented ecosystem in Internet protocol (IP) multimedia subsystem (IMS) and non-IMS networks. The system includes an identity session initiation protocol (SIP) application server configured to act as a security assertion markup language (SAML) bridge, which allows an SIP enabled device or a non-SIP enabled device to attach to a telecommunications service provider network. A user may accept or reject an authorization request using the SIP enabled device or non-SIP enabled device.

Abstract: A wireless communication device includes a memory and a wireless interface and processing circuitry. The memory configured to store data to be transmitted and received. The wireless interface configured to transmit and receive a wireless signal. The processing circuitry coupled to the memory and configured to receive a message from another wireless device, including destination information and acknowledgement information, via the wireless interface, set, in a first period being a period in which the message from a child node which transmits the message upward while setting the child node itself as a destination is received, the acknowledgement information with respect to data received from the child node, process the message including the destination information and the acknowledgement information, and transmit a message including the set acknowledgement information via the wireless interface to another wireless device.

Abstract: A portable gateway device for use with a Building Management System (BMS) enables voice command control of BMS devices. The portable gateway device comprises a Wi-Fi module, a serial communications interface, and a data conversion module. The Wi-Fi module is configured to enable communication with a user device via Wi-Fi. The portable gateway device is configured to receive a voice command spoken by a user of the user device. The serial communications interface is configured to enable communication with a bus connected to a BMS device. The data conversion module is configured to translate the voice command received from the user device into a control action associated with the BMS device. The portable gateway device is configured to provide the control action to the BMS device via the serial communications interface. The control action affects a state or condition of the BMS device.

Abstract: Certain aspects of the disclosure are directed to customized communication monitoring and alerts using a high-level programming interface. According to a specific example, a data communication server provides a database with data communication features available to remotely-situated client entities. The data communication server is configured to provide to the client entities, a set of instructions written in a first programming language that defines a message exchange protocol. The data communication server is further configured to receive from each client entity, client-specific sets of control data written in a second programming language that is compatible with the first programming language. The data communication server may monitor an operating state of each of the virtual office features provided to the client entity based on received event data, and generate alerts to end-users of the client entity according to the event data satisfying a set of criteria.

Abstract: A GRE tunnel is configured between multiple computing devices of a distributed cloud computing network and a single origin router of the origin network. The GRE tunnel has a first GRE endpoint that has an IP address that is shared among the computing devices of the distribute cloud computing network and a second GRE endpoint that has a publicly routable IP address of the origin router. A first computing device receives an IP packet from a client that is destined to an origin server. The first computing device processes the received IP packet and encapsulates the IP packet inside an outer packet to generate a GRE encapsulated packet whose source address is the first GRE endpoint and the destination address is the second GRE endpoint. The GRE encapsulated packet is transmitted over the GRE tunnel to the single origin router.

Abstract: A system may determine an identifier associated with a location of a user device in response to receiving an indication that the user device has moved to the location and perform a first lookup to determine an application specific location associated with the identifier. A second lookup may be performed to determine one or more network functions available in the application specific location. An indication of the one or more network functions may be outputted.

Abstract: Client fingerprints can be used to detect and defend against malware and hacking into information systems more effectively than using IP addresses. A unique client fingerprint can be based on data found in the client's SSL client hello packet. SSL version, cipher suites, and other fields of the packet can be utilized, preferably utilizing individual field values in the order in which they appear in the packet. The ordered values are converted to decimal values, separated by delimiters, and concatenated to form an identifier string. The identifier string may be mapped, preferably by a hash function, to form the client fingerprint. The client fingerprint may be logged, and whitelists and blacklists may be formed using client fingerprints so formed.

Abstract: An apparatus for use in a serving gateway user plane (SGW-U) of an evolved packet core (EPC) of a wireless communication network is disclosed. The apparatus comprises one or more processors configured to process a downlink (DL) data signal comprising a DL data packet for a user equipment (UE) in the network, buffer the DL data packet in the DL data signal and identify a serving gateway control plane (SGW-C) associated with the SGW-U that serves the UE, when the UE is in idle mode. The one or more processors is further configured to provide an SGW-U DL data notification message to the SGW-C, generated selectively based on a priority of the received DL data signal, in order to inform the SGW-C about the availability of DL data for the UE.

Abstract: Mechanisms support machine-to-machine service layer sessions that can span multiple service layer hops where a machine-to-machine service layer hop is a direct machine-to-machine service layer communication session between two machine-to-machine service layer instances or between a machine-to-machine service layer instance and a machine-to-machine application. Mechanisms are also disclosed that illustrate machine-to-machine session establishment procedures for oneM2M Session Management Service supporting multiple resources.

Abstract: Aspects of the disclosure relate to preventing unauthorized access to information resources by deploying and utilizing multi-path data relay systems and sectional transmission techniques. A computing platform may receive, from one or more data storage computer systems, source data associated with a source dataset. Subsequently, the computing platform may generate at least two data blocks based on the source data received from the one or more data storage computer systems, and the at least two data blocks may include one or more overlapping portions. Thereafter, the computing platform may apply one or more tags to the at least two data blocks, thereby producing at least two tagged data blocks. Then, the computing platform may select at least two paths for transmitting the at least two tagged data blocks. Subsequently, the computing platform may send, across the at least two selected paths, the at least two tagged data blocks.

Abstract: A physical host machine of a public cloud system includes a set of processing units for executing instructions stored in non-transitory machine readable media. The physical host machine also includes a physical network interface cars (PNIC) and a non-transitory machine readable medium that stores a data compute node (DCN). The DCN includes first and second applications, first and second logical interfaces, a network stack, and a managed forwarding element (MFE). The first application is connected to the pNIC through the network stack, the first logical interface, and the MFE. The second application is connected to the PNIC through the network stack, the second logical interface, and the MFE.

Abstract: A method for communications is proposed. The method may comprise obtaining, by a terminal device, network addresses of another terminal device from a message broker to which the terminal device and the another terminal device are registered. At least one of the terminal device and the another terminal device is connected to a cellular network. The method may further comprise initiating a connectivity check procedure to determine one or more candidate paths through which the terminal device has connectivity to the another terminal device. The one or more candidate paths are from at least two paths associated with the network addresses of the another terminal device. The method may further comprise selecting a path for the terminal device and the another terminal device among the one or more candidate paths, based at least in part on a predefined criterion.

Abstract: In a control terminal device for controlling a plurality of devices, when account information is registered in a first device which is one of the plurality of devices, after completion of registration of account information in the first device, a second device in which the account information is not registered is searched, and the account information is registered in the searched second device.

Abstract: The present disclosure provides a method of interconnecting between network applications and a type of network access apparatus, the method includes: acquiring a network address and a network application Port Number of a first network device and first validation information; receiving a network address and an application Port Number of a second network device and second validation information according to the network address and the network application Port Number of the first network device and the first validation information; validating whether the network address and the application Port Number of the second network device is connection information requested by the network application of the first network device according to the second validation information; if yes, connecting the network application of the first network device with the network application of the second network device according to the network address and the network application Port Number of the second network device.

Abstract: Disclosed are a data transmission method, apparatus and system. A first paging message carries first indication information related to random access, so that a base station can complete identification of a terminal when the base station receives a preamble sent by the terminal, and downlink data to be transmitted may be carried in a second signaling flow. Meanwhile, second indication information indicating whether the transmission of the downlink data is completed may also be carried so that the terminal enters a radio resource control (RRC) suspension state. Finally, power consumption, a latency and resource overhead of the terminal are effectively reduced.

Abstract: The present invention relates to a method for transmitting a control message by a control entity in a software defined network-based mobile communication system, the method comprising the steps of: detecting the occurrence of at least one event associated with at least one terminal; buffering the at least one event until a predetermined condition is satisfied; and transmitting, to a switching entity, a control message corresponding to the at least one buffered event when the predetermined condition is satisfied. However, the present invention is not limited to the above embodiment, and other embodiments are possible.

Abstract: System and method of dynamically selecting an egress edge node for data transmission between different autonomous systems based on real-time route performance detection. With respect to a destination node located in a second autonomous system, a plurality of edge nodes in the first autonomous system each operate to detect route performance in real-time and send the detected information to a control center for evaluation. The evaluation results are compared and used to select an optimal edge node and an associated link for transporting data between the source node and the destination node. To switch from a first edge node to a second one, the IP address of the source node contained in the data packets are converted from an address assigned to the first edge node to an address assigned to the second edge node.

Abstract: An interface bridge to enable communication between a first integrated circuit die and a second integrated circuit die is disclosed. The two integrated circuit die may be connected via chip-to-chip interconnects. The first integrated circuit die may include programmable logic fabric. The second integrated circuit die may support the first integrated circuit die. The first integrated circuit die and the secondary integrated circuit die may communicate with one another via the chip-to-chip interconnects using an interface bridge. The first and second component integrated circuits may include circuitry to implement the interface bridge, which may provide source-synchronous communication using a data receive clock from the second integrated circuit die to the first integrated circuit die.

Abstract: Some embodiments establish for an entity a virtual network over several public clouds of several public cloud providers and/or in several regions. In some embodiments, the virtual network is an overlay network that spans across several public clouds to interconnect one or more private networks (e.g., networks within branches, divisions, departments of the entity or their associated datacenters), mobile users, and SaaS (Software as a Service) provider machines, and other web applications of the entity. The virtual network in some embodiments can be configured to optimize the routing of the entity's data messages to their destinations for best end-to-end performance, reliability and security, while trying to minimize the routing of this traffic through the Internet. Also, the virtual network in some embodiments can be configured to optimize the layer 4 processing of the data message flows passing through the network.

Abstract: Various embodiments provide for using data encapsulation to extend support of an Audio Video Transport Protocol (AVTP) standard, which can be used in such applications as data network communications between sensors (e.g., cameras, motion, radar, etc.) and computing equipment within vehicles (e.g., smart and autonomous cars).

Abstract: A scalable hierarchical low latency communication network architecture is disclosed. This architecture uses a novel multi-node, multi-packet block acknowledgement (ACK) wireless communication method. The method is used in a scalable hierarchical architecture for a non-transitory computer readable storage medium storing one or more programs. The one or more programs comprising instructions to perform the following steps: receive multiple data and control packets at a central hub from multiple nodes; create a single ACK packet for the multiple data and control packets received at the central hub from the multiple nodes; and communicate the single ACK packet that acknowledges reception of the multiple data and control packets to the multiple nodes.

Abstract: Connection control circuitry is provided for a User Equipment (UE) configurable to offload communication of packet data from a cellular radio-access network comprising a Trusted Wireless Local Access Network (TWLAN) and a Trusted Wireless Access Gateway (TWAG) with IP Address preservation. The connection control circuitry has a connection requesting module configured to send a distinguishable-connection establishment message to the TWAG, requesting setup of a TWAG-routed data connection comprising at least one of a Packet Data Network (PDN) connection and a Non-Seamless Wireless Offload (NSWO) connection. A unique virtual gateway interface address is used to identify a point-to-point link between the UE and the TWAG. This allows the TWAG to distinguish between multiple substantially simultaneous point-to-point links which support multiple substantially simultaneous packet data connections. Other embodiments may be described and claimed.

Abstract: A system for configuring a data center includes a fabric management server coupled to a management switch. A provisional Software Defined Networking (SDN) controller executing on the fabric management server can discover physical servers coupled to the management switch, receive network interface configuration information from the physical servers, and use the discovered network interface configuration information to determine a configuration for switches and servers coupled to an IP fabric. The configuration can be migrated to a full functionality SDN controller.

Abstract: An interface device (100) for interfacing between a network device (170-240) and a software-defined networking (SDN) controller (150), the interface device (100) comprising: a first interface (140) for connecting the interface device (100) to the SDN controller (150); a second interface (160) for connecting the interface device (100) to the network device (170-240); a vendor and technology specific layer module (110), which is operative to transmit control and message data to, and to receive control and message data from, the network device (170-240) in a native control and message data protocol of the network device; a device abstraction layer module (120), which is operative to generate a device abstraction model (400) representing capabilities of the network device (170-240); and a protocol mapping layer module (130), which is operative to map control and message data used by the network device (170-240) onto the device abstraction model (400), such that messages issued by the SDN controller (150) in its n

Abstract: Improved virtualized application performance is provided through disabling of unnecessary functions, such as unnecessary encryption and decryption operations. An example method performed by a hypervisor includes the steps of obtaining a request from a first virtual machine to perform one or more of encrypting and decrypting of a communication between the first virtual machine and a second virtual machine; determining when the first and second virtual machines execute on a same host as the hypervisor; and in response to the first and second virtual machines executing on the same host: processing the communication without performing the one or more of encrypting and decrypting of the communication, wherein the hypervisor initiates an encryption of further communications between the first virtual machine and the second virtual machine in response to at least one of the first virtual machine and the second virtual machine being moved from the same host.

Abstract: Some embodiments provide a novel method for configuring managed forwarding elements (MFEs) to handle data messages for multiple logical networks that are implemented in a data center at the MFEs and to provide gateway service processing (e.g., firewall, DNS, etc.). A controller, in some embodiments, identifies logical networks implemented in the datacenter and MFEs available to provide gateway service processing and assigns gateway service processing for each logical network to a particular MFE. The MFEs, in some embodiments, receive data messages from endpoints in the logical networks that are destined for an external network. In some embodiments, the MFEs identify that the data messages require gateway service processing before being sent to the external network. The MFEs, in some embodiments, identify a particular MFE that is assigned to provide the gateway service processing for logical networks associated with the data messages.

Abstract: A system can include a host device that includes a host management component and a virtual machine execution environment. The host device can execute the host management component and determine that the host device, a hypervisor machine in the virtual machine execution environment, or a virtual machine in the virtual machine execution environment violates at least one compliance rule. The host device can also cause the host management component to perform an action in response to determining that the at least one compliance rule is violated.

Abstract: A computer system for controlling data linkage achieves higher rate data transfer between a first system that performs operations and a second system that acquires data regarding the operations reduces influence on the operations and between the systems. The first system includes a storage unit that manages resources storing data and a control unit that controls data transfer and the second system includes a data acquisition unit. The control unit calculates cost that represents a load of the first system with respect to each of multiple data transfer schemes, determines an applicable data transfer scheme based on the cost, and notifies the second system of that scheme. The data acquisition unit manages states associated with the determined data transfer scheme and sends a request to acquire data from resources based on the determined data transfer scheme and the states.

Abstract: For a virtual distributed network environment employing physical forwarding elements that includes both software forwarding elements and third party devices serving as hardware forwarding elements, a scalable method for synchronizing configuration data of logical forwarding elements that are distributed across the various physical forwarding elements is provided. The method generates and updates the configuration data at a set of central controllers and then distributes the configuration data to the physical forwarding elements. The method delivers the updated configuration data to some of the physical forwarding elements by (i) determining a delta/differential between the updated configuration data held at the central controller and the obsolete configuration data held at those physical forwarding elements and (ii) delivering the determined differential configuration data to the physical forwarding elements.

Abstract: Systems and methods for locating a cellular phone are provided. More particularly, systems and methods for providing the location of a requested user's cellular phone from a requesting user's device (e.g., a second cellular phone) based on access rights defined by the requested user. Location descriptions may be provided at a multitude of levels. For example, if a cellular phone, or an identity associated to (e.g., logged into) a cellular phone, has been given access rights to a cell phone's exact location for an indefinite amount of time, that cell phone can receive, on command, the exact location of the approved cell phone. Other levels of location information that can be granted include, for example, proximities, states, and countries.