Abstract: In one embodiment, an apparatus and method are provided to: receive, by the apparatus from a node, a set up packet during a setup of a connection, the set up packet for use in a protocol that is not transmission control protocol (TCP); identify first metadata in a time period parameter field in the set up packet, for a time period, where, as a result of a detection of the time period, the connection is at least partial deactivated; and determine, based on the first metadata, a timeout attribute associated with the connection.

Abstract: An apparatus may include a control unit to control transmission of a transformed video stream over a network, in response to a reproduction control command for a video stream realized by an application executed by a browser at a client device.

Abstract: GTP firewall service to block or allow GTP-C v1 messages from specific SGSN/GGSN and GTP-C v2 messages from specific SGW/PGW to prevent fraudulent activity occurring from any specific serving node or home node. GTP Traffic from specific SGSN (3G) or SGW (4G) can be blocked going to specific home operator, including 3G GSM to 4G LTE and 4G LTE to 3G GSM protocol interoperability provided by GTP Firewall. Individual Information Elements within GTP-C v1 and GTP-C v2 messages will be monitored based on home and serve operator configuration as well as GTP messages and Information Elements mapped from GTP-C v1 to GTP-C v2 for 3G GSM to 4G LTE interoperability and GTP-C v2 to GTP-C v1 for 4G LTE to 3G GSM interoperability.

Abstract: Methods and systems for secure cloud provider communication are disclosed. A method may include receiving a request to transmit data from one of a first cloud provider, an entity network, and a second cloud provider to another of the first cloud provider, the entity network, and the second cloud provider. The method may further include determining levels of trust associated with the one of the first cloud provider, the entity network, and the second cloud provider and the another of the first cloud provider, the entity network, and the second cloud provider, wherein the levels of trust are based on endpoint control by the entity network. The method may also include transmitting the data from the one of the first cloud provider, the entity network, and the second cloud provider to a cloud security stack based on the determined levels of trust.

Abstract: Methods and apparatus for optimizing bandwidth utilization in a cable network. In one embodiment, the method comprises predicting which content will be requested by a set of users based upon the exhibited viewing habits of those users (and/or others). A server process gathers viewership data comprising a listing of programs requested by users at various times of the day. The server process aggregates the viewership data, identifies patterns within the aggregated data, and extrapolates a schedule of programs likely to be requested. In certain embodiments, the server process additionally gathers the capabilities of each cable device in an associated subnetwork. Based upon these capabilities, and based upon the total bandwidth predicted to remain available in the network over a target broadcast period, the server process may also select an optimal compression scheme and video quality level before broadcasting a certain program.

Abstract: A determination device includes: a memory; and a processor coupled to the memory and the processor configured to executes a process, the process comprising: generating a reference model of a sensor detection value; determining whether a time from a predetermined point in time until a deviation between the reference model and the sensor detection value exceeds a threshold is shorter than a predetermined time; and outputting a signal associated with an abnormality when the time is determined to be shorter.

Abstract: In a method for implementing a GRE tunnel, an access device obtains an address of an aggregation gateway group including at least one aggregation gateway. The access device sends a tunnel setup request to the aggregation gateway for setting up a GRE tunnel, and the request contains an address of the access device encapsulated by using the address of the aggregation gateway group as a destination address. The access device receives a tunnel setup accept response sent back by an aggregation gateway and obtains an address of the aggregation gateway from the response. The aggregation gateway belongs to the aggregation gateway group. The access device configures the address of the aggregation gateway as a network side destination address of the GRE tunnel.

Abstract: A device controller connected to a communication terminal and a plurality of devices via a network includes an acquisition unit configured to receive first control information for controlling a plurality of devices of predetermined type from the communication terminal, the first control information including specific information for identifying a control target device selected from the plurality of devices, a device identification unit configured to identify the control target device on the basis of the specific information included in the first control information, a generation unit configured to generate second control information for causing the control target device to execute control details indicated by the first control information, the second control information being different from the first control information, and a transmission unit configured to transmit the second control information.

Abstract: Systems, computer program products, and methods are described herein for optimizing access control for server privilege. The present invention is configured to electronically receive, from a first computing device associated with a user, a server access request to access one or more servers; determine a first time period associated with the server access request based on an amount of time required to execute a first action on the one or more servers, wherein the first time period is defined by a first time stamp and a second time stamp; initiate an access window at the first time stamp from which the first computing device is capable of executing the first action on the one or more servers; and automatically terminate the access window at the second time stamp.

Abstract: A method, an apparatus, and a computer-readable medium for wireless communication are provided. In one configuration, the apparatus may be a UE. The UE receives PTM data from a base station. The UE attempts to decode the PTM data based on an identifier. The UE determines whether to transmit feedback information to the base station based on the attempt to decode the PTM data. In another configuration, the apparatus may be a base station. The base station transmits PTM data to a UE. The base station retransmits the PTM data to the UE based on feedback information associated with the transmitted PTM data.

Abstract: Examples may include intercepting packets outputted from a primary virtual machine (PVM) hosted by a first server and converting one or more fields of protocol headers for each intercepted packet such that output-packet-similarity may be increased between the PVM outputted packets and packets outputted by a secondary virtual machine (SVM) hosted by a second server.

Abstract: Outside-of-network management of a component in a virtual data center using a remote display on a HMS is disclosed. A computing device, outside of the virtual data center network, requests access to a host JNLP file for a host on the component. After receiving the request, the host provides the host JNLP file to the HMS. The HMS initiates a web based application, opens a port for access to the application, and provides the port information to a WebService within the virtual data center network. The WebService opens a port that the computing device can use to access the WebService and provides the webService port information and the HMS port information to the computing device. The computing device uses a browser to remotely manage the component via the port information and the application operating on the HMS.

Abstract: A method for providing user access to a network switch appliance, includes: receiving from a user a request to access configuration item for the network switch appliance, the network switch appliance configured to pass packets received from a network to network monitoring instruments; and determining, using a processing unit, whether to allow the user to access the configuration item for the network switch appliance based on information regarding the user.

Abstract: Methods and apparatuses are provided to facilitate switching of an uplink serving gateway termination point of a bearer that is offloaded from a master eNodeB (MeNB) to a secondary eNodeB (SeNB) in a dual connectivity operation. A signal is transmitted to the SeNB, via the MeNB, that includes addressing information of a new uplink serving gateway (S-GW) user plane termination point for the offloaded bearer. The addressing information is transmitted via the MeNB to the SeNB in a modification request message, such as an evolved radio access bearer (E-RAB) modification request message, and may include Internet Protocol (IP) addressing information and a Tunnel Endpoint Identifier (TEID).

Abstract: In some embodiments, a system is a reverse-proxying HTTP cache server that handles user session management and dynamically forwards requests to origin/backend servers based on the content being requested. It caches data from origin servers in order to reduce the stress placed on each origin server. It uses encrypted authorization tokens to handle session management and is able to modify origin data on-the-fly in order to inject per-client authorization information into the data stream. It can enforce maximum concurrent session limits, user bans, limit exemptions and time-limited live content previews.

Abstract: A computing device, such as a mapping application server, may track data associated with a plurality of user devices, such as an Internet Protocol version. A system, such as an IMS system, may use may use the data associated with the plurality of user devices to process messages. When messages between devices are received, the computing device may provide information regarding at least one protocol associated with a communication. The computing device may respond to queries from various network elements. The responses may provide data that may be used to identify a protocol version, such as a Name Authority Pointer (NAPTR). Any necessary protocol interworking may be provided by the system.

Abstract: An example method of controlling a wireless access point may include associating accumulated-channel-resource-consumption variables with, respectively, resource consumers of the wireless access point.

Abstract: A message handler is described. The message handler is configured, in response to receiving a data package which is formatted according to a given communications protocol, such as CAN or Ethernet, and which comprises package-directing data and payload data, to generate package having a predetermined data format, for example a layer-2 or layer-3 package, which comprises a header and payload data. The header comprises an address generated in dependence upon the package-directing data and wherein the payload comprises the data package. The package having a predetermined data format may be an IEEE 1722 frame.

Abstract: A network device resolves a destination address of an endpoint in an endpoint isolation environment. The network device receives a request for a destination address associated with a destination endpoint. The request originates from an isolated source endpoint. The network device determines whether the destination address is stored on the network device in association with the destination endpoint. Responsive to a determination that the destination address is not stored in association with the destination endpoint, the network device generates a proxy request for the destination address, and sends the proxy request to at least one endpoint attached to the network device. The network device receives a proxy response from the destination endpoint that includes the destination address. The network device stores the destination address in association with the destination endpoint.

Abstract: A command from a host is received via a port of a storage system. The port is assigned a current port revision identifier. The current port revision identifier of the port is associated with the command. Responsive to a status change associated with the port, an updated port revision identifier is assigned to the port to replace the current port revision identifier of the port and execution of the command is aborted responsive to determining that the current port revision identifier associated with the command is different than the updated port revision identifier of the port.

Abstract: Systems for and methods of delivering telephone calls using the combination of a data channel and a voice channel are disclosed. A data channel connection with the telephone handset may provide pre-call information used to set up incoming and outgoing calls which are ultimately connected using a voice channel. Use of the pre-call information may permit the same handset to be associated with multiple secondary telephone numbers from which calls appear to have been made and to which calls appear to have been placed.

Abstract: A video service quality assessment method and apparatus are provided to resolve a prior-art problem of relatively low accuracy of an assessment result. A monitoring device obtains an identifier of a to-be-monitored channel, an identifier of to-be-monitored user equipment, and configuration information of a video service transmission system; obtains a multicast video stream of the to-be-monitored channel based on the identifier of the to-be-monitored channel; obtains a retransmitted video stream based on the identifier of the to-be-monitored channel, the identifier of the to-be-monitored user equipment, and the configuration information of the video service transmission system; determines a to-be-assessed video stream based on the multicast video stream and the retransmitted video stream; and parses the to-be-assessed video stream, and obtains an assessment result based on a parsing result and the configuration information of the video service transmission system.

Abstract: A computing device may broadcast a first message via a wireless interface while operating according to a first network topology. After broadcasting the first message, the computing device may receive the first message via a wired interface. Based on receiving the first message via the wired interface, the computing device may broadcast a second message indicating a second network topology via the wireless interface. Based on receiving the first message via the wired interface, the computing device may operate according to the second network topology.

Abstract: Systems and methods for supporting unique multicast forwarding across multiple connected subnets in a high performance computing environment. In accordance with an embodiment, by enforcing that incoming (i.e., incoming on a router port of a subnet) multicast packets have SGIDs (source global identifiers) that correspond to a restricted set of source subnet numbers when entering the ingress router ports to a local subnet, it is possible to ensure that multicast packets sent from one subnet are never returned to the same subnet through a different set of connected router ports (i.e., avoid looping multicast packets).

Abstract: The disclosure is directed to a system, apparatus, and method for continuously monitoring data output from a wireless sensor on a mesh network at a frequency higher than mesh formation/propagation. For example, the system may include a wireless gateway, an amplifier coupled to the wireless gateway, a first antenna coupled to the amplifier, a second antenna coupled to the amplifier, and a wireless sensor. The wireless sensor may be a wireless temperature sensor configured to monitor the temperature of a cryopreserved material product. The wireless gateway forms the mesh network. The first antenna may be located on a first level of a building, and the second antenna may be located on a second level of the building, where the second level may be at an elevation higher than the first level.

Abstract: An example of a computing system is described herein. The computing system includes a plurality of network security devices. The computing system also includes a network switch configured to direct network traffic. The computing system further includes a controller coupled to the network switch. The controller is to instruct the network switch in directing network traffic to the plurality of network security devices.

Abstract: In general, in one aspect, the disclosure describes a Universal Plug and Play (UPnP) Remote Access Server (RAS) to provide a communication channel between UPnP Remote Access Clients (RACs) connected thereto. The UPnP RAS maintains local discovery information for UPnP devices connected to a local network and remote discovery information for remote UPnP devices communicating therewith. The UPnP RAS provides the remote UPnP devices communicating therewith with the local discovery information and the remote discovery information. The remote discovery information is utilized by a first remote UPnP device to discover a second UPnP device and vice versa. After discovery, a first remote UPnP device can communicate with a second UPnP device and vice versa.

Abstract: One aspect of the invention includes a computer device. The computer device includes a network interface component configured to download media from an external source through a secure network connection. The computer device also includes a memory configured to store the downloaded content. The computer device further includes a media profiling engine configured to query the memory for the downloaded content based on the connection of the network interface component to the external source through the secure network connection and to generate a media profile log comprising information relevant to the downloaded content.

Abstract: A system, method and apparatus for augmenting a building control system domain. A sensor network platform can be configured to collect data based on measurements from sensors outside of a legacy building control system domain, and to present information based on the collected data to a known interface supported by the legacy building control system. In one embodiment, the collected data can undergo customized processing by an operation center outside of the legacy building control system domain.

Abstract: Methods, systems, and computer readable media for monitoring encrypted packet communications are disclosed. According to one method executed at an encryption aware visibility (EAV) device, the method includes receiving copies of encrypted network traffic flow records belonging to at least one communication session involving a monitored application and obtaining, from a secure session management (SSM) server, session decryption information (SDI) via a secure backchannel interface connection, wherein the session decryption information includes cryptographic keys generated by the SSM server to establish the at least one communication session. The method further includes using the cryptographic keys to decrypt the copies of encrypted network traffic flow records to produce decrypted network traffic flow records.

Abstract: An apparatus and a method for sending a message from an enterprise service bus (ESB) is described. A message is formed at an enterprise service bus (ESB) of a computer system. The message is transmitted from the ESB to different ESBs through a User Datagram Protocol (UDP) multicast.

Abstract: An in-vehicle network system includes a relay apparatus and a first processor connected with the relay apparatus to be able to perform communication with the relay apparatus. The relay apparatus includes a first port for retrofitting a second processor and a second port for connecting a third processor that performs a communication setting process for the second processor connected at the first port.

Abstract: Embodiments of the invention provide a system and circuit interconnecting peripheral devices to neurosynaptic core circuits. The neurosynaptic system includes an interconnect that includes different types of communication channels. A device connects to the neurosynaptic system via the interconnect.

Abstract: Aspects of the disclosure relate to enabling new radio (NR) cellular quality of service (QoS) for non-internet protocol (IP) data sessions. In a particular aspect of the disclosure, a non-IP based protocol data unit (PDU) session is established, and a packet filter is selected based on at least one aspect of a data packet formatted in a non-IP format associated with the non-IP PDU session. A transmission of the data packet is then filtered according to the packet filter.

Abstract: Embodiments of the present disclosure relate to a method, apparatus and computer program product for scheduling dedicated processing resources. The method comprises: in response to receiving a scheduling request for a plurality of dedicated processing resources, obtaining a topology of the plurality of dedicated processing resources, the topology being determined based on connection attributes related to connections among the plurality of dedicated processing resources; and determining, based on the topology, a target dedicated processing resource satisfying the scheduling request from the plurality of dedicated processing resources. In this manner, the performance and the resource utilization rate of scheduling the dedicated processing resources are improved.

Abstract: Concepts and technologies are disclosed herein for creating cross-service chains of virtual network functions in a wide area network. A controller can receive a chain request from a requestor. The chain request can specify functionality that is to be included in a service chain. The functionality can include a first function and a second function. The controller can compute a route associated with the service chain. The route can specify a first site that hosts a first service that provides the first function and a second site that hosts a second service that provides the second function. A first virtual network function can be located at the first site and a second virtual network function can be located at the second site. The controller can configure edge devices and forwarding devices to various entities at the two sites to enable the cross-service virtual network function chain.

Abstract: A call community contact firewall may include a caller ID capture function retrieving caller ID data for a call to a recipient who is a member of the call community, and a caller ID lookup function configured to retrieve a firewall status based on the retrieved caller ID data, where a firewall status database links caller ID data with call community ratings of prior calls. The call community contact firewall may also include a firewall action function implementing at least one call impacting action based on the retrieved firewalls status. In another aspect, a method may include accessing a secure sender-controlled media (SCM) data structure of a first contact participant in a digital exchange with a second contact participant, updating the instance with real-time content, and validating the first contact participant by comparing the real-time content with another portion of the secure SCM data structure.

Abstract: A gateway connected to a bus, a bus, and the like used by a plurality of electronic control units for communication includes a frame communication unit that receives a frame, a transfer control unit that removes verification information used to verify a frame from the content of the frame received by the frame communication unit and transfers the frame to a destination bus or that adds verification information to the content of the frame and transfers the frame to the destination bus, and the like.

Abstract: A secure hub as a communication security apparatus includes a port that receives a packet from a device and transmits the packet to another device. The secure hub also includes a storage area that retains address authentication information containing pairs of a physical address and a logical address of one or more devices. The secure hub further includes a transfer processing unit that determines whether the pair of the physical address and the logical address of the device, and the pair of the another device, each match any pair of the one or more devices when the address authentication information contains the physical address or the logical address of the device and the another device contained in the packet, and discards the packet when the pair of the device and the pair of the another device do not match any of the pairs of the one or more devices.

Abstract: The present disclosure relates to securely setting up mesh networks in a manner that does not require a physical network cable being attached to a wireless mesh device and that does not require transmitting unencrypted information wirelessly when a mesh network is setup. Methods and apparatus consistent with the present disclosure may allow a user to choose which mesh nodes can join a network and that user may specificity a custom profile that may include rules that may identify how mesh network identifiers are used, that identify passcodes/passphrases assigned to a particular network, may identify types of traffic that may be passed through particular 802.11 radio channels, or other parameters that may control how traffic is switched between devices in a particular wireless mesh network. This combined with dual factor verification and the use of different types of communication channels make wireless mesh networks easy to deploy and expand.

Abstract: Disclosed herein are system, method, and computer program product embodiments for utilizing parallel links to improve sub-network availability and latency performance for ATC traffic. An embodiment operates by receiving a generated message. The type of the generated message is determined, where the type is an air traffic control message or a non-air traffic control message. Based on the type of message, communication links are selected, where the communication links include parallel transmission links or a serial link. The method continues by copying the generated message and transmitting the copied message using the selected communication links. The method waits to receive an acknowledgement indicating receipt of the transmitted message. Upon identifying an acknowledgement, any of the copied messages not yet retransmitted are deleted.

Abstract: A mechanism is disclosed for implementing conditional commands carried by network data packets. A data flow including a data packet is received. The data packet includes a conditional command. A condition and a command are obtained from the conditional command. The mechanism determines that the condition is satisfied. Based on the determination that the condition is satisfied, the command is executed to alter handling of the data flow, alter handling of the data packet, or alter a context for the data flow.

Abstract: The mobile device stores a plurality of communication profiles comprising one or more local communication profiles and a global communication profile. The mobile device determines local access requirements for connecting to a local cellular network operator and determines whether the plurality of communication profiles comprises a local communication profile that satisfies the local access requirements. When the plurality of communication profiles does not comprise a local communication profile that satisfies the local access requirements: the mobile device connects to a global cellular network operator using the global communication profile; receives, from the global cellular network operator, a new local communication profile that satisfies the local access requirements and connects to the local cellular network operator using the new local communication profile.

Abstract: Systems and methods for preemptive adjustments of connections in a server connection pool are provided. In example embodiments, a number of quality of service engines analyze server connection pool metrics data to generate instructions to increase or decrease the number of connections in a connection pool, preemptively, before shortages or surpluses of connections occur. Corrective engines can analyze performance of the quality of service engines and can, when necessary, instruct the quality of service engines to modify their prediction mechanisms.

Abstract: An indication of an application to be installed on a local device is received. A request is transmitted to a remote server for information associated with the application. In some cases, in response to the receipt of a report from the remote server, a set of rules restricting behaviors of the application is implemented at the local device. In some cases, in response to the receipt of a report from the remote server, the installation of the application on the local device is prevented.

Abstract: A system and method of providing virtualized connectivity in a cloud services environment. A service provider network defines at least a first virtual private network and a second virtual private network for a respective first customer network and a second customer network. The service provider network includes at least one physical connection with a cloud services provider network where the at least one physical connection includes a first private virtual connection between the first virtual private network and the cloud services provider and a second private virtual connection between the second virtual private network and the cloud services provider.

Abstract: According to an embodiment of the invention, a data transmission device that includes a communicator and a controller is provided. The communicator is connected to a network and communicates with another device via the network. The controller transmits, from the communicator to the other device, a data set including data of at least one item in the case where the data of the at least one item has changed from the state of previous interval; and the transmitted data set includes the data having the changed state. The controller acquires the data of the at least one item at a first interval, and performs the transmitting of the data set to the other device at a second interval or at a frequency less than the second interval by updating the data of the at least one item at the second interval; and the second interval is slower than the first interval.

Abstract: Geographic proximity and network congestion are used to determine efficient routing of data in networks. If two devices are geographically close, then device-to-device communication may be possible. Data may thus be routed using device-to-device communication, which avoids consuming bandwidth in wide area networks and in cellular networks.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for surfacing anomalous network activity on a user interface. An example method provides, for presentation on a user device, a user interface for analyzing network traffic from a customer network. The user interface is populated with network traffic data from the customer network for display to the user. An interactive first filter that is configurable for filtering network traffic based on prevalence of the destination domains of the network traffic is displayed to the user. A first user input configuring the first filter to a first prevalence value is received. In response, the network traffic data is filtered in the user interface to only include network traffic data that has a destination domain that is less prevalent than the first prevalence value.

Abstract: A Fibre Channel over Ethernet (FCoE) network can be inexpensively extended by additional switches (220x) that do not have a full FCoE functionality, e.g. do not have full E-port functionality. The additional switches may or may not have unique Domain IDs. A virtual switch fabric can be extended by such additional switches.