Abstract: Methods and systems for managing secure IoT data are described. A docker container system for managing secure Internet of Things (IoT) device data includes a machine control container configured to collect IoT device data from device data producing machines, a translation container configured to translate collected IoT device data into a common semantic format, client-specific container applications configured to aggregate, filter, and process translated IoT device data to generate processed IoT device data, and send the processed IoT device data to at least one of client applications and data storage, and a secure container proxy service configured to apply security-based protocols to the processed IoT device data. The client-specific container applications deployed absent the security-based protocols.

Abstract: Systems and methods of invoking functions of agents via digital assistant applications are provided. Each action-inventory can have an address template for an action by an agent. The address template can include a portion having an input variable used to execute the action. A data processing system can parse an input audio signal from a client device to identify a request and a parameter to be executed by the agent. The data processing system can select an action-inventory for the action corresponding to the request. The data processing system can generate, using the address template, an address. The address can include a substring having the parameter used to control execution of the action. The data processing system can direct an action data structure including the address to the agent to cause the agent to execute the action and to provide output for presentation.

Abstract: The systems and methods described herein use a tag for collecting data associated with a content object of a content page. The tag may be a universal tag which can provide a single point of data collection and thereby reduce the number of network requests due to piggyback tags. The data collected from the content page may be communicated to a stream management system which can process the data and split the data into multiple data streams to be fed to a downstream system. The downstream system can further process the data and communicate to another downstream system. In some embodiments, the stream management system can access the repositories of its downstream system and veto the data flows created by the downstream system.

Abstract: An image processing apparatus is communicable with an information processing terminal, and operates based on a command from the information processing terminal when robotic process automation (RPA) for execution of a specific job is being executed in the information processing terminal. The image processing apparatus includes a storage section that stores a library preprogrammed to sequentially and automatically executes a plurality of processing included in a specific job, and a hardware processor that receives a command to execute the library from the information processing terminal, calls the library from the storage section, and executes the library.

Abstract: A system is provided for processing user queries by using an automated agent and a workflow. The system comprises reusable components that include states, tools, and/or data sources. Based on analysis of a query's content and goals, the system generates a workflow comprising a sequence of states, each state optimized for a subtask and dynamically bound to a selected tool(s) for that specific query. The workflow can provide a structured high-level control, while allowing for flexible selection of the tool(s) for each state of the workflow for that given query. The system produces a result using the structured workflow and selected tools, answering a user's original query.

Abstract: Devices and methods are provided for generating reminder notifications pertaining to time-sensitive media content. In various embodiments, the method includes the step or process of establishing whether time-sensitive media content is desirably viewed by an end user of the media receiver. If establishing that time-sensitive media content is desirably viewed by the end user, it is further determined whether a reminder notification should be generated for the time-sensitive media content at a specified time relative to a change in availability of the time-sensitive media content from a media content provider. If further determining that a reminder notification should be generated for the time-sensitive media content, the reminder notification is generated at the specified time; e.g., the media receiver may generate the reminder notification itself or transmit instructions to a user-carried electronic device to generate the notification reminder.

Abstract: A method including receiving, at an embedded browser embedded in an application, a request to access data designated by a uniform resource locator (URL) specified by the request. The method also includes intercepting, by a method interceptor, an application programming interface (API) call to access the data designated by the URL. Intercepting is performed prior to execution of the API call. The API call is performable by an API of the embedded browser. The method also includes comparing, by the method interceptor, a domain specified by the URL to an list of allowed domains. The method also includes blocking, by the method interceptor and responsive to the domain failing to be a member of the list of allowed domains, the API call. Blocking is performed by the method interceptor preventing the API call from passing to the API.

Abstract: Aspects of the disclosure provide methods and apparatus for accessing a Constrained Application Protocol (CoAP) server in a media scene description system. A CoAP request can be sent, by a media access function (MAF) of processing circuitry implementing the media scene description system using an application programming interface (API), to the CoAP server to request a media resource. The MAF can be configured as a CoAP client or a Hypertext Transfer Protocol (HTTP)-CoAP proxy. A CoAP response can be received, by the MAF using the API, from the CoAP server. In an example, the CoAP response includes the requested media resource. In an embodiment, the MAF is compatible with both the CoAP request according to a CoAP communication protocol and a proxy request according to an HTTP communication protocol.

Abstract: A system comprising one or more computers implements a virtual domain control unit/virtual electronic control unit service configured to deploy vehicle code packages to one or more of a plurality of supported virtual domain control unit/electronic control unit orchestration environments, which include both a local orchestration environment and one or more remote orchestration environments. In such orchestration environments, virtual domain control units and/or virtual electronic control units are implemented that execute code included in the vehicle code packages. In some embodiments, such virtual domain control units or virtual electronic control units allow computing capacity and/or data storage capacity of a vehicle to be augmented via remotely implemented virtual domain control units and/or remotely implemented virtual electronic control units.

Abstract: An example embodiment may involve persistent storage containing definitions of (i) assignments of bots to endpoints, (ii) software packages for execution by the bots, (iii) schedules for the bots to execute the software packages, and (iv) processes that associate the bots with the software packages and the schedules. This embodiment may also involve processors configured to: receive, from a computing device, a request for bot deployment, wherein the computing device includes a bot runtime; identify, in the processes, a bot assigned to an endpoint that is associated with the computing device, wherein the bot is associated with a software package and a schedule; and transmit, to the computing device, data including a representation of the bot, a copy of the software package, and a copy of the schedule, wherein reception of the data causes the bot to execute, using the bot runtime, the software package in accordance with the schedule.

Abstract: System and methods of providing automatic recording of a virtual meeting based on user activity is disclosed. The method includes determining if a virtual meeting has begun and if a user is available or attentive based on one or more sensors, including a webcam, a Bluetooth controller, an infrared camera, a proximity detector, and a microphone connected to the user device. When it is determined that the user is insufficiently available or attentive, a recording of the virtual meeting is started. A user attention status may be reassessed periodically, and the recording continues as long as the user remains insufficiently available or attentive. Once the user is determined to be available, the recording is ended.

Abstract: Systems, methods, and non-transitory computer-readable media can provide access to a first-level computing resource via a service catalog. In some instances, the first-level computing resource can be created by a first entity. Moreover, a second-level computing resource can be received. In some cases, the second-level computing resource can be created by a second entity based, at least in part, on the first-level computing resource. Access to the second-level computing resource can be provided via the service catalog. Relational information associated with the first-level computing resource and the second-level computing resource can be tracked.

Abstract: The present invention relates to a method and system for facilitating access to recorded data. The system comprises an interface and a processing device. The interface is arranged to receive data and the processing device is arranged to separate the received data in data subsets, compress each data subset and assign an identifier to each compressed data subset, thereby creating data units each comprising a compressed data subset and an associated identifier, the processing device further being arranged to establish an index on the basis of the assigned identifiers.

Abstract: A database system includes: a distributed processing apparatus 1; and a plurality of database apparatuses 2, in which the distributed processing apparatus 1 includes: a generation unit 12 that generates an execution plan for a query related to the database apparatuses 2 based on a security policy; a transmission unit 13 that divides the query in accordance with the execution plan and transmits instructions to the corresponding database apparatuses 2, the instructions including divided queries obtained by dividing the query and transfer destinations of execution results of the divided queries; and an output unit 14 that receives the execution result of the query, from the database apparatus 2, and outputs the execution result, the database apparatuses 2 each include an execution unit 22 that executes the divided query included in the instruction received from the distributed processing apparatus 1, and transmits the execution result to another database apparatus or the distributed processing apparatus serving

Abstract: A first playback is configured to (i) while connected to a local data network via a network interface using a first wireless networking protocol, receive a command to begin communicating with a second playback device in a group of playback devices for synchronous playback, (ii) based on the received command, begin communicating with the second playback device, (iii) determine that the second playback device is connected to the local data network using a second wireless networking protocol, (iv) based the determining, cause the second playback device to operate as a group coordinator of the group of playback devices, wherein the group coordinator (a) receives audio content from an audio source, and (b) transmits the audio content to the first playback device during rendering of the audio content by the group of playback devices, and (v) thereafter, receive the audio content from the second playback device.

Abstract: Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the storage unit, receive an indication that the storage unit requires a reboot of the IHS, and when the storage unit is experiencing minimal I/O usage, reset the storage unit using the firmware update image. The firmware update image is configured to perform rebootless firmware updates on the storage unit.

Abstract: The embodiments of the present disclosure relate to the technical field of content delivery network, and disclose a service processing method. The service processing method includes: receiving a customized service logic issued by a CDN user, receiving a user request corresponding to the customized service logic, loading the customized service logic and the user request to at least one execution process of a restricted namespace, where the restricted namespace is restricted to at least one of accessing CDN system files, calling key system interfaces, and using system resources, and processing and responding to the user request in the at least one execution process according to the customized service logic.

Abstract: A method and a system for providing one or more services to one or more user devices [202] in an IoT network in a scalable M2M (Machine to Machine) framework. The method comprises receiving a connection request from the one or more user devices [202] at a load balance of the IoT network, the connection request comprises at least a username comprising a cluster identifier. The load balancer [204] determines a cluster identifier based on the connection request and identifies at least one target cluster from the one or more clusters [206], said target cluster being associated with the identifier cluster identifier. The load balancer [204] routes the connection request to the at least one target cluster to provide the one or more services to the one or more user devices [202].

Abstract: The present disclosure is directed toward systems, methods, and non-transitory computer readable media for generating and managing multilocational data blocks, generating and summarizing content blocks within a virtual space interface, and generating and providing a content block browser as part of a virtual space platform. In some embodiments, the disclosed systems generate a multilocational data block that includes a block identifier that is tied to a source identifier for embedding digital content from a network location indicated by the source identifier. The disclosed systems can also generate block summaries from content blocks for presenting and modifying digital content embedded within the content blocks via block identifiers and source identifiers. In some embodiments, the content block system can provide a content-block-based web browser in the form of a virtual space that includes embedded content blocks that integrate webpage functionality.

Abstract: Systems described herein may dynamically add one or more proxy data protection agents to a cloud data storage system to process a data protection job. Upon completion of the job or at some other appropriate interval, the system can power down and decommission the proxy data protection agents and/or the virtual machines on which the data protection proxies reside according to a cleanup schedule (e.g., at hourly or minute intervals). In order to improve the allocation of computing resources, the system takes into account currently existing proxies or virtual machines when processing a backup request to determine the need for new proxies to service the backup request. In this manner the system can save costs and computing resources through efficient virtual machine deployment and retirement.

Abstract: A product authentication management system is described. The system comprising at least one relational Merkle tree data store, wherein the relational Merkle tree data store comprising at least one child node, the child node having a linked parent node, the parent node is tagged with a hash of the child node, and child node is tagged with an inverse hash of the parent node.

Abstract: Computer-implemented processes and systems described herein are directed to reducing volumes of data sent from edge devices to a data center. Each edge device runs an agent that collects event information generated by event sources of the edge device in a runtime interval. Each agent reduces the event information to relevant event information at the edge device in accordance with instructions received from a controller server of the data center. The relevant event information contains less information than the event information. Each agent forwards the relevant event information over the internet to external services executed at the data center, where the relevant event information is stored in a data storage device of the data center.

Abstract: Methods, systems, and computer program products of this disclosure provide a staged transmission service (e.g., a data transfer service for downloading or uploading) at a transfer node to a device in motion (DIM) wirelessly paired to the transfer node. When a DIM accepts a download task, the download node paired with the DIM receives a notice from the DIM of the acceptance. The download node retrieves, from a data repository, a dataset specified by the download task. A processing device of the download node may stage the dataset in a staged download service in preparation to transfer the dataset to the DIM. The processing device may initiate a transfer of at least a portion of the dataset to the DIM responsive to one or more data transfer properties satisfying a predefined set of conditions. The data transfer properties are determined based on a location and a movement of the DIM.

Abstract: Disclosed are an apparatus and method of managing network elements operating on a network. One example method may include transmitting a request to receive at least one activity parameter of a network element operating on the network and monitoring the at least one activity parameter of the network element. The method may include determining whether a usage value of the at least one activity parameter exceeds a predetermined threshold usage value and transmitting a corrective function message to the network element responsive to determining that the usage value of the at least one activity parameter exceeds the predetermined threshold value. The method may further include performing a corrective function to reduce the usage value of the at least one activity parameter.

Abstract: A client-side load balancer replaces standard name serving functions. An operating system on client machine receives a command to start a client application. The command includes a command line argument (a switch) based on which the operating system also starts the client-side load balancer, which intercepts name service requests. The client-side load balancer controls a cache memory with a list of IP addresses of available servers that are associated with a URL for a particular service request. In response to successive name service requests for the URL, the client-side load balancer provides IP addresses from the list in a strictly repetitive order. The order may be a Round Robin order, or any permutation of a Round Robin order.

Abstract: Systems and methods of operation are disclosed for media delivery systems operable to deliver requested media content to a client device by accessing media resources and media processing elements available on a network to which the media delivery system and client devices are linked. The media delivery system is operable to use the media resources and media processing elements to provide the requested media content in a requested format. The media delivery system may implement network-based media processing, and may use Immersive Technologies Media Format. The media delivery system may implement, such as in, or between, the application layer and network layer according to the OSI model, two control planes: a media control plane and a network control plane, and a data plane: a media data plane.

Abstract: A method of computing real-time metrics for automated workflows includes aggregating a set of ingested spans into a set of traces. The method further includes executing a set of rules to determine a set of workflows associated with the set of traces, wherein each workflow of the set of workflows is associated with a respective trace of the set of traces, and wherein each workflow is operable to group together activity associated with a client process within a respective trace. The method also includes assigning a name to each workflow based on the rules and computing real-time metrics for each of the workflows.

Abstract: Embodiments of the disclosure provide for improved integration of third-party devices in a system. Specifically, embodiments provide for improved integration management, including creation, deployment, maintenance, and monitoring of integrations utilizing integration templates. Embodiments include operation using a specially configured templating system that enables creation of integration template(s), management of integration template(s), searching of integration template(s), and initiation of such integration template(s) into integration instance(s) for particular client system(s), as well as updating of integration instance(s) based on integration template(s). Some embodiments provide dashboard(s) for accessing and/or managing integration instance(s) or associated information.

Abstract: Systems, methods, and computer-readable media are described for employing a machine learning-based approach such as adaptive Bayesian optimization to learn over time the most optimized assignments of incoming network requests to service function chains (SFCs) created within network slices of a 5G network. An optimized SFC assignment may be an assignment that minimizes an unknown objective function for a given set of incoming network service requests. For example, an optimized SFC assignment may be one that minimizes request response time or one that maximizes throughput for one or more network service requests corresponding to one or more network service types. The optimized SFC for a network request of a given network service type may change over time based on the dynamic nature of network performance. The machine-learning based approaches described herein train a model to dynamically determine optimized SFC assignments based on the dynamically changing network conditions.

Abstract: An asset, such as a module, may be used to provide access to a resource. The asset may include identifiers that indicate a type, version, or format of the asset. At least in some instances, an enterprise may desire to store and maintain assets of a particular type. Accordingly, the assets may be converted subsequent to receiving a request for the resource for which the asset is used to provide access. The converted assets may be output to a cache memory of a device attempting to access the resource and/or saved on a database to provide to additional computing devices attempting to access the resource.

Abstract: Permission control and management for messaging application bots is described. A method can include providing a messaging application, on a first computing device associated with a first user, to enable communication between the first user and another user, and detecting, at the messaging application, a user request. The method can also include programmatically determining that an action in response to the user request requires access to data associated with the first user, and causing a permission interface to be rendered in the messaging application, the permission interface enabling the first user to approve or prohibit access to the data associated with the first user. The method can include accessing the data associated with the first user and performing the action in response to the user request, upon receiving user input from the first user indicating approval of the access to the data associated with the first user.

Abstract: A method for identifying and indicating resource access faults associated with a webpage. The method includes receiving a machine-readable file that includes a plurality of instructions defining at least content and structure of a webpage. The method further comprises causing a browser to load the webpage based at least in part on the machine-readable file; determining resource utilization associated with the load of the webpage; identifying one or more resource access faults associated with the machine-readable file based at least in part on the determined resource utilization and a resource access instruction policy; for each of the one or more resource access faults, identifying an instruction of the plurality of instructions that corresponds to the particular resource access fault; and causing display of the one or more instructions.

Abstract: The present disclosure relates to digital experience development platforms and, more particularly, to an intelligent digital experience development platform configured to assist different users in the development, design and deployment of digital applications.

Abstract: Disclosed are various embodiments for automatic enrollment of Internet of Things (IoT) endpoints. An identity of an IoT endpoint is verified by an IoT gateway. The IoT gateway is configured to transmit, over a network, an enrollment request to an IoT management service. The enrollment of the IoT endpoint with the IoT management service is confirmed. A compliance policy for the IoT endpoint is retrieved from a command queue. The compliance policy is stored in the command queue until retrieved by the IoT gateway. The IoT gateway enforces the compliance policy on the IoT endpoint.

Abstract: Provided is a default gateway management method. The method includes that: a target attribute label of a target application container is detected in response to a default gateway application request; and in a case where the target attribute label exists and a target default gateway pool configured with the target attribute label exists in a gateway resource pool, a default gateway is allocated for the target application container from the target default gateway pool. Further provided are a gateway manager, a server, and a storage medium.

Abstract: The present disclosure describes dynamic intrusion detection and prevention in computer networks. The method includes generation of clusters of network sites based on a plurality of parameters related to operational features and network threats associated with the network sites. Data models are trained upon the clusters developed through the clustering. The data models are executed to predict a threat frequency of each network threat for each cluster. A difference between the predicted threat frequency of each network threat and corresponding baseline frequencies is determined. Dynamic rulesets are configured, based on the difference between the predicted threat frequency of each network threat and the corresponding baseline frequencies, for each cluster by integrating rules applicable to prevent each network threat.

Abstract: A method at a computing device within an Intelligent Transportation System, the method including detecting a traffic event at the computing device; determining no fixed roadside unit is available from the computing device; establishing an Internet Protocol connection from the computing device to a network node; and sending a traffic event message from the computing device to the network node, the traffic event message providing information for the traffic event.

Abstract: Systems and methods are provided to utilize information from a directory service to determine, at a layer-one network policy server, the appropriate layer-two network policy server to which an authentication request should be routed. For example, a first directory service group may be created that includes all users using a first authentication type, a second directory service group may be created that includes all users using a second authentication type, etc. The layer-one network policy server may periodically synchronize with the directory service to download information about users in the different directory service groups, update a markup language document with that information, and use the markup language document to help route incoming authentication requests to the correct layer-two network policy server for a particular authentication type. In addition, a priority may be set (and changed) by an administrator favoring one or more authentication types in a network.

Abstract: Personalized search results are provided to a user by sending to the user a direct marketing email having associated therewith one or more opt-out elements. Information related to the user's interaction with the one or more opt-out elements is maintained in a database. When a search request is thereafter submitted to a search engine by the user, the information related to the user's interaction with the one or more opt-out elements is used to inhibit inclusion within the search results of one or more items. In addition or alternatively, when the user accesses a search interface having a plurality of search options selectable to provide a search request to the search engine, the information related to the user's interaction with the one or more opt-out elements is used to inhibit inclusion within the search interface of one or more of the plurality of user selectable search options.

Abstract: Embodiments of the present invention provide methods, computer program products, and systems. Embodiments of the present invention can dynamically determine one or more endpoints to fulfill a user request. Embodiments of the present invention can select the dynamically determined one or more endpoints as the one or more endpoints that fulfill the user request. Embodiments of the present invention can execute the selected one or more endpoints to fulfill the user request.

Abstract: A hardware unit relies on non-flashable circuitry for improving security on a public or private network. The hardware unit can be added to a network without substantial modifications to the other devices already connected to the network. The hardware unit detects, and sometimes blocks or drops, data packets or frames that contain an instruction of a known file-sharing protocol other than a reading instruction. Thus, potential malware may be detected instantaneously by what it attempts to do, typically the creation, insertion, deletion, update, renaming, or writing of files. The hardware unit is used for screening files or emails stored on a client device and reporting threats.

Abstract: Implementations(s) for deploying application(s) are described. Responsive to an indication to install a specific instance of an application registered in a registry, first and second code are retrieved from the registry to cause the installation. Responsive to the first and second code, it is detected that the first code is executable to receive information that will be generated responsive to execution of the second code; the specific instance of the second part of the application is caused to be deployed on the second technology stack (TS) using the fourth code identified in the second code; the information is received; and a specific instance of the first part of the application is caused to be deployed on the first TS using the third code identified in the first code and to be configured to communicate with the specific instance of the second part of the application using the information.

Abstract: The technology disclosed relates to accessing a hosted service on a client device. In particular, the technology disclosed relates to receiving, on a client device of an entity's user, from a network security system, a forwarding rule for modifying requests for accessing a hosted service, receiving on the client device a request for accessing the hosted service, using the forwarding rule to modify the request for accessing the hosted service and generating a modified request for accessing the hosted service, and receiving on the client device a response from the network security system.

Abstract: The disclosure provides a power transmission system and method. The power transmission method includes: determining to perform a charging operation or a discharge operation between a battery module and a power supplying/receiving module according to a handshake procedure performed by a power transmission module. Performing the charging operation includes: adjusting a supply voltage outputted by the power supplying/receiving module; and converting the supply voltage into a charging voltage received by the battery module to charge the battery module. Performing the discharging operation includes: converting a discharge voltage outputted by the battery module into a required voltage required by the power supplying/receiving module to supply the power supplying/receiving module. The charging operation or the discharging operation is performed in a maximum power mode, an optimal efficiency mode or a combination thereof between the battery module and the power supplying/receiving module.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: A method for preparing a credential package includes providing access to a credential record of a plurality of credential records stored in a database system. The credential record includes information identifying a credential candidate and credential information associated with the credential candidate. The method further comprising receiving a credential document associated with the credential information, receiving credential document information associated with the credential document, and storing the credential document in a distributed ledger system comprising a plurality of nodes.

Abstract: Systems and methods are disclosed herein for opening files via local application.

Abstract: Techniques described herein relate to a method for distributed data management. The method may include making a first determination that data is written to a data structure of storage of a data host; obtaining, based on the first determination, data information associated with the data; making a second determination of intent corresponding to the data; generating a global name and metadata corresponding to the data, wherein the metadata comprises the intent; and publishing the global name and the metadata to a global name repository.

Abstract: An example network analysis system includes a memory storing telemetry data received from a plurality of network devices, the plurality of network devices includes extract entity information and connectivity information from the received telemetry data, wherein the entity information represents one or more network devices of the plurality of network devices and the connectivity information represents network connections between one or more devices of the plurality of network devices; and store the connectivity information and entity information as a network topology graph in a graph database, wherein the entity information is stored as nodes of the network topology graph and the connectivity information is stored as edges of network topology graph, and wherein the network topology graph represents an organization level topology of the organization network.

Abstract: The present disclosure provides systems and methods for on-device machine learning. In particular, the present disclosure is directed to an on-device machine learning platform and associated techniques that enable on-device prediction, training, example collection, and/or other machine learning tasks or functionality. The on-device machine learning platform can include a mode controller that allows a user to provide data input indicating whether to operate one or more applications on the device in a first collection mode (e.g., permission mode) for storing training examples or a second collection mode for (e.g., incognito mode) for not storing training examples. The training examples can be generated based on user interaction with the one or more applications and used to personalize one or more machine-learned models used by the application(s) by retraining the models using the user-specific training examples.