Abstract: A system and method for authenticating a location of a payment acceptance device is provided. The method comprises receiving a transaction request comprising merchant data, the merchant data identifying the payment acceptance device and location information identifying a location at which the transaction request is initiated; retrieving, from a database, a payment acceptance device identifier based on the merchant data, the payment acceptance device identifier identifying a location at which the payment acceptance device is registered; authenticating the location of the payment acceptance device by comparing the location information and the location identified by the payment acceptance device identifier.

Abstract: The document describes systems and methods for handling local (legacy) devices. A local cloud gateway comprises a plurality of interface connectors of different types to physically connect a plurality of these legacy devices to the cloud, comprising a plurality of distant servers. Developments describe the step of extracting the functional messages out of messages stemming from local legacy devices (e.g. protocol translators), secure communications, logical representations of legacy devices in the cloud (“twins”), administration options, various user interfaces (e.g. buzzer) for seamless configuration and use, the use of one or more actuators (retroactions on the physical world), etc. Software and/or hardware embodiments are described.

Abstract: An electronic control unit includes an installation execution unit that operates at least one of an application program or parameter data stored in a first data storage bank serving as an active bank and rewrites a second data storage bank serving as an inactive bank by writing, to the second data storage bank, update data acquired from an external device, and an activation execution unit that switches the active bank from the first data storage bank to the second data storage bank. The installation execution unit rewrites the second data storage bank during a vehicle being travelable or parked. The activation execution unit switches the active bank from the first data storage bank to the second data storage bank during the vehicle being parked.

Abstract: Techniques for HyperText Transfer Protocol (HTTP) POST method request translation are described. A router of a Content Distribution Network (CDN) receives an HTTP POST method request seeking to obtain a resource and sends the request to a request translation engine. The request translation engine, based on the request, generates a corresponding HTTP GET method request and sends it back to the router, which obtains a response object from an origin server or from one or more levels of cache implemented by the CDN. The response object is passed back via a response message to the router, which sends the response message back to the request translation engine. The request translation engine, in turn, sends the response message back to the router, which sends the response message back to the originating client.

Abstract: An enhanced L-band Digital Aeronautical Communications System (LDACS) may include LDACS ground stations, and LDACS airborne stations. Each LDACS airborne station may be configured to communicate with the LDACS ground stations using at least one cellular network security feature. For example, the at least one cellular network security feature may include a Long-Term Evolution (LTE) security feature.

Abstract: A system, method, and computer readable-storage medium establishing a communication path between a mobile device and a non-mobile device. The method includes controlling display of a webpage for display on the non-mobile device, receiving data input via the webpage, the data including a mobile number associated with the mobile device, transmitting a message using the mobile number received from the non-mobile device, the message including a hyperlink that includes a uniform resource locator (URL), in response to performing a function at the mobile device, receiving a response associated with the function performed, coordinating communication between the mobile device and the non-mobile device to transmit the response through a communication path to the non-mobile device, and controlling display of the response received from the mobile device in the webpage of the non-mobile device.

Abstract: A system, method and apparatus for augmenting a building control system domain. A sensor network platform can be configured to collect data based on measurements from sensors outside of a legacy building control system domain, and to present information based on the collected data to a known interface supported by the legacy building control system. In one embodiment, the collected data can undergo customized processing by an operation center outside of the legacy building control system domain.

Abstract: A network monitoring system is provided that includes a processor and a memory coupled to the processor. A plurality of services provided by a network operator is identified. A plurality of Key Performance Indicators (KPIs) associated with the identified plurality of services is calculated on a per service basis. Individual services provided by the network operator are characterized based on the calculated plurality of KPIs. A root cause of service level failures for one or more of the plurality of services is identified, in response to determining that at least one of the characterized service levels does not meet predefined service level objectives for the one or more of the plurality of services.

Abstract: A device comprises processing circuitry configured to identify a telemetry packet indicating telemetry data for a plurality of packets output by a network device of a plurality of network devices and select a source identifier for the network device from a plurality of source identifiers. The processing circuitry is further configured to modify the telemetry packet to further indicate the selected source identifier and output the modified telemetry packet.

Abstract: Described herein are systems, methods, and software to enhance packet processing. In one implementation, a host computing element identifies a packet from a process executing on the host computing element. In response to identifying the packet, the host computing element determines whether the packet originates from a container namespace corresponding to a container on the host computing element or a host namespace corresponding to the host computing element. If the packet originates from a container namespace, the host computing element may determine supplemental information for the container associated with the container namespace, and process the packet based on the supplemental information.

Abstract: A secure executable container executed by an endpoint device establishes a two-way trusted relationship in a secure peer-to-peer data network with a user entity, generates an endpoint identifier for the endpoint device in the secure peer-to-peer data network, and associates the endpoint device with a federation identifier identifying the user entity in the secure peer-to-peer data network. The secure executable container also: establishes a two-way trusted relationship between the endpoint device and a target network device; securely obtains, via the secure peer-to-peer data network, a user interface element definition describing a user interface element executable by the target network device; and supplies the user interface element definition to a secure keyboard resource executed in the endpoint device, causing the secure keyboard resource to generate a local representation of the user interface element for control of the target network device via the secure keyboard resource.

Abstract: Example caching systems and methods are described. In one implementation, a method identifies multiple files used to process a query and distributes each of the multiple files to a particular execution node to execute the query. Each execution node determines whether the distributed file is stored in the execution node's cache. If the execution node determines that the file is stored in the cache, it processes the query using the cached file. If the file is not stored in the cache, the execution node retrieves the file from a remote storage device, stores the file in the execution node's cache, and processes the query using the file.

Abstract: Techniques for location based security in service provider networks (e.g., service provider networks for mobile subscribers) are disclosed. A system/process/computer program product for location based security in service provider networks includes monitoring network traffic on a service provider network at a security platform to identify a location for a new session; associating the location with the new session at the security platform; and determining a security policy to apply at the security platform to the new session based on the location.

Abstract: This disclosure presents several embodiments of a device configured to perform inband telemetry tracking. The device is configured to store a flow table that tracks metrics of a detected packet flow that passes through the device. More specifically, the flow table tracks several telemetry metrics, each telemetry metric being specific to a tracking time period, and tracking statics based only on packets of the packet flow that were received during that specific time period. At an end of an export time period (which is longer than a tracking time period), the device transmits all stored telemetry metrics from the flow table to a collector.

Abstract: A set of network traffic among a plurality of legacy applications is monitored. From the set of network traffic, a communication graph is generated for the plurality. From the communication graph, a set of migratable applications within the plurality is identified. The set of migratable applications is migrated to a cloud edge layer, and a user is notified of the migration.

Abstract: A method comprises receiving, at a vehicle system of a vehicle, sensor data from one or more sensors; detecting an object based on the sensor data; determining whether a dynamic map maintained by a remote computing device includes the detected object; upon determination that the dynamic map includes the detected object, determining a remaining time-to-live associated with the detected object based on data associated with the dynamic map; and transmitting data about the detected object to the remote computing device if the determined remaining time-to-live associated with the detected object is less than a predetermined threshold time.

Abstract: Systems, methods, and computer-readable media for offloading session management processing into a forwarding plane. In some examples, a subscriber is coupled to a network endpoint through a session manager during a network session of the subscriber in a network environment. A session manager offloading system of the session manager can be maintained in a vector packet processing system in a forwarding plane of the network environment. The session manager offloading system can be configured to offload processing from the session manager into the forwarding plane. Further, at least a portion of subscriber traffic in a stream between the subscriber and the network endpoint through the session manager can be intercepted. Subsequently, the at least the portion of the subscribed traffic that is intercepted can be processed at the session manager offloading system as part of offloading the processing from the session manager into the forwarding plane.

Abstract: A quick action menu system may be configured to perform operations that include: causing display of a graphical user interface (GUI) at a client device, the GUI comprising a display of a persistent icon at a position within the GUI; receiving a selection of the persistent icon from the client device; accessing user profile data associated with a user of the client device responsive to the input that selects the persistent icon; and causing display of a quick actions menu to display content associated with the user profile data.

Abstract: Techniques for cellular Internet of Things (IoT) battery drain prevention in mobile networks (e.g., service provider networks for mobile subscribers) are disclosed. In some embodiments, a system/process/computer program product for cellular IoT battery drain prevention in mobile networks includes monitoring network traffic on a service provider network at a security platform to identify a misbehaving application based on a security policy, wherein the service provider network includes a 4G network or a 5G network; extracting subscription identifier information for network traffic associated with the misbehaving application at the security platform; and enforcing the security policy at the security platform to rate limit paging messages sent to an endpoint device using the subscription identifier information and based on the security policy.

Abstract: Systems and methods are provided herein for implementing multi-table OpenFlow flows that have combinations of packet edits. This may be accomplished by a network device receiving a first flow entry with a first set of actions to be installed into a flow table. The network device may determine that the first set of actions includes edits to a plurality of fields of a matched data packet. In response, the network device may change the first set of actions of the first flow entry to edit a first field of the data packet and create a second flow entry with a second set of actions to edit a second field of the data packet. The network device may install the first and second flow entries into one or more flow tables of the network device.

Abstract: One embodiment provides an apparatus. The apparatus includes client traffic management (CTM) logic. The CTM logic is to trigger implementation of a selected network traffic flow related to the client device, the triggering based, at least in part, on a network traffic flow related to the client device. The network traffic flow is associated with a connection and includes at least one subflow. Each subflow is carried by a respective path associated with the connection. The triggering includes at least one of constraining and/or adjusting an allowable throughput at a service provider for one or more of the at least one subflow. The selected traffic policy is to be implemented in a transport layer.

Abstract: Techniques are disclosed for session-based routing within Open Systems Interconnection (OSI) Model Layer-2 (L2) networks extended over Layer-3 (L3) networks. In one example, L2 networks connect a first client device to a first router and a second client device to a second router. An L3 network connects the first and second routers. The first router receives, from the first client device, an L2 frame destined for the second client device. The first router generates an L3 packet comprising an L3 header specifying L3 addresses of the first and second routers, a first portion of metadata comprising L2 addresses for the first and second client devices, and a second portion of metadata comprising L3 addresses for the first and second client devices, and forwards the L3 packet to the second router. The second router recovers the L2 frame from the metadata and forwards the L2 frame to the second client device.

Abstract: Test cases for existing workflows (or workflows under test) may be created and executed. A test case may be created for a workflow in production or one or more parts of the workflow, and the created test case for the workflow, or the one or more parts of the workflow, may be executed to identify environmental and/or automation issues for the workflow. A failed workflow test may be reported when the environmental and/or automation issues are identified.

Abstract: A browser receives a web page that includes a script that is configured to control subsequent requests of the browser for at least the web page and caches a first portion of the web page that includes reference(s) to other web resource(s). A subsequent request for the web page is dispatched to the script which returns the cached first portion of the web page to the browser and a request for the full web page is made. Request(s) are also transmitted for the web resource(s) referenced in the first portion of the web page without waiting for the full web page to be received. When the full web page is received, if the first portion of the page matches the corresponding portion of the full page, that corresponding portion is removed from the full page and the remaining page is returned to the browser.

Abstract: A method and computer readable medium for exploring similar users and items of a media service includes generating a user interface. The user interface displays a user selectable indicia representing a similar member function for allowing a user to search a media service for at least one other user. The one other user has a degree of similarity with respect to the searching user. Another method includes facilitating the search of such a similar user within a media service.

Abstract: A method for determining whether a given run of a process having a defined protocol is on a trajectory for successful completion is provided. The method includes the step of initiating a run of the defined protocol of the process. During the initiated run, obtaining information reflecting variables that may affect the quality of the process. A preferred trajectory model for achieving a successful implementation of a process is also obtained. The information reflecting the variables that affect the quality of the process are compared with the preferred trajectory model. This comparison allows a determination of offset of the value of the determined variables to the value of the same variables of the preferred trajectory model. The magnitude or amount of offset is indicative of the whether the run initiated in step is on a path or trajectory for success.

Abstract: In various embodiments, a gateway application generates an outgoing Hypertext Transmission Protocol (HTTP) request based on an incoming HTTP request. In operation, the gateway application receives the incoming HTTP request and identifies an upstream service based on at least one of an HTTP method and a header included in the incoming HTTP request. Subsequently, the gateway application generates an outgoing HTTP request based on the upstream service and the incoming HTTP request. Finally, the gateway application issues the outgoing HTTP request. The outgoing HTTP request causes the upstream service to perform an action requested in the incoming HTTP request. Advantageously, the gateway application enables underlying upstream services to perform actions specified via incoming HTTP requests without directly exposing the upstream services to users.

Abstract: In one embodiment, a method comprises: receiving, by a secure executable container executed by an endpoint device, a request from an originating entity for initiating a secure peer-to-peer communication with a second network entity via a secure data network, the originating entity and second network entity having established a two-way trusted relationship in the secure data network; processing, by the secure executable container, the request based on providing the originating entity sole and exclusive authority to control the secure peer-to-peer communication, including cryptographically secure termination and removal of the secure peer-to-peer communication from any network device in the secure data network; and initiating, by the secure executable container, the secure peer-to-peer communication by securely sending, to the second network entity via the secure data network, a secure peer-to-peer invitation for the second network entity to join the secure peer-to-peer communication.

Abstract: A system includes a processor configured to determine that a high-speed data transfer is desired for a vehicle. The processor is also configured to identify parking, within a predefined distance from a destination location, which overlaps with identified areas of high-speed coverage meeting a predefined speed and display visual indicators of the identified parking, when a vehicle is within a predefined distance from the identified parking.

Abstract: A method may include transmitting multiple antenna beams to an unmanned aerial vehicle (UAV) and determining a location of the UAV. The method may also include identifying a network slice to service the UAV, assigning the identified network slice to the UAV and performing antenna beam management for the UAV while the UAV is in flight.

Abstract: Methods, systems, and computer readable media for application programming interface (API) related groupings involving common API framework (CAPIF) are disclosed. One example method for using an API exposure function (AEF) group comprises: at a CAPIF node including at least one processor: receiving an AEF group creation message for creating an AEF group associated with an API invoker, wherein the AEF group creation message includes AEF group information indicating one or more service APIs usable by an API invoker; storing the AEF group information; determining, using the AEF group information, service API information associated with the AEF group for the API invoker; and providing the service API information to the API invoker.

Abstract: A communication control apparatus authenticates a user based on an authentication request transmitted from virtual Customer Premise Equipment (CPE) in response to a request of the user who accesses the virtual network. The communication control apparatus refers to information, held by an operation management system of a service operator, about the user of the virtual network. The communication control apparatus refers to information, collected by a collector, about a network slice constructed in the virtual network. The communication control apparatus selects a network slice through which data flow of the user. The communication control apparatus notifies the virtual CPE of the selected network slice.

Abstract: Embodiments of a software services platform with a services infrastructure that allows standalone service to be run in association with other services deployed on a deployment platform. The service infrastructure and services may cooperate to ensure that that communications (associated with the standalone service are routed to that standalone service while communications for other services deployed in the software services may also continue communicating to receive and servicing requests for those services.

Abstract: In one embodiment, a method comprises: generating, by a secure executable container executed by an endpoint device in a secure peer-to-peer data network, a secure private key and a first secure public key; first establishing, by the secure executable container, a two-way trusted relationship with a second endpoint device, including receiving a second secure public key of the second endpoint device; second establishing, by the secure executable container, a two-way trusted relationship with a replicator device, including receiving a third secure public key of the replicator device; generating, by the secure executable container using the second secure public key, a secure data packet destined for the second endpoint device, including generating an encrypted payload for the secure data packet; and generating and outputting to the replicator device, by the secure executable container using the third secure public key, a secure tunneled data packet, including encrypting the secure data packet.

Abstract: The present application provides a screen projection method, a receiving end device, and a sending end device. The receiving end device performs active wireless scanning and searching on the sending end device, and when the sending end device is scanned, establishes a wireless connection with the sending end device; and once the wireless connection is established, the receiving end device automatically sends a screen projection code to the connected sending end device, and the sending end device may prompt a user to perform a screen projection operation by means of displaying the screen projection code. In this process, there is no need for the user to perform complicated manual operations, the sending end device can automatically acquire the screen projection code, and prompts the user to perform the screen projection operation in a timely manner, thereby improving the timeliness of the screen projection operation.

Abstract: A system, method, and computer-readable medium for consolidating multiple databases into a single or a smaller number of databases is described. An improved structure of target database may be achieved by removing constraints used when creating legacy databases. According to some aspects, these and other benefits may be achieved by combining multiple source tables into a single target table with errors being identified and addressed during the creation of the instructions to generate the target table. In implementation, this may be effected by converting values from a source table and values from a target table into normalized versions of those values and then comparing the normalized values. A benefit includes verifying that the data from the source table is being properly reflected in the target table.

Abstract: A computer system monitors usage of an application on a computing device to identify one or more pre-fetch situations corresponding to a user of the computing device. The computer system determines whether the computing device is in a situation that corresponds to at least one of the identified one or more pre-fetch situations. In response to determining that the computing device is in the situation that corresponds to the at least one of the identified one or more pre-fetch situations, the computer system causes data corresponding to the application to be pre-fetched.

Abstract: An extended service-function chain (SFC) proxy is hosted on a network node and connected to a service path formed by one or more network nodes hosting a chain of service-functions applied to packets traversing the service path. The packets each include a service header having a service path identifier and a service index. A packet of a traffic flow destined for a service-function is received from the service path and sent to the service-function. An indication to offload the traffic flow is received from the service-function. The indication is stored in a flow table having entries each identifying a respective traffic flow. A subsequent packet of the traffic flow is received from the service path. The flow table is searched for the indication to offload the traffic flow. Upon finding the indication, the service-function is bypassed, and the subsequent packet is forwarded along the service path.

Abstract: To deliver up-to-date, coherent user data to applications upon request, the disclosed technology includes systems and methods for caching data and metadata after it has been synchronously loaded—for future retrieval with a page load time close to zero milliseconds. To provide this experience, data needs to be stored as locally to a user as possible, in the cache on the local device or in an edge cache located geographically nearby, for use in responding to requests. Applications which maintain caches of API results can be notified of their invalidation, and can detect the invalidation, propagate the invalidation to any further client tiers with the appropriate derivative type mapping, and refresh their cached values so that clients need not synchronously make the API requests again—ensuring that the client has access to the most up-to-date copy of data as inexpensively as possible—in terms of bandwidth and latency.

Abstract: Methods, systems and computer program products for content management systems. In a computing environment having multiple interconnected computer systems, one or more network communication links between a first computer system that hosts a first application and a second computer system that hosts one or more second applications are established. The first computer system hosts a plurality of shared content objects that can be operated over by any second applications that are interfaced with the first application. Particular interaction events over a shared content object take place at the second applications and/or at the interfaces between the first and second applications. Such particular interaction events are recorded as they occur, after which, based on event attributes associated with the particular interaction events, at least one workflow of the first application is selected. The selected workflow of the first application is executed to perform operations over the shared content object.

Abstract: Scaling storage resources in a storage volume, including: monitoring a usage of a volume in a storage pool that includes one or more cloud-based storage systems; determining that the usage of the volume exceeds a threshold usage; and based on the determination, expanding the resources that are included in the storage pool for servicing the volume, including: instantiating one or more new virtual drives that are included in the one or more cloud-based storage systems; and adding the one or more new virtual drives to the storage pool.

Abstract: Systems and methods for detecting malicious clients through inspecting application properties are described. These may include requesting application properties from a client application, receiving a digital fingerprint from the client device, determining whether the digital fingerprint indicates that the client application is likely a malicious client, and taking a mitigation action based on determining that the client application is likely a malicious client.

Abstract: An apparatus in a first computing device is provided. During operation, the apparatus can present, to a processor of the first computing device, a virtual interface switch (VIS) coupled to an interface port of the processor. The apparatus can present to the processor that a target device, which is reachable via a remote apparatus of a second computing device, is coupled to the VIS. The apparatuses can be coupled via at least a first fabric and a second fabric. A respective fabric may facilitate communication based on a fabric switching protocol. The apparatus can obtain a set of packets, which can be issued from the interface port via the VIS and directed to the target device. The apparatus can then forward, to the remote apparatus, a first subset of the set of packets via the first fabric and a second subset of the set of packets via the second fabric.

Abstract: A building management system includes an entity database, a software defined gateway, and an entity service. The entity database stores a plurality of interconnected smart entities including object entities representing a plurality of physical devices, people, or spaces and data entities representing data associated with the plurality of physical devices, people, or spaces. The smart entities are interconnected by relational objects indicating relationships between the object entities and the data entities. The software defined gateway is configured to receive information technology (IT) data and operational technology (OT) data from a plurality of different data sources. The entity service is configured to create a new smart entity in the entity database or update an existing smart entity in the entity database using the IT data and the OT data.

Abstract: A device receives policy information indicating a policy to be implemented for an application hosted by multiple cloud domains, and receives, from the multiple cloud domains, different application resource tags and addresses associated with the application. The device maps the different application resource tags to a generic identifier, and associates the policy with the generic identifier and with the addresses associated with the application. The device provides, based on associating the policy with the generic identifier and with the addresses associated with the application, the policy to the multiple cloud domains to permit the multiple cloud domains to implement the policy.

Abstract: Provided are methods and systems for dynamic connection management. The method can comprise establishing a persistent connection with a web service, receiving a notification of a request for a communication session with a computing device via the web service, registering with a communication processing system to receive the request for the communication session, and establishing the communication session with the computing device via the communication processing system. When the communication session ends, the user device can be deregistered and free up the resources on the computing device.

Abstract: An electronic device includes a user interface, the user interface being communicably coupled to processing circuitry configured to operate a research browser plugin, the research browser plugin, via the processing circuitry, being configured to determine a user's access permissions to a document, the document being stored at network locations in document versions that are categorized by a predetermined hierarchy. Additionally, the research browser plugin is configured to generate, on the user interface, a one-click control and associate the one-click control with a resource locator (e.g., URL) of a selected document version, the selected version being the highest version in the hierarchy to which the user has access permissions, and retrieve the document associated with the resource locator in response to one-click activation of the one-click control.

Abstract: According to one configuration, a wireless base station has access to a cache (repository) that stores a stream of content including multiple segments of content. The cache stores (caches) a first segment of content from the received stream of content. The first segment of content is cached in the repository for a window of time during which the first segment of content is temporarily available from the wireless base station. In response to receiving a respective request from each mobile communication device in a group of multiple mobile communication devices requesting the first segment of content during the window of time, a wireless base station communicates the first segment of content from the cache to each mobile communication device in the group.

Abstract: Methods and systems for multi-modalities integration via speech, chatbot, low-code, and no-code enterprise integration. Methods and systems for application integration for both application integration and macro/system aware integration technology. Methods and systems for integrating services between different software systems, the computer having a processor and a data repository including storing one or more service connectors configured to connect an origin software system to a target software system in the data repository, receiving integration instructions, the integration instructions including at least one of the origin software system, a directionality of the integration, the directionality indicating whether the integration is unidirectional or bidirectional, a frequency of integration, and the target system software, and performing the integration from the origin software system to the target software system using the one or more service connectors according to the integration instructions.

Abstract: Systems and methods of policy shaping for an aggregated network include (A) receiving a first request to deliver first content to a first device being transported by a vehicle; (B) receiving a second request to deliver second content to a second device being transported by the vehicle; (C) determining (i) a first communication protocol corresponding to the first request and (ii) a second communication protocol corresponding to the second request; (D) determining (i) a first count corresponding to the first content and (ii) a second count corresponding to the second content; and (E) applying (i) a first policy, based on the first communication protocol and the first count, to a first forward data stream including the first content and (ii) a second policy, based on the second communication protocol and the second count, to a second forward data stream including the second content.