Abstract: The present disclosure relates to capturing snapshots of key management data and storing the snapshots for efficient re-creation of the key management data in the event of an outage at one or more nodes. A snapshot orchestrator can request snapshot instances from each of the series of nodes across one or more regions in a cloud infrastructure service. Each snapshot instance can provide a plurality of modifications to a plurality of client keys maintained by each of the series of nodes. The snapshot orchestrator can obtain the snapshot instances and corresponding metadata and verify the snapshot instances received from the series of nodes. The snapshot orchestrator can store the verified snapshot instance and corresponding metadata at a storage node. This can allow for subsequent retrieval of the snapshot instance and recreating the log record and modifications to the plurality of keys at any of the series of nodes.

Abstract: A method may include receiving, at a listener channel, an event described by a message, determining, using the message, a subscriber of the listener channel, determining, using a delivery preference of the subscriber, an adapter to deliver the message, and dispatching, via the adapter, the message to the subscriber.

Abstract: The present disclosure provides a method for syncing data of a computing task across a plurality of groups of computing nodes, each group comprising a set of computing nodes A-D, a set of intra-group interconnects that communicatively couple computing node A with computing nodes B and C and computing node D with computing nodes B and C, and a set of inter-group interconnects that communicatively couple a computing node A of a first group of the plurality of groups with a computing node A of a second group neighboring the first group, a computing node B of the first group with a computing node B of the second group, a computing node C of the first group with the computing node C of the second group, and a computing node D of the first group with a computing node D of the second group, the method comprising: syncing across a first dimension of computing nodes using a first set of ring connections, wherein the first set of ring connections are formed using inter-group and intra-group interconnects that communica

Abstract: Systems and methods for providing a collaboration work management platform that facilitates differentiation between users in an overarching group and one or more subsets of individual users within the overarching group to enable the users within the individual subsets to use the collaboration work management platform differently users within the other subsets, the method being implemented by a computer system including one or more physical processors configured by machine-readable instructions are disclosed. Exemplary implementations may: manage environment state information for maintaining a collaboration environment.

Abstract: A host, a storage system, and an operating method of the host are provided. The host includes a host memory configured to store a tree structure including a leaf node and an index node, an index management module configured to manage an index based on the tree structure and generate a first log corresponding to the leaf node based on a first update request corresponding to a first key-value entry included in the leaf node, and a device driver configured to generate a first write command corresponding to the first log and transmit the generated first write command to a key-value storage device, so as to store the first log in the key-value storage device. The index management module is configured to generate a first new key-value entry, the first new-key value entry including a first value updated based on the first update request, as the first log.

Abstract: A standardisation method and apparatus for erroneous transactions: receiving an erroneous service invocation request sent by a client terminal, and converting the erroneous service invocation request into a standard format exchange message; on the basis of a preset certificate database, encrypting sensitive data areas in the exchange message to generate encrypted message areas; signing key fields in the exchange message to generate signed message areas; and, by means of a two-way authenticated secure communication link, sending the exchange message comprising the encrypted message areas and the signed message areas to a UnionPay erroneous transaction network.

Abstract: A technique for operating a processing device is disclosed. The method includes irreversibly activating a testing mode switch of the processing device; in response to the activating, entering a testing mode in which normal operation of the processing device is disabled; receiving software for the processing device in the testing mode; based on whether the software is verified as testing mode-signed software, executing or not executing the software.

Abstract: In some aspects, a methods and systems may combine asynchronous and synchronous messaging infrastructure such that a single system can send messages both asynchronously and synchronously when needed. A system may implement an asynchronous system that is able to determine whether a message should be sent asynchronously or synchronously. If a message is to be sent synchronously, the asynchronous system may emulate a synchronous system by holding a network connection open and/or removing a default callback uniform resource locator (URL) from a data structure used in sending the message.

Abstract: Systems, methods, and storage media for providing a dashboard for a collaboration work management platform are disclosed. Exemplary implementations may: manage environment state information for maintaining a collaboration environment; obtain a first set of units of work where a first user is associated with first units of work within the first set but not assigned to the first units of work; and/or effectuate presentation of a dashboard displaying work information for the first units of work within the first set and indicating titles for the first units of work within the first set, statuses of the first units of work within the first set, and user information for the one or more other users assigned to the first units of work within the first set.

Abstract: A cable distribution system that includes a headend connected to a plurality of customer devices through a transmission network that includes a remote fiber node that converts digital data to analog data suitable for the plurality of customer devices. The remote fiber node receiving a downstream external protocol interface packet that includes a header portion and a data portion in memory. The remote fiber node encoding and transmitting the data portion to at least one of the plurality of customer devices, wherein the data portion is transferred from the memory using direct memory access based upon a buffer descriptor for the encoding.

Abstract: Techniques and apparatuses are described that implement a smart-device-based radar system capable of detecting a frame-of-reference change. In particular, a radar system includes a frame-of-reference machine-learned module trained to recognize whether or not the radar system's frame of reference changes. The frame-of-reference machine-learned module analyzes complex radar data generated from at least one chirp of a reflected radar signal to analyze a relative motion of at least one object over time. By analyzing the complex radar data directly using machine learning, the radar system can operate as a motion sensor without relying on non-radar-based sensors, such as gyroscopes, inertial sensors, or accelerometers. With knowledge of whether the frame-of-reference is stationary or moving, the radar system can determine whether or not a gesture is likely to occur and, in some cases, compensate for the relative motion of the radar system itself.

Abstract: A cyclic redundancy code (CRC) update device includes an input coupled to obtain an old CRC that corresponds to an old header of a communication packet, a CRC storage device to store CRC coefficients, a CRC calculator coupled to receive a modified old header of the communication packet and calculate a new CRC on the modified old header, and a polynomial multiplier coupled to the CRC storage device to receive the new CRC, obtain a corresponding coefficient from the CRC storage device, and generate an update for the CRC of the frame.

Abstract: Methods of cloning data backup across namespaces are disclosed. One or more source files are cloned from a first namespace to a second namespace, as one or more destination files. When the cloning of the source file(s) is performed, a data structure including source file information and destination file information is generated. A source synthetic file is cloned from the first namespace to the second namespace, as a destination synthetic file, where the source synthetic file uses the source file(s) as one or more base files on the first namespace. When the cloning of the source synthetic file is performed, the data structure is looked up to obtain the source file information and the destination file information. Based on the source file information and the destination file information, synthetic information of the destination synthetic file is updated to use the destination file(s) as one or more base files on the second namespace.

Abstract: Systems and methods for coordinating network connectivity and communication between proxy servers, exit-nodes and client modules are disclosed. In one aspect, the proxy infrastructure enables network connectivity between exit-nodes and proxy-nodes without the need of any proxy-gateways or middleware entities to delegate the connections. Proxy-nodes in the proxy infrastructure accept connections with exit-nodes based on geographical proximity, proxy-node metrics, such as server loads and clients' frequent preferences. Further, a single instance of proxy-node can communicate and instruct another instance of proxy-node, to service the client request via a suitable exit-node. Further still, a single instance of proxy-node can communicate and instruct another instance of proxy-node to redirect a suitable exit-node towards the first proxy-node in order to service the client request.

Abstract: The present disclosure generally relates to techniques for managing contextual transactions. In some examples, at a sender electronic device, a first user provides authorization to purchase an item for a second user. In some examples, at a recipient device, the second user selects one or more attributes for the item and requests to claim the item. In some examples, an electronic device displays a representation of an item and a purchase affordance for purchasing the item using a payment system that is available on the electronic device.

Abstract: A system which comprises a series of native applications, suited to run on mobile devices, and a series of web-based applications for which functionality and processing are optimized. The native applications and the web-based applications are coordinated to optimize processes of acquiring, storing and disseminating data for speed, integrity and security.

Abstract: The invention relates to a method, a non-transitory computer-readable storage medium and an apparatus for programming data into flash memory. The method includes: generating a front-end parameter set, a mid-end parameter set and a back-end parameter set for each data-programming transaction; transmitting the front-end parameter set of each data-programming transaction to a routing engine, thereby enabling the routing engine to drive a host interface (I/F) to obtain from the host side; transmitting the mid-end parameter set of each data-programming transaction to an accelerator, thereby enabling the accelerator to drive the RAID engine to encrypt raw data or generate parity-page data according to multiple pages of the raw data; and transmitting the back-end parameter set of each data-programming transaction to the accelerator, thereby enabling the accelerator to drive a data access engine to program source data into a designated physical address of a flash module.

Abstract: A selection device includes a storage unit and a selection unit. The storage unit stores the write time and the read time of each of a plurality of nodes. The selection unit selects a first response condition in response to a data write request on the basis of the write time of each of the plurality of nodes such that the response time for the data write request becomes shorter than a requirement value of the write time and the number of nodes in which writing has been completed increases. The selection unit selects a second response condition in response to a data read request on the basis of the first response condition and the read time of each of the plurality of nodes such that the response time for the data read request becomes shorter than a requirement value of the read time.

Abstract: A data storage device including a non-volatile memory device including one or more non-volatile memory sets and one or more endurance groups. Each of the endurance groups includes at least one of the non-volatile memory sets. The data storage device includes a controller coupled to the non-volatile memory device. The controller is configured to receive a pending command message from a host interface, where the received pending command message includes a command configured to be executed by a first endurance group of the number of endurance groups. The controller is further configured to determine an assigned command slot for storing the command, where the assigned command slot is selected form one of a private command slot pool associated with the first endurance group or a shared command slot pool, fetch the command from the host device, and store the fetched command in the assigned command slot.

Abstract: A system and corresponding method queue work within a virtualized scheduler based on in-unit accounting (IUA) of in-unit entries (IUEs). The system comprises an IUA resource and arbiter. The IUA resource stores, in association with an IUA identifier, an IUA count and threshold. The IUA count represents a global count of work-queue entries (WQEs) that are associated with the IUA identifier and occupy respective IUEs of an IUE resource. The IUA threshold limits the global count. The arbiter retrieves the IUA count and threshold from the IUA resource based on the IUA identifier and controls, as a function of the IUA count and threshold, whether a given WQE from a given scheduling group, assigned to the IUA identifier, is moved into the IUE resource to be queued for scheduling. The IUA count and threshold prevent group(s) assigned to the IUA identifier from using more than an allocated amount of IUEs.

Abstract: Disclosed herein are various embodiments for a sensitive data management system. An embodiment operates by receiving an HTTP request for an interface. A plurality of tiles, including both tiles associated with sensitive data and non-sensitive data, are identified for display on the interface. An access profile associated with providing access to the sensitive data is identified, the access profile including one or more requirements, associated with the HTTP request. Request information in the HTTP request corresponding to the one or more requirements of the access profile is identified. The identified request information is compared to the one more requirements of the access profile. A determination is made whether the identified request information satisfies the one more requirements of the access profile based on the comparing. At least one of: the second tile or the first tile and the second tile are provided for display on the interface based on the determination.

Abstract: Systems and methods for managing a storage system are disclosed. The storage system includes a first storage device and a second storage device different from the first storage device. A first storage operation is received for a first portion of a file, and a data structure associated with the file is identified. Based on the data structure, the first storage device is identified for the first portion of the file. The first storage operation is transmitted to the first storage device. In response to the first storage operation, the first storage device updates or accesses the first portion of the file.

Abstract: Example apparatus to perform service failover as disclosed herein are to detect a failure condition associated with execution of a service by a first compute platform, the execution of the service responsive to a first request. Disclosed example apparatus are also to send a second request to a second compute platform to execute the service. Disclosed example apparatus are further to monitor a queue of the first compute platform for a response to the first request, the response to indicate execution of the service by the first compute platform has completed, and when the response is detected in the queue, discard the response from the queue.

Abstract: Systems, methods, and devices disclosed herein can collect digital witness statements (e.g., on a witness's own mobile device), detect when witnesses are accessing electronic resources during preparation of those digital witness statements, elicit input from witnesses to identify the electronic resources accessed, and detect portions of the digital witness statements that may have been influenced by data procured from those electronic resources. Furthermore, the systems, methods, and devices disclosed herein can generate an indication of consistency between content found in the electronic resources and content found in the digital witness statements so that a degree to which the electronic resources influenced the witness statements can be inferred.

Abstract: Inter-process serving of machine learning features from mapped memory for machine learning models is described. ML features are populated in a data structure that is serialized. State data is stored that indicates that reader process(es) are to read from a first memory mapped data file and not a second memory mapped data file. The serialized bytes are stored in the second memory mapped data file and the state data is updated to indicate that the reader process(es) are to read from the second memory mapped data file. A request is received and parsed to prepare keys from attributes of the request. Based on the state data, the serialized bytes are read from the second memory mapped data file that correspond to the keys. The serialized bytes are deserialized and copied to a data structure available to an inference algorithm.

Abstract: An in-memory computing system for conducting on-line transaction processing and on-line analytical processing includes system tables in main memory to store runtime information. A statistics service can access the runtime information using script procedures stored in the main memory to collect monitoring data, generate historical data, and other system performance metrics while maintaining the runtime data and generated data in the main memory.

Abstract: Disclosed is an improved approach to implement I/O and storage device management in a virtualization environment. According to some approaches, a Service VM is employed to control and manage any type of storage device, including directly attached storage in addition to networked and cloud storage. The Service VM implements the Storage Controller logic in the user space, and can be migrated as needed from one node to another. IP-based requests are used to send I/O request to the Service VMs. The Service VM can directly implement storage and I/O optimizations within the direct data access path, without the need for add-on products.

Abstract: A system for preventing information leakage due to access by an application to a file is provided. The system for preventing information leakage includes an application identification module configured to obtain data associated with the application. The system for preventing information leakage also includes an association table containing file-type data and trusted-application data. In addition, the system also includes an access control module to determine the application identifier and the association table. The system for preventing information leakage is configured to determine whether to deny content access by the application to content of the file as saved in the file.

Abstract: Systems and methods for cloud object storage and versioning are provided. In an example, a cloud object storage and versioning system (COSVS) coordinates insertion of metadata into a database and data into an object store in a compute infrastructure, the compute infrastructure including the database, the object store, a data source, and a client application interacting with the data source. The COSVS has an architecture comprising a client API layer confined to provide an interface to the client application to facilitate storing or restoring of items originally obtained from the data source, and query different versions of item content originally obtained from the data source; a deduplication layer to deduplicate item content and store items originally obtained from the data source devoid of external item metadata or semantic relations among items; and a packing layer confined to store and retrieve bytes of item or object content.

Abstract: Systems and methods for providing a collaboration work management platform that facilitates differentiation between users in an overarching group and one or more subsets of individual users within the overarching group to enable the users within the individual subsets to use the collaboration work management platform differently users within the other subsets, the method being implemented by a computer system including one or more physical processors configured by machine-readable instructions are disclosed. Exemplary implementations may: manage environment state information for maintaining a collaboration environment.

Abstract: A copy of files of a primary storage system are stored at a secondary storage system. The metadata associated with the copy of the files of the primary storage system stored at the secondary storage system are analyzed to determine at least a portion of a hierarchical storage tier management plan for the primary storage system including by identifying one or more files to be migrated from a first tier of storage of the primary storage system to a different storage tier. An implementation of at least a portion of the hierarchical storage tier management plan is initiated.

Abstract: As described herein, a system, method, and computer program provide a computer attack response service. In use, a notification is received that a transfer of at least one electronic file to a computing device has been detected as a potential incoming threat to the computing device. Responsive to the receiving the notification, at least one honeypot is created. Additionally, data within the at least one electronic file is accessed, using the at least one honeypot. Responsive to accessing the data within the at least one electronic file, activity associated with the incoming threat is monitored.

Abstract: Systems, methods, and storage media for providing a dashboard for a collaboration work management platform are disclosed. Exemplary implementations may: manage environment state information for maintaining a collaboration environment; obtain a first set of units of work where a first user is associated with first units of work within the first set but not assigned to the first units of work; and/or effectuate presentation of a dashboard displaying work information for the first units of work within the first set and indicating titles for the first units of work within the first set, statuses of the first units of work within the first set, and user information for the one or more other users assigned to the first units of work within the first set.

Abstract: According to some embodiments, in a Vehicular-to-Everything (V2X) communications environment where vehicles can exchange messages with other entities, including nearby vehicles and pedestrians, systems and methods are provided to implement a mechanism or technique based on hash chaining that allows a large sequence of messages from the same source to be validated by verifying a single digital signature.

Abstract: An information handling system may include a host system comprising a host system processor and a management controller communicatively coupled to the host system processor and comprising a main processor for implementing functionality of the management controller and a co-processor communicatively coupled to the host system processor and configured to implement a proxy to the host system to enable the host system to access devices managed by the management controller.

Abstract: A robotic surgical system and method are disclosed for handling real-time and non-real-time traffic. In one embodiment, a surgical robotic system is provided comprising at least one robotic arm coupled to an operating table; and a control computer comprising a processor and a hardware interface, wherein the processor is configured to: receive a notification about real-time data from the operating table at the hardware interface; process the real-time data immediately upon receiving the notification; and poll the hardware interface for non-real time data from the operating table only when not processing the real-time data. Other embodiments are provided.

Abstract: A method for providing multi-tenancy support for RDMA in a system that includes a plurality of physical hosts. Each each physical host hosts a set of data compute nodes (DCNs). The method, at an RDMA protocol stack of the first host, receives a packet that includes a request from a first DCN hosted on a first host for RDMA data transfer from a second DCN hosted on a second host. The method sends a set of parameters of an overlay network that are associated with the first DCN to an RDMA physical network interface controller of the first host. The set of parameters are used by the RDMA physical NIC to encapsulate the packet with an RDMA data transfer header and an overlay network header by using the set of parameters of the overlay network to transfer the encapsulated packet to the second physical host using the overlay network.

Abstract: A node is operable to determine to send at least on data block to a destination node. A second relay node of an initial route that includes exactly a predefined number of relay nodes for relaying at least one data block from the node to a destination node is identified. A set of intermediate node options is identified by identifying nodes of the database system capable of receiving the at least one data block from the node and further capable of sending the at least one data block to the second relay node. Intermediate node selection data is generated by selecting one intermediate node from the set of intermediate node options. The at least one data block is transmitted from the node to the one intermediate node via the first direct connection to facilitate sending of the at least one data block from the node to the destination node.

Abstract: An embodiment includes determining, based on historical data associated with a specific task, a baseline bandwidth recommendation for completing the specific task. The embodiment assigns, for a first time period, the specific task to a first computing device on a network. The embodiment allocates, for the first time period based on the baseline bandwidth recommendation, a first baseline bandwidth to the first computing device. The embodiment allocates, for the first time period, a portion of a shared buffer bandwidth as a first buffer bandwidth to the first computing device based on a weight value assigned to the specific task. The first buffer bandwidth combines with the first baseline bandwidth as a first total bandwidth for the specific task. The embodiment throttles, during the first time period, data packets associated with the specific task based on the first total bandwidth for the specific task.

Abstract: A secure mediator for coupling between one or more hosts and one or more consoles comprising one or more peripheral devices. the secure mediator comprises host side ports, each host side port is configured to be connected to a corresponding host, and console side ports, each console side port is configured to be connected to a corresponding peripheral device. The secure mediator comprises: a triggering circuitry; a timing/control circuitry; a setup circuitry; a switching circuitry; and the rest of the mediator circuitries, wherein the triggering circuitry, timing/control circuitry, setup circuitry, and switching circuitry are non-programable circuitries. The mediator has at least two stages: a security setup stage and a normal operation stage. The triggering circuitry is configured to monitor events and to signal these events to the timing/control circuitry in order to trigger a transfer between the security setup stage and the normal operation stage.

Abstract: An input/output store instruction is handled. A data processing system includes a system nest communicatively coupled to at least one input/output bus by an input/output bus controller. The data processing system further includes at least a data processing unit including a core, system firmware and an asynchronous core-nest interface. The data processing unit is communicatively coupled to the system nest via an aggregation buffer. The system nest is configured to asynchronously load from and/or store data to an external device which is communicatively coupled to the input/output bus. The data processing unit is configured to complete the input/output store instruction before an execution of the input/output store instruction in the system nest is completed.

Abstract: A computer system and methods are disclosed for mitigating side-channel attacks using memory aliasing. The computer system includes a memory, a memory controller and a cache. Responsive to determining to share a memory location among processes, the address of the memory may be aliased to another address within the same address space, with the address and aliased address assigned to respective ones of the processes. The memory controller manages the address space according to an aliasing region and a non-aliasing region, with addresses corresponding to the non-aliasing region being passed through to the memory. Addresses corresponding to the aliasing region are translated by the memory controller to match corresponding non-aliased memory addresses allowing aliased and non-aliased addresses to access same memory locations. A cache may cache accesses to memory addresses, including the non-aliased and aliased addresses, with different cache locations for selected according to the respective addresses of memory.

Abstract: The present invention is directed to a method for efficiently distributing embedded control commands to one or several security elements, in particular so-called embedded universal integrated circuit cards, of mobile end devices. The invention allows several updates to be combined in a simple manner to form a so-called bundle, so that an update server does not have to issue and distribute any special updates. The present invention is also directed to a correspondingly adapted update arrangement and to a computer program product with control commands that implement the method and/or operate the update arrangement.

Abstract: Systems and methods for generating metadata for at least one learning resource are provided. The system includes at least one data storage device storing a plurality of predefined metadata templates, each of the metadata templates having a plurality of metadata fields and a processor in data communication with the at least one data storage device. The processor is configured to receive the at least one learning resource, the at least one learning resource including an electronic file having a learning resource type and content data, select a metadata template from the predefined metadata templates based upon the learning resource type of the at least one learning resource, determine a topic associated with the learning resource, and customize the selected metadata template by adding one or more predefined metadata fields associated with the topic of the learning resource.

Abstract: A system and method is provided for providing distributed computing platform on untrusted hardware. An exemplary method includes launching a hypervisor on an untrusted computing node and receiving a request generated to provide a computing function using hardware of the untrusted computing node. Upon receiving the request, an enclave in memory of the untrusted computing node is created and a virtual machine is launched in the memory enclave. Moreover, a guest operating system of the virtual machine verifies the security of the untrusted computing node. Finally, the guest operating system performs the computing function using the hardware of the untrusted computing node upon the guest operating system verifying the security of the untrusted computing node and the hypervisor.

Abstract: In various embodiments, a flexible queue application allocates messages stored in priority queues to clients. In operation, the flexible queue application receives, from a client, a request to allocate a message from a priority queue. At least a first message and a second message are stored in the priority queue, and the priority of the first message is higher than the priority of the second message. The flexible queue application determines that the first message is pending but does not satisfy an allocation constraint. The flexible queue allocation then determines that the second message is pending and satisfies the allocation constraint. The flexible queue application allocates the second message to the client. Advantageously, because the flexible queue application can adapt the priority-based ordering of priority queues based on allocation constraints, the flexible queue application can efficiently enforce resource-related constraints when allocating messages from priority queues.

Abstract: Techniques described herein automatically check for persistently inactive instances, based on defined metrics, and auto-archive such instances to lower-cost cloud resources. An inactivity time threshold is dynamically adjustable to a longer or shorter time period based on current load running on limited/more expensive resources to more aggressively or less aggressively archive the inactive instances, thus enabling additional active instances to run on the limited/more expensive resources and supporting more total users.

Abstract: One example method includes connecting to a fileserver of a data protection system, initiating, at a client, an operation that is associated with a master pseudofs of the fileserver, creating, at the client, a client-specific pseudofs based upon the master pseudofs, and the client-specific pseudofs includes only those nodes of the master pseudofs that the client is authorized to access, and performing the operation using the client-specific pseudofs.

Abstract: A system and method improve caching efficiency in a data storage system by performing machine learning processes on metadata relating to extents of data blocks, rather than individual blocks themselves. Thus, once the storage devices are divided into extents, various metadata regarding access to the blocks within each extent are aggregated, and per-extent features are extracted. These features are used to train a data regression model that is subsequently used to infer a most likely “hotness” value for each extent at a future time. These predicted values, which may be further classified as e.g. “hot”, “warm”, and “cold” using thresholds, are used to implement the cache replacement policy. Embodiments scale to large and multi-layered caches, and may avoid common caching problems like thrashing, by adjusting the extent size. Policy goal functions may be optimized by dynamically adjusting the classification thresholds.

Abstract: Aspects of the present disclosure relate to reducing the latency of data deduplication. In embodiments, an input/output (IO) workload received by a storage array is monitored. Further, at least one IO write operation in the IO workload is identified. A space-efficient probabilistic data structure is used to determine if a director board is associated with the IO write. Additionally, the IO write operation is processed based on the determination.