Abstract: Systems and methods for provisioning network services include receiving a provisioning request and, in response, initiating a first configuration operation in which a network address is assigned to a piece of network equipment for providing the network service. A network service path is established to the address such that when the equipment is connected to the network, a second configuration operation may be initiated in which the equipment is initialized to perform one or more network functions in support of the network service. Submission of provisioning requests may be conducted through a portal or similar environment that further enables users to analyze, modify, or otherwise manage their network equipment and services.

Abstract: Organizing a trusted network includes receive, by a local device, a message from a first remote trusted device identifying a first service hosted by the first remote trusted device, wherein the local device and the first remote trusted device are in a trusted network. Organizing a trusted network also includes indexing, by the local device, the first service in a registry comprising services available to the local device and a location of each service available, wherein the registry is local to the local device.

Abstract: Systems and methods for configuring a device to operate based on a current configuration state of the device in a manner agnostic to an assumed configuration state of a device. Systems can include a local state aware device manager and a state aware device configuration agnostic mediator. Methods can include locally determining an actual current configuration state of a device in operation, generating desired configuration instructions based on the actual current configuration state of the device, and locally configuring the device to operate according to the desired configuration instructions.

Abstract: A method of managing virtual network functions for a network, the method including providing a virtual network function (VNF) including a number of virtual network function components (VNFCs) of a number of different types, each VNFC comprising a virtual machine (VM) executing application software. The method further includes creating for up to all VNFC types a number of deactivated VMs having application software, monitoring at least one performance level of the VNF, and scaling-out the VNF by activating a number of deactivated VMs of a number of VNFC types when the at least one performance level reaches a scale-out threshold.

Abstract: The present document describes a system comprising at least two processing nodes (1) that are connected by a network, and an application distribution function, which automatically distributes processing components (3) of an application to be run on the system over the nodes (1). The system is configured, when a sending processing component and a corresponding receiving processing component are arranged on different nodes, to determine, based on information about the processing component (3) which receive the data, in which representation to send the data via the corresponding communication channel (4).

Abstract: Embodiments of the inventive system and methods are directed to a computer program that employs a drag-and-drop user interface for managing dialogue states, tracking dialogue context, understanding dialogue utterances, and managing dialogue sessions. Each dialogue element is defined in a “node” that can be dragged and dropped into a canvas of the user interface. An embodiment provides wiring mechanisms to freely link nodes. Dialogue utterances are contained in messages that flow through the wires linking different nodes until exiting the canvas to an end user. An executable image of a conversational agent is then generated by compiling the source code associated with the nodes based on their connections. A conversational agent can be deployed in an electronic device such as a home device, which configured to perform an action in response to a user verbal command or request using the conversational agent deployed therein.

Abstract: Various innovations for servicing of a virtual switch in a virtual networking layer are presented. The innovations include new architectures for a virtual networking layer and new operations performed when servicing a virtual switch. In some example implementations, during virtual switch servicing, interruption to actual network connectivity is minimal—below a timeout threshold that signifies failure of a network connection. Connections for a host, VMs, and physical network adapter can be maintained while the virtual switch is serviced. Although some interruption to actual network connectivity happens, apparent connectivity (for a VM) over a connection between the VM and the virtual switch can be maintained during the servicing of the virtual switch. Similarly, apparent connectivity (for a host) over a connection between the host and the virtual switch can be maintained during the servicing of the virtual switch.

Abstract: Disclosed herein is method and system for processing data in serverless computing environment. In an embodiment, information related to functions associated with plurality of serverless computing platforms and the data to be processed are received from data sources. Thereafter, processing operations required for processing the data are determined based on characteristics of data and domain related to data. Further, confidence scores for each function is determined by correlating processing operations and information related to functions. A target function for performing processing operations is identified based on evaluation of confidence scores, and the target function is deployed by forwarding data to serverless computing platform associated with the target function. Finally, the data is processed when an event is triggered for processing the data by target function.

Abstract: A cloud management system can track the usage of the virtual machines in order to determine the fees associated with the user's subscription to the cloud computing environment. The usage can include the resources consumed to support the virtual machines and can include the utilization of the virtual machines by the user or third parties. The cloud management system can determine the fees charged to the user for utilizing the cloud computing environment based on the tracked usage.

Abstract: A computer-implemented method of extending generic resilient identity services (GRIDS) is provided that comprises: receiving, by a mapping server, a resolve request from an originator endpoint for a locator of a destination endpoint; sending, by the mapping server, a request for authorization to provide the requested locator, the request for authorization indicating an identifier of the originator endpoint; receiving, by a policy server, the request for authorization; accessing, by the policy server, from a database, a set of policies for the destination endpoint; based on the identifier of the originator endpoint and the set of policies for the destination endpoint, sending, by the policy server, an authorization response to the mapping server; and based on the authorization response, sending, by the mapping server, a response to the resolve request to the originator endpoint.

Abstract: A non-transitory computer readable storage medium has instructions executed by a processor to receive a query statement. The query statement is one of many distributed storage and distributed processing query statements with unique data access methods. Token components are formed from the query statement. The token components are categorized as data components or logic components. Modified token components are formed from the token components in accordance with a policy. The query statement is reconstructed with the modified token components and original computational logic and control logic associated with the query statement.

Abstract: In accordance with an example embodiment of the present invention, there is provided an apparatus, comprising at least one processor configured to execute a computer executable program stored in a memory comprised in the apparatus, wherein the computer executable program thereby causes the apparatus to at least open a first connection to a data source device, open a second connection to a proxy device, the second connection employing a first protocol and a cross origin resource sharing context, and receive from the proxy device information of the data source device.

Abstract: In one example, the present disclosure describes a device, computer-readable medium, and method for restoring local access elements in a software defined network (SDN) following service outages. For instance, in one example, a method includes retrieving, by a software defined networking local access element connected to a customer premises, configuration data and customer provisioning data from equipment located at the customer premises and initializing the software defined networking local access element with the configuration data and customer provisioning data to provide service to the customer premises.

Abstract: A computer system for providing software over a network includes: a computer system for providing software over a network is provided. The system includes: a control unit configured to reside at a site, the control unit including a control unit identification (ID) that uniquely identifies the control unit to the network; a copy of the software, the software including sets of features; a license generator configured to create a features activation file containing the control unit ID and identifying at least one set of features to be activated by the control unit; a computer configured to download the features activation file to the control unit; and, the control unit configured for activating one of the sets of features according to the features activation file. A method and a computer program product are disclosed.

Abstract: A technique for deploying an application in a cloud computing environment includes: collecting, while a user is deploying an application, metadata and instructions issued by the user on deploying the application, the metadata comprising service metadata, application metadata and topology metadata, wherein the service metadata comprise metadata on a service required for deploying the application, the application metadata comprise metadata on the application, and the topology metadata comprise metadata indicative of a relationship between the service and the application; and storing the collected metadata and instructions as a model for re-deploying the application.

Abstract: A method for maintaining a data storage system is disclosed. The method may include monitoring for receipt of a first broadcast message from a first data storage node, where the first broadcast message may indicate that the first data storage node is operating correctly. The method may also include detecting that the first data storage node is malfunctioning based on not receiving the first broadcast message for a predetermined period of time. The method may also include initiating a data replication procedure based on detecting that the first data storage node is malfunctioning. The data replication procedure may include sending a first multicast message to a plurality of data storage nodes requesting identification of a second data storage node that maintains a copy of a file stored on the first data storage node.

Abstract: In some examples, a server may receive, from a computing device, a device profile identifying a gaming application and metrics associated with execution of a gaming application. The server may compare the device profile with other device profiles associated with other computing devices, determine a similarity index of the device profile with the other device profiles, and select a subset of the other device profiles based at least in part on the similarity index. The server may determine configuration differences between the device profile of the computing device and individual device profiles of the subset of the other device profiles and send the configuration recommendations to the computing device. The recommendations may include at least one of (1) modifying settings of an operating system of the computing device, (2) modifying settings of the gaming application, (3) changing a hardware component or peripheral device associated with the computing device.

Abstract: A device can store a plurality of variants of an application. The device can receive, from a user device that is associated with a first variant of the application, a request for a second variant of the application. The first variant can include a first set of features and include a file size that is different than the second variant. The second variant can include a second set of features. The device can determine a first version identifier of the first variant of the application, and determine that a second version identifier associated with the second variant of the application is different than the first version identifier. The device can provide, to the user device, the second variant of the application to permit the user device to install the second variant of the application.

Abstract: A computer-implemented method for detecting potentially malicious hardware-related anomalies may include (1) profiling a computing environment of at least one hardware component on a computing device, (2) detecting, by comparing the hardware component's profile with an expected profile for the hardware component, at least one anomaly in the hardware component's computing environment, (3) identifying additional suspicious activity on the computing device, and (4) determining, by correlating the additional suspicious activity on the computing device with the anomaly in the hardware component's computing environment, that the anomaly in the hardware component's computing environment is potentially malicious. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A system can receive an indication associated with establishing a transmission control protocol (TCP) connection. The system can determine, based on the indication, information that identifies a user device associated with the TCP connection. The system can determine, based on the information that identifies the user device, a predicted congestion level of a base station associated with the TCP connection. The system can select, based on the predicted congestion level, a congestion control algorithm to be implemented for the TCP connection. The system can cause the TCP connection to be established and implement the congestion control algorithm for the TCP connection.

Abstract: The present disclosure relates to systems and methods for obtaining and using Device-to-Device (D2D) related information for a node (e.g., a wireless device or a network node) in a cellular communications network to perform one or more mobility operations for a wireless device. Embodiments of a method of operation of a network node for operation in the cellular communications system are disclosed. In some embodiments, the method of operation of the network node in the cellular communications system comprises obtaining D2D related information for one or more nodes in the cellular communications system, and using the D2D related information to perform one or more mobility operations associated with the wireless device.

Abstract: Systems for performing a security assessment of a target computing resource, such as a virtual machine or an instance of a virtual machine, include a security assessment service that enables the use of third-party-authored rules packages in the security assessment. The third-party rules package includes rules that can operate on telemetry and configuration data of the target computing resource, produced by sensors that are native to the computing environment, but the sensor protocols, message format, and sensitive data are not exposed to the rules. An interface, such as an ingest function, may be used to convert telemetry data in the form of sensor messages into assessment data objects. The assessment data objects contain the data elements the rules evaluate, and may also have corresponding retrieval methods that are exposed to the rules; the rules call the retrieval methods to extract parameter-value pairs from the data object.

Abstract: Various implementations disclosed herein enable a method of managing device access on one or more operator networks. The method includes determining correspondence between a first adaptor module of a plurality of adaptor modules and a first request to manage devices deployed on a first operator network associated with the first adaptor module. The first request conforms to a first interface. The method includes converting, by the first adaptor module, the first request into a second request that conforms to a second interface provided by an operator entity associated with the first operator network. The second interface is configured to mask network elements of the first operator network in order to prevent direct communication with the network elements. The method includes transmitting the second request to the operator entity via the second interface. The transmitting satisfies a security criterion to shield the network elements from the device management system.

Abstract: A determination apparatus includes a difference code generation section that generates a first difference code and a second difference code, the first difference code representing a set of code pieces in a first program that are different from code pieces in a second program, the second difference code representing a set of code pieces in the second program that are different from code pieces in the first program, a logical expression derivation section that performs predetermined conversion to derive a first logical expression from the first difference code and derive a second logical expression from the second difference code, and a determination section that, depending on whether the second logical expression includes the first logical expression, determines whether the first program in a predetermined embedded device is dynamically updatable to the second program.

Abstract: According to an example, intent and bot based query guidance may include receiving a query associated with a domain, and identifying, based on an analysis of the query, an intent of the query by extracting an action associated with the query and an entity associated with the query. An intent model associated with the query may be generated based on a mapping of the action and the entity with a domain model of the domain. An intent domain specific language representation of the intent model associated with the query may be generated. Based on an analysis of the intent domain specific language representation, a plurality of bots may be identified, and a parameterized bot chain may be generated to respond to the query. A runtime binding of bots of the parameterized bot chain may be performed, and invoked to generate the response to the query.

Abstract: A software designed protocol (SDP) network node includes a receiver, and a processor operatively coupled to the receiver. The receiver receives instructions, and receives packets. The processor updates a configuration of the SDP network node in accordance with the received instructions, and processes the received packets.

Abstract: An information processing apparatus obtains an IP address from a DHCP server, and in the case where the obtainment of an IP address from the DHCP server has failed, determines whether or not to continue to use an IP address used previously, on the basis of a setting in the information processing apparatus.

Abstract: Certain aspects of the present disclosure generally relate to wireless communications and, more particularly, to methods and apparatus for utilizing a control protocol to establish multiple packet data network (PDN) connections through a trusted wide area network (TWAN). Techniques are provided for expanding mobile network capacity by offloading traffic from wireless wide area networks (WWAN) to other types of networks, including wireless local area networks (WLAN).

Abstract: A computing device configured to forward a request is described. The computing device includes a processor and instructions stored in memory that is in electronic communication with the processor. The computing device receives a request. The computing device also identifies an agent module based on the request to obtain an identified agent module. The computing device further determines an administrative service based on the identified agent module. The computing device additionally forwards the request to the administrative service. The computing device also sends a reply to the identified agent module.

Abstract: Embodiments providing improved systems and methods deploying, monitoring, and troubleshooting optical physical layer networks are needed. A baseline may be created and performance data is extracted. The performance data is compared against user-defined rules to determine an appropriate action. In one embodiment, networks are first constructed in a specialized network factory, where they are racked, provisioned, audited, and tested by relevant experts in each technology. In another embodiment, a method isolates a problem in an optical transport network. When a problem is identified, the layers are repeatedly evaluated to identify the device operating at the lowest layer where an error occurs. That device is identified as being likely faulty.

Abstract: Embodiments regard transparent sharding of traffic across messaging brokers. An embodiment of a method of sharding message traffic across messaging brokers includes providing a message sharding service for message sharding among a plurality of registered message brokers, wherein providing the message sharding service includes applying a current message sharding strategy; and sharding messages among the registered message brokers according to the current message sharding strategy, including registering the message brokers and assigning message queues to registered message brokers according to the current message sharding strategy; wherein the current message sharding strategy is one of a plurality of message sharding strategies.

Abstract: A determination is made as to whether a password is required for connecting to a wireless network. In response to determining that no password is required for connecting to the wireless network, data is retrieved from at least one predefined network address through the wireless network. A determination is made as to whether a secondary login verification is required for connecting to the wireless network based on, at least, the retrieved data from the at least one predefined network address.

Abstract: Enforcing a policy is described. A mapping between an IP address of a device and a user identity is identified at a first appliance, at least in part by correlating event information. The mapping is transmitted to a second appliance. A policy is applied by the second appliance to the device based at least in part on the user identity.

Abstract: A storage system shares a system memory of a host. An operation method of the storage system may include receiving a command including information about a shared memory from the host, receiving a stream command having no timeout from the host, and transmitting a first packet associated with the stream command to the host in response to the received stream command. The first packet includes information for accessing the shared memory.

Abstract: The method includes: after a first gateway device is connected to a second gateway device, determining, by the first gateway device, whether the second gateway device and the first gateway device are in a same home network; when the first gateway device and the second gateway device are in the same home network, switching, by the first gateway device, to be a bridge device of the second gateway device; receiving, by the first gateway device, a network parameter sent by the second gateway device, where the network parameter includes an SSID of the second gateway device and an Internet Protocol IP address assigned by the second gateway device to the first gateway device, and the IP address is an address in a network segment corresponding to the SSID; and performing, by the first gateway device, network configuration on the first gateway device according to the network parameter.

Abstract: Unikernel provisioning is disclosed. A binary is received. The received binary is converted into a unikernel that is deployable on a virtual machine at least in part by generating a disk image comprising the received binary, a loader for loading the received binary, and portions of an operating system required to execute the received binary.

Abstract: The application provides a routing method which includes configuring a first path and a second path in charge of load sharing for a data flow, and configuring a third path in charge of reroute protection. A first group entry is generated for instructing the forwarding device to use the first path and the second path as load-sharing paths and use the third path to perform reroute protection on the first path and the second path. A flow entry for instructing to perform an operation of going to the first group entry is generated.

Abstract: Embodiments of the present application provide an acceleration management node. The acceleration management node separately receives acceleration device information of all acceleration devices. The acceleration device information includes an acceleration type and an algorithm type. The acceleration management node obtains an invocation request from a client. The invocation request is used to invoke an acceleration device to accelerate a service of the client, and the invocation request includes a target acceleration type and a target algorithm type. The acceleration management node queries the acceleration device information to determine, from all the acceleration devices of the at least one acceleration node, a target acceleration device matching the invocation request. The acceleration management node further instructs a target acceleration node to respond to the invocation request.

Abstract: A management system and method for deploying a virtual processing instance from an open virtual appliance (OVA) template file involves accessing the OVA template file stored on a storage of a computer to stream at least one file from the storage of the computer for processing and to transmit a disk image file of the virtual processing instance in the OVA template file from the storage of the computer to a storage of a destination host computer on which the virtual processing instance is to be deployed.

Abstract: The disclosed embodiments disclose techniques for maintaining global name consistency for a distributed filesystem. Two or more cloud controllers collectively manage distributed filesystem data that is stored in one or more cloud storage systems; the cloud controllers ensure data consistency for the stored data, and each cloud controller caches portions of the distributed filesystem. During operation, a cloud controller receives a client request to perform a namespace operation upon a filesystem object. The cloud controller contacts the cloud controller that manages (“owns”) the portion of the global namespace for the distributed filesystem that includes the filesystem object. This second cloud controller ensures the consistency of the filesystem object across the distributed filesystem during the namespace operation.

Abstract: The present invention provides a system and method for remote configuration and management of internet of thing devices, whereby applications do not need to explicitly participate in a particular configuration scheme and the application configuration and management can be performed securely and remotely while the Secure Remote Management engine is architecturally decoupled from the bearing protocols used by the remote enterprise to configure and manage the device or devices.

Abstract: Methods and apparatus are disclosed for diagnostic testing, and in particular to methods and apparatus for obtaining diagnostic test results in respect of network-reliant applications used by one or more devices (1, 1?) in a local user network (3), the one or more user-devices (1, 1?) being operable to communicate with a digital communications access network (5, 6, 8) via a network gateway device (2) having a control module associated therewith, and being operable to communicate with remote networked devices (7, 9) involved in said network-reliant applications via the access network. Preferred embodiments relate to methods and apparatus for triggering diagnostic testing procedures and obtaining test results indicative of the actual Quality of Experience (QoE) of one or more users of the applications being run on the user-devices (1, 1?) in the user network (3).

Abstract: A remote computing session management process is directed to the execution and management of aspects of virtual instances executed on data center computers at a program execution service (PES) platform. A computing session may be established between the PES platform and a computing device connected to the PES platform over a communications network. The data created by the user of the client computing device interacting with the virtual instance may be stored, and following an interruption of the remote computing session, the data may be used when re-establishing the remote computing session.

Abstract: A parameter determination device according to the present invention includes: a processing unit (PU); and a storage, wherein the storage stores: a program; a system configuration definition including a plurality of elements each of which is a parameter set to a setting category that defines a configuration of a system; and a rule including identifiers of first and second ones of the setting categories; and the PU reads the program and performs functions, the function including: a grouping unit that groups the elements, based on the parameter for the second setting category of the elements; and an assignment execution unit that sets and outputs a parameter that is identical within a group or that is unique within the group, for the first setting category of each of the elements in the group.

Abstract: An information processing apparatus includes an extraction unit, a generation unit, a building unit, and a presentation unit. The extraction unit extracts, in accordance with similarity in a use condition for a first application that is a target application to be used by a user, a cloud service including a second application that has been used under a use condition similar to the use condition for the first application. The generation unit generates a parameter for satisfying the use condition for the first application in the cloud service. The parameter is generated from load information regarding a use result of the second application in the cloud service. The building unit builds, in the cloud service, an environment for implementing the first application by using the parameter. The presentation unit presents, to the user, a result of measurement of a performance of the first application in the environment.

Abstract: The described technology is directed towards returning expanded data, beyond the data that was specifically requested, to a client, in order to reduce or eliminate likely subsequent requests for more data. Client requests for data items are processed by expansion rule logic to find an expansion rule set (e.g., file) corresponding to the identified data item. The rule set is used to expand requests for certain data items into expanded requests that return more data items than those requested. Client devices receive, cache and (often) use the cached expanded data items, which thereby reduces the overall number of requests to the data service. Expansion rules may be based upon observations (e.g., machine learned and/or manual) of request patterns, so as to reasonably predict which data item or items clients will likely next need, and return those as expanded data items in anticipation of their need.

Abstract: A packet transmission method, an apparatus, and a system are provided, to improve packet transmission efficiency. An SDN forwarding apparatus receives an uplink GTPU packet from a base station, where the uplink GTPU packet carries an IP address of a target server; the SDN forwarding apparatus determines whether the target server is an intranet server; and when the target server is an intranet server, the SDN forwarding apparatus sends the uplink GTPU packet to a target gateway, where the target gateway is a gateway corresponding to the target server; or when the target server is not an intranet server, the SDN forwarding apparatus sends the uplink GTPU packet to a serving gateway.

Abstract: A gateway system is used to establish secure connections between building management system control panels and connected services system servers. This enables status monitoring of the panels and maintenance of the panels and the building management systems.

Abstract: The present disclosure is related to systems and methods for protecting virtual computing instances. An example system can include a first virtual computing instance (VCI) deployed on a hypervisor and provisioned with a pool of physical computing resources. The hypervisor and the first VCI can operate according to a first configuration profile. The system can include a fault domain manager (FDM) running on a second VCI that is deployed on the hypervisor and provisioned by the pool of physical computing resources. The FDM can be configured to provide high availability support for the first VCI, and the FDM can operate according to a second configuration profile. The system can further include a hypervisor manager running on the second VCI. The hypervisor manager can be configured to facilitate interaction between the FDM and the hypervisor by translating between the first configuration profile and the second configuration profile.

Abstract: Deleting objects in a computing system. Information management can be used to provide disposition services including the deletion of selected objects. The categorization process of information management can also be used to assign categories to objects such that an entity understands what the objects are. Understanding what the objects are may include the application of logic, including user-defined logic, to examine the objects. The results of the logic can then be used to assign categories to the objects. The policies of a user, which often define how objects should be treated are implemented by mapping the categories to the appropriate data disposition services. Once the specific disposition services, which include file deletion, are known, a workflow may be initiated to provide a period of review prior to physical deletion of the objects from the computing environment.