Abstract: Network devices can be registered to access a network using known host devices to thereby simplify the device registration process. The host device can be an administrator's device that is already registered and authorized to vouch for another user desiring to register his or her device. Alternatively, the host device can be the user's previously registered device and can be used to register the user's additional devices.

Abstract: Disclosed are various embodiments for initiating execution of an application based at least in part on an identification of the object in an image, video, or other graphical representation of the object. A graphical representation of an object is obtained using an image capture device. The object in the graphical representation is identified along with a list of applications associated with the identified object. A user interface is then rendered that allows the user to execute or install one or more of the applications associated with the identified object.

Abstract: A message broker customization system and method with user administered policy functions. The system uses user defined and controlled policy functions to programmatically, customize the behaviors of a message broker's processing of messages and further allowing for that customization to take place on a per channel basis. This provides for greater functionality and flexibility to the users of a message system, especially when the users of the message system do not have administrative control over the message broker.

Abstract: A method of translating a first command to a target command includes receiving the first command in a first command format, acquiring a first utility intermediate representation framework (UIRF) including a plurality of a first set of node instances. The method also includes acquiring a first user utility intermediate representation framework (UUIRF) by parsing the first command into one or more command elements, representing each command element by a respective node instance of the first UIRF, the first UUIRF representing an intention of the first command, acquiring a target UUIRF based on a target format, the target UUIRF including a target set of node instances, entering information from each of the first set of node instances of the first UUIRF into a corresponding node instance of the target set of node instances in the target UUIRF, and constructing the target command based on the target UUIRF.

Abstract: A mechanism is provided for determining a predicted performance of a database com. A first model for a database is determined using machine learning and training data based on monitoring the database operating in a production environment. A second model for the database is determined by combining the first model and a knee of curve formula for the database. The second model is stored for use in determining the predicted performance of the database in response to a database query.

Abstract: A network includes a mobile network node (MNN) that includes a mobile node communications manager (MNCM) to facilitate wireless communications to a plurality of stationary network nodes (SNNs) in a wireless network via a wireless network protocol. The MNCM utilizes a multicast address received over the wireless network. The multicast address is assigned to a predetermined network time slot to communicate uplink data from the MNN to the SNNs. The MNN receives downlink data via a separate predetermined network address and time slot assigned to a given SNN.

Abstract: A computer-implemented method is provided that includes identifying an input dataset formatted as an input matrix, the input matrix including a plurality of rows and a plurality of columns. The computer-implemented method also includes dividing the input matrix into a plurality of input matrix blocks. Further, the computer-implemented method includes distributing the input matrix blocks to a plurality of different machines across a distributed filesystem, and sampling, by at least two of the different machines in parallel, at least two of the input matrix blocks. Finally, the computer-implemented method includes generating at least one sample matrix based on the sampling of the at least two of the input matrix blocks.

Abstract: A recommendation engine evaluates different combinations of available versions of different software images that make up a virtualization software to be installed in a host computer, and recommends one or more of the valid combinations for installation or upgrade. Upon acceptance of the recommended image, a software specification that expresses the desired state of the virtualization software is updated to include versions of the different software images that are in the recommended valid combination.

Abstract: A system and method for determining and storing website data from high traffic websites in memory during a large event at an event location for access by mobile computing devices through an event application is disclosed. The method may include determining, by a local server system at the event location, high traffic websites from the detected plurality of websites accessed by the users through the mobile computing devices at the event location. The method may also include allowing a user to select a website and retrieve website data for the selected website from the memory of the local server system when the selected website is a high traffic website by converting a uniform resource locator of the website managed by a service provider to a local uniform resource locator pointing to a storage location of website data stored in the local server system.

Abstract: In one embodiment, a networking device at an edge of a network extracts data from traffic in the network using a plurality of protocol connectors of the networking device. The networking device normalizes the data extracted from the traffic in the network, to form normalized data. The networking device applies a data transformation to the normalized data, to form transformed data. The networking device identifies, based on a policy, one or more cloud providers as being authorized to receive the transformed data. The networking device sends the transformed data to the one or more cloud providers.

Abstract: A flow tagging technique includes tagging a data flow at a plurality of points in the data flow. For example, the data flow can be tagged at a socket and at a proxy manager API. By tagging the data flow at multiple points, it becomes possible to map network service usage activities to the appropriate initiating applications.

Abstract: A system of configuring a new device may include a new device that is not configured with one or more settings. The new device includes a short range communication transmitter and programming instructions configured to cause the new device to operate in a discoverable mode. The system includes an existing device that is configured with the settings, and that includes a short range communication receiver and programming instructions. The programming instructions are configured to cause the existing device to receive instructions to set up the new device, in response to receiving the instructions, detect, by the short range communication receiver, a presence of the new device by detecting the broadcast signal within a communication range of the short range communication receiver, and in response to detecting the presence of the new device, transmit at least a portion of the one or more settings directly to the new device.

Abstract: The present invention discloses method and application deployment system for dynamic deployment and vertical scaling of applications in a cloud environment. The application deployment system receives information of one or more system parameters of a target system and performs one or more processing operations on information to identify storage access details for a predefined time period of the target system. Further, an ideal configuration for the target system is estimated based on current requirement of one or more system parameters and the identified storage access details by using at least one of a rule-based model, a neural network model, and statistical model. Thereafter, the application deployment system performs dynamic deployment of the one or more applications based on the ideal configuration.

Abstract: A data processing apparatus includes a central processing unit that receives user operations for changing a portion of a document, and edits the document by a first user and a second user in parallel. The first user and the second user each have an editing right and, in response to the editing rights, an editing page is displayed differently depending on the user.

Abstract: The present disclosure relates to systems, methods, and computer-readable media for implementing an efficient and flexible policy-driven approach to securing a computing device. For example, systems disclosed herein can identify any number of security policies including configuration states associated with configuration settings of a client device. The systems disclosed herein can further enforce the security policies by performing an enforcement operation including an idempotent operation that enables a computing device to both diagnose as well as remedy security issues identified by an agent on a computing device. The systems disclosed herein further include features and functionality that enable a computing device to be compliant with multiple security standards without performing redundant enforcement operations.

Abstract: Various aspects of the disclosure relate to handover of a user equipment (UE) between a standalone mode of operation and a non-standalone mode of operation. For example, a UE may be handed-over from standalone to non-standalone, or vice versa. Moreover, this handover may be an inter-system handover (e.g., between an LTE core network and an NR core network).

Abstract: Methods, systems and computer readable media for self-configuration of virtual network functions based on user intent are provided. In a network, a destination with an initial offering having a set of initial offering attributes is provided. A first virtual network function is connected to the destination that is capable of advertising the initial offering. A source having a set of need attributes defined by a user is also provided. The initial offering is advertised, and the source is connected to the first virtual network function. A second virtual network function with an added value is added and a modified offering having a set of modified attributes based on the set of initial offering attributes and the added value is created. The initial offering and the modified offering is advertised to the source.

Abstract: Systems and methods for providing automated problem reporting in elements used in conjunction with computer networks are disclosed. The system comprises a plurality of elements that perform data operations and a reporting manager or monitor agent which monitors the elements and data operations. Upon detection of hardware or software problems, the reporting manager or monitor agent automatically communicates with elements affected by the problem to gather selected hardware, software, and configuration information, analyzes the information to determine causes of the problem, and issues a problem report containing at least a portion of the selected information. The problem report is communicated to a remote monitor that does not possess access privileges to the elements, allowing automated, remote monitoring of the elements without compromising security of the computer network or elements.

Abstract: A method for transmitting a data resource acquisition request includes: when transmitting an acquisition request for a first data resource, obtaining, by a first node, locally-stored traffic scheduling policies of a plurality of secondary nodes associated with a resource server to which the first data resource belongs, wherein the traffic scheduling policies are generated by each of the plurality of secondary nodes based on a local traffic load status; selecting, by the first node, a target node among the plurality of secondary nodes based on the traffic scheduling policies of the plurality of secondary nodes; and transmitting, by the first node, the acquisition request for the first data resource to the target node.

Abstract: Correlating storage system event alerts by receiving notice of an event, determining a first storage network system (SNS) resource related to the event, determining instantiated dependencies between the first SNS resource and a second SNS resource, correlating the event with a second event according to the instantiated dependencies, and providing notice of the correlated events.

Abstract: A computer-implemented method for performing an analytic workflow process is provided. The method includes storing data from multiple input sources into a data storage pool, performing at least one analytic workflow executed by computing nodes, identifying data, by an analyzer module, expected to be required for a downstream analytic step. Thereby, the identified data have not yet been received in the in-memory database. The method also includes triggering a push module to move the identified data from the data storage pool to the in-memory database. Additionally, the method includes monitoring, by the analyzer module, output data of an analytic step and identifying pointers to additional data expected to be required for a downstream analytic step of a parallel analytic workflow process different to the analytic step of the monitored output data, and moving, by a push module, the data referred to by the pointers to the in-memory database.

Abstract: A method for managing multiple software defined wide area network (SD-WAN) software versions includes providing a controller that defines an overall configuration for an SD-WAN and that creates configuration registries for individual SD-WAN appliances to implement their respective portions of the overall configuration. The controller generates, in an intermediate configuration language registry format, a first and second configuration registry for first and second SD-WAN appliance that respectively execute first and second versions of SD-WAN software. The controller respectively transmits the first and second configuration registries to the first and second SD-WAN appliances, which use the first and second configuration registries to configure themselves. The first and second SD-WAN appliances negotiate with each other for common SD-WAN features usable to implement configurations specified in the first and second configuration registries.

Abstract: A method of sharing a function of a device, the method including detecting at least one device from among a plurality of devices through a first device connected to the plurality of devices through a plurality of networks, wherein the detecting is performed by a second device in the plurality of devices; interworking the second device with a third device in the detected at least one device, through the first device; and using, by the second device, a function of the third device through the first device.

Abstract: A device for participating in a group of cooperating devices that is identified by a group code includes membership circuitry and group circuitry. The membership circuitry is configured to generate and analyze membership messages, wherein the membership messages include a group name that is associated with the group code; and instruct the device to transmit and receive membership messages with a network. The group circuitry is configured to generate and analyze group messages, based at least on a received membership message that includes the group code; and instruct the device to transmit and receive, using a device-to-device interface circuitry of the device, group messages with a device in the group.

Abstract: Systems and methods for color selection are provided. A web server stores a lookup table that associates room types and types of feelings with paint colors such that each possible combination of room type and type of feeling is associated with a subset of paint colors. A user device displays the room types, receives a room type selection indicating a particular room type, displays the types of feelings, receives a type of feeling selection indicating a particular type of feeling, accesses the lookup table and determines the associated subset of paint colors in the lookup table for the combination of the particular room type and the particular type of feeling, and displays the associated subset of paint colors as recommended paint colors for the combination of the particular room type and the particular type of feeling on the display of the user device.

Abstract: An arrangement to direct a packet sent out from an arbitrary apparatus connected to a network to a predetermined authentication server without changing the configuration of a computer network. A packet transmitted from apparatus, such as a personal computer, newly connected to the network, is guided to an authentication server via communication control apparatus. The communication control apparatus replaces a MAC address of the destination addresses of another server, which is included in the ARP cache of the personal computer, with the MAC address of the communication control apparatus to guide the packet from the personal computer to the communication control apparatus. The communication control apparatus further transmits the received packet to a predetermined authentication server.

Abstract: Apparatuses, systems, methods, and computer program products are disclosed for distributed and/or decentralized data aggregation. A method includes detecting a change in access to one or more of a server of a third party service provider and data associated with a user. A method includes providing an interface to the user allowing the user to graphically identify one or more of an input location for electronic credentials for the user and a location of the data associated with the user. A method includes downloading the data associated with the user from the server of the third party service provider to a hardware device of the user based on the user's identification.

Abstract: In one embodiment, a method is performed at a controller of a fabric that is connected to a first seed device in the fabric. The method includes obtaining a connectivity graph of the fabric including the first seed device. The method further includes causing the first seed device to send a first request to a first neighboring device in the connectivity graph via a first interface of the first seed device connectable to the first neighboring device. The method also includes assigning fabric component properties to devices in the fabric based at least in part on a first message from the first seed device, where the first seed device generates the first message based at least in part on a first response from the first neighboring device received via the first interface. The method additionally includes converting the first neighboring device to a second seed device in the fabric.

Abstract: A decoy filesystem that curtails data theft and ensures file integrity protection through deception is described. To protect a base filesystem, the approach herein involves transparently creating multiple levels of stacking to enable various protection features, namely, monitoring file accesses, hiding and redacting sensitive files with baits, and injecting decoys onto fake system views that are purveyed to untrusted subjects, all while maintaining a pristine state to legitimate processes. In one implementation, a kernel hot-patch is used to seamlessly integrate the new filesystem module into live and existing environments.

Abstract: The described technology is generally directed towards an abstraction and file model used for subscriber service and publisher service communication. The abstraction and file model enables dynamically changing the underlying communication mechanisms and introducing optimizations such as caching (reducing latency) and batching (improving bandwidth utilization) transparently, without any change to the subscriber or publisher code. The abstraction also facilitates introducing intermediate lightweight message-oriented middleware and provides for transparently scaling communication.

Abstract: The systems and methods provided herein provide techniques for discovering applications installed in a cluster-based computing environment. A catalog of signatures is obtained. One or more clusters are scanned to obtain information about configuration parameters in the one or more clusters. The catalog of signatures is compared with the information from scanning comprising configuration parameters to identify software applications installed on a per-cluster basis.

Abstract: An updater platform may create a listening delegator process, associated with a listener file descriptor, within a deployment (without implementing an accept protocol). The platform may execute an original instance of an application process within the deployment and intercept a socket creation call from the original instance of the application process and replace it with the listener file descriptor. As a result, incoming connection requests are received by the listening delegator process and forwarded to the original instance of the application process. The platform may then determine that a configuration update is to be made to the application process and start an additional instance of the application process, with the updated configuration, within the deployment, such that incoming connection requests are received by the listening delegator process and forwarded to the additional instance of the application process. The platform may then switch off the original instance of the application process.

Abstract: A fieldbus network is described, which has at least one device as well as a connecting apparatus, wherein the connecting apparatus is designed to transfer data from the fieldbus network into a cloud. Installed in at least one of the devices is a derived class, which is derived from a predetermined head class, wherein head attributes are established by the predetermined head class and additional device specific attributes are established by the derived class, wherein the at least one of the devices is designed based on the derived class to produce a data object for the data transfer to the cloud. The connecting apparatus is designed to receive the data object of the device, to convert at least a part of the data contained in the data object into a format of an interface of the cloud and to write the data into the cloud.

Abstract: The application describes a computer-implemented apparatus that includes a non-transitory memory having instructions stored thereon for assigning address space in a network. The apparatus also includes a processor, operably coupled to the non-transitory memory, configured to execute at least the instruction of receiving a solicitation from a router in the network. The processor is also configured to execute the instruction of replying to the solicitation with address space. The processor is also configured to execute the instruction of receiving a second solicitation from the router to register a new address. The processor is further configured to execute the instruction of determining if the new address is from a dedicated address space or a shared address space. The processor is even further configured to execute the instruction of sending a neighbor advertisement with the address registration to the router.

Abstract: An information processing apparatus and non-transitory computer readable medium and for processing information are provided. The information processing apparatus includes a processor configured to: receive image data; cause a display to display the received image data; and move, in response to a user instruction, a portion of the image data from a first place to a second place on the display. The portion of the image data is a partial region of an entire region of the image data. While the portion of the image data is being moved from the first place to the second place, the portion of the image data is displayed at the first place.

Abstract: A system of one or more computers is configured to peer container clusters running on different container orchestration systems. One general aspect includes moving an endpoint service container between an original cluster and a target cluster of a cluster mesh. In at least one embodiment, a remote service endpoint container is instantiated at the original cluster using service registry information accessed by a mesh operator. In at least one embodiment, the service registry information includes the hostname/path information for the endpoint service container operating at the target cluster. The remote service endpoint container is configured to allow the dependent container at the original cluster to consume services available at the endpoint service container at the target cluster as though the endpoint service container is local to the dependent container.

Abstract: A method is performed by a master network device among network devices of a cluster. The master network device receives cluster configuration information including a set of Internet Protocol (IP) addresses and a pool of port blocks associated with the IP addresses. Each port block includes multiple ports, and the pool of the port blocks is to be shared across the network devices for port address translation. The master network device divides the port blocks in the pool into multiple buckets. The master network device allocates to each network device in the cluster a corresponding one of the buckets, and reserves each bucket that is not allocated for allocation to a potential new network device. When a new network device joins the cluster, the master network device allocates to the new network device the port blocks from a corresponding one of the reserved buckets.

Abstract: Automatic routing, mapping, and clustering of remote units in a distributed communication system are disclosed. A mobile device is positioned proximate a given remote unit. Measurements are made so that the distributed communication system can map the location of the remote unit to a remote unit identifier and port within a central unit of the distributed communication system. Once the remote units are mapped to specific locations and the ports properly identified, the central unit may designate clusters within the distributed communication system.

Abstract: Apparatus and methods for enabling protected premises networking capabilities. In one embodiment, a white list of devices authorized to access a premises network and a black list of device not authorized to access a premises network are utilized. The black and white lists may be stored at a database in communication with an authorization manager or may be stored at the manager itself. When a client device is connected to a premise, the manager determines, based on the premises and/or device identity, whether the device is entitled to access. The authorization manager makes this determination based on whether the device is on the white or black list. If the device is on neither list, the manager may add the device to the white list upon appropriate verification. The manager may also facilitate removal of a device from the white list to the black list upon request or automatically.

Abstract: The various embodiments include methods, computers and communication systems that enable decomposing abstract service requests into resources rules, which may include receiving an abstract service request (e.g., a request specifying a functional requirement) via an exposed public interface, generating domain-specific resource rules based on the received abstract service request, identifying relevant components in a telecommunications domain for enforcing the generated domain-specific resource rules, and send the domain-specific resource rules to the identified components (e.g., online charging server, policy management server, etc.) for enforcement. Generating domain-specific resource rules based on the received abstract service request may include generating the rules consistent with the existing resource rules of the domain.

Abstract: A system, method, and computer program product are provided for mitigating an attack on a communication network, the attack causing repetitive reconfiguration of at least a part of the communication network. In use, using a communication management system, one or more configuration changes to a communication network are recorded. Each of the one or more configuration changes are associated with at least one rule, and each of the one or more configuration changes based on the at least one rule is determined. The at least one rule is associated with at least one event, and the at least one event is processed, resulting in an effect to the communication network. Additionally, at least one reconfiguration pattern is determined. Further, it is determined that the at least one reconfiguration pattern is repeated, and an attack to the communication network is mitigated.

Abstract: A request is received from customer premises equipment of a customer; the request is responded to with a pointer to a configuration file containing circuit configuration information for the customer. The configuration file is generated. Responsive to the customer premises equipment of the customer following the pointer, the configuration file is served out to the customer premises equipment of the customer. Subsequent internet traffic from the customer is treated in accordance with the configuration file.

Abstract: Examples described herein provide a computer-implemented method that includes registering at least one of a plurality of virtual internet protocol addresses (VIPAs) to each of a plurality of network adapters. The method further includes distributing, by each of the plurality of network adapters, inbound data among each of the plurality of network adapters using an address resolution protocol.

Abstract: Market-based distributed resource allocation techniques are provided for edge-cloud systems. One method comprises obtaining an application request at a given edge node in a multi-tier environment comprising cloud resources and multiple edge nodes. The edge nodes host a plurality of virtual nodes to process the application request. The application request is assigned to at least one of the virtual nodes based on a utility value of each virtual node. The utility value of each virtual node is based on a cost value representing a total cost incurred by each virtual node to process the application request. The utility value of each virtual node is optionally further based on a priority value of the application request. Master nodes from different edge node groups can collaborate to identify a given edge node group that can serve the application request when local edge nodes are unable to process the at least one application request.

Abstract: Systems, methods, and computer-readable media for implementing roaming services utilizing zero-configuration networking over a wide area network. Disclosed are systems, methods, and computer-readable storage media for implementing zero-configuration networking over a wide area network by utilizing agents, application programming interfaces (API), and a controller. The controller can implement policies for communication between the agents and APIs, enabling zero-configuration network.

Abstract: Resource scheduling methods and a resource manager define leaf buckets, each of which have coordinates in corresponding dimensions in a coordinate space. Nodes having resource values in the corresponding dimensions are mapped on the leaf buckets. A task request identifies candidate nodes and requested resources that relate to the coordinate space dimensions. The leaf buckets are scanned to find a fittable node among the list of candidates. A result of the scan is stored in a positive or a negative cache entry. When a next task request of a same task group is received, scanning of the leaf buckets is performed using information from the positive or negative cache entry. For a positive cache entry, the scanning is initiated from a point where the previous scanning has ended. For a negative cache entry, the scanning ignores nodes that were found not to contain the requested resources in the previous scanning.

Abstract: Embodiments provide a system and method for building idempotent configuration management modules for cloud infrastructure services. Idempotency of a configuration management (CM) task in a CM plan is one of the mechanisms used to achieve repeatable and reliable automations of configuration management tasks. This helps DevOps and operations personnel reliably apply and maintain configuration of their systems.

Abstract: A method for monitoring and managing a rack server is provided. The method includes: editing, in a rack management controller RMC for monitoring and managing the rack server in a centralized manner, a configuration file based on configuration information regarding the numbers and positions of server nodes, node mid-planes, fan control boards, fans and power supplies in a rack; and automatically monitoring and managing, by the RMC, components based on the configuration file by the RMC automatically acquiring accurate numbers and positions of nodes and power supplies corresponding to the rack configuration to select a corresponding cooling-speed regulation curve. With the method, racks with different configurations can be dynamically monitored by modifying the configuration file including the configuration information of the rack and uploading the modified configuration file.

Abstract: A communication system is disclosed. The communication system includes a plurality of radio points, each configured to exchange radio frequency (RF) signals with a plurality of wireless devices at a site. The communication system also includes a baseband controller communicatively coupled to the plurality of radio points. The communication system also includes a machine learning computing system communicatively coupled to the baseband controller. The machine learning computing system is configured to determine an expected average throughput associated with each of a plurality of global quantized signature vectors (QSVs), using a Q-function approximation, based on a current state of the communication system. The communication system is also configured to select a global QSV associated with a highest expected average throughput.

Abstract: A cell processing system includes a processor to receive a biological fluid to be processed, a controller coupled to the processor, the controller configured to operate the processor according to at least one modifiable process parameter, and at least one input coupled to the controller, the at least one input configured to receive an identifier and at least one process parameter control associated with the at least one process parameter that limits modification of the at least one process parameter if applied. The controller is configured to determine if the identifier is associated with an administrator authorization and to apply the at least one processor parameter control to the at least one process parameter if the identifier is associated with an administrator authorization.