Abstract: Systems and methods for managing configuration of a client security application based on a network environment in which the client device is operating are provided. According to one embodiment, a network connection state of a client device with respect to a private network is determined by a client security application running on the client device. The client security application, then selects a configuration based on the determined network connection state. Finally, the client security application launches one or more functions of the client security application that are designated by the selected configuration.

Abstract: The present invention is directed to systems and methods for establishing an electronic communications connection between secure communities. A secure community includes a collection of communication resources having an administrator that maintains control over the secure community. In an embodiment, a system for establishing an electronic communications connection between two or more secure communities includes a community gateway controller, an identification module, a secure community database configured to store secure community information, and an encryption compatibility module configured to determine a media transmission encryption scheme for a connection between a host secure community and a second secure community.

Abstract: A method for downloading an application includes, after learning an application downloaded by a second user equipment, sending, by a first user equipment that has an association relationship with the second user equipment, a downloading request for the application downloaded by the second user equipment to an application server, where the downloading request carries capability information of the first user equipment, and receiving, by the first user equipment, an application to be downloaded, where the application matches the capability information of the first user equipment and is sent by the application server. By using the foregoing technical solution, the application does not need to be manually downloaded for the user equipment, thereby saving manual operation and improving flexibility of downloading an application.

Abstract: The disclosed embodiments include a method of disarming active content in a received input file in a computer system having a processor. The method includes steps for identifying from digital content of the input file, targeted active content associated with an automatically invoked subroutine, altering the automatically invoked subroutine to prevent automatic execution of the instructions associated with the subroutine upon rendering by a rendering application, such that functionality of the targeted active content is preserved, and configuring the input file to include a selectable feature enabling a user to invoke the targeted active content responsive to a user input, thereby creating a reconfigured input file.

Abstract: A first acquisition unit acquires an event notification from an MFP and updates first device-status information. A transmission unit transmits the event notification and first reference-destination information. A switching unit switches a first access to the first reference-destination information to a second access to second reference-destination information. A second acquisition unit issues an acquisition request at a first interval, issues an acquisition request at a second interval in response to the event notification, acquires the second device-status information, and update the first device-status information.

Abstract: The present invention discloses a method for advertising routing information, and embodiments of the present invention further provide a virtual private network server device, an IP edge node device, and a client-based virtual private network system. In the technical solutions of the present invention, a virtual private network server first collects MAC address routing information of each site on a local virtual private network and then sends MAC address routing information of each site except a destination site in a unicast manner to a customer edge node that corresponds to each site on the virtual private network. This solves the problem that CE nodes in sites on the virtual private network cannot exchange routing information with each other by using a routing protocol because multicast packets are filtered by an access node of the data center network.

Abstract: Information processing equipment of the present invention includes a proxy response processing unit which outputs a content of a response stored in association with a command to a storage unit, and a delay processing unit which sends commands to the storage unit in accordance with time stored in a memory unit, receives a response of the storage unit, determines whether or not there is a difference between the response and the stored response of the storage unit and, when there is a difference, updates the stored content of the response, then sets a value indicting an initialized state in a check flag which stores data indicating whether or not the storage unit is initialized, and a control unit which sends a command for the storage unit to the proxy response processing unit and sends a response of the storage unit to the delay processing unit.

Abstract: A communication terminal communicates protocol data units across a first virtual interface and a shared interface. The first virtual interface corresponds to an upper layer protocol and a first logical network. The shared interface corresponds to a lower layer protocol. The terminal also communicates protocol data units across a second virtual interface and the shared interface, with the second virtual interface corresponding to the upper layer protocol and a second logical network. The first logical network can be a wide area network that includes devices within a premises and devices outside a premises, and the second logical network may be a local area network that only includes devices within the premises.

Abstract: A wireless device used to communicate with and control one or more components of an HVAC system from a remote location is provided. The wireless device is configured to display two or more icons on the display of the device, wherein each icon executes a function that aids the user in controlling one or more components of the HVAC system. The wireless device dynamically orders the two or more icons on the display of the device, each according to a dynamic ranking algorithm. The dynamic ranking algorithm is based on a number of factors such as, for example, a relative frequency of selection of each of the two or more icons by a user, the current time of day, the current time of year, the current temperature, and/or the current location of the wireless device.

Abstract: Systems and methods for managing configuration of a client security application based on a network environment in which the client device is operating are provided. According to one embodiment, a network connection state of a client device with respect to a private network is determined by a client security application running on the client device. The client security application, then selects a configuration based on the determined network connection state. Finally, the client security application launches one or more functions of the client security application that are designated by the selected configuration.

Abstract: A method of spatial re-use with TPC and adaptive CCA is proposed. A spatial re-use station detects spatial re-use information associated with other peer OBSS stations. The spatial re-use information comprises a TX spectral density (power/Hz) and received signal or interference information of each inter-BSS peer station. The spatial re-use STA determines a TX spectral density based on the detected spatial re-use information. The spatial re-use STA then contends the medium for spatial re-use transmission opportunity (TXOP) with an intra-BSS peer station. Finally, the spatial re-use STA starts spatial re-use frame exchange with the intra-BSS peer station using the determined TX spectral density. By adjusting the TX spectral density, the spatial re-use STA adapts its CCA level to spatially reuse the medium without causing collision and interference to OBSS stations and thus increases network throughput.

Abstract: A method of speeding up the delivery of a dynamic webpage is disclosed. A request for a webpage is received, the webpage including one or more dynamic components. A cached stub is sent in response to the request, wherein the cached stub includes components empirically determined as static components of the webpage, and wherein the cached stub includes a placeholder replacing at least a portion of a first dynamic component of the webpage. A script is injected in the cached stub that intercepts any access to the placeholder.

Abstract: A system construction support apparatus 1 includes a non-volatile memory 4 that stores in advance apparatus information (projects and design information) that is written such that device numbers and character strings associated with the device numbers are included; a name-candidate-list generating unit that extracts character strings included in the apparatus information in association with device numbers associated with the character strings, organizes the extracted character strings into an entry for each device on the basis of a device number corresponding to each of the character strings, and displays a list of character strings; and a label registering unit that receives an input selecting one of the character strings displayed in the list for each entry and registers the selected character string as a label of a device corresponding to the character string.

Abstract: In various embodiments, methods and systems for measuring load-balancer responsiveness in a cloud computing infrastructure are provided. A plurality of requests is transmitted to a data center virtual IP (VIP), where the data center VIP is configured to receive inbound traffic for a service. A load-balancing component associated with the VIP distributes the requests to a DIP pool comprised of one or more machines, each associated with a private direct IP (DIP). Each of the machines includes a DIP node-monitoring component including a keep-alive URL for receiving keep-alive probes and a dummy service URL for receiving the plurality of requests. A latency of exclusion or inclusion of a first DIP of a first machine in the DIP pool is determined based on at least some of the requests received by the DIP node-monitoring component from the load-balancing component.

Abstract: Embodiments are directed to a method of optimizing input/output (I/O) operations to a storage device having mixed read and write operations by determining a current queue state for the read and write operations with respect to defined optimum values of I/O operations per second (IOPS) and latency for the I/O operations, determining device characteristics of the storage device by determining read/write response times, queue depths and dispatch time intervals for an initial read/write operation, and modifying at least one of a wait time or batch size for subsequent read/write operations to meet the defined optimum values of IOPS and latency.

Abstract: System, methods, nodes, and computer program for handling performance monitoring data in a communication network are described. The communication network (100) comprises a plurality of network nodes (102). The performance monitoring data are generated by a network node (102). The performance monitoring data are a stream of data characterizing the performance of the network node (102). The method comprises determining, by the network node (102), whether an encryption condition for encrypting the performance monitoring data is fulfilled. The method further comprises based on the result of determining, encrypting, by the network node (102), the performance monitoring data. The method further comprises subsequent to the encrypting, sending, by the network node (102), the encrypted performance monitoring data to a performance monitoring data collector (112).

Abstract: In accordance with an embodiment, described herein is a system and method for replicating a source service domain to a target service domain in a cloud computing platform environment. In accordance with an embodiment, the system comprises a cloud platform component provided as an installable software suite within the cloud environment, that supports provisioning of enterprise applications; a test to production (T2P) framework module that includes a plurality of T2P plugins and a PaaS plugin; and a user interface where an administrator or a user can invoke the plugins to replicate a source service domain to a target service domain. The system allows a user to manually customize move plans for service domain configurations based on the requirements of the target service domain, and recreate the configurations in the target service domain in accordance with the customized move plans.

Abstract: A method and apparatus for locating points of interest using an ad-hoc network is provided. An exemplary method includes establishing an ad-hoc network between mobile devices and fixed location devices, wherein the fixed location devices are associated with points of interest. A distance from a mobile device to a point of interest is determined based, at least in part, on the number of hops between the mobile device and other mobile devices to reach the point of interest. A direction to the point of interest is determined based, at least in part, on the number of hops between mobile devices proximate to the mobile device and the point of interest.

Abstract: An electronic device is provided comprising a processor, a memory coupled to the processor, and a communications module saved in the memory and an application saved in the memory. The communications module configures the processor to generate a first transmission sequence number associated with a transport message to be sent to a remote device, include the first transmission sequence number in the transport message, and send the transport message to the remote device.

Abstract: In one embodiment, a server includes a processor and logic integrated with and/or executable by the processor. The logic is configured to hash at least a portion of a packet according to a hashing algorithm to obtain a hash value. The logic is also configured to select an uplink with which to forward the packet based on the hash value. In another embodiment, a method includes hashing at least a portion of at least one packet according to a hashing algorithm to obtain a hash value using an accelerated network interface card (NIC) of a server. The accelerated NIC is configured to provide overlay functionality. The method also includes selecting an uplink, based on the hash value, from a plurality of uplinks available to send traffic out to a network using the accelerated NIC.

Abstract: An information acquisition method whereby a management computer provided with a processor, a memory, and an interface acquires information of a plurality of computers via a network, the method including: a first step in which the management computer sets, in acquisition group information, a group of computers for acquiring information among the plurality of computers; a second step in which the management computer determines a sequence in which information is acquired for each group, then determines the sequence of computers for acquiring information in the group; a third step in which the management computer outputs an instruction for acquiring information of computers in the determined sequence; and a fourth step in which an information acquisition execution unit acquires the information of the computers of each group in the determined sequence on the basis of the instruction to acquire the information.

Abstract: Network addresses are dynamically allocated to devices based on demand. It is determined that a quantity of virtualized machine instances executed on a plurality of computing devices has changed. An updated network address allocation is dynamically assigned to a subdivision of a network in response to the quantity of virtualized machine instances. The subdivision includes the plurality of computing devices. A router for the subdivision is reconfigured to implement the updated network address allocation.

Abstract: An exemplary embodiment provides for a method for providing a mobile device-based community corrections supervision system. The method includes receiving an alert, from a remote server, via an enrollee's mobile device, to perform a check-in and receiving acknowledgement of the alert from the enrollee. Additionally, the method then requests the enrollee to recite displayed text and records the enrollee as the displayed text is recited.

Abstract: A network security policy may be implemented at network switches as a set of active packet disposition directives. In a dynamically programmable network, the network switches can be dynamically reprogrammed with new packet disposition directives. A security mediation service permits such dynamic reprogramming as long as the new directives are consistent with the then-current network security policy. The security mediation service evaluates candidate packet disposition directives for conflicts with the currently active security policy, before instantiating the candidate packet disposition directives at the network switches.

Abstract: A network access device (NAD) is configured to automatically establish a connection to a WAN. The NAD tests IP configurations according to a first priority scheme at least until a currently best scoring one of the IP configurations is selected for use to communicate over the WAN. The testing of the IP configurations includes transmitting requests according to a first priority scheme and tracking any replies reflecting which IP configurations are valid. The first priority scheme is for selecting among IP configurations for testing and prioritizing a first type of IP configuration over a dynamically determined type of IP configuration. Which IP configurations of the dynamically determined type that are to be tested are determined by attempting to obtain DHCP leases using different VLAN IDs according to a second priority scheme of VLAN IDs to include in DHCP requests.

Abstract: A mobility management system in which mobility management for a mobile terminal is performed, including a plurality of mobility anchor nodes configured to communicate with an external network; an access gateway configured to communicate with the mobile terminal and the plurality of anchor nodes, and configured to send, to at least one of the mobility anchor nodes, a packet being relayed between the mobility terminal and the external network; and a control unit having at least one hardware processor configured to execute modules to control the access gateway to switch a destination mobility anchor node of the packet.

Abstract: Mechanisms to enable management controllers to learn the control plane hierarchy in data center environments. The data center is configured in a physical hierarchy including multiple pods, racks, trays, and sleds and associated switches. Management controllers at various levels in a control plane hierarchy and associated with switches in the physical hierarchy are configured to add their IP addresses to DHCP (Dynamic Host Control Protocol) responses that are generated by a DCHP server in response to DCHP requests for IP address requests initiated by DHCP clients including manageability controllers, compute nodes and storage nodes in the data center. As the DCHP response traverses each of multiple switches along a forwarding path from the DCHP server to the DHCP client, an IP address of the manageability controller associated with the switch is inserted. Upon receipt at the DHCP client, the inserted IP addresses are extracted and used to automate learning of the control plane hierarchy.

Abstract: A distributed computing and storage system, comprising a switch fabric, an input/output interface connected to the switch fabric and a plurality of nodes connected to the switch fabric, each node of the plurality of nodes having a node physical address, each node of the plurality of nodes having a node communication address, which is assigned by the processor inside the node based on the node physical address, each node further comprising at least one processor, at least one memory controller connected to the at least one processor and a plurality of memory devices connected to the at least one memory control.

Abstract: In general, embodiments of the invention provide an approach to differentiate and/or customize image files in a networked (e.g., cloud) computing environment. Specifically, a plurality of images corresponding to a requested instance, and all configuration files corresponding to the plurality of images, will be identified. In identifying the configuration files, a first subset of configuration files that are common to all of the plurality of images, and a second subset of configuration files that are unique to individual images will be determined. The user can then individually select configuration files from the two subsets, and the requested instance can be generated based thereon.

Abstract: Systems, methods, and computer program products to perform an operation, by, responsive to a request specifying to transition a state of a virtual machine in a cloud computing environment from a first state to a second state, allocating one or more system resources to the virtual machine during the transition from the first state to the second state, and, upon completion of the transition, releasing a portion of the allocated one or more system resources to a pool of available resources, so that the virtual machine is left with a remaining portion of the allocated one or more resources sufficient for operation during the second state.

Abstract: A method, Web server and computer system for converging a desktop application and a Web application. The method includes: in response to a request from a client user for using a target desktop application, starting a desktop application initialization process on the Web server and determining an appropriate corresponding hosting server for the user; preparing and provisioning desktop application environment on the corresponding hosting server and starting the target desktop application; transmitting the corresponding hosting server's address to the client to make desktop application interaction between the client and the corresponding hosting server; and in response to the completion of the desktop application interaction, stopping and exiting the target desktop application on the corresponding hosting server. The client user is provided with a unified Web console for accessing desktop applications and Web applications and Web files can be shared between the desktop applications and the Web applications.

Abstract: Systems and methods of efficient software replication are provided. This is accomplished by a first communication device that determines if a second communication device needs to have a software upgrade. In response to determining that the second communication device needs to have the software upgrade, the software upgrade is downloaded onto the second communication device. In response to downloading the software upgrade onto the second communication device, the second communication device determines if a third communication device needs to have the software upgrade. In response to determining that the third communication device needs to have the software upgrade, the second communication device downloads the software upgrade to the third communication device. This process can be repeated for any number of communication devices or the process may be completed in different orders.

Abstract: Aspects of the present invention include a digitized release notes configured to be automatically consumed by a management system or database and can be intelligently leveraged by the management systems for numerous purposes. In embodiments, having a repository of release notes contents, a management system can support various levels of queries for making or proposing solutions for an administrator while also providing a general overview of the release contents in a user consumable format. One advantage to such implementations is the time saved by administrators in gathering all the required information for each piece of the equipment under management. All the release notes information is readily at hand, even if the latest release is not currently installed in the production environment. Furthermore, this allows for flexibility in developing deployment plans (i.e., whether certain firmware/software is required to be updated, how an update affects other equipment, prioritization of updates, etc.).

Abstract: Storing computer data is provided. Responsive to determining that a first data includes user data, storing the user data to a first storage system, wherein the first storage system provides a first quality of service. Responsive to determining that a second data includes redundant data, storing the redundant data to a second storage system, wherein the second storage system provides a second quality of service that is lower than the first quality of service provided by the first storage system.

Abstract: According to one aspect of the present invention there is provided a system, method, and computer program product for recovering from a network failure in a communication network using network function virtualization (NFV-based network), the method including: selecting a first network component of the NFV-based network, detecting at least one probable failure of the first network component, identifying at least one virtual network function (VNF) instance using the first network component, selecting a second network component to be used by same VNF for replacing the VNF instance in the first network component when the first network component is faulty, and securing at least one resource of the second network component for the VNF.

Abstract: Methods, systems, and computer-readable media for automatically configuring an inventory of hardware to interact seamlessly with a cloud-computing fabric of a data center are provided. Initially, hardware devices within the hardware inventory are located by sending and receiving communications to network devices via serial-based connections and network-based connections, respectively. Information collected during hardware-device location is cross-referenced against a template file for purposes of validation. This information is also employed to generate an infrastructure state of the hardware inventory. The infrastructure state is shared with a controller of the fabric to integrate the hardware inventory therein.

Abstract: A method for managing a configuration of an electronic system having a plurality of locations configured to receive hardware units is disclosed. The method may include receiving hardware unit parameters corresponding to hardware units currently installed and pending installation in the electronic system and retrieving configuration data for the electronic system. The method may also include generating a plurality of hardware unit times to failure (TTFs) for the plurality of locations by applying, to a failure prediction model, the hardware parameters for hardware units currently installed and pending installation and the configuration data for the electronic system. The method may also include using a selection criteria to select the plurality of hardware unit predicted TTFs corresponding to the plurality of locations and reporting at least one recommended hardware unit installation location from the plurality of locations within the electronic system.

Abstract: Technologies for broadcasting management information include a management server and a number of client devices. The management server encodes management data such as a certificate revocation list into a number of message fragments using a fountain code encoding algorithm and broadcasts the message fragments continually over a network. Each client device analyzes the network during a boot process to receive the broadcast message fragments. Each client device decodes the message fragments using a fountain code decoding algorithm and determines whether the message is complete. If the message is complete, the client device parses the message to retrieve the management data and may install the management data on the client device. If the message is incomplete, the client device may store the message fragments in nonvolatile storage for processing during future boot events. The client device may perform those operations in a pre-boot firmware environment. Other embodiments are described and claimed.

Abstract: A network node (10) controls resources (22) in a network. The node (10) includes processing units (12) and assigns, for each set of resources (22), to a unit (12) a master role consisting in reserving and releasing resources (22) and to two processing units (12), named controllers, the role of controlling resources (22). A controller (12c) operates in a first mode when a master role is assigned to a processing unit (12m) and the unit (12m) is available to reserve and release resources (22). A controller (12c) operates in a second mode when no master role is assigned or when a master role is assigned to a unit (12m) which is not available to reserve and release resources (22). In the second mode, a controller (12c) maintains a list (14) of resources (22) to be released and selects a resource (22) from the list (14) to reserve a resource (22).

Abstract: A client device can be configured to perform a local index search and a server index search to automatically identify and upload content items on the client device that have not been uploaded to an online content management system. A local index search can include creating a unique local identifier of a content item and searching a local upload index that includes the unique local identifier of each content item that has been uploaded. A server index search can include creating a unique server identifier of the content item and searching a server upload index that includes the unique server identifier of each content item stored on the online content management system. Content items that are determined to have not been uploaded to the online content management system based on the results of the two searches, can be uploaded to the content management system by the client device.

Abstract: A mobile device for accessing content stored on a remote server over a mobile network is provided. The mobile device includes a processor configured to direct the mobile device to receive at least a portion of a list initiated by the remote server, the list identifying folders or files stored on the remote server, process a selection to identify one of the folders or files on the list having the content on the remote server, and send a request directing a management server to initiate a transaction including an identifier indicating the one of the folders or files having the content on the remote server that is to be sent as the attachment to the destination.

Abstract: Methods, systems, and apparatus used to provide duplicate address detection in edge devices. Edge devices can include CMTS devices or DSLAMs where network nodes are not allowed to communicate with each other directly. Duplicate address detection proxies can provide duplicate address protection for network devices and can avoid the issue of broadcasting node advertisement messages to all of the devices connected to a particular downstream link.

Abstract: Two-phase filtering for a firewall is disclosed. In the first, general phase, a request is filtered to verify one or more of: that the request is pursuant to a supported protocol, that a command of the request is allowed, that the length of the request does not exceed the allowed maximum for the command, and that characters of the request are of an allowable type. Upon first-phase verification, a second phase is invoked that is particular to the protocol of the request. In the second, specialized phase, the request is filtered to verify one or more of the source, the destination, and the content of the request. Upon second-phase verification, the request is allowed to pass. If either first- or second-phase verification fails, then the request is denied.

Abstract: A configuration architecture automatically links the output of a business process modeler to a business system configuration tool. The output of the business process modeler is translated into a representation of a source business process that is used by the business system configuration tool to automatically generate configuration templates. A user can provide configuration information through the configuration templates. The configuration inputs are applied to an implementation of a business system to obtain a configured, working business system instance with the same functionality as the source business process.

Abstract: In one embodiment, a method includes receiving a first identifier and a private key after a network device has been included in a data center switch fabric control plane, authenticating the network device based on the private key, sending a second identifier to the network device, and sending a control signal to the network device based on the second identifier. The first identifier is associated with the network device and unique within a segment of the data center switch fabric control plane. The second identifier is unique within the segment of the data center switch fabric control plane.

Abstract: A system for locating and managing application services according to one embodiment includes a location determination circuit configured to determine a physical location of an associated server; and a service location management (SLM) agent associated with the server. The SLM agent is configured to maintain a registry of service applications provided by the server and to transmit multicast messages over a data center network. The multicast messages are configured to advertise: an identification (ID) of the server; the service applications provided by the server; and the physical location of the server.

Abstract: A multimedia collaboration system that facilitates more efficient, free-flowing collaboration sessions. In order to make addition of new participants, media components, and or network access device to a collaboration session more efficient, client devices associated with each participant can store endpoint address information that can be automatically obtained by the multimedia collaboration system. The endpoint address information can then be used to add the new participants, media components, and or network access device.

Abstract: An extraction method comprising: acquiring configuration information indicating a configuration of a processing device for each generation that represents a respective time period between configuration modifications, and extracting first information indicating configuration modifications between generations based on a plurality of generations of the acquired configuration information; acquiring performance information indicating various types of performance of the processing device at respective times, and extracting, as second information associated with one of the generations, a time when an abnormality was detected in change to a time series of the acquired performance information; acquiring event information indicating an event occurring in the processing device at respective times, and extracting, as third information associated with one of the generations, a time of event information creation when an abnormality was detected; and extracting the first information, the second information, and the third in

Abstract: In order to simplify and reduce the cost of an electronic device, the size of a first non-volatile memory associated with an integrated circuit is significantly reduced. Instead of using the first non-volatile memory, a second non-volatile memory associated with a processor in the electronic device is used to store an embedded operating system of the integrated circuit, as well as associated data and a configuration of the integrated circuit. To reduce the security risks associated with using this remote second non-volatile memory, the first non-volatile memory may store authorization information and anti-replay information. During a secure boot of the integrated circuit, the authorization information is used to verify that the embedded operating system, the data and the configuration are authorized. In addition, the anti-replay information is used to determine that the embedded operating system, the data and the configuration are different than previously received versions of these items.

Abstract: In one embodiment, a method includes a method includes obtaining traffic, determining a host Media Access Control (MAC) address, and determining a host Internet Protocol (IP) address using the traffic. The method also includes generating an Ethernet virtual private network (E-VPN) MAC route advertisement that includes both the host MAC address and the host IP address and generating an IP virtual private network (IP-VPN) route advertisement that includes the host IP address.