Abstract: In one embodiment, a system for managing a virtualization environment includes host machines implementing a virtualization environment, a plurality of clusters of the host machines, a virtualized file server (VFS) comprising a plurality of file server virtual machines (FSVMs), and a VFS cluster manager (CM) configured to distribute storage items among the clusters and receive cluster storage statistics for one or more shares of the VFS. The CM is further configured to, in response to a request from a first FSVM to identify a storage location for a storage item, identify a cluster at which the storage item is to be located based on the cluster storage statistics, identify a second FSVM at which the storage item is to be located based on compute usage statistics of one or more FSVMs in the identified cluster, and send an address of the second FSVM to the first FSVM.

Abstract: The present application discloses a method for accessing a network slice, an electronic device, and a storage medium. The method includes: acquiring access information of a target network slice according to an access request of an application for requesting to access the target network slice; generating a routing policy between the application and the target network slice according to the access information; and accessing the application to the target network slice according to the routing policy, so that the application performs network communication through the target network slice.

Abstract: The invention relates to a method for implementing an ONU Management and Control Interface (OMCI) management instance based on a configuration file. The method is constructed on a passive optical network. The passive optical network includes an ONU and an OLT, the OLT using an OMCI specification as a management protocol to create a management entity in the ONU. The method includes: executing a software for the ONU to activate an OMCI process; and checking if a configuration file exists under a specific system path of the ONU by the software; if the configuration file exists, loading the configuration file by the software, and configuring the management entity according to the configuration file.

Abstract: The present invention relates to a personal awareness system that provides a user physical health/wellness/welfare safety as well as online digital safety by blocking inappropriate digital content. The personal awareness system comprises a network protection appliance for use on a local area network (LAN), a software application that can be used on a mobile computing device, a cloud-based remote data processing resource to administer the system, and a monitor computing device that an observer can use to monitor, track, and receive alerts related to the user. The system can support many users individually as well as groups of users. In operation, sensors associated with the mobile computing device monitor the health, wellness, and location of the user and digital filter rules suppress inappropriate digital content from user access to provide digital safety. The mobile computing device can seamlessly transition between LAN environments and wireless mobile environments.

Abstract: A method for network infrastructure assessment is provided. An assessor tool portion is replicated on a network origination node. A plurality of authentication keys associated with a root authentication key are generated. Network nodes are recursively enumerated by the assessor tool. In the recursion, information on the parent node is enumerated and reported to a controller of the network; the parent node is marked as enumerated; child nodes connected to the parent node are detected; at least a portion of the assessor tool is replicated on a child node that is not enumerated but has a valid assigned authentication key; and recursion is continued with the child node as the parent node. The reported information is processed to produce a network infrastructure assessment.

Abstract: A building control system includes a building controller and a user interface device operatively coupled to the building controller. The building controller is wall mountable and includes a plurality of ports for controlling one or more points that are associated with one or more plants of a building. The building controller controls the one or more points in accordance with one or more programmable point control values that are associated with one or more points. The user interface device provides a user interface for operating the building controller and is configured to display a plurality of menu screens on a display that allow a user to view one or more of the points, change the programmable control value for one or more of the points, and view one or more alarms generated by the building controller for one or more of the points.

Abstract: A method for performing an augmented reality location operation. The augmented reality location operation includes: attaching an augmented reality tape to a component, the augmented reality tape comprising a plurality of unique identifiers; identifying an augmented reality target via an augmented reality tracking method, the augmented reality target comprising the unique identifier of the augmented reality tape; and, generating an augmented reality projection to a location on the component based upon the identifying the augmented reality target.

Abstract: Systems and methods for providing a remote interactive experience are provided. The systems and methods may include computer executable code stored in a non-transitory memory and run on a processor. The remote interactive experience may be provided via a digital platform. The platform may provide management of a shared browser. The shared browser may be shared by a plurality of participant devices. The platform may store the shared browser in a cloud-based location. The shared browser may thus be cloud-based. The platform may enable the plurality of participant devices to access the cloud-based shared browser. The platform may receive, as input, actions performed to each of the plurality of participant devices.

Abstract: Techniques for managing anomalies in a software system include monitoring the software system for anomalies via a plurality of signals and determining that signal results associated with the signals indicate a presence of an anomaly in the software system. The techniques also include identifying a hierarchy of sensors associated with the anomaly, where the hierarchy includes a parent sensor and a set of child sensors that are direct or indirect descendants of the parent sensor. The techniques additionally include executing the parent and child sensors to analyze the software system for one or more causes of the anomaly, and determining the cause(s) of the anomaly based on sensor results generated by the parent and child sensors. Finally, the techniques include causing remediation of the cause(s) of the anomaly based on one or more child sensors associated with the cause(s) and one or more resolutions mapped to the child sensor(s).

Abstract: The communication network system according to the present disclosure comprises: a life cycle manager (LCM) that transmits a request for virtual network function (VNF) setting to one or more clouds; and a cloud adapter that mediates communication between the LCM and the cloud to which the request is addressed, The cloud adapter creates, based on a response to the request from the cloud to which the request is addressed, a common-format management ID independent of the type of the cloud to which the request is addressed, and transmits the management ID to the LCM. The LCM may transmit a query regarding a processing status of the request to the cloud adapter, including the management ID. The cloud adapter may recognize the cloud to which the query is addressed on the basis of the management ID and query the cloud to which the query is addressed such that the cloud returns the processing status.

Abstract: Embodiments of this application provide a method and an apparatus for determining virtual machine VM migration. The method includes: after a VM is migrated, sending a gratuitous ARP packet or a RARP packet to an in-migration VTEP device; obtaining, by the VTEP device, a MAC address of the VM, searching an ARP cache table based on the MAC address, and obtaining an IP address of the VM; and constructing an ARP unicast request packet by using the IP address as a destination IP address, and if the VTEP device receives an ARP response packet sent by the VM for the ARP unicast request packet, determining that the VM is migrated.

Abstract: A system and method for intelligent service intermediation comprising a service intermediation server, which stores advanced global machine and deep learning models for natural language understanding, intent analysis, and constructing a central artificial intelligence that may be used to function as one intelligent service intermediary serving many parties, each acting in one or more roles, simultaneously, and a plurality of service edge devices which store local versions of the global machine and deep learning models and which use local data to train the local model. Service intermediation server has global state information associated with all services and edge devices it connects with and may use the global state information to generate predictions and optimizations in the form of service actions in order to intermediate actions between and among services and service participants.

Abstract: In one embodiment, a device obtains quality of experience labels for an online application accessible via a network. The device also obtains telemetry data from the network that is associated with quality of experience labels. The device makes, based on the quality of experience labels and telemetry data, a determination as to whether the online application is similar to a second online application for which a prediction model is already available. The device trains, based on the determination, a prediction model for the online application to predict a quality of experience metric for the online application.

Abstract: Apparatuses, systems, and methods for enhancement of network slicing for a UE. A UE may receive, from an AMF of a network, application related information associated with network slice data routing for data associated with an application. The information may be provided to the network by network slice customers. The UE may, in response to application initiation, determine traffic routing for data associated with the application. Traffic routing may be based on the application related information and a UE configuration associated with user privacy (e.g., user privacy setting) associated with the application. When the user UE configuration is enabled, the data may be routed via a default network slice and when the UE configuration is disabled, the data may be routed via a network slice indicated by the application related information. The UE configuration may be indicated by the application via a Boolean flag and/or via a user interface setting.

Abstract: Artificial intelligence directed controlled-environment facility resident support ticket response and/or action may provide access to a controlled-environment facility media and/or communications terminal or device support application program via one or more controlled-environment facility media and/or communications terminals and/or a plurality of personal controlled-environment facility resident media and/or communications devices, which accept input of a support request, via the support application program, from a controlled-environment facility resident. A controlled-environment facility media and/or communications device services platform receives the request, determines an assigned weight of words in the request and selects one or more passages of predefined response text to compose a response to the request, based on a determined weight of words in the request and tags associated with these words and the passage(s) of predefined text.

Abstract: Techniques for obtaining application network metadata from a service registry so that a network routing policy may be derived for traffic associated with the application are described herein. The techniques may include receiving, at a service registry, network metadata associated with traffic of an application hosted by a scalable application service platform. The techniques may also include obtaining, by a controller of a network and from the service registry, the network metadata associated with the traffic of the application. Based at least in part on the network metadata, the controller may determine a routing policy that is optimized for sending the traffic through the network. Additionally, the controller may send an indication of the routing policy to a node of the network or otherwise provision the network such that the traffic of the application is sent through the network according to the routing policy.

Abstract: Described herein are systems and methods to filter and classify multicast network traffic. In one example, a first computing node may receive a multicast communication from a second computing node and register a for a flow associated with the multicast communication, wherein the context includes at least the multicast port associated with the multicast communication. The first computing node further identifies an outbound communication destined for the second computing node and determines that addressing attributes in the outbound communication match the context for the flow. Once it is determined that the attributes match the context for the flow, the first computing node associates the outbound communication with the flow.

Abstract: Disclosed herein is a method for permitting a real-time virtual medical examination using a patient device and at least one diagnostic device including receiving, at the patient device, a signal transmitted from the at least one diagnostic device; generating diagnostic information based on the received signal; encrypting the diagnostic information; establishing communication over a network between the patient device and a first remote server; establishing a video conferencing session via a second remote server; and transmitting the encrypted diagnostic information to the first remote server.

Abstract: Methods and apparatuses are provided to improve streaming of data by providing efficient media ingress and egress. A method may include sending a plurality of stream registration requests for streams to stream data. The method may also include receiving a plurality of stream addresses. The method may further include establishing a plurality of data links with the plurality of transmission endpoints, and establishing a new data link with a new transmission endpoint according to changing conditions affecting a user equipment, while preserving the same data streams for streaming the data.

Abstract: Aspects of the disclosure provide for a method implemented by a computing device executing an artificial intelligence electronic assistant application. In some examples, the method includes searching a local area network for smart home devices to determine an identifier associated with a smart home device, provisioning the smart home device to an ecosystem of devices that is managed by the computing device, and automatically arbitrating communication of the smart home device based on the provisioning.

Abstract: The present disclosure provides a method and apparatus for determining an application service dependency, and a processor. The method includes that: an input pulse of first application service and an output pulse of second application service are acquired; a time interval between the input pulse and the output pulse is determined; and an application service dependency between the first application service and the second application service is determined based on the time interval. According to the present disclosure, a technical problem that an application service dependency between different pieces of application service cannot be determined accurately through a method for determining an application service dependency provided in the related art is solved.

Abstract: An apparatus and method for determining an instruction set is provided. The apparatus includes a processor and a memory connected to the processor. The memory contains instructions configuring the processor to receive multiple datasets, where each dataset describes actions performed by an entity and to generate, for each dataset of the datasets, an outlier cluster. Generating the outlier cluster includes aggregating data included in a dataset, identifying data within aggregated data based on similarity to actions, and assigning a quality score for the identified data based on assessing whether identified data exceeds a threshold value. The outlier cluster is determined based on the quality score. The processor may receive a subject process describing a current state of the entity and identify, for each outlier cluster, a process modification model that describes a set of actions to be performed to increase proximity of the subject process to each outlier cluster.

Abstract: A method for detecting fraud across networks of interconnected smart contracts on a blockchain network, including constructing a graph representation of nodes and node edges representing smart contracts and interactions therebetween on a blockchain network. New smart contracts are added to the graph representation which is updated to reflect updated edges. Pattern recognition algorithms are applied to the graph database to identify and flag sub-graphs suggesting potential fraud. Filtering smart contracts gather forensic data about each smart contract comprised by the flagged sub-graph. A fraud risk score is determined by analyzing the forensic data. If the fraud risk score exceeds a threshold value, a fraud response is triggered.

Abstract: In one embodiment, a device forms a latent space by applying dimensionality reduction to timeseries snippets of path metrics for a network path via which traffic for an online application is conveyed. The device extracts a plurality of path states from the latent space. The device presents the plurality of path states for display by a user interface. The device associates a set of transitions between the plurality of path states with the online application providing degraded application experience.

Abstract: A method for controlling traffic forwarding includes: A control device receives a first packet sent by a first network device, where the first packet includes a first service packet. A destination of the first packet is the control device, a destination of the first service packet is first user equipment, and the first user equipment is connected to a network by using a second network device. Then, the control device determines a first forwarding policy based on the first packet and a first routing entry, where the first forwarding policy is used to guide forwarding of a first data flow to which the first service packet belongs. In addition, the control device sends the first forwarding policy to the first network device.

Abstract: A method for configuring access to an Internet service, the method being implemented by a server known as a web server following at least one successful authentication request by a user to access the service, the at least one authentication request being initiated by a terminal of the user. The method includes: a first step of obtaining at least one identifier of the terminal and at least one authentication datum that are present in the at least one authentication request; a second step of obtaining, on the basis of the at least one obtained authentication datum, at least one identifier of the user; a third step of obtaining, on the basis of the at least one identifier of the user and of the at least one identifier of the terminal, at least one access parameter; and a step of configuring the service for the user on the basis of the at least one access parameter.

Abstract: Embodiments include apparatuses, methods, and systems for managing security of a communication network. A message, formatted based on a stateless communication protocol for a communication network, may be received from a first computing device and by a second computing device. The second computing device generates a fingerprint of the message based on at least a portion of a header of the message or a portion of a body of the message. In addition, the second computing device detects whether the generated fingerprint of the message has a duplicated fingerprint already stored in the storage device, where the message is a retried message or replayed message of a message having the duplicated fingerprint. In embodiments, the fingerprint may be generated using a hash function based on the message.

Abstract: A first instance of a first messaging application, with a first messaging format, is running on a virtual machine. A user authentication for a first user account associated with the first instance is received from a user of a second messaging application with a second messaging format. A second user account associated with the second messaging application is linked to the first user account based on the authentication. A first database associated with the first user account is monitored for incoming messages from a second instance of the first messaging application which are then stored in a second database associated with the second user account based on an API to convert them to the second messaging format. The second database is monitored for outgoing messages from the second messaging application which are then stored in the first database based on an API to convert them to the first messaging format.

Abstract: A graphical user interface (GUI) for presentation of network security risk and threat information is disclosed. A listing is generated of incidents identified by use of event data obtained from a networked computing environment. A particular incident is determined to be associated with a risk object, wherein a risk object is a component of the networked computing environment. The listing is populated with a name associated with the risk object. Risk events associated with the incident are determined, wherein each risk event contributes to a risk score for the incident. The risk score indicates a potential security issue associated with the risk object. The listing is populated with the risk score and a summary of the events. An action is associated with the listing, for triggering display of additional information associated with the risk object. The listing can be displayed in a first display screen of the GUI.

Abstract: Systems, methods, and computer-readable media for locally applying endpoint-specific policies to an endpoint in a network environment. A network device local to one or more endpoints in a network environment can receive from a centralized network controller one or more network-wide endpoint policies. A first endpoint of the one or more endpoints can be configured to inject policy metadata into first data traffic. Policy metadata injected into the first traffic data can be received from the first endpoint. The network device can determine one or more first endpoint-specific polices for the first endpoint by evaluation the first policy metadata with respect to the one or more network-wide endpoint policies. As follows, the one or more first endpoint-specific policies can be applied to control data traffic associated with the first endpoint.

Abstract: The disclosure provides an approach for processing communications between connected data centers. Embodiments include receiving, at a first gateway of a first data center from a second gateway of a second data center, one or more policies associated with traffic attributes. Embodiments include programming priority routes between the first gateway and the second gateway over a virtual private network (VPN) tunnel based on the one or more policies, wherein each of the priority routes is associated with a traffic attribute of the traffic attributes. Embodiments include providing the one or more policies to a central controller of the first data center and programming, by the central controller, one or more tables associated with a centrally-managed virtual switch based on the one or more policies. Embodiments include updating a database associated with each of a plurality of hosts based on the programming of the one or more tables.

Abstract: In one aspect, the invention comprises a system and method for control of a transaction state system utilizing a distributed ledger. First, the system and method includes an application plane layer adapted to receive instructions regarding operation of the transaction state system. Preferably, the application plane layer is coupled to the application plane layer interface. Second, a control plane layer is provided, the control plane layer including an adaptive control unit, such as a cognitive computing unit, artificial intelligence unit or machine-learning unit. Third, a data plane layer includes an input interface to receive data input from one or more data sources and to provide output coupled to a decentralized distributed ledger, the data plane layer is coupled to the control plane layer. Optionally, the system and method serve to implement a smart contract on a decentralized distributed ledger.

Abstract: A network address translation (NAT) gateway intercepts packets and determines whether they contain multicast domain name server (mDNS) query or response messages. Upon receiving an mDNS message, the NAT gateway performs address translation to assign a new source address and stores the original source address in a translation table. The NAT gateway then forwards the message to all adjacent networks in order to expand the reach of the packet. If the mDNS messages establish a new client-server connection, the NAT gateway brokers the connection by either acting as a proxy or continuing to perform network address translation.

Abstract: In general, techniques are described that provide an analysis system for analyzing a software-defined networking (SDN) architecture system. The analysis system comprising the processing circuitry configured to obtain operational data representative of one or more of configuration, operation, and maintenance of the SDN architecture system. The processing circuitry may identify dependencies between the operational data that identify dependencies between objects representative of the configuration, operation, and maintenance of the SDN architecture system. The processing circuitry may perform, while traversing the dependences between the operational data, analysis with respect to the operational data in order to identify potential issues in the SDN architecture system, and output the potential issues in the SDN architecture system.

Abstract: The current document is directed to methods and systems that automatically identify log/event-message traces and computational-entity transactions within collections and/or streams of log/event messages. Automated identification of log/event-message traces provides the basis for automated interpretation, by automated computer-system administration-and-the management subsystems, of the information represented by collections and/or streams of log/event messages. Disclosed approaches to automatically identifying log/event-message traces and computational-entity involve identifying log/event-message types, generating time-series-like log/event-message-type occurrence signals from log/event-message collections and/or streams, and computing cross correlations between pairs of log/event-message-type occurrence signals.

Abstract: A server includes a hardware platform, a hypervisor platform, and at least one virtual machine operating as an independent guest computing device. The hypervisor includes a memory facilitator, at least two hardware emulators, a toolstack and an emulator manager. The memory facilitator provides memory for a virtual machine, with the memory having state data associated therewith at a current location within the virtual machine. The at least one hardware emulator provides at least one set of hardware resources for the virtual machine, with the at least one set of hardware resources having state data associated therewith at the current location within the virtual machine. The toolstack controls the hypervisor including generation of a start state data transfer request. The emulator manager coordinates transfer of the respective state data from the current location to a different location, and tracks progress of the transfer of the respective state data to the different location.

Abstract: Some embodiments of the invention provide a method for deploying network elements for a set of machines in a set of one or more datacenters. The datacenter set is part of one availability zone in some embodiments. The method receives intent-based API (Application Programming Interface) requests, and parses these API requests to identify a set of network elements to connect and/or perform services for the set of machines. In some embodiments, the API is a hierarchical document that can specify multiple different compute and/or network elements at different levels of compute and/or network element hierarchy. The method performs automated processes to define a virtual private cloud (VPC) to connect the set of machines to a logical network that segregates the set of machines from other machines in the datacenter set. In some embodiments, the set of machines include virtual machines and containers, the VPC is defined with a supervisor cluster namespace, and the API requests are provided as YAML files.

Abstract: Embodiments of the present disclosure disclose a document content point-and-select method, device, electronic apparatus, medium and program product.

Abstract: System and method for efficiently implementing scalable, highly efficient decentralized proxy services through proxy infrastructures situated in different geo-locations. In one aspect, the systems and methods enable users from any geographical location to send requests to the geographically closest proxy infrastructure. One exemplary method described allows proxy infrastructures to gather, classify, and store metadata of exit nodes in its internal database. In another aspect, systems and methods described herein enable proxy infrastructures to select metadata of exit nodes from its internal database and forward requests from a user device to respective proxy servers or proxy supernodes to which the selected exit nodes are connected.

Abstract: Some embodiments of present disclosure provide a method and apparatus for distributing content across platforms, a device and a storage medium, relates to the field of cloud storage technology, and may be applied to a cloud platform. A specific implementation of the method can include: receiving a content acquisition request, the content acquisition request containing content category information; generating identifier information of a sending end of the content acquisition request, and configuring the content category information under the identifier information; acquiring abstract information of content corresponding to the content category information; and sending the abstract information to the sending end of the content acquisition request based on the identifier information.

Abstract: Systems and methods are provided for an improved method of network function interaction. In order for a network function consumer to interact with a network function producer, the network function consumer utilizes a default query-based discovery process, wherein a component such as a network resource function identifies candidate network function producers. A secondary static configuration is created for use if the primary query-based process is unavailable. Based on a determination that the primary query-based process is unavailable, the network function consumer identifies a network function producer from the static configuration and communicates one or more service requests to the network function producer. Once it is determined that primary query-based discovery is available, the network function consumer reverts to the query-based discovery process for subsequent network function interactions.

Abstract: Techniques for policy-based failure handling of data that is received for processing by failed edge services are described herein. The techniques may include receiving, at an edge node of a network, a data handling policy for a service hosted on the edge node. The service may be configured to process traffic on behalf of an application hosted by a cloud-based platform. In some examples, the data handling policy may be stored in a memory that is accessible to the edge node. The techniques may also include receiving traffic at the edge node that is to be processed at least partially by the service. At least partially responsive to detecting an error associated with the service, the edge node may cause the traffic to be handled according to the data handling policy while the service is experiencing the error.

Abstract: Systems and methods are provided for predicting an impending change to Interior Gateway Protocol (IGP) metrics associated with Network Elements (NEs) in an optical network. A method, according to one implementation, includes receiving Performance Monitoring (PM) data related to an optical network having a plurality of links. The method also includes analyzing the PM data to predict the likelihood of an impending change to an IGP metric associated with a problematic link of the plurality of links.

Abstract: In an example embodiment, a method may generate an item layout map for a shelving unit, where the shelving unit stores item types associated with a product category. The method may determine product attributes associated with the product category and divider configurations of the shelving unit, where a divider configuration divides the shelving unit into one or more candidate regions. The method may generate an ontology entry associated with a product attribute and the divider configuration based on the item layout map and the divider configuration of the shelving unit, the ontology entry indicating a regional entropy values of a product attribute for the candidate regions generated by the divider configuration. In some instances, the method may generate a guidance instruction related to the product attribute of the product category based on the ontology entry and provide the guidance instruction to a user.

Abstract: A method of tracking at least one emergency service provider is disclosed. An electronic history is compiled that includes at least one identifier of a service provider, at least one identifier of an event to which the service provider responded, and GPS data identifying the geographic location of the service provider at each time interval within the duration of the event. A user interface within which is displayed a first identifier of a first event is generated to a display device. A selection of the event identifier is received from a user. In response to the selection of the identifier, an aerial view of a geographic region within which the first event took place is generated. At least one icon is displayed in the aerial view representing the service provider at the geographic location corresponding to at least one time interval during the event.

Abstract: Aspects of the disclosure provide for methods, systems, and apparatuses, including computer storage media, for adaptively routing web traffic. A system can receive from a user computing device accessing a web resource, a content request, including data characterizing user interaction by the user computing device with the web resource before or after receiving the first content request. The system can identify a policy from a plurality of policies to execute in accordance with one or more objectives, wherein the plurality of policies are generated using data from a plurality of content requests and data characterizing user interaction with the web resource after serving a respective response to each of the plurality of content requests. The system can perform, in response to the content request, one or more actions of the ranked list of actions of the identified policy.

Abstract: A communication method and a system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT) are provided. The disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Embodiments allow sending interest indication, by a user equipment (UE), to a 5G network, to indicate whether the UE is interested in receiving multicast and broadcast services (MBS) and/or MBS that are being currently received by the UE. Embodiments provide a mechanism to send interest indication.

Abstract: An example method of identifying an equal cost multipath (ECMP)-enabled route-based virtual private networks (RBVPN) in a virtualized computing system, comprises: obtaining, at a telemetry agent executing in an edge server of a data center, learned routes; identifying, by the telemetry agent from the routes, a destination network and a plurality of next hops associated therewith and a plurality of virtual tunnel interfaces (VTIs); identifying, by the telemetry agent for each of the plurality of VTIs, an associated VPN session; grouping, by the telemetry agent, the VPN sessions identified as associated with the plurality of VTIs into an ECMP-enabled RBVPN; adding, by the telemetry agent, a description of the ECMP-enabled RBVPN to telemetry data; and sending, by the telemetry agent, the telemetry data to a telemetry service.

Abstract: Techniques for managing access control policies are described herein. According to one embodiment, access control policies (ACPs) and access control rules (ACRs) are downloaded from a management server to a network access device (NAD) over the Internet, where the network access device is one of a plurality of network access devices managed by the management server over the Internet. In response to a request from a network client device for entering a network, a device type of the network client device is detected and an ACP identifier is determined based on the device type using the ACRs An ACP is selected from the ACPs based on the ACP identifier and enforced against the network client device. At least the selected ACP is reported to the management server to distribute the selected ACP to other network access devices.

Abstract: Methods and apparatus relating to identifying an instance of a virtual network function are provided. In one aspect, a method performed by a Network Functions Virtualisation Orchestrator is provided. The method comprises receiving, from a Virtual Network Function Manager (VNFM) identifying information for at least one Virtual Network Function, VNF, instance instantiated at the VNFM, wherein the identifying information is received from the VNFM in response to registration of one of the NFVO and the VNFM at the other of the NFVO and the VNFM. The method further comprises creating a record at the NFVO for the at least one VNF instance identified by the VNFM.