Abstract: Systems and methods are described herein for configuring vehicles and infrastructure (e.g., buildings, smart homes, traffic devices, utilities and associated systems, emergency response systems, and so on) to include blockchain nodes, so a smart city or area of the various devices can be supported by a blockchain network, with some or all devices and systems provisioned with nodes acting as distributed nodes for the blockchain network.

Abstract: As described herein service brokers are used to manage the lifecycle of backing services. In use, a service catalog of backing services available for use by an application is provided. Further, one or more service brokers are used to manage a lifecycle of the backing services.

Abstract: In one embodiment, a first path computation element (PCE) receives a request from a gateway for service chain functions (SFs) to be applied to a traffic flow, wherein a first subset of the SFs is located in a first zone. The first PCE identifies a boundary node located at a border between the first zone and a second zone where a second subset of the SFs are located. The first PCE sends a response to the gateway indicating a path within the first zone between the gateway and the boundary node to apply the first subset of SFs to the flow. The first PCE provides information regarding the flow and the boundary node to a second PCE that uses the information to configure the boundary node to route the flow in the second zone to apply the second subset of SFs to the flow.

Abstract: In one embodiment, a system for managing communication connections in a virtualization environment includes a plurality of host machines implementing a virtualization environment, wherein each of the host machines includes a hypervisor, at least one user virtual machine (user VM), and a distributed file server that includes file server virtual machines (FSVMs) and associated local storage devices. Each FSVM and associated local storage device are local to a corresponding one of the host machines, and the FSVMs conduct I/O transactions with their associated local storage devices based on I/O requests received from the user VMs. Each of the user VMs on each host machine sends each of its representative I/O requests to an FSVM that is selected by one or more of the FSVMs for each I/O request based on a lookup table that maps a storage item referenced by the I/O request to the selected one of the FSVMs.

Abstract: A method for configuring a user device to which a plurality of identifiers, each uniquely identifying the user in at least one communications network, is allocated. The method includes, for at least one application: obtaining at least one rule associating, with at least one flow of the application, at least one slice of the at least one communications network for routing data relating to the at least one flow and an item of information connecting the slice to an identifier from among the plurality of identifiers of the user; and configuring the user device with the at least one rule such that it executes the at least one rule when accessing the application.

Abstract: A method of generating a user-interface to be displayed at a remote location may include receiving a search request for an item listing and retrieving a first listing and a second listing based on the search request, determining a similarity score between the first and second listings that is based on multiple properties common to the first and second listings, and generating instructions to be transmitted to a remote location to generate a user interface to be displayed at the remote location, the user interface including the first listing, the instructions excluding the second listing from a list of results displayed on the user interface based on the similarity score exceeding a threshold and the first listing including superior values in at least one of the plurality of properties common to the first and second listings. The method may also include transmitting the instructions to the remote location for display.

Abstract: A system and method are disclosed for private cloud computing and for the development and deployment of cloud applications in the private cloud. The private cloud computing system and method of the present invention include as components at least a cloud controller, a cloud stack, Service Registry, and a cloud application builder.

Abstract: A transmission method includes: generating a frame for transfer which stores one or more first internet protocol (IP) packets storing content, and one or more second IP packets each including reference clock information which indicates a time for a playback of the content; and transmitting the generated frame through broadcasting. In the generating, header compression is performed on the one or more first IP packets and the header compression is not performed on the one or more second IP packets.

Abstract: The present disclosure describes a device, computer-readable medium, and method for an IPv4-to-IPv6 redirect to enable use of application function-specific user endpoint identifiers (AF-specific UEIds).

Abstract: Technologies are shown for detection of identity misconfiguration that involve collecting identity/role binding and role/access rules data from multiple clusters supported by a computing resource system. Access rules for identities are extracted from the collected data and an access rule prediction model created to predict access rules for identities. An identity definition request for a tenant is received having a requested identity and a role assigned to the identity. A set of access rules is obtained for the role assigned to the identity and a predicted set of access rules is obtained for the requested identity from the prediction model. The access rules for the requested role are compared to the predicted set of access rules and a misconfiguration alert generated when there is a difference between the set of access rules for the requested role and the predicted set of access rules for the requested identity.

Abstract: An image processing system includes a first processor that is mounted on an image processing apparatus installed in a shared space and shared by plural users who do not belong to an identical organization, and a second processor that is mounted on a control apparatus installed together with a virtual private network (VPN) connection unit in a local area network outside the shared space, the control apparatus being used by an organization to which a part of the plural users belongs, in which the first processor is configured to acquire address information of the VPN connection unit, the first processor is connected to the VPN connection unit by using the acquired address information, and the second processor is configured to acquire apparatus information indicating an apparatus configuration of the image processing apparatus from the image processing apparatus via the VPN connection unit, acquire contract information regarding use of the image processing apparatus corresponding to the organization to which the

Abstract: Disclosed herein are system, computer-implemented method, and computer program product (computer-readable storage medium) embodiments for implementing an intelligent DevSecOps workflow. An embodiment includes receiving, by at least one processor, a risk profile associated with a software deployment, and an update related to the software deployment; and evaluating, by the at least one processor, at least one parameter associated with the update, to produce an evaluation result. Additionally, the at least one processor may determine a set of actions in response to the update, based at least in part on the evaluation result, an application dataset corresponding to the software deployment, and a group of specified criteria on which the risk profile is based; or perform at least one action of the set of actions in response to the update, according to some example use cases.

Abstract: A maintenance management method is capable of reducing a burden on work takeover, and is a maintenance management method related to maintenance management of a production facility related to gas or oil. In the maintenance management method, a computer acquires producer information regarding a producer that owns or manages the production facility, production facility information regarding the production facility, an inspection record in a case where inspection is performed on the production facility, and maintainer candidate information regarding a maintainer candidate that performs maintenance on the production facility. Further, the computer determines whether or not maintenance for the production facility is necessary on the basis of the inspection record, and performs control to communicate information regarding maintenance for the production facility to at least one of the producer and the maintainer candidate, when determining that maintenance is necessary.

Abstract: Systems and methods are disclosed for securing a network, for admitting new nodes into an existing network, and/or for securely forming a new network. As a non-limiting example, an existing node may be triggered by a user, in response to which the existing node communicates with a network coordinator node. Thereafter, if a new node attempts to enter the network, and also for example has been triggered by a user, the network coordinator may determine, based at least in part on parameters within the new node and the network coordinator, whether the new node can enter the network.

Abstract: Hierarchical scanning begins with communicating probes over the Internet to ports and networks addresses to determine publicly accessible devices. Based on responses to those probes, follow-up probes are determined to obtain additional information about the publicly accessible devices. The probes are transmitted from a system that is external to the networks corresponding to the network addresses. This provides an external view of the scanned networks and facilitates a probing paradigm that scales beyond a few networks.

Abstract: In one embodiment, a system for managing a virtualization environment includes a set of host machines, each of which includes a hypervisor, virtual machines, and a virtual machine controller, and a virtualized file server backup system configured to identify backup data, wherein the backup data comprises data stored on the virtual disks and VFS configuration information, and the first data is identified in accordance with a backup policy, send the backup data to one or more remote sites for storage, and, in response to detection of changes in the backup data, send the changes to the remote sites in accordance with a replication policy. The backup data may be identified based on a protection domain associated with the backup policy. The data stored on the VFS may include one or more storage objects. The storage objects may include shares, groups of shares, files, or directories.

Abstract: A method is described for processing keyed data items that are each associated with a value of a key, the keyed data items being from a plurality of distinct data streams, the processing including collecting the keyed data items, determining, based on contents of at least one of the keyed data items, satisfaction of one or more specified conditions for execution of one or more actions and causing execution of at least one of the one or more actions responsive to the determining.

Abstract: In some embodiments, a method adds a specific route for an IP address that is associated with a first workload into a routing table for a first network device in a first site in response to the first workload being migrated from a second site to the first site. The first network device receives a packet from a second workload for the first workload and determines that a destination of the packet matches the specific route in the routing table. The method routes the packet from the second workload to the first workload using the specific route in the routing table without sending the packet to the second site.

Abstract: Techniques relating to caching a content object are disclosed. These techniques include receiving, at a first server from a requestor, a revalidation request relating to a content object. The techniques further include determining that metadata describing one or more characteristics of the content object is stored in a cache associated with the first server and that the content object is not stored in the cache, and in response: determining, at the first server, whether to retrieve content object data from any server based on analyzing a metric relating to retrieving the content object, and transmitting from the first server to the requestor, based on analyzing the metadata, a response to the revalidation request indicating that the content object is not modified.

Abstract: The present disclosure relates to a method for a weighting graph comprising nodes representing entities and edges representing relationships between entities in accordance with one or more domains. The method comprises: pre-processing the graph comprising assigning weights to the nodes and/or the edges of the graph in accordance with a specific domain of the domains, wherein the weight indicates a domain specific data quality problem of attribute values representing an edge of the edges and/or an entity involved in that edge. The weighted graph may be provided for enabling a processing of the graph in accordance with the specific domain.

Abstract: In one embodiment, a method executed by at least one processor includes receiving first historical location information identifying a first location area at which a first user was present at a first time and receiving second location information identifying a second location area at which a second user was present at a second time. The method includes determining that the first historical location information and the second location information each correspond to a particular location area and determining that a characteristic related to the first user corresponds to a preference related to the second user. In response to these determinations, the method includes causing information related to the first user to be presented to the second user. The information related to the first user includes the first location area of the first user relative to the second location area of the second user.

Abstract: A system and method for cleaning context detection and appliance operation are provided. The system includes a first appliance communicatively coupled to a second appliance to receive and transmit signals therebetween. The first appliance and the second appliance each include a controller configured to execute operations. The operations include receiving, at the first appliance, a first control signal corresponding to executing a cleaning mode at the first appliance; transmitting, from the first appliance, a second control signal to the second appliance, the second control signal corresponding to a cleaning state; and generating, at the second appliance, a third control signal corresponding to executing the cleaning mode at the second appliance.

Abstract: Systems and network devices configured to use Stateless Address Auto-Configuration (SLAAC) to provide different internet protocol (IP) address information to user equipment (UE) devices that are connected to the same local area network (LAN). A network device (e.g., default router, etc.) may determine whether a UE device is eligible to receive special treatment based on a link-layer address of the UE device. The network device send the UE device an unicast router advertisement that includes a special prefix in response to determining that the UE device is eligible to receive special treatment. The network device may send the UE device an unicast router advertisement that includes a base prefix for the LAN in response to determining that the UE device is not eligible to receive special treatment.

Abstract: A method of indicating UE status includes: determining, at the UE based on at least one of sensor output information of the UE or one or more incoming wireless signals to the UE, an indoor/outdoor status of the UE; and sending an indoor/outdoor indication of the indoor/outdoor status of the UE from the UE to a network entity.

Abstract: Configurations for rack connection systems are disclosed. In at least one embodiment, installation locations for one or more cables are determined and one or more indicators corresponding to installation locations are activated.

Abstract: Various embodiments of apparatuses and methods for a continuous scanning engine with automatic protocol detection are described. In some embodiments, the continuous scanning engine comprises one or more discovery components and one or more protocol detection components. The discovery components, in some embodiments, send initial packets to a plurality of ports of a plurality of network addresses of a network, receive responses to a least some of the initial packets, asynchronously match the received responses to the sent initial packets, and determine that some ports at some network addresses require further analysis.

Abstract: Systems and methods are provided for supporting efficient reconfiguration of an interconnection network having a pre-existing routing. An exemplary method can provide a plurality of switches, a plurality of end nodes, and one or more subnet managers, including a master subnet manager. The method can calculate, via the master subnet manager, a first set of one or more leaf-switch to leaf-switch multipaths. The method can store this first set of one or more leaf-switch to leaf-switch multipaths at a metabase. The method can detect a reconfiguration triggering event, and call a new routing for the interconnection network. Finally, the method can reconfigure the network according to the new routing for the interconnection network.

Abstract: A system and method for facilitating and provisioning customer broadband transport service between a digital communication port employing digital communications and at least one communications provider, including communicating with a provisioning server to establish service and to coordinate service offerings of one or more communication providers.

Abstract: Some aspects of this disclosure include apparatuses and methods for implementing backup link establishment and operation for multi-link wireless communication networks such as a wireless local area network (WLAN). Some aspects relate to an electronic device including a transceiver configured to communicate over a wireless network and a processor communicatively coupled to the transceiver. The processor receives a message including information associated with a backup link from a second electronic device. The processor further receives data associated with data traffic from the second electronic device on a primary link of the wireless network. In response to a quality of the primary link being below a threshold, the processor receives a notification frame from the second electronic device on the backup link and receives additional data associated with the data traffic from the second electronic device on the backup link or on an other link informed by the notification frame.

Abstract: A system and method for determining optimal computing configuration for executing a computing operation includes defining one or more constrains of a given computing operation to be executed. The method further includes implementing a knowledge graph to determine at least one suitable combination of computing hardware and computing software based on the given computing operation and the defined one or more constrains therefor. The method further includes quantitatively estimating an energy requirement and qualitatively estimating an energy consumption pattern of the determined at least one suitable combination.

Abstract: The disclosure describes a mesh network including a first device and a second device. The first device transmits, to the second device, a query packet containing a DNS query for querying domain information of an external device, and the second device that transmits the DNS query to a DNS server to receive the domain information. The second device transmits, to the first device, the domain information of the external device. The first device transmits, to the second device, an initiation packet containing a network initiation packet for communicating with the external device, the network initiation packet including the domain information, and the second device transmits, over a network connection, the network initiation packet to the external device based on utilizing the domain information in the network initiation packet. The disclosure describes various other contemplated aspects.

Abstract: In one embodiment, a system for managing communication connections in a virtualization environment includes a plurality of host machines implementing a virtualization environment, wherein each of the host machines includes a hypervisor, at least one user virtual machine (user VM), and a distributed file server that includes file server virtual machines (FSVMs) and associated local storage devices. Each FSVM and associated local storage device are local to a corresponding one of the host machines, and the FSVMs conduct I/O transactions with their associated local storage devices based on I/O requests received from the user VMs. Each of the user VMs on each host machine sends each of its representative I/O requests to an FSVM that is selected by one or more of the FSVMs for each I/O request based on a lookup table that maps a storage item referenced by the I/O request to I/O the selected one of the FSVMs.

Abstract: In an embodiment, a computer-implemented method for providing dynamic mechanisms for resource-path-based, dynamic group membership support for local and external membership groups is described. A method comprises: detecting, by a group resolver implemented in a management and control plane, that information about an object stored in the plane was created or updated; determining whether a URI of the object matches a URI regular expression and other conditions specified in membership criteria created for a membership group; in response to determining that a URI of the object matches a URI regular expression and other conditions specified in membership criteria created for a membership group: distributing the information about the object to network agents implemented in transport nodes to cause the network agents to automatically update a group membership policy associated with the membership group; and wherein the group membership policy affects packet forwarding behavior of a forwarding node.

Abstract: Computing systems, database systems, and related conversational updating methods are provided for dynamically updating graphical user interfaces responsive to conversational user inputs received via a chatbot or other conversational interactions with a user.

Abstract: A computer-implemented method, network switch and computer program product for performing exact match lookup operations in a table. A hash of the lookup key is performed to generate a value which is used to identify a location in the hash memory space. The generated value is separated into a bucket row, a bucket column, a bucket plane and a secondary hash value, where the bucket row, bucket column and bucket plane are used to identify an originating home hash root bucket. The head entry on the collision chain of a hash root bucket identified via the secondary hash value that is a neighbor to the home hash root bucket is read to determine if an exact match of the lookup key exists. If the head entry exactly matches the lookup key, then a finding of an exact match of the lookup key is reported.

Abstract: Provided are a switching method and apparatus, a device, and a storage medium. The method includes: executing a protection switching operation in response to detecting a switching trigger condition, synchronizing, by a local first-type communication node, protection group switching related state information to a second-type communication node, and synchronously forwarding, by the second-type communication node, the protection group switching related state information of the local first-type communication node to an opposite first-type communication node.

Abstract: In response to a vehicle being switched from an IGN OFF state (non-operating state) to an IGN ON state (operating state) in a state in which a mobile terminal has been activated, the use of wireless communication (Wi-Fi communication) by the mobile terminal via a network using an in-vehicle device as a base station can be started. In response to the vehicle being switched from the IGN ON state (operating state) to the IGN OFF state (non-operating state) in the state in which the mobile terminal has been activated, the use of wireless communication (Wi-Fi communication) by the mobile terminal via the network using the in-vehicle device as the base station is stopped.

Abstract: Embodiments are directed to sharing namespaces across file system clusters. A file in a spoke file system may be determined based on a command provided to the spoke file system such that the file may be associated with an inode mask. Data blocks associated with the file may be determined based on the command and the inode mask such that the data blocks may be absent from the spoke file system. Requests for leases may be generated based on the absent data blocks such that each lease request corresponds to a portion of the absent data blocks Employing the leases provided by a hub file system to: copy the absent data blocks from the hub file system where each portion of absent data blocks may be associated with a lease; updating the inode mask to include the leases and each copied portion of absent blocks.

Abstract: The described technology is generally directed towards configuring a client device with client configuration data based on client context data. The configuration data can include endpoints of various services to which the client can connect that are appropriate for the client device based on the client context data, along with dimension information (route key values) for connecting to each such service. For example, a roaming client device can be given an endpoint and dimension information to connect to a content service in the roaming region, with a different endpoint and dimension information for communicating user information to a home region to which the user is affiliated. This facilitates single hop/reduced latency for content requests, and compliance with home regulations via a single hop to the home service.

Abstract: Systems and methods include receiving information from a governed system having resources; implementing one or more context neutral or specific control applications that each is a pipeline of a plurality of functions to control the resources; utilizing the information as one input to a first function in the plurality of functions; utilizing inputs from one or more control applications as inputs to any of the plurality of functions; and causing actions on the resources based on outputs of a last function in the plurality of functions. The plurality of functions can include sensing, discerning, inferring, deciding, and causing the actions.

Abstract: Methods, apparatuses, systems, computing entities, and/or the like are provided. An example method may include determining per-application configuration data associated with a software application; determining per-client configuration data associated with a client system; determining per-application per-client configuration data associated with the software application and the client system; generating modular configuration data based at least in part on at least one of the per-application configuration data, the per-client configuration data, and the per-application per-client configuration data; generating a releasable software application based at least in part on the modular configuration data; and performing one or more software release operations by transmitting the releasable software application to the client system.

Abstract: A method is described for initiating a wireless network to connect an electronic device among a set of first-type electronic devices with a second-type electronic device. The method comprising: receiving, at a service server configured to service the set of first-type electronic devices, data pertaining to a user-id; retrieving, from a database, a unique network configuration associated with the user-id, wherein the unique network configuration is known beforehand by the second-type electronic device; selecting, at the service server, an electronic device among the set of first-type electronic devices; and sending, to the selected electronic device, the unique network configuration associated with the user-id for allowing the selected electronic device to initiate a wireless network using the unique network configuration associated with the user-id.

Abstract: An industrial control system may receive processing information from at least two control systems associated with at least two components within an industrial automation system. The processing information may include a processing load value for each of the at least two control systems. The industrial control system may then distribute processing loads associated with the at least two control systems when a total processing load between the at least two control systems is unbalanced.

Abstract: The present invention describes a system and a method for dynamically optimising the computing resources allocated to a client application in different data regions of one or more service providers. A number of monitoring modules are provided in each data regions, which are configured to collect operational information from each data region, which is communicated to the other data regions. As such, all data regions are aware of the operational environment of the other data regions.

Abstract: A method and system corresponding to a secure architecture for executing Internet of Things (IoT) device actions using blockchains is described. A network of IoT devices can manage two blockchains. The first blockchain can store operational data, collected from the IoT devices and written to the first blockchain. A second blockchain can be used to store action data.

Abstract: An example network device determines to assign a number of global Internet protocol (IP) addresses to respective network interfaces, determines a subnetwork for the network interfaces, determines a prefix corresponding to the subnetwork, determines a first global IP address having the prefix, determines a range value that is equal to or greater than the number of global IP addresses, generates a message according to Duplicate Address Detection Protocol (DAD) including data indicating that the message includes a range of addresses, the data further indicating the first global IP address and the range value, and sends the message according to DAD to one or more host network devices to determine whether any global IP address in a range starting with the first global IP address and through the range value is in use by the one or more host network devices.

Abstract: Embodiments of the present disclosure provide hierarchical, differential privacy enhancements to federated, machine learning. Local machine learning models may be generated and/or trained by data owners participating in the federated learning framework based on their respective data sets. Noise corresponding to and satisfying a first privacy loss requirement are introduced to the data owners' respective data sets, and noise corresponding to and satisfying a first privacy loss requirement are introduced to the local models generated and/or trained by the data owners. The data owners transmit model data corresponding to their respective local models to a coordinator, which in turn aggregates the data owners' model data. After introducing noise corresponding to and satisfying a third privacy loss requirement to the aggregated model data, the coordinator transmits the aggregated model data to the data owners to facilitate updating and/or re-training on their respective machine learning models.

Abstract: A replicated database can be provisioned that provides primary and secondary replicas that can be provisioned in different data zones or geographical locations. The database can be installed on the primary replica, and both the primary and secondary replica can have installed a block level replication mechanism that allows any I/O operation to be replicated by between the primary and secondary replicas. Any failure or outage of the primary replica can be addressed by performing a failover operation to the secondary replica. A DNS name or other such approach can be used such that the name can be aliased to the secondary replica during a failover, such that there is no action needed on the part of the customer to utilize the “new” primary replica. The creation of the database and provisioning of the replicated instance can be initiated using a Web service call to a control environment.

Abstract: An example virtualized computing system includes a cluster of hosts having a virtualization layer executing thereon and configured to manage virtual machines (VMs); first and second local storage devices in a first host, the first local storage device being part of a virtual storage area network (vSAN) and the second local storage device being exclusive of the vSAN; and an orchestration control plane, integrated with the virtualization layer and including a master server managing state of the orchestration control plane, the state including objects representing the hosts and the VMs, the orchestration control plane deploying a persistent application executing on a first VM, the persistent application storing persistent data on the second local storage device; and a virtualization management server configured to manage the cluster and to cooperate with the orchestration control plane to modify the state to notify the master server of a virtual infrastructure (VI) event.

Abstract: A Software-as-a-Service (SaaS) system for providing a social network for business to business (B2B) electronic connectivity is disclosed and more particularly to a simplified B2B electronic connectivity interface which not only facilitates one-to-one business connections but can also be used to facilitate one business to many business connections while maintaining point-to-point connections between each company with each of its trading partners.