Abstract: Aspects of the disclosure provide for methods, systems, and apparatuses, including computer storage media, for adaptively routing web traffic. A system can receive from a user computing device accessing a web resource, a content request, including data characterizing user interaction by the user computing device with the web resource before or after receiving the first content request. The system can identify a policy from a plurality of policies to execute in accordance with one or more objectives, wherein the plurality of policies are generated using data from a plurality of content requests and data characterizing user interaction with the web resource after serving a respective response to each of the plurality of content requests. The system can perform, in response to the content request, one or more actions of the ranked list of actions of the identified policy.

Abstract: A method and apparatus for centralized policy programming and distributive policy enforcement is described. A method comprises centrally maintaining a plurality of policy definitions for one or more subscribers, generating policy configurations using the plurality of policy definitions, each of the policy configurations being specific to one of the plurality of policy definitions, and disseminating the policy configurations to the appropriate ones of the subscribers' networks.

Abstract: An operator node is configured to enable the management of nodes communicatively coupled to the operator node via a network. A selection of node objects is received by the operator node, the selected node objects including software components for inclusion within a node configuration. A configuration policy is generated based on the selected objects, the configuration policy including a set of tests (such as scripts or executables) that, when run, test for the presence of one or more of the selected node objects. A target node is scanned to determine the configuration of the target node, and the set of tests are applied to identify a set of objects identified by the policy but not installed at the target node. The target node is then re-configured to install the identified set of objects at the target node.

Abstract: Systems and methods for endpoint context-driven, dynamic workspaces are described.

Abstract: A building management system that includes a plurality of slave devices, a remote server comprising a slave device configuration database, and a master controller. The master controller is configured to receive slave device configuration information stored in the slave device configuration database. The slave device configuration information includes at least one of cooling tower configuration parameters, chilled water pump configuration parameters, condenser water pump configuration parameters, air handling unit configuration parameters, rooftop air handling unit configuration parameters, variable air volume unit configuration parameters, chiller device configuration parameters, a rated device capacity, a rated device power, and a rated device speed. The master controller is further configured to control the plurality of slave devices using the slave device configuration information.

Abstract: A method and a system for arranging a user multi-session from a plurality of user sessions, where the sessions are received from a plurality of computerized client devices communicatively coupled via a communication network to at least one content server. At least some of the client devices may be operated by a same user, and the data content may include at least part of data communicated between any client device and any content server. The method including dividing the received data content into a plurality of sessions, where at least two sessions are associated with the same user, selecting at least two sessions received from at least two respective client devices associated with the same user, and associating the selected at least two sessions to form a multi-session.

Abstract: A transaction for a customer is detected and transaction details are evaluated to obtain a federated customer profile that may span multiple channel communications. Policy conditions are evaluated to track and interact with the customer in a vendor-defined manner during the transaction. According to an embodiment, the transaction details, the customer profile, the tracked information, and other recorded interactions with the customer are accessible to the vendor for analysis, via a vendor interface.

Abstract: Described are systems and methods for eliminating measurement lag. An example method comprises deploying control agents in a customer data center, each of the control agents being associated with at least one of a set of customer nodes of the customer data center; receiving a query for local state data at a service provider data center; pushing down execution of the query from the service provider data center to the control agents deployed in the set of customer nodes in the customer data center. The deployed control agents may be configured to, in response to receiving the query pushed down from the service provider data center to the customer data center, coordinate and execute at least a task for the set of customer nodes to collect the local state data. In addition to query execution, remediation can also be executed by the control agents at the customer data center.

Abstract: Techniques for non-disruptive configuration changes are provided. A packet is received at a network device, and the packet is buffered in a common pool shared by a first processing pipeline and a second processing pipeline, where the first processing pipeline corresponds to a first policy and the second processing pipeline corresponds to a second policy. A first copy of a packet descriptor for the packet is queued in a first scheduler based on processing the first copy of the packet descriptor with the first processing pipeline. A second copy of the packet descriptor is queued in a second scheduler associated based on processing the second copy of the packet descriptor with the second processing pipeline. Upon determining that the first policy is currently active on the network device, the first copy of the packet descriptor is dequeued from the first scheduler.

Abstract: A client device includes an operating system that lacks an application native to the operating system for remotely effecting a complete data wipe of a storage device of the client device. The client device determines a status of the client device violates a compliance rule associated with operation of the client device. In response to determining that the client device violates the compliance rule, the client device sends the status to a server. The client device initiates execution of an operating system kernel call to remotely effect a complete data wipe of a storage device of the client device.

Abstract: Technologies for updating an access control list (ACL) table while minimizing disruption includes a network device. The network device receives a request to store a rule in the ACL. The rule is associated with a precedence group. A precedence group is indicative of a placement priority of a given rule in the ACL. The network device determines, as a function of the precedence group, a placement for the requested rule in the ACL. The network device stores the rule according to the determined placement in the ACL.

Abstract: A method for improving a user experience through the use of at least one communications device. The method initially senses feedback of the user experience, wherein the user experience include one or more of the following three dimensional geolocation status, temporal status, experiential status, physiological status and emotional status. The method creates at least an initial contextual data set from the initially sensed feedback, and transmits media content to the user. The method subsequently senses feedback of the user experience, creating one or more subsequent contextual data set from the subsequent sensed feedback. The method measures changes in the user experience by comparing the initial contextual data set with the subsequent contextual data set.

Abstract: An information processing system includes a first controller that controls access to resources on a network based on authority to use the resources, a first manager that registers and manages users who access the resources via the first controller, a second controller that controls, independently of the first controller, access to the resources on the network based on authority to use the resources, a second manager that registers and manages users who access the resources via the second controller, and an identifier that identifies, in response to second authority to use a resource in the second manager being set for a user, first authority of the user to use the resource in the first manager.

Abstract: Computing systems, database systems, and related conversational updating methods are provided for dynamically updating graphical user interfaces responsive to conversational user inputs received via a chatbot or other conversational interactions with a user.

Abstract: A fault localization method includes: obtaining user experience data, network topology data, and resource management data that are of a video service; where the network topology data is used to represent a connection relationship between network devices, and the resource management data is used to represent a connection relationship between user equipment and the network devices; determining a QoE experience indicator of a network device based on the user experience data, the network topology data, and the resource management data; and when QoE represented by the QoE experience indicator of the network device is lower than QoE represented by a device screening threshold, determining the network device as a possible questionable device.

Abstract: Methods and apparatus for mediating user access to services over a network are described. Access is provided by a service network host to a plurality of connectors providing access to a plurality of services over the network. The services are provided by entities independent from the service network host. The connectors including a first connector are configured to communicate with a first service using a first format to retrieve or modify data associated with the first service. The first connector is further configured to identify one or more methods or data fields of the first service. The service network host is further configured to provide, to a computer associated with a user over the network, one or more directions for using the first connector to display and/or modify data from the first service over the network.

Abstract: Access management policies may be generated from example requests. An access management policy may be received. One or more example requests that have expected results when evaluated with respect to the access management policy may be received. Updates to the access management policy may be determined that cause the expected results to occur when a new version of the access management policy based on the updates is enforced. The new version of the access management policy may be generated based on the updates.

Abstract: Systems, methods, and computer-readable media for hierarchichal sharding of flows from sensors to collectors. A first collector can receive a first portion of a network flow from a first capturing agent and determine that a second portion of the network flow was not received from the first capturing agent. The first collector can then send the first portion of the network flow to a second collector. A third collector can receive the second portion of the network flow from a second capturing agent and determine that the third collector did not receive the first portion of the network flow. The third collector can then send the second portion of the network flow to the second collector. The second collector can then aggregate the first portion and second portion of the network flow to yield the entire portion of the network flow.

Abstract: An example method includes detecting a first replay event in a production flow being processed by a service assurance platform of a telecommunications service provider network, where the production flow comprises a stream of production events and a stream of replay events including at least the first replay event, processing the first replay event to generate a ticket for the first replay event, and delivering the ticket to a database that stores a plurality of tickets generated for a plurality of replay events.

Abstract: A system (10) includes a real-time locating system (RTLS) (12) configured to track locations of tags (14, 15) in a monitored area. A non-transitory storage medium stores, a map (30) of the monitored area; a nodes database (32) storing information on nodes (18); and a pathogen database (34) storing infectious transmission information. The non-transitory storage medium includes instructions readable and executable by an electronic processor to perform an infectious disease transmission tracking method (100) including: computing a pathway (35) on the map of at least one infected node using locations of the tag wherein an infected node has a non-zero infection likelihood; computing an infectious zone (36) on the map along the pathway; for each node contacting the infectious zone, adjusting the infection likelihood of the contacting node and designating the contacting node as an infected node if the updated infection likelihood of the contacting node satisfies an infected criterion.

Abstract: Aspects of the subject disclosure may include, for example, participating in a communication session over a network with a second communication device that is remote from the communication device where the communication session includes a computer supported collaborative work environment utilizing a non-baton passing protocol, presenting content at a display device where the content is presented by the second communication device at a second display device, receiving first user input at the user interface where second user input is received by the second communication device where a conflict resolution is applied to events associated with the first and second user input, and presenting adjusted content at the display device. Other embodiments are disclosed.

Abstract: A facility for identifying endpoints in an environment which crawls the environment to identify landing pages. The facility identifies endpoints within the landing pages and stores an indication of the environment containing the endpoint as well as an indication of the endpoint itself.

Abstract: The disclosure provides an approach for service deployment. Embodiments include receiving an indication of user intent for deployment of one or more services in a network from a user that is not an administrator of the network, wherein the indication of the user intent comprises a domain specific language (DSL). Embodiments include parsing the indication of the user intent to determine one or more constraints for deploying the one or more services. Embodiments include receiving topology information for the network, wherein the topology information comprises associations between racks and machines in the network. Embodiments include receiving network performance information for the network. Embodiments include determining one or more deployment rules for the one or more services based on the one or more constraints, the topology information, and the network performance information. Embodiments include deploying the one or more services in the network based on the one or more deployment rules.

Abstract: Disclosed are systems and methods for mixed reality collaboration. A method may include receiving persistent coordinate data; presenting a first virtual session handle to a first user at a first position via a transmissive display of a wearable device, wherein the first position is based on the persistent coordinate data; presenting a virtual object to the first user at a second location via the transmissive display, wherein the second position is based on the first position; receiving location data from a second user, wherein the location data relates a position of the second user to a position of a second virtual session handle; presenting a virtual avatar to the first user at a third position via the transmissive display, wherein the virtual avatar corresponds to the second user, wherein the third position is based on the location data, and wherein the third position is further based on the first position.

Abstract: Embodiments of the present disclosure relate to a method and apparatus for generating information. The method may include: acquiring at least one to-be-processed service and at least one piece of relationship information, the relationship information being used to represent an execution order between two to-be-processed services in the at least one to-be-processed service; constructing a directed graph with a to-be-processed service in the at least one to-be-processed service as a point and with a piece of relationship information in the at least one piece of relationship information as a directed edge; and generating execution order information of the to-be-processed service in the at least one to-be-processed service according to the directed graph.

Abstract: A method for migrating an application includes representing the application as a vector including metadata about the application and at least one customer constraint, scoring a deviation of data consistency for the application related to each of a plurality of clouds, including a cloud in which the application is currently deployed and a plurality of potential target clouds, selecting one of the potential target clouds based on the scoring, wherein the selected cloud has an improved score over the cloud in which the application is current deployed, and migrating the application to the selected cloud.

Abstract: An apparatus is provided. The apparatus including a plurality of network interfaces, including a first network interface and a second network interface. The apparatus also includes a processor with two or more independent processing units, including a first independent processing unit and a second independent processing unit. The apparatus further includes a memory having first instructions and second instructions stored thereon. Execution of the first instructions, cause the first independent processing unit to execute operations associated with a first operating system and communicate, via the first network interface, over a bi-direction communication, with one or more platform computing devices. Execution of the second instructions, cause the second independent processing unit to execute real-time operations associated with a second operating system and communicate, via the second network interface, with one or more computing devices each having one or more sensors thereon.

Abstract: A method for automatically supplying a secure connection proxy with remote targets on the basis of privileged account data, includes a step of exploring, by a robot program, at least one domain for identifying the privileged accounts; a step of filtering the privileged accounts on the basis of criteria; steps of extracting characteristics from identified privileged accounts; and a step of supplying the proxy with the gathered data.

Abstract: A method, a device, and a non-transitory storage medium are described in which an application management service is provided. The service may provide a coordination between network or platform level application management functions and application level application management functions that enables the management of an application service. The network or platform level application management functions may include autoscaling, load balancing, and ingress resource management. The application level application management functions may include throttling and circuit breaker functions.

Abstract: Systems and methods to intelligently optimize data collection requests are disclosed. In one embodiment, systems are configured to identify and select a complete set of suitable parameters to execute the data collection requests. In another embodiment, systems are configured to identify and select a partial set of suitable parameters to execute the data collection requests. The present embodiments can implement machine learning algorithms to identify and select the suitable parameters according to the nature of the data collection requests and the targets. Moreover, the embodiments provide systems and methods to generate feedback data based upon the effectiveness of the data collection parameters. Furthermore, the embodiments provide systems and methods to score the set of suitable parameters based on the feedback data and the overall cost, which are then stored in an internal database.

Abstract: A computerized method that may include (i) receiving, by one or more slicers, multiple input streams, the multiple input streams comprise (a) an input video stream that comprises visual information obtained from an event, and (b) at least one additional stream related to the event; (ii) converting the multiple input streams to a group of EISCVSs, different input streams are mapped to different EISCVSs; (iii) determining, by one or more personalization entities, a content to be sent to one or more user devices; (iv) generating, by the one or more personalization entities and based on the determining, the at least one personalized content stream to be sent to one or more user devices; and (v) sending the at least one personalized content stream to the one or more user devices.

Abstract: Techniques for optimization-based pool protection for a cloud provider network are described.

Abstract: An electronic lock can enter a lockdown mode in response to a lockdown command comprising a mechanical command, e.g. a button or door handle being pressed on the lock in a predefined time-series sequence, or touching the lock in a time-series sequence). Alternatively, an audio or visual command can be issued, e.g. saying certain words or making a hand gesture. The lock may require additional authentication before executing the lockdown command, e.g. recognizing an authorized electronic key. Other embodiments are also provided.

Abstract: The present disclosure relates to a system, method, and mobile computing device apparatus for detecting the physical presence of a bank customer at a bank branch, and delivering an enhanced customer service experience by anticipating the bank customer's needs. Detection of the bank customer through visual data such as facial recognition, or electronic data such as medium range electronic communication networks to the customer's mobile computing device, allow a bank to retrieve relevant customer profile and customer transaction history data and use that data to deliver communications to the customer even before the customer speaks to a bank teller.

Abstract: Examples disclosed herein relate to a system comprising a request transmitter to transmit a plurality of transaction requests from a first daemon to a central database, wherein the first daemon belongs to a plurality of daemons using the central database to communicate with each other to perform networking related functions. The system may include a baseline determiner to determine a baseline response time for receiving a response to the plurality of transaction requests, a transaction request transmitter to transmit a transaction request, belonging to the plurality of daemons, to the central database and a transaction requester determiner to determine that the central database is processing more requests that it can handle. The system may include a delay time generator to generate a delay time for a subsequent transaction request to the central database and a subsequent request transmitter to transmit the subsequent transaction request to central database.

Abstract: A method of and network devices arranged for inquiring node device address information after commissioning of a network of communicatively interconnected node devices. A gateway device (2) broadcasts an inquiry message (MINQ) in the network, requesting each of the node devices (3, 4, 5) to transmit its node device address announce message (MANN), after a time delay (?t1; ?t.2) from receiving the inquiry message (MINQ). The gateway device (2) transmits an acknowledgement message (MACK) to the node device addressed in a received node device address announce message (MANN), indicating that the respective node device address announce message (MANN) is received by the gateway device (2). A node device (4) may retransmit its node device address announce message (MANN) until receipt of an acknowledgement message (MACK). Received address information is stored by the gateway device (2) for control and communication purposes of the nodes in the network.

Abstract: Aspects of the disclosure will be described with regard to the processing of DNS queries by a DNS service based on multiple network addresses associated with a single network entity (e.g., a service provider). The DNS service may respond to each DNS query for identifying network addresses associated with the service provider with a respective unique network address from a pool of network addresses. Based on the uniqueness of network addresses, DNS queries and subsequent communications between respective client computing devices and the service can be correlated.

Abstract: There is described a building automation system comprising a communication component, a processor, and an output component. The communication component scans the building automation system to discover devices, and the processor generates a visual code for a particular field device. The visual code identifies a uniform resource locator directed to a virtual node hosting environment of the building automation system associated with the field device. The output component produces the visual code at a physical material for exhibition in proximity to the field device. Thereafter, the hosting environment receives a status request, associated with the uniform resource locator, for the field device from a mobile device. The hosting environment generates point information associated with the field device based on information collected from the field device in response to receiving the status request. The communication component sends the point information to the mobile device.

Abstract: A virtual assistant server receives a user input from a virtual assistant interface available on a client system associated with a user identified by a user identifier. Upon receiving the user input, the virtual assistant server creates a search network of repositories not associated with the user identifier by determining, for the received user input, a priority score of each repository not associated with the user identifier based on interactions of the user identifier through the virtual assistant interface. Further, the virtual assistant server searches, for the received user input, in a repository associated with the user identifier and in the repositories in the search network. Based on the searching, a group of one or more results corresponding to the received user input are identified and returned to the client system associated with the user identifier.

Abstract: A shared computing infrastructure has associated therewith a portal application through which users access the infrastructure and provision one or more services, such as content storage and delivery. The portal comprises a security policy editor, a web-based configuration tool that is intended for use by customers to generate and apply security policies to their media content. The security policy editor provides the user the ability to create and manage security policies, to assign policies so created to desired media content and/or player components, and to view information regarding all of the customer's current policy assignments. The editor provides a unified interface to configure all media security services that are available to the CDN customer from a single interface, and to enable the configured security features to be promptly propagated and enforced throughout the overlay network infrastructure.

Abstract: Embodiments of the present application provide a resource distribution method and apparatus in Internet of things, a device, and a storage medium. The method includes: discovering, by a serving device, servers with resource directories from a server cluster; and distributing, by the serving device, resource information to at least two servers of the servers with the resource directories. According to the embodiments of the present application, resource discovery may be improved in reliability.

Abstract: A network management system includes a network interface communicatively coupled to one or more network elements in a network for exchanging Operations, Administration, Maintenance, and Provisioning (OAM&P) data; a processor communicatively coupled to the network interface; and memory storing instructions that, when executed, cause the processor to obtain the OAM&P data from the network, provide a Graphical User Interface (GUI) based on the network from the OAM&P data, wherein the GUI includes a network map which provides a topological view and a subway view which provides a detailed device-level view which is more granular than the network map and illustrates individual components at each site, receive a selection from a user of a service in the network, and update the GUI to highlight the service in the network map and illustrate the associated sites in the subway view.

Abstract: A system and method for representing events that occur in a real world deployment is described. A real-world workload including multiple events is identified. Multiple characteristics of the real-world workload are converted into multiple endpoint simulator workloads. Multiple gateway hardware characteristics are converted into a modeling elements for simulated Internet of things (IoT) networks. Further, a simulation is performed for each of the endpoint simulator workloads on each of the simulated IoT networks. Also, statistics are collected about the performance of the simulated IoT networks for the endpoint simulator workloads.

Abstract: An online software platform (OSP) classifies challenges to digital rules into buckets according to respective challenged digital rules that were applied to produce respective challenged resources. The OSP computes respective statistics for the buckets. Each bucket may have a corresponding statistic associated with the bucket based on a current total number of challenges that have been classified into that bucket. The OSP ranks the buckets according to the respective statistics of the buckets. The OSP may correct, based on the ranking of the buckets, the respective challenged stored digital rule of the selected bucket without yet correcting the respective challenged digital rule of at least one of the other buckets. This correction is stored and included in digital rules to be used to produce resources going forward.

Abstract: A cloud based network includes a plurality of nodes, each of which include at least one containerized microservice that enables intent-driven operation of the cloud based network. One or more resource controllers, each designated to manage a custom resource, communicate with a master controller of the node to manage operational and configuration states of the node and any microservices containerized within the node. The master enables a user to monitor and automate the management of microservices and the cloud based network as a whole. The containerized microservice architecture allows user customizable rendering of microservices, reconciliation of old and new versions of microservices, and facilitated management of a plurality of nodes.

Abstract: Methods and apparatus for balancing resource utilization as described herein enable the use of distributed allocation architectures with minimal coordination signaling. Among the multiple advantages gained are reduced overhead signaling, greater implementation flexibility, and improved adaptability to changes in the system state. Here, “system state” refers to the subset (16) of servers (12) that are currently available among a set (14) of servers (12) targeted for use in load balancing. Of course, the contemplated methods and apparatus do not foreclose centralization of at least some of the load-balancing operations and associated data management.

Abstract: Disclosed are techniques to conserve battery of an endpoint device. Example techniques include adjusting the size of messages transmitted by an endpoint device and/or adjusting the transmission rate of an endpoint device. In some configurations, the one or more criteria are used by an endpoint device to determine what data fields to include within a message and/or adjust a transmission rate associated with the transmission of messages by the endpoint device. For instance, the one or more criteria may include the battery level of the device, the time of year, whether the data has already been transmitted by the endpoint device, whether the data has been acknowledged as received by another device, whether the endpoint device has been instructed by another device to reduce the message size and/or adjust the transmission rate, and the like.

Abstract: A system for adjusting individual host rate limits based on a fleet-wide service rate limit and a fleet host count. The system includes a fleet of hosts for a service. Individual hosts of the fleet of hosts respectively include application logic, a host rate limiter to limit interactions between the application logic and another service according to a host rate limit for the individual host, and an adaptive rate component. The adaptive rate component updates a host entry in a host table to indicate a current heartbeat timestamp for the individual host. The adaptive rate component retrieves the fleet-wide service rate value and the fleet host count value. The adaptive rate component determines the host rate limit for the individual host based on the fleet-wide service rate value and the fleet host count value. The adaptive rate component provides the host rate limit to the host rate limiter.

Abstract: The invention relates to a method for managing a database shared by a group of applications. The database comprises elements, each comprising a value and a version number. Each application comprises a replica of the database. The method comprises a step for modifying the value of an element in the replica of an application, called active application, a step for incrementing the version number of said element in said replica of the active application, a step for transmitting, via the active application, transmission data to the other applications, the transmission data comprising the modified element, and an earlier version number of this modified element, a synchronization step, during which at least one application other than the active application updates its replica based on a comparison of the earlier version number with that of said element in this replica.

Abstract: Aspects of the subject disclosure may include, for example, instantiating a virtual provider edge router (VPE) of a network operator on a layer 3 public cloud network operated by a cloud operator, establishing a virtual layer 2 bridging domain over the layer 3 public cloud network between a core network of the network operator and the VPE, wherein the virtual layer 2 bridging domain shields infrastructure addressing of the core network of the network operator, and establishing an Interior Gateway Protocol (IGP) of the network operator on top of the virtual layer 2 bridging domain for layer 2 communication between the core network of the network operator and the VPE over the layer 3 public cloud network. Other embodiments are disclosed.