Abstract: [Problem] It is determined whether quick repair handling is required for a failure in a communication apparatus or in a communication service that occurs in a nighttime period in compliance with an SLA while curbing operating expenses. [Solution] A maintenance task management apparatus 11 determines handling of failures when both an apparatus failure that is a failure in communication apparatuses 46a and 46b in a nighttime period and a service failure that is a trouble in a communication service provided by the communication apparatuses 46a and 46b to users in the nighttime period occur or only the apparatus failure occurs. The maintenance task management apparatus 11 includes a handling determination unit 23 and a handling control unit 31.

Abstract: Computing systems, for example, multi-tenant systems deploy software artifacts in data centers created in a cloud platform using a cloud platform infrastructure language that is cloud platform independent. The system uses a control datacenter with a set of service groups used for configuring other datacenters, for example, for performing continuous delivery of software artifacts for other datacenters. The system uses a primary control datacenter and a secondary control datacenter. The primary control datacenter configures infrastructure of the tenant datacenter, for example, by configuring computing resources in the cloud platform for the tenant datacenter according to a declarative specification of the tenant datacenter. The secondary control datacenter efficiently takes control of the process of configuring the tenant datacenter, for example, if there is a failure of the primary control datacenter.

Abstract: Methods and systems for receiving an indication that an application running on a first device is ready to perform a task, determining a device capability associated with performing the task, determining one or more devices associated with a user of the first device, wherein each of the one or more devices is associated with the device capability, selecting, based on the task and one or more user preferences associated with the user, a second device from the one or more devices, and sending an instruction to the second device, wherein the instruction causes the second device to perform the task, are described herein.

Abstract: A method and system for generating an API schema associated with at least one API Endpoint by inspecting network data traffic. Network data requests that have been successfully served by an application associated with at least one API endpoint are examined, parsed and processed to generate an API schema corresponding to the service associated with the at least one API Endpoint.

Abstract: A verification server comprising a memory and a processor programmed to execute instructions stored in the memory. The instructions include receiving a link registration request including a third-party link to a third-party server, validating the third-party server as a result of receiving the link registration request, generating a unique code as a result of validating the third-party server, and generating a custom link that includes the unique code.

Abstract: In some implementations, a system enables users to create dynamically configurable applications that can be dynamically configured and adjusted. An application that runs on the server system in a first configuration is configured using a first configuration template. Data indicating (i) that the application is being accessed on a computing device in the first configuration, and (ii) a request to adjust the first configuration of the application is received. Operations are then performed while the application is being accessed on the computing device in the first configuration. A second configuration template that specifies a second configuration of the application corresponding to the request included in the received data is generated. The application is adjusted using the second configuration template to run in the second configuration. An instruction is provided to the computing device to enable the computing device to access the application running in the second configuration.

Abstract: A parking assistance service management device that manages a parking assistance service in which an agent provides parking assistance for a vehicle of a service user includes a reception unit configured to receive user information including information indicating a position of the vehicle from a terminal of the service user, a specifying unit configured to specify a terminal of the agent providing the parking assistance for the vehicle based on the user information, and a transmission unit configured to transmit the information indicating the position of the vehicle to the terminal of the agent.

Abstract: A method includes providing a Thing Description file for an Internet of Things, IoT, device, the Thing Description file including information describing a resource provided by the IoT device, mapping the Thing Description file to a Resource Directory registration command, and transmitting the Resource Directory registration command to a Resource Directory to register the resource in the Resource Directory. Related devices and computer program products are also disclosed.

Abstract: A service management system communicates via wide area network with gateway devices located at respective user premises. The service management system remotely manages delivery of application services, which can be voice controlled, by a gateway, e.g. by selectively activating/deactivating service logic modules in the gateway. The service management system also may selectively provide secure communications and exchange of information among gateway devices and among associated endpoint devices. An exemplary service management system includes a router connected to the network and one or more computer platforms, for implementing management functions. Examples of the functions include a connection manager for controlling system communications with the gateway devices, an authentication manager for authenticating each gateway device and controlling the connection manager and a subscription manager for managing applications services and/or features offered by the gateway devices.

Abstract: Examples associated with room capture and projection are disclosed. One example includes an information management module that may maintain information regarding a virtual space and a first digital object within the virtual space. The first digital object may be associated with an artifact in a physical space. A room calibration module may map the virtual space to the physical space using sensors to detect attributes of the physical space. A capture module may record a modification to the artifact to be maintained by the information management module. A projection module may project a representation of a second digital object into the physical space. The representation may be projected based on a signal from the information management module.

Abstract: In one embodiment, a network assurance service that monitors one or more networks identifies changes in a key performance indicator for each of a plurality of network entities in the one or more networks. The service forms a peer group of network entities from the plurality of network entities whose changes in the key performance indicator are correlated. The service monitors the key performance indicator for network entities in the peer group of network entities. The service, based on the monitoring, detects an anomalous change in the key performance indicator for a particular network entity in the peer group of network entities relative to other network entities in the peer group of network entities.

Abstract: Methods and structures are disclosed for self-automating a process of determining a device's location based on its network address. A computing device includes a network interface configured to communicate with a physical port of a network switch and a memory configured to store a plurality of different initialization protocols each associated with a corresponding network address of a plurality of network addresses. Each of the initialization protocols may be associated with a different physical location. The computing device also includes a processor configured to attempt to connect to the network switch via the network interface using a network address from the stored plurality of network addresses. In response to connecting with the network switch using the network address, the processor identifies a corresponding initialization protocol associated with the network address and executes the corresponding initialized procedure.

Abstract: A system, method and computer program product collects and provides for display operational status data in several levels of detail about multiple client computer systems.

Abstract: A communication apparatus is mounted on a train and forms a train communication system together with a system control apparatus that generates control frames including general and low-latency frames. The communication apparatus includes: a general transfer processing unit that stores the general frame; a low latency transfer processing unit that stores the low-latency frame, the low latency frame requiring transferring with lower latency than the general frame; a frame identification unit that identifies priority of the control frame and outputs the control frame to the general transfer processing unit or the low latency transfer processing unit based on a priority setting table indicating the priority of the control frame and set in the identification unit; an output control unit that preferentially transfers the low-latency frame over the general frame; and a control unit that modifies the priority setting table.

Abstract: A method includes receiving a plurality of network configuration snapshots for a network and determining whether a first data plane model protocol of a first snapshot is the same as a second data plane model protocol of a second snapshot consecutive with the first snapshot. When the snapshots are the same, the method includes determining whether a third snapshot is the same as the second snapshot. When the snapshots are different, the method includes selecting the first snapshot and the second snapshot. The method includes generating a first reachability graph representing packet reachability of the network for the first snapshot and generating a second reachability graph representing packet reachability of the network for the second snapshot. The method includes computing a reachability differentiation graph identifying a net change to reachability from the first reachability graph to the second reachability graph and generating a report of the net change to reachability.

Abstract: Techniques for transmitting data over a network in a representational state transfer (REST) application are provided. A request for data from a client computing device in a representational state transfer (REST) application is received and a wire protocol is selected based on user input from a plurality of wire protocols that will be used to transmit one or more objects to be returned by the request. The selected wire protocol is indicated to the client computing device and the one or more objects are transmitted to the client computing device using the determined wire protocol.

Abstract: In one aspect, In one aspect, a method for data transfer and processing communications is provided. The method includes the step of providing a machine-to-everything (M2X) application layer on each machine of the plurality of machines. The method includes the step of providing a plurality of communication nodes on each machine for communication between the plurality of machines with every other machine, the plurality of machines and any infrastructure at a work site, and a plurality of communication nodes communicating using the at least one application layer. The method includes the step of providing a communication processing system for receiving a data transfer and processing communications. The communication processing system includes a plurality of processing stations, one or more multiple data management protocols, a plurality of network protocols, a plurality of databases and plurality of data processing network architectures.

Abstract: A spatial hierarchical model provides spatial context to a plurality of building control assets disposed within a plurality of hierarchical levels of the spatial hierarchical model. A method includes identifying non-compliance events detected by building control assets disposed at and below a particular hierarchical level of the spatial hierarchical model. The non-compliance events detected by building control assets disposed at and below the particular hierarchical level of the spatial hierarchical model over a period of time are aggregated and a healthy building dashboard that includes a representation of the aggregated non-compliance events for each of at least some of the one or more of the healthy building criteria detected by building control assets disposed at and below the particular hierarchical level of the spatial hierarchical model is generated and is displayed on a display.

Abstract: A method and system for determining reachability properties of security objects are provided. The method includes accessing a security graph, wherein the security graph lists all security objects and their connections in a cloud environment of an organization; identifying a plurality of network paths in the cloud environment, wherein each network path includes at least two security objects accessible in the cloud environment; for each of the plurality of identified network paths, iteratively analyzing each security object in a respective network path to determine its reachability properties, wherein the reachability properties of a security object as a minimal set of reachable properties of all other security objects in the respective network path; and populating the security graph with the determined reachability properties of each security object.

Abstract: The described technology relates to a software application architecture allowing for creation of a web application that has multiple Single Page Applications (SPAs) within the application. The software application architecture includes components that are common to each page of the web application while also having components that are dynamically loaded to cater to specific respective pages within the application. The dynamically loadable components can be identified based on an identifier in a path being browsed using a web browser application. The described application architecture may be used in the context of AngularJS, as well as other SPA technologies and non-SPA technologies.

Abstract: Enterprise users' mobile devices typically access the Internet without being protected by the enterprise's network security policy, which exposes the enterprise network to Internet-mediated attack by malicious actors. This is because the conventional approach to protecting the mobile devices and associated enterprise network is to tunnel all of the devices' Internet communications to the enterprise network, which is very inefficient since typically only a very small percentage of Internet communications originating from an enterprise's mobile devices are communicating with Internet hosts that are associated with threats. In the present disclosure, the mobile device efficiently identifies which communications are associated with Internet threats, and tunnels only such identified traffic to the enterprise network, where actions may be taken to protect the enterprise network.

Abstract: Systems and methods described herein provide a co-managed configuration service. A network device stores parameters for the co-managed configuration service. The parameters identify exposed services for an enterprise network that uses devices from a network service provider. The network device receives, via a customer portal, a vendor-agnostic change request for the enterprise network. The change request includes a user role and a change request name for one of the exposed services. The network device authenticates the change request based on the user role and the change request name and retrieves vendor director information for an SDN device implementing the configuration change. The network device invokes, in response to the change request, the configuration change for the enterprise network based on the vendor director information.

Abstract: Systems, methods and devices for adding key chain and key derivative functions (KDF) support for Network time protocol (NTP) authentication using password based key derivation functions-NTP (PBKDF-NTP) are disclosed. In one embodiment, a method includes generating time bound multiple short lived keys instead of long lived keys for NTP security which ensures that attacker will not get enough time to crack the key values. The usage of time bound multiple short lived keys instead of long lived keys for NTP security will ensure that attacker will not get enough time to crack the key values within key lifetime. Hence man-in-middle attack can be avoided in NTP.

Abstract: Described embodiments provide systems and methods of using an error budget for monitoring performance of a service level of a service is provided. A device intermediary to a plurality of requestors and a plurality of services can identify an error budget for a service level of a service. The error budget can include an amount for which the service is allowed to fall below the service level. The device can monitor, via requests from the requestors to the service, performance of the service with respect to the service level. The device can determine one or more instances for which the service falls below the service level and allocate one or more amounts from the error budget. The device can display the usage of the error budget for the service in association with the service level.

Abstract: Systems and methods are disclosed for connection multiplexing in a parallel processing environment. An example method includes requesting, responsive to a request to perform multiple database operations in a single transaction, a connection identifier for a physical connection to the database, providing the connection identifier to each of a plurality of workers, and performing the multiple database operations using the plurality of workers. Each worker may obtain a work item from a work queue, initiate a database request for the work item, and provide the database request to a database server. The database request represents one of the multiple database operations and includes the connection identifier. The database server may determine that the connection identifier corresponds to the physical connection, add the request to a connection queue associated with the physical connection, and execute requests from the connection queue against the database via the physical connection.

Abstract: Examples disclosed herein relate, among other things, to an apparatus that includes a processor and a non-transitory machine-readable medium on which is stored instructions that, when executed by the processor, cause the processor to generate a report, the report including a value, access a memory, the memory storing indications of whether values are to be masked, determine that the value is to be masked based on the accessed memory, and substitute the value in the report with a masked value.

Abstract: Disclosed are systems and methods of accessing content items stored at a content management system by a mobile device, when the mobile device is not communicatively coupled to the content management system. The content management system can receive an indication to mark a content item (e.g., folder and the content items associated with the folder) as available to a mobile device when the mobile device is offline. The content management system can mark the content item, and any content items associated with the content item, for offline access by the mobile device and determine a synchronization schedule for the content item(s). The content management system can then initially send to the mobile device, the marked content item(s) in accordance with the synchronization schedule. While offline, the mobile device can make changes to the marked content items. The changes can be synchronized between the mobile device and content management system when the mobile device is online.

Abstract: Methods, systems, and apparatuses are described for dynamic management of file system objects (e.g., a file or a directory). Such management includes syncing, routing, and storing capabilities. A file system object may be tagged with one or more tags based on at least one of file system object content or file system object location. Dynamic rules that control routing of file system objects to one or more locations based on the one or more tags are accessed and searched for an applicable rule. The file system object may be routed and/or stored based on the applicable rule. The rules may specify allowable locations as well as locations that are not allowed for a given file system object. The location may be a cloud-based location, a location that is on the premises of the enterprise, a location provided by and/or serviced by a competing entity, etc.

Abstract: A method for ensuring successful deployment of a plurality of design changes from development to user acceptance testing. The method may include exporting a development file from development to user acceptance testing, generating, based on the exporting, a plurality of skip files as an aggregated Extensible Markup Language export (XML-export) script, and opening, using an Extensible Markup Language table (XML-table) utility in Excel™ (Windows, Mac), the aggregated XML export script. The method may also include creating an aggregated XML schema based on the aggregated XML export script, retrieving a first code from the aggregated schema that identifies the action to which a member of the aggregated schema pertains, and retrieving a second code from the member of the aggregated schema that identifies a Rational Security Assessment Manager Identifier (RSAM ID) to which the member of the aggregated schema pertains.

Abstract: A method for performing network function virtualization (NFV) management and orchestration (MANO) operations in a telecommunications network includes collecting, by a mobile network node, mobile network node condition data that specifies network conditions present at the mobile network node, providing, to a distributed NFV-MANO system component located at the mobile network node, the mobile network node condition data, and executing, by the distributed NFV-MANO system component, MANO decision logic. The MANO decision logic provides, based on input that includes at least the mobile network node condition data, at least one MANO operation decision as output. The telecommunications network includes stationary infrastructure components and mobile infrastructure components that communicate with stationary infrastructure components via wireless links, and the mobile network node is one of the mobile infrastructure components of the telecommunications network.

Abstract: Embodiments relate to a platform offering configurable analytics facilitating performance analysis between multiple Application Programming Interfaces (APIs)—e.g., APIs of individual microservices invoked by a cloud application as part of an end-to-end process flow. For purposes of performance monitoring, a visualization framework according to embodiments permits user configuration of end points of the cloud application. A library parses that configuration, storing analytics data in a schema provided by the application. The library can store metadata generated by the monitoring configuration, allowing generation of analytical reports based upon that metadata. Configuration options permit creating visualizations (e.g., charts) for individual microservice APIs, and co-relating data between APIs by providing contextual navigation from visualization of one API metric to another.

Abstract: Methods and systems for deploying an enhanced processing system that performs reflection based endpoint security testing are described herein. A computing system may determine, by performing reflection on a web server library, controller types corresponding to an API. For each of the controller types, the computing system may determine method information objects corresponding to the respective controller types. Based on calls to an endpoint method for each of the one or more method information objects, the computing system may determine endpoint failures associated with the API. The endpoint methods may correspond to each of the one or more method information objects. Based on the determined endpoint failures associated with the API, the computing system may adjust one or more endpoints of the API.

Abstract: Techniques are provided for generating activity-based network profiles for devices, and for ranking such devices using the activity-based network profiles. One method comprises evaluating device communications to identify services that communicated with devices of an enterprise; generating an activity-based network profile for each device based on the services that communicated with each respective device; clustering the devices into a plurality of clusters based on a functional characterization of the devices derived from the activity-based network profiles; and ranking the devices within a cluster based on network activity and/or network exposure.

Abstract: An electronic device, and a software setting method based on a subscriber identity module in an electronic device, according to various embodiments of the present invention, provide first setting information corresponding to a first communication network provider according to the recognition, by the electronic device, of a first subscriber identity module including information of the first communication network provider among a plurality of communication network providers, confirm second network setting information corresponding to a second communication network provider according to the recognition, by the electronic device, of a second subscriber identity module including information of the second communication network provider among the plurality of communication network providers, and can set a network of the electronic device on the basis of the first setting information and the second network setting information corresponding to the second communication network provider.

Abstract: In a communication system including first virtual CPE and second virtual CPE, the first virtual CPE includes a band acquisition unit configured to acquire a first contract band set for a subscriber under control of the first CPE and acquire a value of decrease in the first contract band when at least one subscriber terminal of the subscriber transitions from being under control of the first CPE to being under control of the second CPE, and a band control unit configured to control a communication band for the first CPE, and the second virtual CPE includes a band acquisition unit configured to acquire a second contract band set for a subscriber under control of the second CPE and acquire a value of increase in the second contract band, and a band control unit configured to control a communication band for the second CPE.

Abstract: An apparatus comprises a host device configured to communicate over a network with a storage system. The host device comprises a plurality of host bus adaptors, and a multi-path input-output driver configured to control delivery of input-output operations from the host device to the storage system over selected ones of a plurality of paths through the network. The paths are associated with respective initiator-target pairs wherein each of the initiators comprises a corresponding one of the host bus adaptors and each of the targets comprises a corresponding one of a plurality of ports of the storage system. The host device monitors performance of the ports in processing input-output operations delivered thereto, detects an initiator-related condition based at least in part on the monitored performance, and automatically adjusts an assignment of one or more of the initiators to one or more of the targets based at least in part on the detected initiator-related condition.

Abstract: A device may identify network interfaces of the device and may create a list of the network interfaces of the device. The device may receive a cell site name associated with the device and may generate dynamic host configuration protocol (DHCP) requests with a DHCP option that includes data identifying the cell site name and the network interfaces of the list. The device may broadcast the DHCP requests to one or more components that are connected, via connections, to the network interfaces, and may cause, based on broadcasting the DHCP requests to the one or more components, a user equipment to receive an indication of whether the connections to the network interfaces are valid.

Abstract: Techniques for policy management and enforcement using semantic data modeling are provided. A first declarative policy is received at a network node from a controller. A first semantic data query protocol (SDQP) transaction is generated by retrieving a first semantic data model associated with the network node, where the first semantic data model describes a configuration domain of the network node, and parsing the first declarative policy based on the first semantic data model to generate the first SDQP transaction. The first declarative policy is then implemented by executing the first SDQP transaction against a semantic database.

Abstract: A method for integrating data points of building automation devices into a building controller within a building automation system includes generating on a display an identification of a system object relating to one of a plurality of building automation devices; receiving a user input comprising a filter criterium for filtering a plurality of data points relating to the building automation devices; identifying at least one of the plurality of data points of the building automation devices based on the filter criterium; integrating the identified at least one of the data points into the building controller to be associated with the system object; and generating on the display an identification of at least one of the integrated data points associated with the system object.

Abstract: A communication system includes a first local area network (LAN), a first router that is operatively coupled to the first LAN, a second local area network (LAN), a second router that is operatively coupled to the second LAN, and a communication network that facilitates communication between the first router and the second router. The first router includes a communication control device having at least one processor that transmits first information indicating a connection relation of a first communication relay device to the first communication relay device connected via the Internet. The processor also receives the first information from the first communication relay device. The processor also causes connection information in accordance with the received information indicating the connection relation of the first communication relay device to be displayed on a display unit.

Abstract: A method and system for deploying a function in a polyglot serverless elastic runtime execution environment includes receiving function code via a development environment, combining the function code with middleware layers for polyglot serverless elastic runtime execution environment to form an executable function for the polyglot serverless elastic runtime execution environment, and deploying the executable function to the polyglot serverless elastic runtime execution environment.

Abstract: Methods, systems, and apparatus for automatic sharding and load balancing in a distributed data processing system. In one aspect, a method includes determining workload distribution for an application across worker computers and in response to determining a load balancing operation is required: selecting a first worker computer having a highest load measure relative to respective load measure of the other work computers; determining one or more move operations for a partition of data assigned to the first worker computer and a weight for each move operation; and selecting the move operation with a highest weight the selected move operation.

Abstract: A network node and method for enhancing message communication between a first network node and a second network node in a communication network is provided. The first network node receives an input message from the second network node wherein the input message contains at least one parameter. The first network node then identifies in the received input message the presence of the at least one parameter, wherein the parameter is unknown to the first network node. After identifying at least one unknown parameter, the first network node sends a request message to the second network node for obtaining meta-data associated with the identified unknown parameter. The first network node then receives a response message from the second network node containing the said obtained meta-data associated with the identified unknown parameter. After receiving the response message, the first network node updates the obtained meta-data associated with the unknown parameter.

Abstract: A method for executing an application on a distributed system architecture having an application client for receiving input data and for providing output data; a local application server on the application client; at least one remote application server for receiving input data from the application client for processing input data for the application client and for returning processed input data to the application client; and an application manager for assigning the application to the local application server or to the at least one remote application server. The method includes determining a first round-trip time, determining a second round-trip time, determining a tolerance time for receiving and processing input data for the application, comparing the two round-trip times with the tolerance time, and assigning the application to the local application server or to the at least one remote application server based on the comparison.

Abstract: Systems, software, and methods for managing traditional (i.e., TCP/IP-based), non-traditional, and traditional-non-traditional hybrid networks of connected electronic devices are described. In one example, network management policy and network management applications are downloaded automatically upon detection and identification of a new device, application or service on a network. In another example, information related to at least one aspect of the network is obtained by a network management device through connection to a non-TCP/IP network, or by way of a gateway device or application, at least one applicable management policy is identified, and the identified policy is used to manage at least one aspect of the network's operation. In another example, devices, applications or services presenting various behaviors under various scenarios are evaluated and placed under management.

Abstract: A test management system utilizes an adaptive cohort selection technique to dynamically select and update a cohort of clients for testing a feature of a computer security application. The test management system selects an initial cohort based on high level parameters of the test including the feature to be evaluated and the statistical confidence level for the outcome. During the test, the test management system obtains real-time telemetry data relevant to evaluating the test. Depending on how the test is tracking relative to the test objectives, test management system may dynamically modify the cohort by expanding the size of the cohort or changing the cohort membership.

Abstract: An apparatus for machine learning for workloads for ISA optimization is disclosed. The apparatus includes a processor and a memory that stores code executable by the processor. The executable code is executable to run program code to service a workload with a default instruction set of the processor, identify an instruction sequence from execution results for the workload, the instruction sequence called repeatedly during execution for the workload, and generate a custom instruction that includes the instruction sequence. The executable code is executable to write the custom instruction to a writable area of processor memory storing the default instruction set, recompile program code used to service the workload, where the recompiled program code includes the custom instruction, and run the recompiled program code to service the workload.

Abstract: Recovery of a container storage provider, including: storing, within a first database, configuration information related to the container storage provider; storing, within a second database hosted by a cloud-based storage system services provider, the configuration information; and responsive to detecting that one or more components associated with the container storage provider have become unavailable, creating a replacement component using configuration information contained in the second database.

Abstract: Some embodiments are directed to techniques for infrastructure analysis of Internet-based activity. Techniques are disclosed to enable analysts to spend more time focusing on analyzing and identifying threats to in a network infrastructure, and little time on data collection and data processing. Specifically, techniques are described for identifying network data relevant to Internet activity and providing an interactive interface (e.g., a “heat map” interface) for viewing and interactive analysis of the network data. The network data may be identified for assessing Internet activity with respect to one or more attributes, such as an Internet domain name or an Internet protocol (IP) address.

Abstract: A text representation is received from a virtual assistant application on a user device. The text representation may be generated via a speech-to-text engine of the virtual assistant application from audio speech spoken by a customer. Device diagnostic data of the user device is also received from the virtual assistant application. An identifier of the customer is placed in an assistance queue. At least information in the text representation and the device diagnostic data is analyzed to determine an issue associated with the user device and a solution for resolving the issue, so that the solution is applied. In response to the identifier of the customer reaching a front of the assistance queue, session state information that includes at least the text representation and a description of the issue is provided to a support application. A voice support session is initiated between the support application and the virtual assistant application.