Abstract: Methods, systems and software products for configuring a virtual port for a physical server to support packets transfer between the physical server and other network nodes over a virtual network, comprising transmitting one or more configuration Protocol Data Units (PDU) of an extended Link Layer Data Protocol (LLDP) to a Network Interface Card (NIC) of a physical server connected to a network, the configuration PDU(s) comprising one or more extension Type Length Values (TLV) defining one or more virtual network settings for a virtual network port mapping the physical server in a virtual network. The NIC is configured to deploy the virtual network port to support exchange of packets between the physical server and one or more of a plurality of nodes of the virtual network by processing outgoing and incoming packets according to one or more virtual network virtualization protocols using one or more of the virtual network settings.

Abstract: In some example embodiments, there may be provided a method that includes receiving, at a user equipment while being served by a first system and during protocol data unit session establishment or modification procedure, a message including an access point name aggregate maximum bit rate value; and when there is an inter-system change from the first system to the second system, setting, at the user equipment, the access point name aggregate maximum bit rate value of a session management context for the second system to the received access point name aggregate maximum bit rate value received while being served by the first system. Related systems, methods, and articles of manufacture are also described.

Abstract: Techniques for preventing concurrent execution of an infrastructure orchestration service are described. Worker nodes can receive instructions, or tasks, for deploying infrastructure resources and can provide heartbeat notifications to scheduler nodes, also considered a lease. A signing proxy can track the heartbeat notifications sent from the worker nodes to the scheduler node. The signing proxy can receive requests corresponding to a performance of the tasks assigned to the worker nodes. The signing proxy can determine whether the lease between each worker node and the scheduler is valid. If the lease is valid, the signing proxy may make a call to services on behalf of the worker node, and if the lease is not valid, the signing proxy may not make a call to services on behalf of the worker node. Instead, the signing proxy may cut off all outgoing network traffic, blocking access of the worker node to services.

Abstract: Various aspects of the subject technology relate to methods, systems, and machine-readable media for self-correlating network operations. The method includes receiving a stream of network messages, the stream of network messages comprising a variety of network events for various network devices. The method also includes identifying patterns within the stream of network messages, the patterns comprising groupings of the variety of network events. The method also includes determining for each pattern an appropriate operationalization scenario. The method also includes operationalizing the patterns as correlation rules in a correlation engine to automatically detect or predict network alarms from input provided by a fault management system.

Abstract: A multi-layer compute sizing correction stack may generate prescriptive compute sizing correction tokens for controlling sizing adjustments for computing resources. The input layer of the compute sizing correction stack may generate cleansed utilization data based on historical utilization data received via network connection. A prescriptive engine layer may generate a compute sizing correction trajectory detailing adjustments to sizing for the computing resources. Based on the compute sizing correction trajectory, the prescriptive engine layer may generate the compute sizing correction tokens that that may be used to control compute sizing adjustments prescriptively.

Abstract: An anomaly detection device includes a memory, and processing circuitry coupled to the memory and configured to acquire communication feature values of communication devices, calculate, for each transmission source MAC address included in the communication feature values acquired, a total value of the number of transmitted and received packets or a total value of the number of bytes, for each layer-2 switch connected to a corresponding communication device, and determine, for each transmission source MAC address, that a communication device corresponding to the transmission source MAC address is connected to a layer-2 switch whose total value of the number of transmitted and received packets or total value of the number of bytes calculated is the largest.

Abstract: Method and apparatus for traffic optimization in virtual private networks (VPNs). A client device establishes a first VPN connection with a first server based on first VPN credentials. Traffic is transmitted and received through the first VPN connection to and from the first server. A second server is identified based on traffic optimization criteria that need to be satisfied by the VPN connection. Upon receipt of the identification of the second server the client device is to use the second server as a destination of a second VPN connection. The second VPN connection satisfies a set of traffic optimization goals for at least one flow from the flows forwarded through the first VPN connection. Based on the identification of the second server, the client device establishes the second VPN connection for the flow between the client device and the second server.

Abstract: A processor-implemented method for improving computer identification comprising transmitting a browser fingerprinting test to one or more computing devices and receiving test data from the one more computing devices that includes at least an elapsed processing time and a hash code. The method includes determining an average elapsed processing time and determining a uniqueness level for the browser fingerprinting test by comparing the hash codes for each computing device with one another.

Abstract: As described herein, a system, method, and computer program provide consumer requirement based management for a physical edge deployment of an application. In use, a communication service provider received, from a third party, a definition of one or more service requirements for an application deployed within a network of the communication service provider. Further, the communication service provider manages a physical edge deployment of the application within the network for the third party to satisfy the one or more service requirements of the third party.

Abstract: The method of synchronizes network address translation (NAT) records between an active gateway and a standby gateway. The method of some embodiments synchronizes NAT records of long-term data flows more frequently than those of short-term flows. Multiple data flows pass between a device at an internal source address and a device at an external destination address through the active NAT gateway. For each flow, the method generates a NAT record. The method then determines whether the data flow is a short-term flow or a long-term flow and synchronizes the NAT records of the long-term flows, but not the NAT records of the short-term flows, with the standby gateway. The method of some embodiments synchronizing NAT records more frequently when NAT records are being generated quickly relative to prior generation rates and less frequently when NAT records are being generated slowly relative to the prior generation rates.

Abstract: The technology disclosed herein provides an enhanced access control mechanism that uses a proof-of-work key wrapping system to temporally restrict access to data. An example method may include: determining, by a processing device, characteristics of a computing device; accessing a cryptographic key for accessing content; selecting a set of cryptographic attributes for wrapping the cryptographic key, wherein the set of cryptographic attributes are selected to enable the computing device to derive the cryptographic key from a wrapped key in a predetermined duration of time; and providing the wrapped key and an indication of at least one of the cryptographic attributes to the computing device.

Abstract: Disclosed are various approaches for generating a management token corresponding to a client device. The management token can include one or more device policies that can be installed or enforce on a client device. This can allow a device that might not be enrolled as a managed device to be taken into a facility and comply with the security policies of the facility.

Abstract: Generally discussed herein are systems, devices, and methods for populating a cache in an information-centric network. A device of an ICN can include a content store including published content and attributes of the published content stored thereon, the attributes including at least two of a device from which the content originated attribute, a lineage attribute, and a service level agreement attribute, and content processing circuitry coupled to the content store, the content processing circuitry configured to manage the published content based on the attributes.

Abstract: A wireless battery management system for quickly establishing a short-range wireless network. The wireless battery management system includes a manager node storing network configuration information when operating in a first mode, and when operating in a second mode, checking one or more monitor nodes being joined in a short-range wireless network using the network configuration information to establish the short-range wireless network along with each of the checked one or more monitor nodes and one or more monitor nodes storing joining information for joining in the short-range wireless network when operating in the first mode, and when operating in the second mode, joining in the short-range wireless network on the basis of the joining information to transmit battery data to the manager node.

Abstract: Conversing across fragmented messaging services based on a discussion topic is disclosed. In an embodiment, a method includes receiving, via a first messaging channel and at a message aggregator, a first message from a first messaging service. The first message is sent by a first user. The method includes sending the first message to a second user via a second messaging channel, then receiving, via the second messaging channel and at the message aggregator, a second message. The second message is sent by the second user. In response to a request from the first user to continue a conversation via a second messaging service, the method opens a third messaging channel to the second messaging service. The third messaging channel is associated with an account of the first user on the second messaging service. The method includes sending the second message via the third messaging channel to the second user.

Abstract: A data network analysis system includes a computer-executable set of instructions that obtain service account information associated with a route provided to a customer through a data communication network having network elements. Using the service account information, the instructions identify a termination port that terminates the route to a customer premises equipment of the customer, and at least one target port of the route and those network elements that are assigned to convey the route through one or more of the network elements. The instructions then obtain the routing information for the route from each of the network elements that are assigned to convey the route.

Abstract: This application discloses a PDU session establishment method and apparatus. The method includes: receiving, by a terminal device in a process of establishing a PDN connection in a first system, an access type that is sent by a core network device and that corresponds to the PDN connection in a second system; and when the terminal device moves to the second system, establishing, by the terminal device, a PDU session in the second system via an access network indicated by the access type, where the PDU session is associated with the PDN connection. Implementation of the present invention can increase a success rate of establishing a PDU session.

Abstract: A processing device receives a first cluster management operation request, wherein the first cluster management operation request is for a deployment operation of a first cluster and comprises a cluster template, a specified number of nodes to deploy and a configuration. The processing device determines a plurality of constraints from at least one of the cluster template or the configuration. The processing device deterministically solves for and outputs a first cluster layout comprising the specified number of nodes, each of the specified number of nodes comprising a hardware type, an image type and one or more services, wherein the first cluster layout satisfies the plurality of constraints.

Abstract: Methods and systems for configuring nodes in a cloud computing network are described. One example method includes receiving, over a network, a configuration request from a particular node in the cloud computing network, the configuration request including node information for the particular node; verifying that the particular node is authorized for configuration based at least in part on the node information; in response to verifying that the particular node is authorized for configuration, identifying configuration actions to perform on the particular node based at least in part on the node information; and sending, over the network, a configuration command corresponding to one or more of the identified configuration actions to the particular node, wherein the particular node executes the configuration command upon receipt to perform the corresponding configuration actions.

Abstract: In the present invention, a map information table is displayed as a list on a display screen. The map information table associates a reference name field representing each of the plurality of device ports with a set value field for each device port. It is determined whether a set value has been written on the set value field for each of the device ports regarding a first program in a first programming language. Writing of a set value on the set value field is prohibited regarding a second program in a second programming language, which is different from the first programming language, for a device port for which it is determined that a set value has been written on the set value field regarding a first program in the first programming language.

Abstract: Access is temporarily allowed to selected enterprise resources. A request to carry out an action is received from a private device. The private device is associated with an enterprise device, which has one or more enterprise policies in place. One or more steps for carrying out the requested action are defined, and it is determined that at least one policy from the enterprise policies is required for at least one of the steps. It is also determined that the at least one policy is in place on the private device. The private device is then allowed to carry out the requested action according to the at least one policy.

Abstract: The invention provides, methods, systems and computer program products that enable generation of executable sequential function charts, for subsequent retrieval and implementation by a process control system. In an embodiment, generating an executable sequential function chart comprises (i) receiving equipment selection data representing a selected equipment for implementing operating functions within a sequence flow, (ii) receiving operation data representing a set of operating functions intended to be implemented by the selected equipment, (iii) assigning values to one or more configuration parameters, (iv) receiving control statement data representing a set of control statements intended to be implemented for process flow control during implementation of the set of operating functions, (v) assigning values to one or more control statement configuration parameters, and generating machine readable SEBOL program code for implementing the set of operating functions.

Abstract: Access is temporarily allowed to selected enterprise resources. A request to carry out an action is received from a private device. The private device is associated with an enterprise device, which has one or more enterprise policies in place. One or more steps for carrying out the requested action are defined, and it is determined that at least one policy from the enterprise policies is required for at least one of the steps. It is also determined that the at least one policy is in place on the private device. The private device is then allowed to carry out the requested action according to the at least one policy.

Abstract: A resource pool processing method and apparatus, and a device, where the method includes obtaining a service template of a to-be-provisioned service, determining, based on the service template, first service-level agreement (SLA) information corresponding to the to-be-provisioned service, determining whether there is SLA information matching the service template on a management server, creating a new storage device based on the first SLA information and preset storage infrastructure when there is no SLA information matching the service template on the management server, creating a new virtual resource pool based on the new storage device, and associating the new virtual resource pool with a new SLA. Thereby, even when a physical pool occupied by another virtual pool on the management server is damaged, data running of the to-be-provisioned service is not affected, and data isolation is greatly improved.

Abstract: The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system that supports higher data rates Beyond 4th-Generation (4G) communication system.

Abstract: A process for management of Internet-of-Things (IoT) devices includes a management system for identifying, interrogating, and updating devices connected to one or more networks. The management system can include a data store for storing various data related to the devices and the various processes of the management system. The management system can include a controller for executing processes such as interrogation processes, firmware change processes, credential change processes, and other processes. The controller can determine versions of firmware and other configuration properties of a device and generate various profiles for updating the firmware and other configuration properties. The controller can determine upgrade paths for updating the firmware and other configuration properties from a first version to a second version, the upgrade paths including one or more intermediary versions for facilitating the upgrade path.

Abstract: [Problem] A network service selection apparatus is provided that is able to suitably realize dynamic switching of a network service with a simple method. [Solution] A network service selection apparatus 4 is provided that includes a network service switching unit 30 configured to, based on a specification of a network service stored and a service request from a user terminal apparatus, extract a combination of the network services of an initial operation and a spare network service and to connect two service providing systems corresponding to the combination of the network services of the initial operation, and a network service state confirmation unit 40 configured to confirm a state of a network service between the two service providing systems 2.

Abstract: A system and method is described that allows a communication session to be transferred between endpoints. A user may provide an indication using a first endpoint of the communication session that they desire to transfer the communication session to a second endpoint. Communication session endpoints associated with the user that are available to transfer the communication session can be determined and the user may select one of the available endpoints and then the communication session can be transferred from the first endpoint to the selected endpoint.

Abstract: Methods and systems for transmitting data are presented. Data received from at least one data source is retained in at least one buffer. In one example, initial hierarchical data may be provided from the at least one buffer to a device, followed by additional hierarchical data. In one example, the data is received into the at least one buffer via a multicast connection, and the data is provided to the device via a point-to-point connection.

Abstract: Described herein are one or more self-organizing network (SON) components configured to determine QoS factors associated with QoS classes for a node of a telecommunication network based at least in part on performance metrics, network configuration, or network fault information. The one or more SON components may receive the performance metrics, network configuration, or network fault information from the node, and the performance metrics, network configuration, or network fault information may be associated with communication of traffic of the QoS classes by the node. Upon determining the QoS factors, the one or more SON components may transmit indications of the QoS factors to the node.

Abstract: A high-speed serial interface (HSIF) for communicating between an analog front end (AFE) and a System on a Chip (SoC) digital radio via a bi-directional serial bit connection for an OFDM cable modem includes generating Status Frames and Data Frames to be communicated between the tuner and AFE and sending the generated Status Frames and Data Frames on a continual basis. Each Frame is a 10-bit K.28 Comma Sync word followed by a payload and when no data is queued to be communicated, Status Frames are sent asynchronously as filler frames.

Abstract: A method of registering a subscriber in an IP Multimedia Subsystem (IMS), said subscriber being associated with an IMS Private User Identity (IMPI) and an IMS Public User Identity (IMPU) and further being associated with a 4G or 5G conforming User Equipment (UE). The method comprises: at the UE, generating a Temporary IMS Private User Identity (TIMPI) and a Temporary IMS Public User Identity (TIMPU) from a Globally Unique Temporary Identifier (GUTI) allocated by and received from a 4G or G network to temporarily identify the UE; sending an IMS registration request containing the TIMPI and the TIMPU from the UE to the IMS; at the IMS, using the TIMPI and the TIMPU to determine the GUTI, and communicating with the 4G or 5G network to determine, using the GUTI, an International Mobile Subscriber Identifier (IMSI) associated with the UE; at the IMS, using the IMSI to determine said IMPI and IMPU; and completing IMS registration of the subscriber using the IMPI and the IMPU.

Abstract: The technology disclosed offers a declarative framework that implements a machine for multi-step progression of interaction with an entity. The declarative framework is usable over and over for a broad range of applications because it provides a simple rule-based authoring tool that can be used for specifying different elements and components of a complex state machine, including state definitions, state transition triggers, state transition conditions and state transition actions. Once defined, the state machine is automatically generated and implemented based on the declarative input provided by a non-technical user.

Abstract: In one embodiment, a first networking device sends, to a second networking device, a training frame of a transmitter training signal (TTS) that includes a request for the second networking device to enable a protocol on the second networking device. In addition, the first networking device receives, from the second networking device, an indication that the second networking device has enabled the protocol on the second networking device. The first networking device may also send, using the protocol, first flow-control information indicating a number of data packets sent by the first networking device to the second networking device and a number of acknowledgments received from the second networking device, in addition to receiving second flow-control information indicating a number of data packets received at the second networking device from the first networking device and a number of acknowledgments sent by the second networking device to the first networking device.

Abstract: Communication enabled circuit breakers and circuit breaker panels are described. Methods associated with such communication enabled circuit breakers and circuit breaker panels are also described. A circuit breaker panel may include a circuit breaker controller and one or more communication enabled circuit breakers. Two-way wireless communication is possible between the circuit breaker controller and the one or more communication enabled circuit breakers.

Abstract: Techniques described herein relate to a method for load balancing. In one or more embodiments, the method selects a server from a plurality of servers to process a communication from a host. Network details for the server and the host are saved during a control session to set up the communication. Then, the method stores the network details in a rule in a data plane and relays media traffic between the host and the server for a media session for the communication using the network details in the rule in the data plane.

Abstract: Techniques for maintaining a data dictionary within a computing platform that provides a multitenant environment in which multiple tenants utilizing the multitenant environment share a single instance of a database. The data dictionary is maintained with referential integrity utilizing custom database objects to provide metadata corresponding to the data dictionary. The data dictionary tracks attributes for the custom database objects utilizing natively supported field attributes and the custom database objects maintain tenant-specific information. The custom database objects are automatically updated corresponding to the data dictionary. A notification to one or more users is generated for custom database objects that correspond to the data dictionary that cannot be updated automatically, if any.

Abstract: Selective virtualization of resources is provided, where the resources may be intercepted and services or the resources may be intercepted and redirected. Virtualization logic monitors for one or more activities that are performed in connection with one or more resources and conducted during processing of an object within the virtual machine. The first virtualization logic further selectively virtualizes resources associated with the one or more activities that are initiated during the processing of the object within the virtual machine by at least redirecting a first request of a plurality of requests to a different resource than requesting by a monitored activity of the one or more activities.

Abstract: This disclosure describes techniques for defining a set of permissions, or privileges, for users who manage resources of a network-based service provisioned in a network-based service platform managed by a service provider. The techniques may include mapping cloud identities of the users to operating system (OS) user groups defined local to the resources that specify the set of permissions for user group members. Systems-manager agents that execute locally on the resources may determine to which OS user group the user belongs based on their cloud identity, and launch shells that are restricted by the set of permissions. Using these shells, a network-based service platform may allow users to remotely manage resources of the network-based service in various ways, such as through batch run commands and/or remote user sessions, while ensuring that the users are unable to execute commands on the resources that are outside the set of permissions.

Abstract: Methods, systems and computer program products for data protection across computing infrastructure comprising a plurality of geographically distant computing clusters. The geographically distant computing clusters form a distributed system comprising clusters that are assigned into availability zones. Disaster recovery policies are maintained in each of the availability zones. A first cluster detects a modification of a disaster recovery policy. The modification of the disaster recovery policy that occurred at the first cluster is to be communicated over a wide area network. Synchronization of the disaster recovery policy is accomplished by carrying out a peer-to-peer communication protocol over the wide area network.

Abstract: Example implementations described herein disclose an asset and data management method on digital twin that provides an integration method between asset layouts and data layouts. Using the integrated layout, the example implementations described herein provide understanding a relationship between asset and data to improve the asset utilization/efficient (e.g. manufacturing efficient) for increasing revenue.

Abstract: Security policies are translated into access-control list entries and can be stored by switches in the computer network. When a new device is connected to the computer network, the device may be resolved to the group for which it is a member and an ACL entry may be created for the new device. In networks having redundant switches, the ACL entries may be stored by each redundant network switch.

Abstract: Systems and methods are provided to manage replicas of a virtualized block storage volume. The master replica of the virtualized block storage volume can heartbeat with each secondary replica of the virtualized block storage volume to provide an indication of the status of the master replica. Each secondary replica can reply to the heartbeat of the master replica. Each replica can be configured to request an updated replica configuration based on not receiving a heartbeat from one of the replicas. The master replica can request an updated replica configuration after a first time period without receiving a reply from one of the secondary replicas and each secondary replica can request an updated replica configuration after a second time period without receiving a communication from the master replica. Use of the heartbeat process between the master replica and the secondary replicas can increase system speed or reduce power consumption.

Abstract: Techniques for providing information involve: obtaining, from a first device for updating information, a first copy of the updated information, where a second copy of the information prior to the updating is cached in a first buffer acting as an active buffer and the second copy is provided in response to receiving a first request for providing the information from a second device; caching the first copy in a second buffer acting as a standby buffer; in response to the first copy being cached in the second buffer, switching the second buffer to the active buffer and switching the first buffer to the standby buffer; and in response to receiving a second request for providing the information from the second device, providing, to the second device, the first copy cached in the active buffer. Such techniques can ensure the consistency of the provided information without a lock.

Abstract: Certain disclosed embodiments provide improved systems and methods for processing jobs. The method comprises steps including receiving, from a client device over a network, information representing a job and generating at least two tasks representative of the job. The method further comprises, for each task, assigning, by a processor, a signature to the task representative of whether the task has been processed, determining at least one dataset related to the task, and assigning a signature to the determined at least one dataset. The method further comprises searching, by the processor, a data structure for the task signature, and based on the searching, sending the task over a network to a task executor for processing or locating results associated with the task. The method further comprises sending, over a network, a job result to the client device. Systems and computer-readable media are also provided.

Abstract: Systems, devices, and methods are provided for unblocking a computer resource usage count. A system may receive a request for a user account and a user account policy, and may obtain a count of a first number of user accounts, wherein the count is based on an aggregation of two or more actions associated with the user account policy. The system may determine, based on the count, that the first number of user accounts is less than a threshold number of accounts. The system may obtain based on the determination that the first number of user accounts is less than the threshold number of accounts, an event history. The system may determine, based on the event history, a second number of user accounts. The system may determine that the second number of user accounts is less than the threshold number of accounts, and may update the user account policy.

Abstract: Methods and systems for generating time-synchronized audio messages of different content in a talkgroup. One system includes an electronic computing device that includes an electronic processor configured to generate first public safety incident information as a function of context information of a first member of a talkgroup, and second public safety incident information as a function of context information of a second member of the talkgroup. The second public safety incident information is different than the first public safety incident information. The electronic processor is further configured to generate a first audio message including the first public safety incident information sized according to a time window and a second audio message including the second public safety incident information sized according to the time window such that a playback time of the first audio message is approximately the same as a playback time of the second audio message.

Abstract: Embodiments are directed to a method of transferring data between a customer site and a benchmarking site, including: receiving, from the customer site, encrypted packet data, wherein the packet data is encrypted using a first key of a key pair; storing the encrypted packet data, by the processor, in a first cache at the benchmarking site; decrypting the encrypted packet data in the first cache, by the processor, using a second key of the key pair; storing decrypted packet data, by the processor, in a second cache at the benchmarking site; indexing the decrypted packet data in the second cache; storing indexed packet data as a dataset in a permanent storage device; and performing a benchmarking session on the indexed packet data.

Abstract: The present disclosure provides for consistent reads in a global database that is replicated to one or more global clones. A state machine is implemented, and executed independently, for each project in each region. Based on the state of a project when a read request is received, the read request will be served by the global database, served by the global clone, or ignored as an invalid request.

Abstract: A solution is provided to enable cloud service provider customers/users to offer physical network services to virtualized workloads that use overlay technologies, such as a Virtual Extensible Local Area Network (VXLAN). For a virtual workload that uses an overlay technology, an identifier is received of a logical network to which the virtual workload connects and a policy for the logical network. Based on the identifier of the logical network and the policy, a gateway is configured to connect traffic for the virtual workload on the logical network to a particular virtual local area network (VLAN) interface of the physical network service equipment on which the policy is configured.