Abstract: A resource processing method and apparatus. The method is achieved by a computer configured to execute the following steps: generating a resource allocation chart based on a resource allocation request; processing the resource allocation chart and generating an access entrance of the resource allocation chart; opening the access entrance to enable at least one third party resource supplier to respond to the resource allocation request via the access entrance. The method further comprises: when the resources are not available or not suitable for allocation, receiving a resource allocation chart, wherein the resource allocation chart is based on the resource allocation request; generating an access entrance of the resource allocation chart; opening the access entrance to at least one third party resource supplier; and receiving the allocated resources from the at least one third party resource supplier by responding to the resource allocation request through the access entrance.

Abstract: Embodiments of the present disclosure describe methods and apparatuses for network resource modelling to support next generation node Bs.

Abstract: A method in a domain manager for managing a wireless communications network operating at least one network slice. A network slice comprises a logically grouped subset of network resources and/or network functions. The method comprises populating (202) a first Information Object Class instance representing the network slice, adding (204) the populated first Information Object Class instance to a generic Network Resource Model and exposing (206) the modified generic Network Resource Model.

Abstract: Generally, aspects of the invention involve creating a data structure (a map) that reflects routing of Internet traffic to Anycast prefixes. Assume, for example, that each Anycast prefix is associated with two or more deployments (Points of Presence or PoPs) that can provide a service such as DNS, content delivery (e.g., via proxy servers, as in a CDN), distributed network storage, compute, or otherwise. The map is built in such a way as to identify portions of the Internet (e.g., in IP address space) that are consistently routed with one another, i.e., always to the same PoP as one another, regardless of how the Anycast prefixes are deployed. Aspects of the invention also involve the use of this map, once created. The map can be applied in a variety of ways to assist and/or improve the operation of Anycast deployments and thus represents an improvement to computer networking technology.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for implementing a registrar component or functionality in a telecommunications network. In one implementation, the registrar functionality is handled at a Session Border Controller (SBC) or Network Address Translation (NAT) Traversal Manager (NTM) device of the network to alleviate an application server of the network from performing the registration function.

Abstract: A method and an apparatus for pushing information in a live broadcast room is provided. After a first client sends a keyword to a server, the server returns a name of a target object obtained based on the keyword and a live broadcast room access path to the first client, and in response to an access request of the first client, accesses the first client to a corresponding live broadcast room, and pushes access description information of the first client and the name of the target object to other clients that have accessed the live broadcast room. After other clients have accessed the live broadcast room, whenever a new client accesses the live broadcast room, the name of the target object associated when the new client accesses the live broadcast room is displayed.

Abstract: A technology is described for managing dynamic groups of devices using device representations. An example method may include receiving a request for a dynamic group of device representations. In response to the request, a membership parameter used to identify member device representations included in the dynamic group of device representations may be obtained. Device representations may be queried using the membership parameter to identify member device representations that have a state that corresponds to the membership parameter, and the dynamic group of device representations may be generated to include identifiers for the member device representations.

Abstract: A computing device configured for determining a node status is described. The computing device includes a processor and instructions in memory. The computing device determines a representative node corresponding to a network group with multiple nodes. The computing device also sends a status retrieval directive to the representative node. The status retrieval directive includes a directive for retrieval of the node status of a target node. The computing device also receives the node status of the target node from the representative node and stores the node status on a database.

Abstract: Disclosed techniques provide a view and edit function to simultaneously view and edit multiple network device configurations. The techniques may include, parsing a plurality of different network device configuration documents (e.g., files representative of configuration settings). Parsing may then identify a set of slots and anchor points relative to locations of related parameter settings within each of the different network device configuration documents (e.g., a document per device). The slots may indicate a type of parameter setting and the anchor points indicating a relative location within a specific device configuration representative document. As a user makes a change to a parameter value, at least two files of the different network device configuration documents within a scope of an editing session may be identified to receive the change. Reverse mapping may be provided (e.g., by slots and anchor points) to properly implement this change for each different device.

Abstract: A system may include multiple network devices that communicate within a network domain, and a centralized control device configured to perform operations. The operations may include receive a request to modify one or more policies regarding traffic within the network domain, and in response to receiving the request, capture a snapshot of the network domain before modification of the one or more policies. The operations may also include, in response to receiving the request, generate a prediction of the network domain after modification of the one or more policies, and compare the snapshot of the network domain to the prediction of the network domain. The operations may additionally include, based on the comparison of the snapshot and the prediction, provide a predicted impact on the network domain, and, based on the predicted impact being above a threshold, provide an indication that the predicted impact is above the threshold.

Abstract: Embodiments of the present disclosure provide methods, apparatus for network function (NF) to support service discovery in a service based architecture. In one embodiment, a method is disclosed to support service discovery using intimacy information and it is performed at a first NF in a network system. In the method, the first NF receives a service discovery request from a second NF, where the service discovery request includes intimacy information of the second NF. The first NF then sends a service discovery response to the second NF, and the service discovery response includes information of the at least one third NF or at least one sub-instance of the third NF.

Abstract: The disclosure herein describes deploying an application cluster based on a cluster definition and service templates. A cluster definition is obtained from a repository and a cluster is created on a cluster platform based on the cluster definition. A cluster type of the cluster is identified based on the cluster definition and a service set is determined from a service map based on the identified cluster type, the service map including at least one cluster type mapped to at least one service. A service deployment template of each service of the service set is obtained and each service of the service set is deployed on the created cluster based on the obtained service deployment templates, whereby the cluster is configured for use according to the cluster type. Using service deployment templates mapped to cluster types enables efficient, flexible automated deployment of clusters with a wide variety of configurations.

Abstract: Examples described herein include virtualized environments including a virtualized file server. Examples of file server virtual machine managers are described which may setup and/or configure file server virtual machines in accordance with a target number of connections and/or a target throughput for the virtualized file server. The virtualized file server may be scaled up, scaled down, scaled in, and/or scaled out.

Abstract: In some implementations, an interface indicating a set of software objects used in a first server environment may be provided. Data indicating a selection of testing parameters including a load level and one or more software objects selected from among the set of software objects may be received. A server environment test configured to generate concurrently running tasks at the indicated load level using the selected software objects may be generated. The server environment test may be performed on the first server environment to generate first results indicating at least server resource usage levels and response times of the first server environment during the server environment test. The server environment test may be performed on a second server environment to generate second results. An output data set indicating performance of the second server environment relative to performance of the first server environment may be provided.

Abstract: A datacenter has more computing power than a personal computer. The personal computer sends a request to perform an operation on a data set to the datacenter. The datacenter evaluates various inputs to determine if, despite the datacenter's computing power, the personal computer is likely to complete the operation faster. Based on the determination, the datacenter may perform the operation, send the data set to the personal computer for the personal computer to process, or start a competitive computation. As a result, a user interface can be more responsive. Machine learning processes can be used to improve predictions.

Abstract: An at least partly autonomous vehicle includes a communication interface configured for vehicle-external communication, a memory configured to store at least one piece of authentication information, and a control unit configured to control the communication interface and to output the authentication information from the memory via the communication interface when the control unit receives an instruction for outputting the authentication information.

Abstract: An enterprise security system is improved by instrumenting endpoints to explicitly label network flows according to sources of network traffic. When a network message from an endpoint is received at a gateway, firewall, or other network device/service, the network message may be examined to determine the application on the endpoint that originated the request, and this source information may be used to control routing or other handling of the network message.

Abstract: A method for automatically updating a plurality of brokers in a cluster of a distributed streaming platform within a container orchestration tool, the method including querying each of a plurality of brokers to obtain metadata from a distributed streaming platform; using the obtained metadata to identify a broker within the plurality of brokers that acts as a controlling broker; computing an order in which the plurality of brokers will be updated based on the obtained metadata, wherein the order specifies that the controlling broker will be updated last; and performing, via an update manager executed by at least one processor, a rolling update of each of the plurality of brokers according to the computed order.

Abstract: A large software application comprises of multiple modules that communicate or exchange data with each other. To facilitate communication between modules, each module implements interfaces, and it is required to create communication code to allow communication and collaboration between these interfaces. To allow collaboration between modules today, the necessary communication code (that facilitates communication between any two interfaces) is created and managed manually. It is desirable to invent tools, methods, and mechanisms to automate various tasks and activities necessary to create and manage the communication code. Current invention discloses such novel tools, methods, and mechanisms to facilitate communication between modules, by allowing communication between modules through their interfaces. To facilitate communication between the interfaces, the interfaces also include and provide the necessary information (e.g. look-up keys) to the novel tools to look up and find each pair of interfaces (i.e.

Abstract: Some embodiments of the invention provide a method for deploying software-implemented resources in a software defined datacenter (SDDC). The method initially receives a hierarchical API command that, in a declarative format, specifies several operation requests for several software-defined (SD) resources at several resource levels of a resource hierarchy in the SDDC. The method parses the API command to identify the SD resources at the plurality of resource levels. Based on the parsed API command, the method deploys the SD resources by using a deployment process that ensures that any first SD resource on which a second SD resource depends is deployed before the second resource. In some embodiments, a second SD resource depends on a first SD resource when the second SD resource is a child of the first SD resource. Alternatively, or conjunctively, a second SD resource can also depend on a first SD resource in some embodiments when the second SD resource has some operational dependency on the first SD resource.

Abstract: Monitoring backend batch processes/agents to identify currently enabled batch processes that running/executing on schedule and those that are not running/executing on schedule. In the event that currently enabled backend batch processes are identified as delayed, a delay time is determined. Such determinations are made on a regular interval, (e.g., hourly or the like), such that, reports is generated and communicated and/or a batch process status portal is updated on the regular interval to reflect the current delayed status of batch process or, in some embodiments, the current status of all of the backend batch processes currently enabled within an enterprise. Identification of backend batch processes that are currently being delayed and the associated delay time provides a basis for determining the cause(s) for the delay and possible corrective action(s), which may be implemented in conjunction with the determinations.

Abstract: A communication device may have a set of web cookies designated for a specific location. When the communication device enters the specific location, the set of web cookies, which are designated for the specific location, may be used to customize a web page displayed at the communication device. When the communication device exits the specific location, the set of web cookies, which are designated for the specific location, may be inactivated. Different sets of web cookies may be designated for different locations. For example, a set of web cookies may be designated for home and another set of web cookies may be designated for work. The communication device may activate an appropriate set of web cookies based on the location of the communication device.

Abstract: A method of optimizing network processing in a system comprising a physical host and a set of physical network interface controllers (PNICs) is provided. The physical host includes a forwarding element. The method includes determining that a set of conditions is satisfied to bypass the forwarding element for exchanging packets between a particular data compute node (DCN) and a particular PNIC. The set of conditions includes the particular DCN being the only DCN connected to the forwarding element and the particular PNIC being the only PNIC connected to the forwarding element. The method exchanges packets between the particular DCN and the particular PNIC bypassing the forwarding element. The method determines that at least one condition in said set of conditions is not satisfied. The method utilizes the forwarding element to exchange packets between the particular DCN and the particular PNIC.

Abstract: Systems and methods for providing inter-process communication in a wearable computing device are disclosed. A hardware abstraction layer is provided for a plurality of physical devices. An application program accesses the plurality of physical devices via the hardware abstraction layer. A unique inter-process communication context is created for each application program and physical device pair. A socket interface is provided for each unique inter-process communication context.

Abstract: In some embodiments, a method includes sending a first data unit, received from a source device, to a destination device via a first data unit path. The first data unit path includes (1) a first virtual machine and a second virtual machine that are included in a first network, and (2) a third virtual machine that is included in a second network. Furthermore, the first data unit path includes the first virtual machine, the second virtual machine, and the third virtual machine in a first order. The method includes sending a second data unit, received from the source device, to the destination device via a second data unit path from the source device to the destination device. The second data unit path includes each of the first virtual machine, the second virtual machine, and the third virtual machine in a second order different from the first order.

Abstract: A communication monitoring apparatus holds a communication pair model and the number of communications of a communication pair generated during, before, and after a determination target period, calculates the number of model communications of the other of the pair during the determination target period from the communication pair model and the number of communications of one of the pair, compares a value based on a difference between the number of communications of the other of the pair and the number of model communication with a threshold value, and if an abnormality is determined to have possibly occurred in a communication of the communication pair during the determination target period, based on the number of communications of the communication pair during a total time, and on the communication pair model, determine whether the abnormality has occurred in the communication of the communication pair.

Abstract: A Cable Modem Termination System (CMTS) having a gateway configured to output signals on over data tunnels for transfer over a cable network to Customer Premises Equipment (CPE). Each data tunnel is preferably characterized as a one-way data stream of out-of-band (OOB) messaging signals.

Abstract: The technology disclosed describes a system. The system comprises a network security system interposed between clients and cloud applications. The network security system is configured to receive, during an application session, an incoming request from a client. The incoming request is directed towards a cloud application and includes an object identifier of an object. The network security system is further configured to analyze the incoming request and detect the object identifier. The network security system is further configured to configure a synthetic request with the object identifier and inject the synthetic request into the application session to transmit the synthetic request to the cloud application. The synthetic request is configured to retrieve object metadata about the object using the object identifier. The network security system is further configured to receive a response to the synthetic request from the cloud application. The response supplies the object metadata.

Abstract: Embodiments are provided for enabling a dynamic management of a multi-tenant distributed database. According to certain aspects, a management module supports an interface that enables a customer to configure one or more consistency models for a service to be supported by the distributed database. The management module may determine computing resources within the distributed database that are needed to support the service according to the configured consistency model(s), and may instantiate the computing resources for testing and development of the service by the customer.

Abstract: Devices and techniques for out-of-band platform tuning and configuration are described herein. A device can include a telemetry interface to a telemetry collection system and a network interface to network adapter hardware. The device can receive platform telemetry metrics from the telemetry collection system, and network adapter silicon hardware statistics over the network interface, to gather collected statistics. The device can apply a heuristic algorithm using the collected statistics to determine processing core workloads generated by operation of a plurality of software systems communicatively coupled to the device. The device can provide a reconfiguration message to instruct at least one software system to switch operations to a different processing core, responsive to detecting an overload state on at least one processing core, based on the processing core workloads. Other embodiments are also described.

Abstract: A technology is described for operating a device shadowing service that calculates an aggregated group state for a group of device representations. An example method may include receiving device states for devices represented using a group of device representations, where the devices connect over a network to a device shadowing service configured to manage the device states. In response to an event, device representations included in the group of device representations may be identified. Device states indicated by the device representations may be obtained and an aggregated group state for the group of device representations may be calculated using the device states indicated by the device representations.

Abstract: Disclosed herein are methods, systems, and processes to provide flexible associativity for multitenant applications operating in clustered computing environments. One such method involves updating a configuration file to produce an updated configuration file by generating new relationship information based on associations between a dependent application represented by a parent object and a dependee application represented by a child object. In certain embodiments, the new relationship information is stored in a metadata object.

Abstract: Design analysis for framework assessment is described. In one or more example embodiments, a file including a designed image is obtained from a storage device, and a guide structure is extracted from the file. The guide structure, for instance, includes multiple guide lines, and the guide lines are analyzed to determine column-related data, such as at least relative widths or positional orders, a total number of columns, groups of column widths, a combination thereof, and so forth. From multiple frameworks, a framework is ascertained that substantially matches the guide structure based at least partially on a comparison of column-related data to each framework of the multiple frameworks. Ascertainment of a framework, for example, is indicated to an end-user. The ascertained framework is applicable to facilitate development of a coded functional version of at least a visual design of the image.

Abstract: An electronic device that generates an electronic-device-specific application is described. During operation, the electronic device may receive a request to create the electronic-device-specific application, where the electronic-device-specific application is associated with a services manager in a system hierarchy. In response to the request, the electronic device may provide instructions for a user interface, wherein the user interface is configured to present predefined configuration alternatives for configuration parameters for the electronic-device-specific application and/or to receive inputs for the configuration parameters for the electronic-device-specific application.

Abstract: The present disclosure provides an access log processing method and an access log processing device. In some embodiments, a cache server divides virtual nodes to which each access server is mapped into groups according to domain name weight information of a first domain name, determines a first virtual node corresponding to the first domain name in each group, determines a first access server corresponding to each first virtual node according to node configuration information, and sends access logs of the first domain name to the first access server. This technical solution ensures effective processing of access logs in case of high traffic.

Abstract: A device management system that receives a first service request message for a remote device node, the request including an address identifier and a connection profile identifier. The system retrieves from a database protocol configuration information associated with the service request. The system connects to the remote device using the protocol configuration information and iterates through device packs and identifies a device type and support for in-band and out-of band application protocols for the remote device. The system retrieves and stores the retrieved device type and in-band and out-of band application protocols. The system further receives a second service request message that includes a device identifier of the remote device and iteratively connect to the remote device associated with the device identifier using each of the in-band and out-of band application protocols and retrieves an inventory of management operations associated with each application protocol.

Abstract: Some implementations of the disclosure are directed to receiving over a distributed ledger network, at an edge network device, a network configuration update transaction, the network configuration update transaction including an update to a configuration of a network device group including a plurality of network devices, where the edge network device is communicatively coupled to one or more of the plurality of network devices; validating, at the edge network device, that the transaction was sent by a cloud-based networking management platform that manages configurations of network devices that are members of the network device group; and after validating the transaction, updating at the edge network device a local copy of a distributed ledger associated with the distributed ledger network to include the update to the network device group configuration.

Abstract: Systems and methods for processing alerts indicative of conditions of nodes of a computing infrastructure are herein disclosed as comprising, in an implementation, generating a node hierarchy comprising nodes associated with a service model, wherein relationships between the nodes are based on impact rules, identifying alerts related to the node hierarchy, wherein the alerts are indicative of impairments affecting at least a portion of the node hierarchy, and performing impact calculation for nodes of the node hierarchy based on the identified alerts. In an implementation, the impact values may be calculated in parallel for nodes indicated for processing. In an implementation, the nodes associated with the service model represent infrastructure or applicative resources and comprise nodes included in the service model and nodes related to, but not included in, the service model.

Abstract: Embodiments of the present disclosure may provide a data clean room allowing secure data analysis across multiple accounts, without the use of third parties. Each account may be associated with a different company or party. The data clean room may provide security functions to safeguard sensitive information. For example, the data clean room may restrict access to data in other accounts. The data clean room may also restrict which data may be used in the analysis and may restrict the output. The overlap data may be anonymized to prevent sensitive information from being revealed.

Abstract: Controlling Network Repository Function (NRF) during discovery within a Fifth Generation (5G) network is described. In an example, the NRF can receive, from a Network Function (NF) consumer associated with the 5G network, a request for information associated with a NF producer type. The NRF can receive, from one or more NF producers associated with the NF producer type, indications of the NF producers and the NRF can generate a list of NF producers based at least in part on the indications. The NRF can select, based at least in part on a configurable parameter, a subset of the list of NF producers and send, responsive to receiving the request, the subset of the list of NF producers to the NF consumer.

Abstract: A method in which an enterprise switches its devices to various federated network slices across operators based on cost, time, quality, and/or availability parameters defined in flexible rules managed by the enterprise. The method includes obtaining, by a controller of an enterprise, one or more parameters of a device served by a network slice of a core network. The method further includes, based on the one or more parameters of the device and one or more rules, determining, by the controller, whether a triggering event associated with a slice reselection occurred and based on the triggering event and the one or more rules, selecting, by the controller, a federated network slice from among a plurality of network slices provided by a plurality of core networks. The method further includes the controller causing the device to switch from the network slice to the federated network slice.

Abstract: A method includes receiving summary messages summarizing respective aggregated traffic metadata packets output from the at least one traffic management device and an engine. Each summary message identifies an origination pair having a traffic management device and an aggregation engine and a sequence number. The method further includes tracking per subinterval of a series of sub-intervals, highest and lowest sequence numbers and a count of summary messages received for each unique origination pair from the beginning of the subinterval. The method further includes accumulating, per interval, accumulated highest and lowest sequence numbers and an accumulated count of summary messages for each unique origination pair from the beginning of the interval and for all previous subintervals for tracking dropped aggregated traffic metadata packets for the interval.

Abstract: In a method for detecting unauthorized or suspicious financial activity, a graph convolutional network for financial crime prevention, a separate node is created for each entity: each account, each person, each address (e.g. email address), etc. Separate attributes are provided to aggregate transactions in which the node acts as a sender; transactions in which the node acts as a receiver; transactions using a specific channel (e.g. ATM); and transactions of a specific type (e.g. online money transfer). In some embodiments, the attributes exclude data on individual transactions to reduce the amount of data and hence provide more effective computer utilization. The approach is suitable for many applications, including anti-money laundering. Other features are also provided, as well as systems for such detection.

Abstract: A machine implemented method and system, including: receiving at a near real-time processor module, one or more tenant-specific business objects from a message handler module; receiving at the near real-time processor module, contextual data related to the received one or more tenant-specific business objects from a platform analytics module; forming at the near real-time processor module, one or more events by applying one or more pre-defined analytic models to the received contextual data and the received one or more tenant-specific business objects; receiving at a message publisher module, one or more events from the near real-time processor module; and transmitting the received one or more events to one or more subscribers for the one or more events.

Abstract: An embodiment includes extracting statistical data associated with invocation of an application programming interface (API) from a log and using the statistical data to calculate a performance value and generate an aggregate dataset that combines the performance value with performance values associated with other invocations of the API. The embodiment includes calculating metric values for performance values for respective time intervals of a time period and calculating mean and standard deviation values of the metric values for the time period. The embodiment includes selecting the API as a candidate API and detecting a Customer Impacting Event (CIE) by applying a machine learning algorithm using monitored values associated with the candidate API during a time frame defined by a rolling window. The embodiment also includes automatically initiating a selected alert from among a plurality of alert options based at least in part on the monitored values associated with the CIE.

Abstract: A computational instance of a remote network management platform may be dedicated to a managed network. The managed network may use computing resources of a cloud-based service provider. One or more processors may be disposed within the computational instance and may cause a provider-neutral cloud discovery software application to: (i) obtain a specification that defines an interface for accessing the cloud-based service provider, a discoverable set of computing resources provided by the cloud-based service provider, and mappings between descriptions of the discoverable set of computing resources and the database tables disposed within the computational instance, (ii) log on to the cloud-based service provider by way of the interface, (iii) request and receive, from the cloud-based service provider, descriptions of the discoverable set of computing resources, and (iv) store, in fields of database tables, the descriptions of the discoverable set of computing resources in accordance with the mappings.

Abstract: A behavior detection system has access to a collection of behavior definitions that each describe a functional behavior of a system. Each behavior definition includes multiple basic operations, each of which includes an identifier and one or more parameters. The behavior definition also includes, explicitly or inherently, a basic operation combination definition that describes a sequence or other manner in which the basic operations are combined. The behavior detection system analyzes events in an event log for the system and determines whether the events in the event log satisfy any of the behavior definitions. An appropriate responsive action is taken in response to detecting that the events in the event log satisfy a behavior definition. The collection of behavior definitions is scalable, allowing behavior definitions to be added or deleted, and allowing basic operations in a behavior definition to be changed (e.g., adding, removing, and/or modifying basic operation parameters).

Abstract: A method and system according to embodiments enable generalized program to program interoperability. The method and system employ an automatic or substantially automatic transform adapter for using a given exchange standard for two-way communication with a program. In order for the adapter to employ the exchange standard, a discovery manager may learn the program's data communications structure and/or format, and may learn data meaning information from the program. An adapter creator may derive a transform which converts the program's data communications structure and data meaning into the exchange standard. The transform may be used by the adapter to enable two-way communication with any adapter and/or program similarly employing the given exchange standard to achieve interoperability.

Abstract: A method for backing up data is performed by a backup manager. The method includes obtaining, by the backup manager, a first request from a host, wherein the first request is associated with an application on the host; in response to the first request: obtaining backup policies; obtaining a tag associated with the application; making a first determination that the tag indicates that the application is a cloud native application; and in response to the first determination: associating the application with a cloud native backup policy, wherein the cloud native backup policy is one of the backup policies; and initiating backup generation of the application based on the cloud native backup policy.

Abstract: The present application is at least directed to a networked apparatus. The apparatus includes a non-transitory memory having instructions stored thereon for processing a discovery request message for a resource on the network. The apparatus also includes a processor, operably coupled to the non-transitory memory, configured to perform a set of instructions. One instruction includes receiving the discovery request message from an originator including filter criteria. Another instruction includes checking whether any resources match the filter criteria in the discovery request message. A further instruction includes preparing a discovery response. The present application is also directed to a method for processing a discovery request message for a resource on the network. The present application is further directed an apparatus and method for performing discovery of a common service entity.