Abstract: The technologies described herein are generally directed to provisioning services from a network. For example, a method described herein can include facilitating receiving a provisioning request for a network provisioning task. Further, the method can include, based on the network provisioning task, selecting a logical provisioning template to facilitate a performance of the network provisioning task. Further, based on the logical provisioning template, the method can include identifying a programming object comprising logical commands for the performance of the network provisioning task. The method can include, executing the logical commands of the programming object to control service implementation equipment to perform the network provisioning task.

Abstract: A transportation refrigeration system and a CAN ID allocation method for a transportation refrigeration system. The transportation refrigeration system includes: a refrigeration circuit including a compressor, a condenser, and a plurality of evaporators connected in parallel, all of which are connected to form a loop; a plurality of chambers, each of the evaporators being located in one of the chambers to adjust the chamber; a plurality of sensors of the same type, each of the sensors being installed in one of the chambers respectively; and a control unit, after being installed in place and energized, the plurality of sensors send their own identification codes to the control unit, and the control unit allocates a CAN ID to each of the sensors after receiving the identification codes of the sensors, so that the identification code of each sensor is bound to the corresponding CAN ID respectively.

Abstract: Systems, apparatuses, and methods for performing an allreduce operation on an enhanced direct memory access (DMA) engine are disclosed. A system implements a machine learning application which includes a first kernel and a second kernel. The first kernel corresponds to a first portion of a machine learning model while the second kernel corresponds to a second portion of the machine learning model. The first kernel is invoked on a plurality of compute units and the second kernel is converted into commands executable by an enhanced DMA engine to perform a collective communication operation. The first kernel is executed on the plurality of compute units in parallel with the enhanced DMA engine executing the commands for performing the collective communication operation. As a result, the allreduce operation may be executed in parallel on the enhanced DMA engine to the compute units.

Abstract: A set of data for training a machine learning system can be modified to improve its performance. An item of information can be transmitted. A message can be transmitted that includes an explanation of a determination, by the machine learning system, to transmit the item of information from among a plurality of items of information. A first set of data can have been used to train the machine learning system. A signal can be received that includes an indication of a usefulness of the message, to a user of a user device, in making a decision to perform an action based on a knowledge associated with the item of information. The first set of data can be modified, in response to a receipt of the signal, to produce a second set of data. The machine learning system can be caused to be trained using the second set of data.

Abstract: A method and an apparatus for cross-service-zone communication, and a data center network. When a first virtual machine in a server sends a packet to a second virtual machine, the server determines, through searching, whether a routing table of a tenant to which the first virtual machine belongs exists on the server; when the routing table of the tenant to which the first virtual machine belongs does not exist on the server, send the packet to a gateway; receive the routing table of the tenant to which the first virtual machine belongs sent by the gateway through a service zone manager; and forward a subsequent packet of the first virtual machine according to the routing table; where the first virtual machine and the second virtual machine are located in different service zones.

Abstract: In some examples, a method includes obtaining, by a computing device operated by a data center provider for a data center, from a first customer of the data center provider, order information comprising a set of parameters defining an interconnection within the data center between a first customer network of the first customer and a second customer network of a second customer of the data center provider, wherein the first customer network and the second customer network are co-located in the data center; sending, by the computing device to the second customer, a communication comprising a unique identifier that maps to the set of parameters; and outputting, by the computing device, an indication of authorization for the interconnection based upon an authorization directive from the second customer, the authorization directive comprising the unique identifier.

Abstract: A method and system for limiting the amount of screentime available to a child device based on the activity of a user of the child device. A parent device is used to specify activity threshold(s) and associate them with an amount of screentime. A wearable activity sensor provides activity data that is converted to a screentime value. An available screentime value is decremented as screentime is used on the child device. When the available screentime value reaches zero, access to functions or apps on the child device is disabled.

Abstract: The following allows complex control instruction chains to be performed in an (automation) network, in which nodes and/or device nodes and/or blockchain-external devices are networked to one another, in a simple manner even if different operators of the individual nodes and devices do not trust one another.

Abstract: A system and method for identification and location of user identified, feature specific printers works in conjunction with a user's smartphone or tablet computer. A user inputs their desired printer features into their device, and a listing of candidate printers within a search perimeter is rendered. A distance between the user device and each candidate printer is calculated from a determined location user device relative to locations of each of the candidate printers. The user selects their desired printer from the candidates, and directions for the user to walk to the selected printer are generated and displayed.

Abstract: This document describes systems, devices, and methods for testing the integration of a content provider's origin infrastructure with a content delivery network (CDN). In embodiments, the teachings hereof enable a content provider's developer to rapidly and flexibly create test environments that send test traffic through the same CDN hardware and software that handle (or at least have the ability to handle) production traffic, but in isolation from that production traffic and from each other. Furthermore, in embodiments, the teachings hereof enable the content provider to specify an arbitrary test origin behind its corporate firewall with which the CDN should communicate.

Abstract: A management device of a storage system, the management devices includes a memory and a processor. The processor coupled to the memory and configured to acquire workload load information and system load information when executing a container, and determine a workload arrangement destination and a replica position of a volume based on the workload load information and the system load information when activating a workload.

Abstract: A software defined network controller receives from a radio access network access point an attach request generated by a user equipment that includes a user equipment identification and an IP address for the radio access network access point. The controller assigns a temporary identification to the user equipment and sends a modified attach request including the temporary identification, and application server identification and an application server IP address to the radio access network access point. The controller configures a forwarding table associated with the radio access network access point so that the access point forwarding table matches the user equipment identification, the application server identification and the application server IP address. The controller configures a service edge creation environment function forwarding table so that the forwarding table matches the user equipment identification mapped to the radio access network access point IP address.

Abstract: A system, computer program product, and method for activation-based marketing are presented. In one embodiment, the system includes one or more data storage devices configured to store demographic data, healthcare utilization data, and response data associated with a target individual. The system may include a server coupled to the one or more data storage devices. The server may be suitably programmed to determine a life stage associated with a target individual, determine an attitudinal segment associated with the target individual, and determine a response model associated with the target individual. The server may assign the target individual to at least one of a predetermined set of segmentation groups in response to the life stage, the attitudinal segment, and the response model associated with the individual. The system may generate a personalized communication modality tailored to the target individual in response to the segmentation group assigned to the target individual.

Abstract: Systems and techniques for dynamic computation in an information centric network (ICN) are described herein. An interest packet to perform a computation may be received at a first interface of an ICN node. The ICN node may then perform a lookup in a forwarding information base (FIB) to identify a second interface to forward the interest packet. The interest packet may be forwarded on the second interface. Upon receipt of a data packet on the second interface in response to the interest packet, the ICN node may update an entry in the FIB for the second interfaces with a processing payload included in the data packet. The ICN node may then transmit the data packet downstream towards the originator of the interest packet.

Abstract: Systems, apparatuses, and methods are described for controlling quality of service (QoS) provided to user devices by, for example, requesting a portion of the user devices to temporarily and selectively downgrade a quality of service. A downgrade message may be sent to the user devices to request a downgrade, and may provide information to allow the user devices to determine whether they will abide by the requested downgrade.

Abstract: A cyber-physical system may have a plurality of system nodes including a plurality of monitoring nodes each generating a series of current monitoring node values over time that represent current operation of the cyber-physical system. According to some embodiments, a watermarking computer platform may randomly inject a watermarking signal into an injection subset of the system nodes. The watermarking computer platform may then receive current monitoring node values over time and generate a current watermarking feature vector based on the current monitoring node values. The watermarking computer platform might comprise a dedicated watermarking abnormality detection platform or a unified abnormality detection platform (e.g., that also uses data-drive feature vectors). The injection subset may be associated with a randomly selected subset of the system nodes and/or magnitudes of watermarking signals that are randomly selected.

Abstract: The present disclosure is related to mixed mode management. A machine-readable medium may store instructions executable by a processing resource to determine that a first management node is operating according to a different configuration profile than a second management node and, responsive to the determination, transfer a mixed mode management plug-in from the first management node. The machine-readable medium may further store instructions executable by the processing resource to execute the mixed mode management plug-in on the second management node.

Abstract: Described herein are systems, methods, and software to enhance incident response for an information technology (IT) environment. In one implementation, an incident service identifies an incident in the IT environment and determines a correlation between the incident and other incidents in the IT environment. Once correlated, the incident service aggregates incident data of the incident with incident data of the other incidents and generates a summary using the aggregated incident data.

Abstract: A computer-implemented method, medium, and system for multi-network/domain service discovery in a container orchestration platform are disclosed. In one computer-implemented method, a pool of servers with a plurality of network interface controllers (NICs) is created in a load balancer and by an operator in a worker node of a container orchestration platform, where each of the plurality of NICs is defined by a corresponding network attachment definition (NAD) object of a plurality of NAD objects. A virtual service object is generated using an annotation corresponding to the plurality of NAD objects. The virtual service object is associated to the pool of servers with the plurality of NICs. An internet protocol (IP) address of the virtual service object is transmitted to the container orchestration platform to update a status of a service object in the container orchestration platform using the IP address.

Abstract: Among other things, in one aspect, in general, a system for managing data in a data storage system includes a plurality of index nodes each storing a map of entries, each entry of the map including an identifier corresponding to a particular portion of data stored in the data storage system, and metadata indicating a location where the particular portion of data is stored in the data storage system, and one or more supernodes configured to return an identification of an index node that recently submitted a request for a particular identifier associated with at least one of the portions of data.

Abstract: Examples described herein relate to a configuration manager for configuring a cloud application at a SaaS platform. The configuration manager is hosted on a cloud platform separate from a tenant site. The configuration manager receives a request for enabling remote management of the cloud application hosted on the tenant site. The configuration manager determines configuration content applicable for the cloud application from a configuration repository and configures the SaaS platform for remotely managing the cloud application based on the configuration content. The SaaS platform is a service associated with a management tooling used at the tenant site. The management tooling may be a monitoring tooling or a logging tooling. Once configured, the SaaS platform receives monitoring data or logging data from the infrastructure at the tenant site.

Abstract: A security threat candidate (STC) detector examines a set of activity log records representing access requests directed to data artifacts by various entities of an organization. In a first threat analysis, the STC detector determines that an activity log record indicates a use of an access path which is not present in a database of legitimate access paths for an entity. In a second threat analysis, the STC detector determines whether the behavior of the entity matches a stored suspect behavior pattern template. Results of the first and/or second analysis are transmitted to a selected security management component of the organization.

Abstract: Systems and network devices configured to use Stateless Address Auto-Configuration (SLAAC) to provide different internet protocol (IP) address information to user equipment (UE) devices that are connected to the same local area network (LAN). A network device (e.g., default router, etc.) may determine whether a UE device is eligible to receive special treatment based on a link-layer address of the UE device. The network device send the UE device a solicited unicast router advertisement that includes a special prefix in response to determining that the UE device is eligible to receive special treatment based on the link-layer address. The network device may send the UE device a solicited unicast router advertisement that includes a base prefix in response to determining that the UE device is not eligible to receive special treatment based on the link-layer address.

Abstract: A method, a device, and a non-transitory storage medium are described in which an application management service is provided. The service may provide a coordination between network or platform level application management functions and application level application management functions that enables the management of an application service. The network or platform level application management functions may include autoscaling, load balancing, and ingress resource management. The application level application management functions may include throttling and circuit breaker functions.

Abstract: Resilient consistent hashing techniques are implemented to perform requests among nodes of a distributed system. Different load balancers are assigned different groups of request handling nodes that cache data to perform request. Requests are assigned to different load balancers according to a consistent hashing scheme. Load balancers distribute requests among assigned nodes using a load balancing scheme. Different numbers of nodes can be assigned to different load balancers.

Abstract: A computer-implemented method according to one embodiment includes receiving, at a virtual file system, replicated data from a physical file system, transferring the replicated data from the virtual file system to cloud storage, and providing access to the replicated data in response to an unavailability of the physical file system, utilizing the virtual file system and the cloud storage.

Abstract: A method for generating a hybrid BMC system and a hybrid BMC system are provided. The method includes: selecting, among a plurality of BMCs, one BMC to be a host BMC; selecting, among the plurality of BMCs, another BMC to be a client BMC, wherein the client BMC uses a first communication protocol different from a second communication protocol used by the host BMC, the client BMC being configured to perform a first task, and the host BMC being configured to perform a second task different from the first task; and configuring an adapter module of the host BMC to interface with the client BMC through the first communication protocol and interface with the host BMC through a second communication protocol such that the host BMC performs the first task through the adapter module.

Abstract: A method comprises receiving a list of names of compute resources of an enterprise network, the names of compute resources including at least one name of a virtual machine and at least one name of a host, for each of the list of names: assessing a particular name of the list of names for removable data and removing the removable data to generate a feature for that particular name, for each feature, determining distances based on at least one metric for every other feature, grouping features based on distances, each feature being in only one group, recommending groups of compute resources based on groups of features, each feature of a group of features being associated with a different compute resource, the group of compute resources corresponding to a particular group of features, and providing a report of recommended groups.

Abstract: Techniques described herein relate to a method for generating backups of virtual machines. The method may include, in response to identifying a backup generation event associated with virtual machines: obtaining, by a backup agent, virtual machine metadata associated with the virtual machines; identifying groups of virtual machines based on the virtual machine metadata; provisioning resources to generate backups of the virtual machines based on the groups of virtual machines; and generating a backup of the virtual machines based on the groups of virtual machines using the provisioned resources associated with the groups of virtual machines.

Abstract: A system persistently presents consistent properties of devices on a local network based on observed values for the network devices, and values derived from the observed values. The observed values may be received from an agent based on scans of the local network. Even though some scans may be faulty resulting in missing or incorrect data, a user can be consistently presented with properties of the device, even when the missing or incorrect data would otherwise cause a change to the property. For instance, the system may replace a data value that is either missing or determined to be incorrect with a value that is determined, based on historical or lab observations, to be the likely correct value based on the assumed state or likely state of the observed device.

Abstract: Technology described herein determines whether a device is Internet facing. An Internet facing device is a device where traffic coming from the Internet is routable to the device. The technology described herein may comprise two components that work together to identify Internet-facing devices. The first component is a monitoring agent installed on organizational devices. The second component is an Internet-facing management service, which may be cloud based. The monitoring agent communicates connection-event notices to the Internet-facing management service. The source IP address in the connection-event notice is compared to a list of organizational IP addresses. If the source IP address is not on the list, then the computing device associated with the notice is added to a list of Internet-facing devices because the connection originated from the Internet. Software listed in the connection-event notice may be added to a list of internet-facing software instances.

Abstract: A system and methods for migrating applications to a cloud-computing environment. In some examples, the method includes determining an application configuration for an application executed in a storage system generating, for one or more volumes associated with the application, one or more volume tags indicating the application configuration; replicating the one or more volumes to a cloud-computing environment, and generating, in the cloud-computing environment, based on the one or more volume tags, the application configuration for the application.

Abstract: In one aspect, a micro-service control architecture provides a modular, flexible platform for designing, diagnosing, updating and/or expanding process control systems. Each service is containerized to provide portability and isolation from other components of the process control system. In another aspect, a function block diagram includes a “shadow” block that acts as an interface to an external, custom calculation engine, thereby enabling the custom calculation engine to operate synchronously with respect to other function blocks of the function block diagram.

Abstract: Embodiments of a device and method are disclosed. In an embodiment, a method of communications involves at a communications device, receiving a request for changing a network parameter of the communications device and at the communications device, granting or denying the request based on link status information that is stored in the communications device, where the link status information specifies a link failure status of a communications link within a wired communications network that involves the communication device.

Abstract: A software updating system based on differential updating for reducing the size of updating data and a method of controlling the same are provided. The method includes acquiring differential data between an original image and an updating image for each of a plurality of updating target controllers included in a vehicle. Then low-ranking differential data is acquired in at least one stage between differential data for each of the plurality of updating target controllers and a plurality of differential combinations are generated for all of the plurality of updating target controllers. An optimum combination of the plurality of differential combinations is then determined and updating data is generated depending to the optimum combination.

Abstract: In one embodiment, a device obtains metadata for routing decisions made by a predictive routing service for a plurality of network deployments. The device identifies a network topology for a network deployment that does not use the predictive routing service. The device estimates, based on the metadata for routing decisions made by the predictive routing service, performance metrics for the predictive routing service were it to be used to make routing decisions for the network topology. The device sends, to a user interface, report data indicative of the performance metrics estimated for the predictive routing service were it to be used to make routing decisions for the network topology.

Abstract: Example implementations described herein involve systems and methods for managing a plurality of programmable logic controllers (PLC), which can involve, for a detection of an update to one or more of a software or a firmware installed on a PLC of the plurality of PLCs being available, determining an impact level of the update to the one or more of the software or the firmware installed on the PLC of the plurality of PLCs; selecting a non-operational time slot for the PLC of the plurality of PLCs based on the impact level, wherein higher impact levels are indicative of requiring a longer non-operational time slot; and scheduling the update to the one or more of the software or the firmware installed on the PLC of the plurality of PLCs during the non-operational time slot.

Abstract: Methods and systems are described herein for synchronizing communication records in computer networks. For example, the methods and systems may determine whether or not a first communication relates to a second and generate a recommendation that the communications relate to a single communication. In particular, the methods and systems described herein describe synchronizing communication records in computer networks based on detecting patterns in categories of metadata. For example, the methods and systems retrieve specific types of metadata and compare this metadata between communications in order to synchronize and/or deduplicate them.

Abstract: State of the art networking solutions are tightly coupled and proprietary in nature due to multiple vendors in the networking domain. Embodiments of the present disclosure provide a method and system for management and orchestration of heterogeneous network environment using dynamic, robust and network aware microservices. The method enables a platform for automatically and dynamically identifying appropriate group of microservices in accordance with network type and service type specified by the user, thus providing a solution that generates network aware microservices for each network in the heterogeneous network landscape. Furthermore, the system manages the identified microservices for each of the network by managing the life cycle of these microservices. The right life cycle management and co-ordination of the microservices for the network is in-line with desired goals/business logic, in a reliable and scalable manner, in heterogeneous network environments.

Abstract: The present invention generally relates to computer security, and more specifically, related to registration and authorization cross multiple domains. In an aspect, a computer-implemented method, computer-implemented system, and computer program product for cross domain registration by a source domain is provided. A request is sent by a source domain to register the source domain as a trusted domain of a target domain. An approval of the request is received by the source domain. The source domain issues a key to an application of the source domain for accessing the target domain.

Abstract: In one embodiment, a computer networking device calculates a first hash value for an identifier of a group of computing devices, as well as a second hash value for the identifier of the group of computing devices, with each hash value being at least in part on the identifier of the group of computing devices and an identifier of the respective interface. The computer networking device may also analyze the first hash value with respect to the second hash value and select the first interface for association with the identifier of the group of computing devices based at in part on the analyzing. The computer networking device may further store an indication that the identifier of the group of computing devices is associated with the first interface.

Abstract: A system and a method are disclosed for authenticating a user of a mobile device using Unstructured Supplementary Service Data (“USSD”) protocol. The mobile device generates a One-Time Password (“OTP”) code and sends that OTP code to a telecommunications server that forwards the content of the USSD message to the application server using an included short code. The OTP code is also sent out to the application server outside of the USSD protocol. When the application server receives both transmissions, the application server compares the OTP codes of these transmissions and determines whether the codes match. If the OTP codes match, the application server determines that authentication is successful and transmits an authentication token to the mobile device that is used to secure communications between the mobile device and the application server.

Abstract: Methods and apparatus for the analysis, manipulation formatting, templating, styling and/or publishing of data collected from a plurality of sources are provided. In one embodiment, a centralized web application is accessed by an administrative user to create and distribute a standardized chart of accounts for normalization, collection, and storage of data from units associated with the multi-unit organization. The stored standardized chart of accounts data is selectively identified, filtered, anonymized, excluded/hidden from view, manipulated and/or other various calculations are performed in order to carry out data analyses and other operations. Such apparatus and methods enable abstraction of useful information from the collected and stored chart of accounts data across a range of units having similar and varying characteristics. Methods and apparatus for generation of a stylized reporting structure for data that is, for example, arbitrary or indeterminate are also disclosed.

Abstract: Techniques and systems for optimizing and cleaning rules for network-based authentication transactions are provided herein. A network-based authentication system may determine a plurality of rules that were previously used to evaluate a plurality of transactions. The network-based authentication system may also generate a false positive rate for one or more of the plurality of rules, A cleaning coefficient for a first rule of the plurality of rules may be generated by the network-based authentication system. Based on the cleaning coefficient and the false positive rate, the network-based authentication system may identify one or more rules from the plurality of rules to eliminate from the plurality of rules. The network-based authentication system may eliminate the one or more rules to generate a modified set of rules. Using the modified set of rules, the network-based authentication system may authenticate a network transaction.

Abstract: Provided are a data processing method, a server, a client device and medium for security authentication. The data processing method includes: receiving the identifier of the application entity; generating, at least based on the identifier, a dynamic security identifier for the application entity; sending the security identifier to the application entity, and performing a security authentication operation for the application entity based on the security identifier.

Abstract: Novel tools and techniques are provided for implementing dynamic border gateway protocol (“BGP”) host route generation based on domain name system (“DNS”) resolution. In various embodiments, a computing system may receive, from a user device via a first network, a request to establish a communications link with an external device via a second network that is separate from the first network, based on a first uniform resource identifier (“URI”) indicative of a network location of the external device. The computing system may query a DNS resolver for an Internet Protocol (“IP”) address corresponding to a valid current IP address, based on the first URI, and may advertise the IP address and/or a route based on the IP address. A communications link may be established between the user device and the external device based on the IP address and/or the route.

Abstract: A building HVAC control system is provided, including at least one wireless mesh network. The wireless mesh network includes a plurality of wireless mesh nodes, the wireless mesh nodes include: at least one sensing node, configured to communicate with sensors installed in a building and obtain measured environment data collected by the sensors; at least one control node, configured to communicate with HVAC equipment, and send control commands to the HVAC equipment; at least one router node, configured to transmit data between the wireless mesh nodes, and transmit data between the wireless mesh nodes and the router. The wireless mesh nodes can perform device-to-device communications by transmitting and receiving wireless signals through the mesh without passing through the server, thereby enabling efficient, multi-node control loops that add no additional computational load to the server while increasing the safety of data transmission and the overall reliability of the HVAC control system.

Abstract: Methods, systems and computer program products are described herein that enable executing simulation scenarios against a computing system simulation model to determine one or more appropriate modifications to a physical, operating computing system. The simulation model includes virtual components corresponding to a plurality of computing system components of the computing system. The virtual components of the simulation model are included in a graph database, and the virtual components correspond to one or more nodes and edges stored as a graph in the graph database. Execution of the simulation scenario produces a simulation result that is analyzed to determine at least one modification of the computing system, and where thereafter, the computing system is modified at least according to the determined modification.

Abstract: The disclosure is directed at a method for data collection and processing within an online system which monitors a user's activity on the online system and then creates a list of business offers for display to the user. The list of business offers is not displayed to the user until the user performs an action relating to a request to review the list of business offers.

Abstract: The present disclosure describes example techniques for configuring and utilizing common control channels and configuration thereof in wireless communication systems. For instance, in an aspect, the present disclosure describes an example method performed by a network node (106) (also referred to herein as a base station, eNB, next-generation NodeB (gNB), or the like) that includes generating resource location information identifying one or more candidate time-frequency resource locations for a common control channel utilized in the cell. In addition, the example method can include transmitting the resource location information to one or more UEs and/or one or more other network nodes.