Abstract: A kiosk device is shared by many users of an organization in a sequential manner. The kiosk is provisioned so that each of the appropriate users of the organization may use it, and so that each such user may be provided with a federated identity by an external identity provider (IdP) system. The federated identity may be used to automatically provide the user with access to the user's different resources (e.g., the user's accounts on various third-party applications). An authenticator component of the kiosk device communicates with the external IdP system so as to securely and transparently provide the users with a federated identity. In order to provide additional security, the authenticator component and/or the IdP system may take into account organization-specific details when authenticating a user, such as whether a particular user is expected to be on duty with the organization at the current time.

Abstract: Techniques are described for enabling a cloud-based IT and security operations application to execute playbooks containing custom code in a manner that mitigates types of risk related to the misuse of cloud-based resources and security of user data. Users use a client application to create and modify playbooks and, upon receiving input to save a playbook, the client application determines whether the playbook includes custom code. If the client application determines that the playbook includes custom code, the client application establishes a connection with a proxy application (also referred to as an “automation broker”) running in the user's own on-premises network and sends a representation of the playbook to the proxy application. The client application further sends to the IT and security operations application an identifier of the playbook and an indication that the playbook (or the custom code portions of the playbook) is stored within the user's on-premises network.

Abstract: A computer-implemented method for generating a ternary content addressable memory (TCAM) profile includes obtaining an access control list (ACL) configuration and generating the TCAM profile by parsing the ACL configuration. Based upon the parsing, one or more configuration features are identified, each of the features based upon a context and direction of packet flow identified in the configuration. The context includes an interface type and a routing configuration type. Based upon identifying each of the one or more configuration features, a corresponding feature is generated in the TCAM profile. At least one qualifier and at least one action associated with the respective feature is identified and associated with the feature in the TCAM profile.

Abstract: On-demand quality of service guarantees are provided in a wireless network environment. The system determines an on-demand quality of service for a segment of a communication path between a user equipment communicating with a radio access network connected to a core network and an external network connected to the core network. The system then determines if the on-demand quality of service for the segment meets a quality of service requirement. If the on-demand quality of service for the segment does not meet the quality of service requirement, the system identifies an alternate communication path between the user equipment and the external network, wherein the alternate communication path differs from the communication path. The system can then setup the alternate communication path for traffic between the user equipment and the external network.

Abstract: A cooperative wireless system using a multicast protocol to facilitate coordinating coherent addition and subtraction of wireless signaling or other beams originating from a plurality of antenna units at a target location is contemplated. The system may utilize multicast-based regulation and distribution of transmission control parameters necessary for the antenna units to synchronize the wireless signaling in a manner sufficient to enable the coherent addition and subtraction thereof at the target location.

Abstract: Methods and apparatus for predicting communications resources which will be needed at a venue and then controlling the amount of available resources dynamically are described. In various embodiments real time or near real time video of areas of the venue are used to predict the number of people in a portion of a venue and/or the direction of movement. Along with other information such as the type of event and/or event schedule collected information is supplied to a set of trained resource requirement models which are used to predict future resource needs at a venue, e.g., while an event is ongoing. Commands are sent to dynamically vary the amount of communications resources provided to one or more portions of the venue. Resources which can be varied included but are not limited to fixed wired WAN bandwidth, WiFi bandwidth, cellular bandwidth, network based on-demand services, transcoding services, firewall services, etc.

Abstract: An example operation includes one or more of receiving, by a transport, over an open wireless network an encrypted software update and receiving, by the transport, over a closed wireless network a one-time key to decrypt the encrypted software update, wherein the one-time key is received while the transport is in motion and about to perform an action related to the software update.

Abstract: Messages can be exchanged using efficient topics. When a server is interconnected with endpoints via a broker that implements a topic-based transport protocol, the server can dynamically generate a response ID for a request message the server intends to send to an endpoint. The server can generate the response ID from an endpoint ID of the endpoint and a message ID for the request message. The server can include the endpoint ID and the message ID in the request message and can subscribe to a topic containing the response ID. Upon receiving the request message, the endpoint can extract the endpoint ID and the message ID and use them to generate the response ID. The endpoint can then send a response message that includes the topic containing the response ID. Alternatively, the response ID could be generated from a message ID and a pre-agreed upon unique ID.

Abstract: Provided is a system including: a printing apparatus; an information processing apparatus; and a server system. The printing apparatus outputs identification information on the printing apparatus. The information processing apparatus transmits the identification information obtained from the printing apparatus based on acceptance of an instruction for receiving a first service, and performs display control of the information processing apparatus. The server system executes processing for confirmation as to whether or not the printing apparatus identified by the identification information transmitted from the information processing apparatus is registered for a second service, and provides data for displaying an item for the second service in a case where the printing apparatus is not registered for the second service.

Abstract: Techniques for securing access to protected resources are provided. In the method and apparatus, an access key and proof of successful completion of a first authentication is obtained in connection to a request. The proof of completion of the first authentication and the access key are verified. The access key is then used to generate a determination that information in the access key indicates that a second authentication was successfully completed prior to allowing the request to be fulfilled.

Abstract: A method and system for providing a companion autonomous vehicle are described. In one embodiment, a method includes linking a companion autonomous vehicle to at least one vehicle, device, or user. The companion autonomous vehicle is tethered to the at least one vehicle, device, or user such that the companion autonomous vehicle is configured to stay within a predetermined range of the at least one vehicle, device, or user. The method further includes operating the companion autonomous vehicle to travel along with the tethered at least one vehicle, device, or user within the predetermined range.

Abstract: Techniques for using multiple voice-enabled devices in a user environment to reduce the latency for obtaining responses to user utterances from a remote system. The voice-enabled devices may each establish connections with the remote system to have the remote system perform supplemental speech processing for utterances the devices are unable to process locally. One voice-enabled device may have a higher-latency connection to the remote system, and another voice-enabled device may have a lower-latency connection to the remote system. The lower-latency device may send an utterance to the remote system before the higher-latency device is able, and the remote system may begin processing the utterance faster than if the lower-latency device sent the utterance. The remote system may then provide a response for the utterance to the higher-latency device in less time than if the remote system had to wait for the utterance from the higher-latency device.

Abstract: A system for processing data is disclosed that includes a first processor configured to operate one or more algorithms to identify a user identity as a function of user metadata and to provide access to a predetermined network resource using a cloud-based explicit proxy as a function of the user identity and one or more service requests, the first processor configured to operate one or more algorithms to detect a change in the one or more service requests and wherein access to the predetermined network resources using the cloud-based explicit proxy is modified as a function of the detected change in the one or more service requests.

Abstract: Systems and methods for managing domain name registrations in accordance with rules and regulations of a domain name verification system are disclosed. The disclosed technology enables a domain name verification system to regulate the registration of domain names in accordance with its own domain name registration policies. This disclosed system uses a “whitelist” domain name registry to register “whitelist domain names” once pre-approval to register a corresponding target domain name has been granted. In this manner, the whitelist domain name registry system acts as a repository for pre-approved domain name registrations and enables pre-qualified registrants (including potential or prospective registrants) to then register a target domain name.

Abstract: The object of the present disclosure is to provide a method and apparatus for providing video streams. The method for providing video streams according to the present disclosure includes: providing a list of identity information of other users to the user equipment; providing video streams to the user equipment according to the identity information selected by the user equipment. The technology according to the present disclosure may raise the user's interest and attention in video-watching, and thereby improving the user's video-watching experience and satisfaction.

Abstract: A system for managing custom code within a data computing platform determines that a request for one or more uniform resource identifiers external to the platform is being made by custom code executing in the platform. In response to the determination, the system checks a whitelist of allowable external URIs against the requested one or more URIs and allows access to the requested one or more URIs if a match is detected with the whitelist, otherwise access by the custom code to the requested one or more URIs is denied. In addition, or alternatively, the system checks a blacklist of disallowed external URIs against the requested one or more URIs and denies access to the requested one or more URIs if a match is detected with the blacklist, otherwise access by the custom code to the requested one or more URIs is allowed. The blacklist can override the whitelist.

Abstract: Systems and methods for facilitating shared access-right evaluation using linked communication channels are provided. A first communication can be received over a first communication link from a first user device, and a second communication can be received over a second communication link from a second user device. The first and second communications can include requests for the assignment of access rights. Map data can be generated and transmitted to each of the first and second user devices. Each user device can display a visual representation of access-right data. Further, a communication session can be facilitated between the first user device and the second user device. The communication session can be presented on the visual representation for each user device so that the first user and the second user can collaboratively evaluate access rights.

Abstract: An apparatus, systems, methods, and the like, for autonomous scaling of Internet services, such as scaling Internet access speeds, provided by a communications network to one or more connected networks is provided. The service-providing network may include one or more virtual interface devices through which the connected network or device may access the Internet. The connected networks may utilize these virtual devices to communicate with the broader Internet to exchange data. For example, the connected networks may be associated with a common access point to the service providing network, such as an on-net building or other common location that utilizes the same device or devices to access the network to receive services from the network. In some implementations, the virtual network access devices may be instantiated on one or more network computing devices, such as an application server or other configurable computing and networking device.

Abstract: In general, in one aspect, the disclosure describes a Universal Plug and Play (UPnP) Remote Access Server (RAS) to provide a communication channel between UPnP Remote Access Clients (RACs) connected thereto. The UPnP RAS maintains local discovery information for UPnP devices connected to a local network and remote discovery information for remote UPnP devices communicating therewith. The UPnP RAS provides the remote UPnP devices communicating therewith with the local discovery information and the remote discovery information. The remote discovery information is utilized by a first remote UPnP device to discover a second UPnP device and vice versa. After discovery, a first remote UPnP device can communicate with a second UPnP device and vice versa.

Abstract: Inter-modal messaging communication is described. In one embodiment, a method of communication includes receiving an electronic mail message to be distributed and determining whether the electronic mail message is a multi-modal distribution message. Respective portions of the message may be separated for each mode of distribution. The separated portions may represent portions to be delivered by SMS messaging and facsimile, for example. The method further includes the steps of transmitting a short message comprising the short message portion of the mail message and establishing a conversation comprising conversation attributes. The conversation attributes are referenced, in certain aspects, to maintain a conversation between an originator of the received electronic mail message and a distribution address of short message portion of the mail message. For example, upon receipt of a short message in reply, the short message may be forwarded to an originator of the conversation.

Abstract: A computer server system comprises a communications module; a processor coupled with the communications module; and a memory coupled to the processor and storing processor-executable instructions which, when executed by the processor, configure the processor to receive, via the communications module and from a first device, a signal including a request to schedule access to a shared resource within a time window; identify, based on a load projection for the shared resource, at least one time period within the time window for the access to the shared resource; send, via the communications module and to the first device, a signal including the at least one time period and requesting confirmation that a particular one of the at least one time period is acceptable; receive, via the communications module and from the first device, a signal including confirmation that the particular one of the at least one time period is acceptable; determine that a current time has reached the particular one of the at least one ti

Abstract: A computer-implemented method and a system are provided for providing enrichment information using Hypertext Transfer Protocol Secure (HTTPS). The method includes: extracting and storing enrichment information received in a client handshake initiator packet for negotiating an encryption protocol for a network session of a Hypertext Transfer Protocol Secure (HTTPS) packet stream at a termination of a security protocol in a network; and obtaining one or more Hypertext Transfer Protocol (HTTP) requests by decrypting the Hypertext Transfer Protocol Secure (HTTPS) packet stream of the network session, and adding the enrichment information as a header to at least the first HTTP request being routed towards a server.

Abstract: Embodiments provide for predicted data use obligation matching using data differentiators. Example embodiments retrieve a cross-link relationship graph structure from a data repository, where the cross-link relationship graph structure includes a plurality of cross-link relationship graph nodes connected by a plurality of cross-link relationship graph edges. Each cross-link relationship graph node is associated with a unique logical data record set identifier of a plurality of logical data record set identifiers associated with a dataset identifier. For each unique logical data record set identifier, the cross-link relationship graph structure is traversed. Based at least in part on a separation measure associated with each cross-link relationship of one or more cross-link relationships associated with the unique logical data record set identifier, one or more data use obligation scores for the unique logical data record set identifier is generated.

Abstract: A computer system includes client devices operated by users collaborating on a project, and a collaboration server. Each client device remotely accesses web applications via a managed browser to be used by the users collaborating on the project. The collaboration server cooperates with the managed browsers to receive from the managed browsers data corresponding to actions performed by each user within the web applications, generate notifications based on the actions performed by the users within the web applications, and cause the managed browsers to display the notifications. The notifications are generated independent from the web applications.

Abstract: A method performed by a processor in a network function virtualization infrastructure includes determining an amount of resources consumed by a virtual network function subsequent to a scaling of the amount of resources in response to an occurrence of a predefined trigger event, determining an amount of time elapsed between the predefined trigger event and a completion of the scaling, determining a key performance indicator value for the virtual network function subsequent to completion of the scaling, evaluating an efficiency of the predefined trigger event that triggers the scaling, based on the amount of resources consumed by the virtual network function subsequent to the scaling, the amount of time elapsed between the detection of the predefined trigger event and completion of the scaling, and the key performance indicator for the virtual network function subsequent to completion of the scaling, and adjusting the predefined trigger event based on the evaluating.

Abstract: Some embodiments provide a method that allows a first data compute node (DCN) to forward outgoing traffic to a second DCN directly in spite of receiving the incoming traffic from the second DCN through a load balancer. That is, the return traffic's network path from the first DCN (e.g., a server machine) to the second DCN (e.g., a client machine) bypasses the load balancer, even though a request that initiated the return traffic is received through the load balancer. The load balancer receives a connection session request from a client machine to connect to a server. It identifies a set of parameters for the connection session and after selecting a server for the connection, passes the identified set of parameters to a host machine that executes the server. The server establishes the connection session directly with the client machine based on the identified set of parameters.

Abstract: Techniques involve implementing a file system. According to such techniques, a storage system creates a plurality of files in advance, each of which maintains a continuous space to simplify the process of processing read/write requests in the file system. When there is data to be written, an appropriate pre-created file is selected. Further, according to such techniques, a file system address is mapped to a physical address using a memory management unit. In this way, the file system performance is improved greatly.

Abstract: There is disclosed in one example a computing apparatus, including: a hardware platform including a processor and a memory; and instructions encoded within the memory to instruct the processor to: provide a data exchange layer (DXL) software interface, the DXL software interface to communicatively couple to an enterprise service bus (ESB) and to provide DXL messaging services via the ESB; communicatively couple to a DXL broker via the DXL software interface; via the DXL broker, subscribe to a DXL location services topic; receive via the DXL broker a location services query; and responsive the location services query, provide logical location data for one or more network devices.

Abstract: Embodiments include computer-implemented methods and systems for detecting undesirable and potentially harmful online behavior. The embodiments described and claimed could also be applied to detecting any other type of online behavior to be detected, but the descriptions focuses on detecting online violence. More particularly, the embodiments disclosed relate to detecting online violence using symbolic methods of natural language processing (NLP) that utilize and govern the usage of: 1) syntactic parser for analyzing grammatical context of the input text data, 2) unsupervised learning methods for improving selected aspects of the system and adjusting the system to new data sources and guidelines, and 3) statistical classifiers for resolving specific well-defined sub-tasks, in which statistical approaches surpass the symbolic methods.

Abstract: Disclosed are an Internet access management service sever and an operating method thereof. The present invention presents an Internet access management service server capable of providing an Internet access management service based on terminal grouping and an operating method thereof to support a manager to more conveniently and efficiently perform Internet access management for grouped terminals.

Abstract: Technology is disclosed for bridging clouds of computing devices for compute and data storage. The technology can receive a virtual routing table (VRT), wherein the VRT indicates an association with a virtual local area network (VLAN) and defines neighbors for each route wherein at least one neighbor is defined for each of the two different cloud service providers, wherein the route definition creates a private transitive network between the neighbors; receive from a first node a first message destined for a second node; determine that the first message employs the route specified by the VRT; forward the first message to the second node; receive from a third node a second message destined for the second node; determine that the second message does not employ the route specified by the VRT; and fail to forward the second message to the second node.

Abstract: A method and system for identifying and providing access to a user capable of performing medical services. The method includes receiving a message from a first device of a first user, the message including a request and digital authorization data associated with the first user, identifying, within a proximity of a first location of the first device, a second device of a second user capable of performing an action associated with the request, determining whether the second user provided agreement to perform the action, communicating the digital authorization data to the second device of the second user responsive to determining that the second user provided the agreement, and instructing, responsive to determining that the second user provided the agreement, a vehicle to transport the second user from a second location of the second device to the first location.

Abstract: Concepts and technologies are disclosed herein for decoupling hardware and software components of network security devices to provide security software as a service in a distributed computing environment. A computer system includes a processor that can execute computer-executable instructions to perform various operations. The processor can perform operations to provide security services to one or more customer platforms. The operations can include receiving a network security software component from a security service provider, and deploying the network security software component within a distributed computing environment so that the network security software component can be executed by a computing resource of the distributed computing environment to provide a security service to the customer platform(s). The network security software component includes a software component that has been decoupled from a hardware component of a network security device by the security service provider.

Abstract: Ghost routing is a network verification technique that uses a portion of a production network itself to verify the impact of potential network changes. Ghost routing logically partitions the production network into a main network and a ghost network. The main network handles live traffic while the ghost network handles traffic generated for diagnostic purposes. The ghost network may have a network topology identical to the production network and may use the same hardware and software as the production network. An operator may implement a network configuration change on the ghost network and then use verification tools to verify that the network configuration change on the ghost network does not result in bugs. Verifying on the ghost network may not affect the main network. If the network operator verifies the network configuration change on the ghost network, the network operator may implement the network configuration change on the main network.

Abstract: This invention discloses a mesh network comprised of at least two dynamic base station nodes, wherein the two dynamic base station nodes comprise each a multiple radio access technology architecture, the multiple radio access technology architecture comprising: at least two radio access technologies for providing access to a core network, and an abstraction layer communicatively coupled to the at least two radio access technologies for receiving and converting data into protocol agnostic data, wherein the first and second dynamic base station nodes are configured to: in response to a query regarding environmental conditions from a computing cloud component, send an environmental condition to the computing cloud component, receive an instruction from the computing cloud in response to the computing cloud component having processed the environmental condition, and change an operational parameter in response to the received instruction.

Abstract: A resource manager (RM) instance is associated with each transaction processing system (TPS) member, of a TPS group. Each RM instance monitors performance of the associated TPS member. If a TPS member becomes unavailable for any reason (a failing TPS), the associated RM instance broadcasts status of the failing TPS to RMs associated “surviving” members of the group. RM instances associated with surviving members initiate a series of actions that reduce the resources used by the surviving TPS members. Consequently, the surviving TPS members are better able to process the additional workload imposed on them due to the unavailability of the failing TPS. Once the failing TPS is brought back online and made available again (or a replacement TPS is brought online), RM instances associated with the surviving members perform actions to undo the resource usage reduction tasks, and the TPS group returns to a nominal configuration.

Abstract: A system, method, and computer program product are provided for preventing access to data associated with a data access attempt. In use, a data access attempt associated with a remote data sharing session is identified. Further, access to the data is prevented.

Abstract: In one aspect, a method for tracking and management of emergency medical services (EMS) responses includes assigning at least one EMS response of the EMS responses to an EMS vehicle, displaying a map at a user interface with an incident location for the at least one EMS response, populating the map with a visual representation of an entire route for the EMS vehicle, including the incident location and a destination for patient transport, and updating, in the visual representation, a status of the EMS vehicle in real-time along the entire route.

Abstract: This disclosure relates to systems and methods for managing access to data through enforcement of one or more associated rules. In various embodiments, a directory may be used to manage and/or otherwise record various relationships between objects, that may include governed objects such as data sets, and associated rules and rule sets. Access requests involving governed objects may be compared with relevant rules to determine whether the requested access should be allowed and what, if any, restrictions should be applied in connection with such access. Various embodiments of the disclosed systems and methods may allow for a data governance model that is flexible, allows for use across multiple complex organizations, and is highly extensible.

Abstract: A method of tracking device IDs for virtualized applications includes receiving, at a proxy server, a network message originating from an emulated application, inspecting the network message to determine if a device ID is set for the network message, obtaining an originating device ID corresponding to the device ID in the network message, replacing the device ID in the network message with the originating device ID, and transmitting the network message to a specified destination server. Alternatively, the method may include intercepting the network message at a network message inspector. Alternatively, the method may include specifying the originating device ID by way of an application programming interface (API).

Abstract: A method for the secure use of a personal identifier and/or financial instrument that may take place simultaneously with traditional methods of authorization for credit card, check, funds withdraw/transfer or purchase. Authorization according to the present invention may take place as follows: A) the Owner provides a pre-approval of authorization if the request meets an array of Owner-defined parameters; B) an authorization may be granted based on proximity of the Owner to the point of use; or C) the Owner provides a real time approval by smart device. In each case the invention subjects the request for authentication to a sequential verification procedure in which the request is tested against one or more pre-defined verification protocols, the deployed authentication protocol being pre-determined by the Owner and pre-selected in accordance with a user profile that was pre-programmed by the Owner.

Abstract: System, apparatus, methods, and computer-readable medium for generating a verification code related to a registry operation request are provided. A verification process may be performed to determine if a verification request related to a registry operation is to be approved. If the request is to be approved, a verification code is generated that includes identifying information of a verification service provider and a code indicating that the request has been verified.

Abstract: A method and a device for policy translation of a data converter in a security management system are disclosed.

Abstract: A content delivery method including the operations of receiving a uniform resource locator resolution request at an authoritative name server for a domain where the uniform resource resolution request is received based, at least in part, on a host name of the uniform resource resolution request where the host name is uniquely related to a resource associated with the uniform resource resolution request. The method further including the operation of tracking a popularity of the resource based on the host name uniquely related to the resource and providing a location within a network capable of delivering the resource where the provided location is based on the popularity of the resource.

Abstract: Methods, systems, and devices are provided that allow for access to a wireless computer network, such as a home or business network, via a communal device. The communal device retrieves network access information such as a PSK and provides a machine-readable code such as a QR code or bar code that automatically provides the access information to a user's device, thereby allowing access to the network with little or no user input required.

Abstract: Allowing a network function (such as a router, firewall or SD-WAN endpoint) or service chain of network functions to transparently access a network uplink, while also allowing a set of management entities to access the same link without interference or configuration. To the extent that a conflict arises between ports allocated to the management functions and to the network functions, the relevant port is automatically removed from use by management functions and allocated to network functions to end the conflict.

Abstract: In order to allow an access to the Internet, and therefore to a remote server, for a device having no connection with an Internet gateway, there is proposed a method to transmit a message from a first device to a remote server, the first device having no connection with the remote server, said method comprising: detecting a second device by the first device, establishing a communication channel between the first and the second device, transferring the message from the first to the second device, said message comprising an address of the remote server, transferring, by the second device, the message to the remote server using the remote server address contained in the message.

Abstract: Disclosed is a mobile event streaming system that receives customer application lifecycle and user events including a message, event source and a destination then processes data for consumption by one or more customers, generating a secure data stream and sending the processed data over the generated data stream. An example system for receiving, processing, and delivering customer application lifecycle and user engagement data includes a server system having at least one processor, memory and a network interface where the memory stores program instructions for receiving, storing, processing and transmitting messages via the network interface. The mobile event streaming system may be a distributed content delivery service wherein the content delivered via the service is processed. Processing the data comprises the addition of metadata, one or more identifiers such as user, and event identifiers including predictions of future user engagement to enable real-time data consumption by customers.

Abstract: The subject disclosure relates to the creation of channels providing customizable video feeds in an online gaming platform. In some aspects, a process of the disclosed technology can include steps for receiving a first set of event attributes from a first user, the first set of event attributes comprising information identifying a first game title and a first game-play event associated with the first game title, monitoring play of the first game title by a second user to detect occurrence of the game-play event, and in response to a detected occurrence of the first game-play event, automatically providing a video stream of the first game title to the first user. Systems and machine-readable media are also provided.

Abstract: A device, system and method is provided for monitoring a user's interactions with Internet-based programs or documents. Content may be extracted from Internet server traffic according to predefined rules. Extracted content may be associated with a user's Internet interaction. The user's Internet interaction may be stored and indexed. The user's Internet interaction may be analyzed to generate a recommendation provided to a contact center agent while the contact center agent is communicating with said user for guiding the user's interaction, for example, in real-time. Traffic other than Internet server traffic may also be used.