Abstract: A gaming system and method that provides one or more players with one or more pre-resumption opportunities prior to resuming the play of the skill-based game. The gaming system enables one or more players to affirmatively acknowledge, following a game play interruption, that they are ready to resume play of the skill-based game. Such an opportunity to indicate a readiness to resume the play of the skill-based game provides that the play of the skill-based game resumes when the player is ready and minimizes the affect of any game play interruption on the player's outcome of the skill-based game.

Abstract: Various embodiments include systems and methods for providing an immersive three-dimensional group session. Various embodiments include methods and devices for signaling a description of a scene with media components potentially coming from different parties. In various aspects, a scene graph may be signaled through a session description protocol (SDP) during a session initiation protocol (SIP) session setup. In various embodiments, the scene graph may include respective graphical output nodes assigned to be controlled by each of the plurality of participant computing devices in an immersive three-dimensional group session.

Abstract: Automated computing machinery that agnostically augments a customer relationship management (“CRM”) application, including a leadership hub with computer memory configured according to a logical table, with logical columns identifying sales campaigns and a column identifying tele-agents, including also logical rows, each row representing an assignment of a tele-agent to work on a sales campaign; and a campaign management portal with computer memory configured according to a logical table, with logical columns identifying sales campaigns and a column identifying display templates, including also logical rows, each row associating a sales campaign and a display template comprising at least one sales campaign question and an answer form for the question; the leadership hub and the campaign management portal operative to display the template as an overlay of a web page of a CRM.

Abstract: A computing system may include a server, and a client computing device in communication with the server. The server may be configured to provide a corresponding virtual desktop instance for the client computing device. The computing system may include a local device to be coupled to a given client computing device and to be operable in a given virtual desktop instance associated with the given client computing device, thereby generating client initialization packets. The server may be configured to generate a server mapping table. The given client computing device may be configured to generate a client mapping table, replace a client packet with a client mapping ID number to define compressed client initialization packets, and send the compressed client initialization packets to the server. The server may be configured to replace the client mapping ID number with the client packet in the compressed client initialization packets based upon the server mapping table.

Abstract: Systems, devices, and techniques described herein are directed to a virtualized networking topology decoupling networking objects from an underlying physical topology. A virtualized networking topology can include networking application objects implementing various networking specifications independent of a networking node or a physical topology of the network to render services to the network. A network forwarding module can render services such as routing and forwarding of packets to the networking application objects. A topology module can probe a network to develop a physical layout of the network by determining connections among ports. And a mapping module can intelligently map networking application objects with the physical topology and various forwarding and routing protocols to build the virtualized networking topology.

Abstract: In a wireless communication network, a Transmission Control Protocol (TCP) engine receives user data and transfers a TCP packet having the user data for delivery to wireless User Equipment (UE). The wireless UE wirelessly receives the TCP packet using a wireless communication protocol and generates a TCP Acknowledgment (ACK) that indicates the wireless communication protocol. The wireless UE wirelessly transfers the TCP ACK for delivery to the TCP engine. The TCP engine receives the TCP ACK and selects a UE instruction based on the wireless communication protocol indicated by the TCP ACK. The TCP engine transfer the UE instruction for delivery to the wireless UE. The wireless UE wirelessly receives and implements the UE instruction.

Abstract: A method for establishing a tunnel between local gateways, and a gateway are disclosed. The method includes: determining, by an RGW, that UE is handed over from an S-LGW to a T-LGW, where before the UE is handed over, a packet of a local service of the UE is forwarded by the S-LGW between the UE and an application server of the local service, and the local service includes a same service that is deployed on the S-LGW and that is accessed by the UE before and after the UE is handed over; sending, by the RGW to the S-LGW and the T-LGW respectively, a first request message and a second request message to request to establish a tunnel, where the tunnel is used to transmit the packet of the local service between the S-LGW and the T-LGW; and establishing the tunnel between the S-LGW and the T-LGW.

Abstract: There is provided a system and process of delivering online media content files to websites which are not capable of being blocked. The system and process provides a publisher with a sub-domain name that is pointed to an IP provided by an ad server and ask publisher to update his DNS records. Concurrently, the system delivers the user a script on the newly suggested sub domain that publisher inserts in HEAD tag of web pages where it is determined that the unblockable ads are to be displayed.

Abstract: A function executing device is configured to send a wireless identifier to a communication device via a first type of wireless communication interface for setting up a wireless connection. The function executing device is configured to determine whether the function executing device is in an error state and, if not, to establish the wireless connection via a second type of wireless communication interface. The function executing device operates in a parent state in the wireless connection. Additionally, print data may be received from the communication device. However, if the function executing device is in an error state the wireless connection is not established via the second type of wireless communication interface.

Abstract: A mobile device app may be provided with a communications registry describing network-based resources with which the app would like to communicate, including Internet Protocol (IP) addresses and Universal Resource Locators URLs of the network-based resources, for example. A local firewall on the mobile device allows the app to only communicate with the defined network-based resources in the communications registry. A user is presented with the communications registry prior to accepting download or installation. The user is thus alerted to which external resources are necessary to operate the app and which ones are not. Users would be warned when requested communication permissions are overly broad or relate to known threat locations. A threat score may be provided to users for self-mitigation.

Abstract: Systems, apparatuses, and methods are described for managing concurrent requests from clients for services. Client computing devices may be permitted to use available capacity beyond their assigned quotas. When backpressure exists and/or when a total quantity of current connections associated with a service is greater than or equal to a total connection threshold, connections with a client exceeding a proportion of excess capacity may be closed before connections with a client not exceeding a proportion of excess capacity.

Abstract: A system and method of operation of an augmented reality system includes: a position sensor (140) for calculating a current location (144); an orientation sensor (142), coupled to the position sensor (140), for calculating a current orientation (146); and a control mechanism (118), coupled to the position sensor (140), for presenting a system object (126) based on the current location (144), the current orientation (146), an object location (128), an object orientation (130), an access right (120), a visibility (134), and a persistence (136).

Abstract: Disclosed herein is a method for providing durable forward confidentiality during communications between devices, in accordance with some embodiments. Accordingly, the method may include receiving an ephemeral entropy source identifier and a bit range identifier from a first user device, encrypting the ephemeral entropy source identifier and the bit range identifier, generating a ciphertext, transmitting the ciphertext to a second user device, receiving the ciphertext from the second user device, decrypting the ciphertext, obtaining the ephemeral entropy source identifier and the bit range identifier, identifying an ephemeral entropy source and a bit range, capturing a content from a stream of the ephemeral entropy source, generating a secret key using the content, identifying the ephemeral entropy source and the bit range, capturing the content from the stream, and generating the secret key using the content.

Abstract: A first user equipment establishes a multimedia session with a second user equipment and receives a media stream adding request directed at the multimedia session of the first user equipment. The media stream adding request includes an identity of a third user equipment and the media type of the media flow requested to be added. The third user equipment is controlled to establish a media stream of the media type with the second user equipment.

Abstract: Methods and systems are described for connecting to network services on a private network. A gateway device may coordinate communications between a client device on a public network and a host device on a private network. The client device may request to access the host device via the gateway device. The gateway device may authenticate the client device. The gateway device may transcode communications between the client device and the host device, thereby masking the address of the client device and the host device. The gateway device may maintain two different encryption methods between the client device and the gateway device, and the gateway device and the host device.

Abstract: The present disclosure relates generally to systems and methods for unlocking hardware and associated functionality of gaming devices. Before a player reaches a predetermined progress level, enhanced user interface devices of the gaming device remain locked to the player. The functionality associated with the enhanced user interface devices also remains unavailable to the player while the enhanced user interface devices are locked. Once the player reaches the progress level, a hardware-unlock option is presented to the player allowing the player to unlock an enhanced user interface device and select a functionality associated with the unlocked enhanced user interface device. The availability of the hardware-unlock options and specific functionality to be activated can be limited based on in-game events and a progress level reached by the player.

Abstract: Operations related to establishing a first communication session between a first first-end device and a first second-end device. The first first-end device may obtain first device audio during the first communication session. The operations also include establishing a second communication session between a second first-end device and a second second-end device. In addition, the operations may include communicating the first device audio to the second second-end device as second session audio of the second communication session.

Abstract: Telecommunication network management operations are performed based on accessing network management data (NMD) files via GUIs and general purpose computers including a network management system (NMS) server, and automatic routines for transferring binary NMD files between the general purpose computers and remote network elements (NEs) being managed. A system user produces configuration files at the NMS server for NEs using a network management GUI, and the hardware of NEs automatically complete the network management operations indicated by the NMD files transferred to them from the NMS server and produce their status files to the NMS server. The network management GUI displays network status based on the latest NE status files at the NMS server. This provides direct, binary file transfer based NMS communication that avoids the complexity and restrictions of intermediate messaging protocols or transaction languages and conversions thereof.

Abstract: The techniques described herein relate to methods, apparatus, and computer readable media for content-aware image storage. A set of images is accessed from a storage device, each image of the set of images containing at least a part of a screenshot of a display of a computing device used by a user. The set of images is sorted using a similarity metric to obtain a sorted set of images. The sorted set of images are encoded using a video codec to obtain a video encoding the sorted set of images. The video is stored in conjunction with metadata indicating a correspondence between images in the set of images and frames in the video.

Abstract: Techniques for dynamically cloning application infrastructures are provided. In one embodiment, a computer system can monitor one or more metrics pertaining to an infrastructure for an application at a first site. If the one or more metrics exceed or fall below one or more corresponding thresholds, the computer system can clone the infrastructure at a second site distinct from the first site, thereby enabling the application to be hosted at the second site.

Abstract: A method and system for processing network traffic data units (NTDUs) is disclosed. The method includes establishing a virtual tunnel between a wireless access point (WAP) and a network device. A NTDU is received by the WAP from a client device, and the virtual tunnel is identified upon which to transmit the NTDU based on a header of the NTDU according to a policy. The policy maps a portion of the header to a plurality of available virtual tunnels. The NTDU is transmitted, via the virtual tunnel, to the network device.

Abstract: A method of performing operations involving accessing a set of protected computing resources of a computing device includes (a) receiving, by a frontend service, an instruction via a network connection, the instruction directing the computing device to perform an operation involving accessing the set of protected resources, the set of protected computing resources being configured to refuse access to the frontend service, (b) in response to receiving the instruction, sending a request from the frontend service to a backend service, the request instructing the backend service to access the set of protected resources, the backend service being configured to not communicate via the network connection, the set of protected computing resources being configured to permit access to the backend service, and (c) in response to the backend service receiving the request from the frontend service, the backend service accessing the set of protected resources in fulfillment of the operation.

Abstract: A DNS server receives from a receiving email system, a DNS query for an email domain stored at the DNS server, the DNS query including identifying information of a sender of an email. The DNS server extracts the identifying information of the email sender from the DNS query and identifies one of a plurality of delivering organizations from the information. The DNS server determines whether the identified delivering organization is authorized to deliver email on behalf of the email domain. In response to determining that the identified delivering organization is authorized to deliver email on behalf of the email domain, the DNS server generates a target validation record based on the identity of the authorized delivering organization and the email domain, the target validation record including one or more rules indicating to the receiving email system whether the delivering organization is an authorized sender of email for the email domain.

Abstract: There are provided methods and systems for providing security on endpoints which are used on environment where temporary user access is needed without any session persistence. When a file is requested to be executed on any endpoint, the execution source would be checked for user information. If the file execution is requested by guest and/or pre-configured user accounts or any of the parent process is launched by guest and/or pre-configured user accounts, it is launched inside the secure container to isolate the all resource usage of that application from the rest of the system and user applications. This achieves the isolated data and application execution between temporary session/user files and persistent or system users session files. It enables a secure computing environment on an endpoint for shared and temporary user access enabled endpoints.

Abstract: Embodiments include a method, an electronic device, and a computer program product for storage management. According to one embodiment of the present disclosure, a method for storage management includes: determining at a kernel of a storage server whether a first system call related to a target file is initiated by a thread executed in the storage server, wherein the target file is a file targeted by an accessing operation executed by a client terminal with respect to a storage device; determining a first connection and a second connection that are associated with the target file if the first system call is initiated, wherein the first connection is a connection between the client terminal and the storage server, and the second connection is a connection between the storage server and the storage device; and causing the client terminal to access the target file via the first connection and the second connection.

Abstract: [Problem] Provided is a relaying device that can track and record a communicated voice of a specific communication terminal using a mixing function of the relaying device. [Solution] When a communication terminal has sent a call packet to call another at least one communication terminal, a communication session in which this communication terminal that has made a call and a communication terminal that has been called are participating terminals is established. In the communication session, voice communication is relayed by transferring a voice signal which is transmitted from the participating terminals to another at least one communication terminal. A virtual device is registered as a participating terminal of the communication session and the voice signal which is transmitted from the communication session to the virtual device is recorded in the relaying device.

Abstract: Managing secondary objects efficiently increases garbage collection concurrency and reduces object storage requirements. Aliveness marking of secondary objects is integrated with aliveness marking of referenced objects. Allocation of reference-sized secondary object identifier fields in objects which are not primary objects is avoided; a dedicated bit specifies primary objects, together with an object relationship table. A primary object is one with at least one secondary object which is deemed alive by garbage collection if the primary object is alive, without being a referenced object of the primary object. Any referenced objects of the alive primary object will also still be deemed alive. Code paths for marking referenced objects can be shared to allow more efficient secondary object marking. Primary-secondary object relationships may be represented in dependent handles, and may be specified in a hash table or other data structure.

Abstract: A method of delivering an orphan delivery receipt for a mobile-terminated message to a messaging platform from which the mobile-terminated message originated. A network of data exchange connectors is deployed, wherein each data exchange connector is associated with a messaging platform. When one of the messaging platforms receives a delivery receipt it cannot reconcile, the delivery receipt is replicated to all data exchange connectors. The data exchange connector associated with the messaging platform from which the mobile-terminated message originated identifies and consumes the delivery receipt based on predefined filtering criteria. The data exchange connector publishes the delivery receipt to the originator messaging platform. The originator messaging platform correlates the delivery receipt with the mobile-terminated message and posts the delivery receipt to a corresponding enterprise customer.

Abstract: A computer-implemented method is presented for reducing data loading overhead of middleware to facilitate direct data loading to a database management system (DBMS). The method includes, while data loading, sending external-writes to a memory-based DBMS if corresponding internal-writes are for vertices, exporting all the external-writes to a disk-based DBMS as an export file, and sending an external-read for vertices to an in-memory DBMS if the middleware requests data. The method further includes, at the end of data loading, generating files for raw data of the disk-based DBMS from the export file and sending the generated raw files to the disk-based DBMS.

Abstract: A method, system, and computer program product for identifying network appliances on a network which includes a processor configured to intercept network communications from one or more devices on a first network in communication with a second network. The processor may store information about each communication in a database, the information including a Client Id and a destination address. The processor may query the database for a list of all destination addresses which were attempted to be contacted for each Client Id and generate metadata for each Client Id. The processor may analyze each Client Id, the associated metadata for each Client Id, and the destination addresses associated with each Client Id using one or more rules in a device identification tree and assign a device label to each Client Id of the one or more devices.

Abstract: Systems and methods for processing requests for shared records are described. A server computing system receives a data access request associated with a user. The server determines shared records granted by a first sharing rule associated with the user in response to receiving a data access request. The server processes the data access request based on the shared records granted by the first sharing rule and shared records granted by a second sharing rule associated with the user. The shared records granted by the second sharing rule having been determined prior to receiving the data access request, the first sharing rule and the second sharing rule generated prior to receiving the data access request.

Abstract: A method for optimized server picking in a virtual private network (VPN), the method comprising receiving, from a user device, service information indicating one or more VPN services to be received during an established VPN connection; determining, based at least in part on the service information, a given VPN server from among a plurality of VPN servers to provide the one or more VPN services to the user device; and transmitting, to the user device, information associated with the given VPN server to enable the user device to receive the one or more VPN services. Various other aspects are contemplated.

Abstract: Methods, devices, and systems for migration or sharing of existing M2M service layer sessions are disclosed. In one embodiment, a Session Migration and Sharing Function (SMSF) performs the migration or sharing of a M2M service layer session. Various forms of service layer session context may be used to enable the migration and sharing of M2M service layer sessions.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed to identify a first request having a first source port number, from a device, determining whether a second request, having a second source port number, is within a threshold number of ports from the first source port number, group the first and the second requests as a first session when the second source port number is within the threshold number of ports from the first source port number, and generate session windows, the session windows including the threshold number of ports, wherein the session windows are applied to lowest and highest source port numbers associated with a current session.

Abstract: Methods, systems, and computer readable media for electronically facilitating streaming payments are provided. An exemplary method includes receiving a request to access protected media content hosted by a content provider, determining a minimum currency increment based on a user designated payment type, and establishing a predefined content increment that corresponds to the protected media content. The method further includes determining a minimum session expense ratio based on the minimum currency increment and the predefined content increment, initiating a user session that permits access to the protected media content, and determining a quantification of protected media content that is consumed at a termination of the user session.

Abstract: This disclosure describes techniques for automating a system-level security review of a network-based service. The techniques may include generating and utilizing a machine-readable threat model to identify system-level security threats to the network-based service. The network-based service may be scanned upon being provisioned in a service-provider network, and the machine-readable threat model may be generated based on results of the scan. The machine-readable threat model may represent components of the network-based service, system-level security constraints configured to identify system-level security threats to the service, and mitigations to remedy violations to the system-level security constraints. The network-based service may be continuously, or periodically, scanned to identify changes in the network-based service.

Abstract: A declarative mechanism is used to manage large documents within a repository. The large documents are sectioned into subdocuments that are linked together by a parent document. The combination of the parent document and subdocument is referred to as a compound document. There are multiple options for configuring rules to break up a source document into a compound document and naming the subdocuments. The compound documents may be queried using statements that treat the compound document as a single XML document, or the parent document of a subdocument may be queried and treated independently. Access control and versioning can be applied at the finer granularity of the subdocument.

Abstract: A service module may detect a power shutdown of an information handling system. In response a service processor may monitor incoming network traffic at a network port and at a universal serial bus port, and if the incoming network traffic includes a power control command directed to the information handling system, then execute the power control command.

Abstract: Techniques are disclosed for securing traffic flowing across multi-tenant virtualized infrastructures using group key-based encryption. In one embodiment, an encryption module of a virtual machine (VM) host intercepts layer 2 (L2) frames sent via a virtual NIC (vNIC). The encryption module determines whether the vNIC is connected to a “secure wire,” and invokes an API exposed by a key management module to encrypt the frames using a group key associated with the secure wire, if any. Encryption may be performed for all frames from the vNIC, or according to a policy. In one embodiment, the encryption module may be located at a layer farthest from the vNIC, and encryption may be transparent to both the VM and a virtual switch. Unauthorized network entities which lack the group key cannot decipher the data of encrypted frames, even if they gain access to such frames.

Abstract: Techniques for entity references in messaging groups. A client device may receive a notification in a messaging application that an entity reference to a user associated with the client device appears in a group messaging thread. The group messaging thread may have, as participants, one or more other users associated with one or more other client devices. A notification of the appearance of the entity reference may be displayed in a user interface of the messaging application.

Abstract: The present technology is directed to controlling and managing resources both in Software-Defined Cloud Interconnect (SDCI) providers and cloud service providers via a single network controller and further connecting virtual networks in a branch site to virtual networks in the cloud service providers. A network controller can establish a network gateway in an SDCI provider, establish a cross-connectivity between the network gateway in the SDCI provider and one or more clouds, group one or more virtual networks in the one or more clouds and one or more virtual networks in a branch site into a tag, and establish a connection between the one or more virtual networks in the one or more clouds and the one or more virtual networks in the branch site using the tag.

Abstract: According to certain embodiments, a method and apparatus may include performing, by a first network entity, at least one benchmarking procedure of at least one network hop delay per at least one transmit resource towards at least one peer network node identified by at least one internet protocol destination address. The method and apparatus may further include deriving, by the first network entity, a second table, by, for each peer node associated with an internet protocol destination address, determining at least one existing configured mapping of at least one network instance into a transport resource Ti per internet protocol destination address. The method and apparatus may further include updating, by the first network entity, the first table and the second table for each internet protocol destination address and transmitting the updated second table to the second network entity.

Abstract: A method, system, and computer-usable medium are disclosed for establishing a reference outbound email volume rate for a user account, monitoring the user account to determine a current outbound email volume rate, determining a risk score based on the current outbound email volume rate and the reference outbound email volume rate, buffering outgoing emails of the user account if the risk score exceeds a threshold risk score, analyzing the buffered emails against one or more factors indicative of a probability of the buffered emails comprising spam, and responsive to analysis of the buffered emails against the one or more factors indicating that the user account is potentially compromised, quarantine the user account and prevent outbound mail from being delivered from the user account.

Abstract: Some implementations of the disclosure are directed to a media access controller (MAC) of a mobile satellite terminal that may autonomously determine whether or not wake up a software processor of the mobile satellite terminal depending on information contained in a packet received from a user device. The MAC may receive a frame contained in a packet transmitted by a user device to the mobile satellite terminal; automatically determine whether to accept or drop the frame by applying one or more programmed filters to the frame; if the frame is accepted: store the frame in the memory, and cause a power controller to power on the software processor to process the stored frame; and if the frame is not accepted: drop the frame without causing the power controller to power on the software processor.

Abstract: A network device may receive network traffic associated with a session, wherein the session is associated with a network. The network device may determine, from the network traffic, an application path that is associated with the session and may determine an application path identifier associated with the application path. The network device may determine, based on policy information that is associated with the application path identifier, whether the network traffic associated with the session is permitted to be communicated via the network and may perform, based on whether the network traffic is determined to be permitted, an action associated with communication of the network traffic.

Abstract: A computing system receives, from a client device, a first request for access to a single page application associated with the computing system. A gateway of the computing system intercepts the first request before it reaches a shell service associated with the single page application. The gateway sends a second request for the single page application to the shell service. Based on the single page application request, the gateway determines that the shell service is experiencing a failure. Responsive to determining that the shell service is experiencing a failure, the gateway retrieves, from a content delivery network, a uniform resource locator (URL) associated with a time-lapse hypertext markup language (HTML) of the single page application. The gateway redirects the client device to the time-lapse HTML of the single page application using the URL.

Abstract: The invention relates to the technical field of network security, in particular to a method and device for processing network resource access, a server and a terminal. The purpose is to improve network security. The technical scheme is: receiving a first access request for a target network resource, generating a second access request corresponding to the first access request according to a preset corresponding relationship, and transmitting (directly or indirectly, the same below) to a target network resource server; receiving a first response returned by the target network resource server according to the second access request (directly or indirectly, the same below), and converting the first response to generate information in an image coding format as second response information content; generating a second response according to the second response information content as a response to the first access request, and transmitting (directly or indirectly) to a user terminal.

Abstract: A method of facilitating P-CSCF restoration when a P-CSCF failure has occurred is disclosed. The method comprises a Proxy Call Session Control Function, ‘P-CSCF’ receiving a Session Initiation Protocol, ‘SIP’, message when said P-CSCF has been selected as an alternative P-CSCF to a failed P-CSCF and providing, to an associated Policy and Charging Rules Function, ‘PCRF’, a message comprising an indication that P-CSCF restoration is required.

Abstract: An example operation may include one or more of receiving, by a document processor node, a file with a document identifier (ID), generating, by the document processor node, a hash of the file, submitting, by the document processor node, a blockchain transaction containing the hash of the file, the document ID and a locator of a document, assigning, by the document processor node, document access permissions to participating nodes, and notifying the participating nodes of a version of the document under the ID.

Abstract: Systems and methods electronically determine whether a dataset is permitted or excluded based on permission digital rules. Primary entities often are required, or choose to, exclude proposed relationship instances with secondary entities. The systems and methods described herein allow permission digital rules to be defined and applied to datasets obtained from secondary entities relating to a proposed relationship instance with the primary entity, and permit or exclude a resource from being produced for the dataset based on the permission digital rules.