Abstract: This document discloses techniques, apparatuses, and systems for inter-service communication management to manage inter-service communication between a server-side service and a client-side service. The inter-service management system may comprise memory and a controller configured to perform the inter-service communication management. In aspects, a configuration file may be used to obtain information specifying a first inter-service communication mechanism for communicating one or more messages between the client-side and server-side services. The inter-service communication management system may instantiate a stub associated with the inter-service communication mechanism information, which can be used to communicate a message from the server-side service to a proxy that interacts with the client-side service. The message may then be forwarded from the proxy to the client-side service to enable inter-service communication between the server-side service and the client-side service.

Abstract: Disclosed are methods and systems for supervised machine learning for automated assistants. An example method includes: receiving an automated assistant transcript comprising a plurality of records, wherein each record of the plurality of records comprises a query, a classification of the query, an intent associated with the query, and a responsive action associated with the intent; receiving, via a graphical user interface (GUI), a user input indicating an approval of a new automated assistant transcript record; comparing the new automated assistant transcript record to one or more records of the plurality of records; and responsive to detecting a conflict of the new automated assistant transcript record with one or more records of the plurality of records, displaying, via the GUI, a notification of the conflict.

Abstract: In some implementations, a computer system identifies multiple sub-sessions of a network-based communication session in which multiple remote endpoint devices each provide media streams over a communication network. For each of the sub-sessions, the computer system can identify the endpoint devices included in the sub-session. The computer system can obtain user state data for each of the endpoint devices, the user state data for each endpoint device being generated based on analysis of face images of the user of the endpoint device. The computer system aggregates the user state data to determine a sub-session state for each of the sub-sessions. During the communication session, the computer system communicates over the communication network with a remote device associated with the communication session to cause a user interface of the remote device to indicate the sub-session states determined for one or more of the multiple sub-sessions.

Abstract: Disclosed are various approaches for recommending remotely executed applications for opening files. In one approach, an indication is received that a user desires to open the local file of a client device remotely. At least one remotely executed application is identified to open the local file remotely. A user interface is rendered by the client device that facilitates selection from among the remotely executed application(s). A user selection of a particular remotely executed application generated through the user interface is received. The particular remotely executed application opens the local file remotely.

Abstract: A system and method benefiting from cameras and digital hardware already installed on an aircraft in order to manage the images in the best possible manner according to the different flight phases. The visual display system in an aircraft includes a vision device to acquire a current image stream around the aircraft, and a processor to retrieve the current image stream from the vision device and to launch a current viewing application around the aircraft which is compatible with the current mobility phase of the aircraft.

Abstract: A system and method for managing node status in a MANET includes each node identifying node status data and clusterhead priority value data in data packets. Clusterhead priority values define which node dominates in the event of a clusterhead collision. Clusterhead priority values prevent clusterhead switching based solely on first to declare. Each node may define a specific set of redundancy factors when determining if the node should be characterized as a gateway node. The specific set of redundancy factors is based on node capabilities to promote stability in gateway selection.

Abstract: A method including transmitting, by a virtual private network (VPN) server while executing an initial operating system stored on a volatile memory, a request for a VPN operating system; receiving, by the VPN server, a primary VPN operating system based at least in part on transmitting the request for the VPN operating system; transmitting, by the VPN server while executing the primary VPN operating system stored on the volatile memory, a request for a custom parameter file to configure the primary VPN operating system; and utilizing, by the VPN server based at least in part on receiving the custom parameter file, custom parameters included in the custom parameter file to configure the primary VPN operating system. Various other aspects are contemplated.

Abstract: In some aspects, an entity-resolution computing system for entity resolution is provided. The entity-resolution computing system includes an entity-resolution server configured for correlating data objects from an identity data repository that contains account or transaction data for entities based on the data objects including a common portion of the account or transaction data. The entity-resolution server updates the identity data repository to include an entity identifier that links the data objects and indicates that the data objects refer to a common entity. The entity-resolution server creates an entity-resolution data structure having the data objects with the entity identifier and a new variant data object containing a modified version of account or transaction data that match the common entity.

Abstract: Systems and methods for processing webpage calls via multiple module responses are described. A system may receive, from a client device, a first call for module data associated with a set of webpage modules for presentation in a webpage. The system may subsequently transmit, to the client device based on receiving the first call, a first response including first module data associated with a first subset of the set of webpage modules. The first response may additionally include a token identifying the webpage. The server may additionally transmit, to the client device based on transmitting the first response, a second response including the token identifying the webpage and second module data associated with a second subset of the set of webpage modules that differs from the first subset of the set of webpage modules.

Abstract: Secure selective token-based access control includes receiving a data access request from over a computer communications network, extracting a token from the request, selecting a decryption key for use in decrypting the token and attempting decryption of the token using the decryption key. Thereafter, on condition that the decryption key successfully decrypts the token into decrypted data, a creation date of the token in the decrypted data may be read and a rule applied to the creation date, the rule determining whether or not to expire the token. Finally, in response to a determination by the application of the rule to expire the token based upon the creation date of the token, the token is expired from subsequent use in authorizing servicing of the data access request, but otherwise the data access request is authorized for servicing.

Abstract: A smart gateway platform leverages pre-defined industrial expertise to identify limited subsets of available industrial data deemed relevant to a desired business objective, and to collect and model this relevant data to apply useful constraints on subsequent artificial intelligence or machine learning analytics applied to the data. This approach can reduce the data space to which AI analytics are applied, and assist data analytic systems to more quickly derive valuable insights and business outcomes. In some embodiments, the smart gateway platform can operate within the context of a multi-level industrial analytic system, feeding pre-modeled data to one or more AI or machine learning systems executing on one or more different levels of an industrial enterprise.

Abstract: This disclosure describes techniques for authenticating one or more devices of a user in association with cloud computing services. The techniques include generating credential portions. The credential portions may be used in a signing protocol between one of the user devices and a cloud authenticator. The signing protocol may generate a signature that may be used in authentication with a cloud computing service. In some cases, the credential portions may be shared with other devices of the user. As such, the cloud authenticate may assist multiple user devices to authenticate with the cloud computing service.

Abstract: Systems and methods for estimating the kind of traffic a VPN is carrying and determining which WAN connection to use for VPN network traffic to reduce usage costs while maintaining responsiveness in a VPN router or gateway. A VPN classifier examines VPN packets and estimates the type of traffic they are carrying and selects a policy for upstream or downstream traffic to determine which tunnel or tunnels to send network traffic. Further, policies may be applied to VPN packets as a function of usage knob.

Abstract: Techniques are described for providing an interface for managing invitations to communicate via a communication platform. In an example, a first user can access a first interface to invite a second user to communicate via the communication platform. In response to input from the first user via the first interface, the communication platform can generate an invitation for the second user to communicate with the first user and can provide the invitation to the second user, such as by causing the invitation to be presented via a second interface. The second user can submit a response to the invitation via the second interface. The communication platform can update the first interface and the second interface based on response, such as, in examples in which the second user accepts the invitation, to reflect a newly established connection between the first user and the second user.

Abstract: Methods and systems for handling web requests with latency awareness are described herein. A system may receive a web request from a web client, and determine, based on an exponential moving average of past response times, whether to allow the web request to be sent out to the server. Based on this determination, the system may send the web request to the server. The system may receive a response to the web request and update the exponential moving average based on the response time associated with the received response. The response may be forwarded back to the web client.

Abstract: A method may include receiving, from a first client device, a first position of a selection event at the first client device. The first client device being engaged in a web conference session with a second client device. The second client device sharing a content displayed at the second client device such that the content is also displayed at the first client device. If the first position of the selection event is determined to correspond to a second position of a resource link included in the content being shared by the second client device, information associated with the resource link may be sent to the first client device. The information may enable the first client device to access a resource associated with the resource link by launching a corresponding application such as a browser, a media player, and/or a text editor. Related systems and articles of manufacture are also provided.

Abstract: Testing methods and systems are provided for testing a resource manager of an application management system. The testing systems include a load orchestrator configured to obtain an artificial metric that is determined based on a utilization model (e.g., CPU usage, memory allocation, or disk usage, number of webserver sessions). The load orchestrator transmits the artificial metric to applications in a cluster of computing nodes. The applications transmit the artificial metric to the resource manager. In response, the resource manager generates control output for managing applications in the cluster based on the artificial metric (e.g., scaling, load balancing, application placement, failover of applications, or defragmenting data). The utilization model may include executable code for generating artificial metric values. The model may be received as a result of an API call. The load orchestrator may be instantiated in an orchestration framework or in each node of the cluster.

Abstract: A proxy server to receive a request from a client to a webserver and a response corresponding with the request from the webserver to the client is disclosed. The request is wrapped, and a wrapped request is received at the proxy server. The wrapped request is read at the proxy server. Metadata is added to a response corresponding with the wrapped request at the proxy server. The metadata can be based on the read wrapped request or the corresponding response.

Abstract: The present technology relates to a reception apparatus, a reception method, a transmission apparatus, and a transmission method, by which channel selection information can be acquired more efficiently. Provided is a reception apparatus, including: a reception unit that receives a broadcast wave of digital broadcasting using an IP (Internet Protocol) transmission system; a communication unit that receives first signaling information for acquiring broadcast content transmitted by the broadcast wave through communication with a server via a network; an acquisition unit that acquires, on the basis of the first signaling information, a physical parameter used in a physical layer in a hierarchy of a protocol of the IP transmission system; and a control unit that controls, on the basis of the physical parameter, operations of respective units that perform channel selection processing. The present technology is applicable to a portable receiver that is movable, for example.

Abstract: Systems and methods for mitigating network attacks include, responsive to detection of malicious traffic in a network, causing creation of an isolated network slice in the network where the isolated network slice is a set of connection resources that are allocated to a flow of traffic and that spans a plurality of network devices in the network; and causing rerouting of the malicious traffic from a source node of the malicious traffic to a deceptive network resource along the isolated network slice.

Abstract: Wireless communications systems and methods related to uplink buffer management are provided. In some aspects, a user equipment receives a synchronization acknowledgment message destined for a device tethered to the user equipment and transmitted by an application server at a network to which the user equipment is connected. In some aspects, the synchronization acknowledgment message includes an application server receiver window size indicating available buffer space in a receive buffer of the application server. The user equipment can modify the application server receiver window size in the received synchronization acknowledgment message prior to transmitting the received synchronization acknowledgment to the tethered device.

Abstract: Apparatus and method provide for wagering across multiple gaming operators operating at respective locations, using respective accounts accessible according to a location of a player.

Abstract: Systems and methods for predicting throughput in a network are described herein. The systems and methods use, in some examples, impaired DNS lookup times to predict what a throughput measurement would have been at the time of the issue had a measurement been taken. Using impaired DNS lookup times rather than constantly measuring throughput can reduce the workload of the cellular network while also reducing the storage capacity needed to measure throughput values for all of the devices using the cellular network. Throughput prediction may be used in other ways, including, but not limited to, device testing and assessment.

Abstract: The present disclosure discloses a method and system for sharing a multi-protocol port and a server, where a designated field for storing a listening structure is newly added to a listening structure of an HTTP protocol. The method includes: writing, with respect to a target port, a listening structure of an RTMP protocol into the designated field of the HTTP protocol if the HTTP protocol and the RTMP protocol share the target port; detecting a target protocol corresponding to a connection request when the connection request is received by the target port; and reading the listening structure of the RTMP protocol from the designated field to obtain configuration information of the RTMP protocol if the target protocol is the RTMP protocol, and processing the connection request using the configuration information of the RTMP protocol.

Abstract: Examples described herein relate to a method for managing data management policies of resources. An example includes detecting a movement of a resource from a first resource group protected by a first data management policy to a second resource group protected by a second data management policy. Further, in response to detection of the movement of the resource, a data management policy of the second resource group may be upgraded if first data management policy provides an enhanced level of copy data management over the second data management policy.

Abstract: Apparatus for data communication includes a network interface for connection to a packet data network and a host interface for connection to a host computer, which includes a central processing unit (CPU) and a host memory. Packet processing circuitry receives, via the host interface, from a kernel running on the CPU, associations between multiple remote direct memory access (RDMA) sessions and multiple different User Datagram Protocol (UDP) 5-tuple, which are assigned respectively to the RDMA sessions, and receives from an application running on the CPU a request to send an RDMA message, using a selected group of one or more of the RDMA sessions, to a peer application over the packet data network, and in response to the request, transmits, via the network interface, one or more data packets using a UDP 5-tuple that is assigned to one of the RDMA sessions in the selected group.

Abstract: An anchor vehicle includes a network device configured to access a network using dedicated wireless connectivity, and a processor. The processor is programmed to: receive a request for accessing the network using the dedicated wireless connectivity from a connected vehicle; determine whether the connected vehicle has consented to monitoring compliance with a warranty of the connected vehicle; and provide, to the connected vehicle, access to the dedicated wireless connectivity via the anchor vehicle in response to determining that the connected vehicle has consented to monitoring the compliance with the warranty of the connected vehicle.

Abstract: A Dynamic Host Configuration Protocol (DHCP) server includes a memory storing computer-readable instructions, and a processor configured to execute the computer-readable instructions to determine a media access control (MAC) address associated with a client, determine the MAC address associated with the client is a randomized MAC address, and assign an IP address the client from a DHCP IP server pool. The processor assigns an IP address to the client from a DHCP IP server pool using one of identifying, in a DHCP server table, at least one host name of the client and assigning a previously assigned IP address to the at least one host name of the client, and when the host name of the client is not available, assigning the IP address using a first lease with a first duration shorter than a default lease duration used for non-randomized MAC addresses.

Abstract: A network device including a main bridge, a first bridge, a controller, and an Ethernet port is provided. When the Ethernet port is connected to a mesh network, the processing unit performs the following steps: controlling the Ethernet port to transmit a first broadcast packet; when the Ethernet port receives a second broadcast packet, parsing the second broadcast packet to extract the packet path information to determine whether a path loop exists; determining, according to the Ethernet interface weight (EIW), the slave interface uplink weight (SIUW), and the master device weight (MW) carried by the first broadcast packet and the second broadcast packet, (1) whether the network device plays a master device role, (2) whether the bridge of the Ethernet port is set as the main bridge or the first bridge, and (3) whether the Ethernet port allows data transmission.

Abstract: The disclosure herein describes a virtual extensible local area network (VXLAN) gateway. During operation, the VXLAN gateway receives, from a physical host, an Ethernet packet destined for a virtual machine residing in a remote layer-2 network broadcast domain that is different from a local layer-2 network broadcast domain where the physical host resides. The VXLAN gateway then determines a VXLAN identifier for the received Ethernet packet. The VXLAN gateway further encapsulates the Ethernet packet with the virtual extensible local area network identifier and an Internet Protocol (IP) header, and forwards the encapsulated packet to an IP network, thereby allowing the packet to be transported to the virtual machine via the IP network and allowing the remote layer-2 network broadcast domain and the local layer-2 network broadcast domain to be part of a common layer-2 broadcast domain.

Abstract: A file storage application that processes file operations is communicably connected with a block storage application that processes block operations by establishing multiple communication sessions between the file storage application and the block storage application. Multiple logical volumes provided by the block storage application are exposed to the file storage application over the multiple communication sessions established between the file storage application and the block storage application using a total number of logical paths to the logical volumes that is equivalent to the total number of the logical volumes provided by the block storage application to the file storage application.

Abstract: SaaS for content portion selection a.k.a. content curation using conventional web browsers with no software installation: for enabling a user to select portions of content are disclosed. The user selected portions of content, or references to them, are stored in a repository and are made available for subsequent viewing to a potentially larger universe of users. Neither group of users: the ones selecting the portions of content, nor those viewing the previously selected portions of content, need to install any special software to avail all these benefits.

Abstract: The subject technology receives a transaction for performing an operation on a distributed database, the transaction associated with an account. The subject technology identifies a tenant corresponding to the account associated with the transaction. The subject technology retrieves a set of encryption keys based at least in part on the account and the tenant. The subject technology determines a derived encryption key using a cryptographic hash function applied to a hybrid tenant master encryption key and a local random generated identifier. The subject technology encrypts a record value and a key value associated with transaction using the derived encryption key. The subject technology determines a tree structure associated with the tenant. The subject technology determines a non-leaf node using a tenant prefix of the tenant. The subject technology inserts the encrypted record value, and the encrypted key value at a leaf node below the non-leaf node of the tree structure.

Abstract: An information management system may store information related to tasks to be performed by workers in an organization. Workers in the organization may communicate with the information management system using email messages. The information management system may not require a login or authentication procedure, and workers may interact with the information management system without the need to log in to the information management system. The information management system may receive an email message from a worker that indicates a request for a report. The information management system may determine whether to transmit the report to the worker based on whether the worker is appropriately registered with the information management system, and/or whether the worker has administrative privileges. The information management system, in response to a positive determination, may transmit the report to the email address from which the requesting email message was sent.

Abstract: A network device may receive network traffic associated with a session, wherein the session is associated with a network. The network device may determine, from the network traffic, an application path that is associated with the session and may determine an application path identifier associated with the application path. The network device may determine, based on policy information that is associated with the application path identifier, whether the network traffic associated with the session is permitted to be communicated via the network and may perform, based on whether the network traffic is determined to be permitted, an action associated with communication of the network traffic.

Abstract: A method including receiving, by an infrastructure device from a virtual private network (VPN) server, a request for a VPN operating system for installation on a volatile memory associated with the VPN server; determining, by the infrastructure device, that the VPN server is authenticated to receive the VPN operating system based at least in part on authentication information received in association with the request; and transmitting, by the infrastructure device to the VPN server, the VPN operating system for installation on the volatile memory based at least in part on determining that the VPN server is authenticated to receive the VPN operating system. Various other aspects are contemplated.

Abstract: Systems and methods include receiving a traceroute packet at a relay node; responding to the traceroute packet with a first data structure inside the traceroute packet that indicates a propagation mode at the node and an operation type performed at the node, receiving subsequent traceroute packets from the initiator node with a second data structure inside the subsequent traceroute packets with data used to indicate changes in a header of the subsequent traceroute packets, and forwarding the subsequent traceroute packets with the changes to the header based on the data. The systems and methods can include utilizing the first data structure to determine the changes in the header of the subsequent traceroute packets. This can be used in Multiprotocol Label Switching (MPLS), Segment Routing (SR), and Internet Protocol (IP), where a TTL/Hop Limit propagation is limited.

Abstract: The present disclosure relates to computer-implemented methods, software, and systems for generating access tokens at an authentication server based on authorization codes. A first authorization server from a set of authorization servers receives a request for authorization of a request to access a resource by a resource owner. The first authorization server validates the request for authorization of the request to generate an authorization code. In response to successful validation of the request for authorization to generate the authorizaction code, the first authorization server generates a single-use authorization code by signing the generated authorization code with a unique private key. A unique public key is maintained for verifying the signed authorization code. The single-use authorization code is generated in a self-contained format.

Abstract: A computing system receives, from a client device, a first request for access to a single page application associated with the computing system. A gateway of the computing system intercepts the first request before it reaches a shell service associated with the single page application. The gateway sends a second request for the single page application to the shell service. Based on the single page application request, the gateway determines that the shell service is experiencing a failure. Responsive to determining that the shell service is experiencing a failure, the gateway retrieves, from a content delivery network, a uniform resource locator (URL) associated with a time-lapse hypertext markup language (HTML) of the single page application. The gateway redirects the client device to the time-lapse HTML of the single page application using the URL.

Abstract: A method is disclosed. The method comprising receiving, by a processor computer from a coordination computer, a push transfer instruction message comprising a recipient address associated with a recipient, a data item, and a time period for transferring the data item to a recipient account associated with the recipient address. The method also includes storing, by the processor computer, the push transfer instruction message. After the time period, the push transfer instruction message comprising the data item is transmitted to a recipient authorizing entity computer associated with the recipient address to transfer the data item.

Abstract: Systems and methods are provided for generating demonstration gameplay streaming via a cloud gaming system. The method includes executing a game from a library of games managed by the cloud gaming system. The executing causing the game to launch and progress to a gaming session where modules of the game are pre-loaded and waiting for interactive input of the game. The method includes advancing, by the cloud gaming system, in the game from a level to a later level in the game. Then pausing the game on the cloud gaming system and generating a post that is indicative of the game and the later level. The post being displayed on a website, and wherein the executing of the game, the advancing and the pausing being processed by the cloud gaming system without user input. In some embodiments, other users can advance the gameplay, and other users can resume play from where they left off, without needed to re-load the game.

Abstract: Embodiments as disclosed herein may provide systems and methods for component integration and security. In particular, in one embodiment, a native component that presents a network based interface may be on a device, where that native component may expose a network based interface for access by other components. This native component can then be accessed through the network based interface. To address security concerns and other issues, the native component may be configured to determine if a received request is associated with the same user space and only respond to requests originating from the same user space.

Abstract: A method for identifying devices on a network, comprising: determining, by a discovery application, a prioritized discovery plan including a plurality of tiers of requests, each of the tiers specifying one or more probes for targeting specific types of devices. For each of the tiers in the prioritized discovery plan: the method further comprises causing, by the discovery application, one or more of the probes specified for the tier to transmit targeted requests to a set of active addresses on the network. Upon receiving responses from at least a subset of the one or more addresses, the method comprises identifying, by the discovery application, one or more devices connected to the network based on the responses to the targeted requests. The method further comprises removing, by the discovery application, addresses corresponding to the identified one or more devices from the set of active addresses on the network.

Abstract: A node configured as any of a proxy, a Secure Web Gateway, and a Secure Internet Gateway is configured to perform steps of establishing a connection with a user device having a user associated with a tenant; obtaining policy for the user; monitoring traffic between the user device and the Internet including snooping session keys for any encrypted traffic; analyzing the traffic based on the policy including utilizing the session keys on the encrypted traffic; and one of allowing, blocking, or limiting the traffic based on the analyzing.

Abstract: An apparatus for use in an identity management system includes a storage device; a network interface; and a processor, the storage device storing software instructions for controlling the processor to: process a request, received via a network interface, for an exclusive claim to a unique identifier associated with an individual; verify the individual's claim to the unique identifier is proper; if the individual's claim is verified, create a user account, wherein the user account is associated with the respective individual's claimed unique identifier; provide a look up service for responding to external queries regarding whether individual unique identifiers of the type claimed by the individual have been claimed; and provide proof of the identity of the individual based on the individual's exclusive claim to the claimed unique identifier in response to a request to provide said proof if authorized by the individual through the user account.

Abstract: In an embodiment, a statistical approach for augmenting signature detection in a Web application firewall includes receiving a new request including a parameter in a uniform resource identifier (URI), tokenizing the new request, and determining a compound probability that tokens in a value that is associated with the parameter of the URI and that is included in the new request are associated with an attack. The compound probability is determined based at least in part on component probabilities of tokens of historical values associated with the parameter of the URI.

Abstract: Embodiments of the present invention provide a video content display method, a client, and a storage medium. The video content display method comprises: upon receipt of a startup instruction, measuring the current state parameter; if the current state parameter meets a preset display condition, reading pre-loaded video data, the preset display condition being used for determining whether to display the video content to be displayed of the pre-loaded video data; embedding the pre-loaded video data into the current information flow to obtain an information flow to be displayed; and in response to the startup instruction, playing back a target video corresponding to the information flow to be displayed to realize the display of said video content.

Abstract: Techniques are provided for identifying duplicate usages of configuration values in Network Management Interfaces (NMIs). Network administrators may inadvertently enter duplicate values such as Internet Protocol addresses in one or more NMIs. A browser extension captures a configuration value and determines whether it has been used already, such as by accessing a database with the value and a field type. If it has been used, summary and/or detailed information can displayed on the NMI describing the duplicate usages. The summary display can be a hyperlink which indicate a number of duplicate usages in other views and NMIs. When the hyperlink is selected, a pop-up display can provide detailed information by rendering the other views in a read-only mode, of a same NMI or other NMIs. To render the views, a Document Object Model and Cascading Style Sheet Object Model of the views can be accessed.

Abstract: An edge switching device of an edge switching system includes: a remaining lease time information obtainment unit configured to obtain remaining lease time information for each of user terminals from a DHCP server; a submission order determination unit configured to determine a submission order for user configuration information in order from a shortest remaining lease time; a user configuration information submission unit configured to submit, to a backup system edge router, user configuration information of each of the user terminals, according to the determined submission order; and a reconnection inducement instruction unit configured to send, to the DHCP server, an instruction to send reconnection inducement information to the user terminals for which the user configuration information has been submitted.

Abstract: A service management system communicates via wide area network with gateway devices located at respective user premises. The service management system remotely manages delivery of application services, which can be voice controlled, by a gateway, e.g. by selectively activating/deactivating service logic modules in the gateway. The service management system also may selectively provide secure communications and exchange of information among gateway devices and among associated endpoint devices. An exemplary service management system includes a router connected to the network and one or more computer platforms, for implementing management functions. Examples of the functions include a connection manager for controlling system communications with the gateway devices, an authentication manager for authenticating each gateway device and controlling the connection manager and a subscription manager for managing applications services and/or features offered by the gateway devices.