Abstract: Technologies for binary data distribution include a source computing device and a recipient computing device. The source computing device profiles a binary file payload to generate a payload fingerprint and generates a text-encoded payload as a function of the binary file payload. The source computing device combines the text-encoded payload and metadata including the payload fingerprint to generate a message data structure, and serializes the message data structure to generate a serialized message. The source computing device may sign the text-encoded payload and the metadata to generate a signature included in the serialized message. The source computing device transmits the serialized message to the recipient computing device, which loads the text-encoded payload and the payload fingerprint from the serialized message, decodes the text-encoded payload to recover the binary file payload, and verifies the binary file payload with the payload fingerprint. Other embodiments are described and claimed.

Abstract: One example system for providing notifications to videoconferencing sub-meetings includes a processor and at least one memory device. The processor establishes a videoconferencing session associated with a host. The videoconferencing session can include a main meeting, a sub-meeting, and a waiting queue. The processor can move the host from the main meeting to the sub-meeting, and subsequently move a new participant into the waiting queue. The processor can generate a notification that the participant has entered the waiting queue and determine that the host has moved to the sub-meeting. The processor can route, to the host in the sub-meeting using a stored connection of the host to the main meeting, a notification of the participant entering the waiting queue, and subsequently allow the host to admit the new participant.

Abstract: The present disclosure describes a system, method, and computer readable medium for providing information to a receiving party in a communications network. The method includes receiving a message from a sending party and performing a lookup of information relating to the sending party in a database via an Internet Protocol connection. The lookup is based on an identifier of at least one of the sending party and the receiving party. Subsequently, the information is provided to the receiving party based on the availability of the information in the database.

Abstract: A request for a page is received. In response to the request, content comprising the page is provided. The content includes an element which when executed by a browser with which the page request is associated causes the page as rendered by the browser to send a request initiated by the page to obtain an associated requested content. The request initiated by the page is received. A metric associated with the request initiated by the page is determined. Data reflecting the metric associated with the request initiated by the page is stored.

Abstract: Describe herein are techniques for providing cloud-based discovery. For example, a device may be configured to provide device registration and de-registration notifications to a cloud-based discovery service. The cloud-based discovery service may be configured to respond to discovery request by identifying registered devices that meet the criteria of the discovery request. The cloud-based discovery service may also be configured to provide endpoint information associated with registered devices in response to the discovery request, such that a device is able to utilize the endpoint information to connect with one or more of the registered devices.

Abstract: In general, the disclosure describes techniques for adaptively determining one or more parameters of a service level agreement of an application. For instance, a network device may monitor round-trip times of a plurality of packets of a data flow of an application being transmitted over a link between an application server and a client device. The network device may determine an amount of retransmission of packets occurring during transmission of the plurality of packets of the data flow. The network device may predict, based at least in part on the round-trip times of the plurality of packets of the data flow and the amount of retransmission of packets occurring during transmission of the plurality of packets of the data flow, a round-trip time parameter for a service level agreement associated with the application.

Abstract: A variety of techniques are disclosed for detection of advanced persistent threats and similar malware. In one aspect, the detection of certain network traffic at a gateway is used to trigger a query of an originating endpoint, which can use internal logs to identify a local process that is sourcing the network traffic. In another aspect, an endpoint is configured to periodically generate and transmit a secure heartbeat, so that an interruption of the heartbeat can be used to signal the possible presence of malware. In another aspect, other information such as local and global reputation information is used to provide context for more accurate malware detection.

Abstract: One embodiment provides a method, including: receiving, at an information handling device, an indication to open a text object; identifying, based upon analysis of context data associated with the text object, at least one article of key information contained within the text object; ascertaining, using a camera sensor, an aspect of user gaze within the text object; determining, based on the identified at least one article of key information and the ascertained aspect of user gaze, a degree to which a user is apprised of the at least one article of key information contained within the text object; and providing, based on the determining, a visual indication of the degree to which the user is apprised of the at least one article of key information. Other aspects are described and claimed.

Abstract: A computer implemented method includes receiving partially created software defined network (SDN) policy state information at a backup software defined network (SDN) appliance in response to the sending of a synchronize packet to establish a connection. The state information corresponds to a state of the connection between two endpoints that include a first active SDN appliance and a second active SDN appliance. A replica of the SDN policy state information is saved at the backup SDN appliance. An update to the SDN policy state information is received in response to the sending of an acknowledgement packet. The replica of the SDN policy state information updated at the backup SDN appliance to enable the backup SDN to transition to active.

Abstract: Embodiments of the present disclosure provide a system and method for providing a virtual media gateway in which an Information Handling Systems (IHSs) configured on a private network may be managed using a systems management console. One embodiment of the virtual media gateway system includes a systems manager in communication with multiple server IHSs configured in a data center. The systems manager includes executable code to establish a first login session with a public network configured in the data center, and using the first login session, receive a request to communicate with one of the computing devices. The executable code is further executable to authenticate the systems manager with the one server IHS on behalf of the end-user to establish a second login session through a private network, and generate a console for providing user interaction with the one computing device via the second login session.

Abstract: A method, system and apparatus for authenticating target recipients for digital certificates. A certificate authority authentication system receives a request from an entity for a digital certificate including untrusted certificate validation data. The authentication system initiates a communication link using to untrusted certificate validation data to generate verified untrusted certificate validation data. Subsequently or concurrently, the system obtains, from a confirmation computing system, trusted certificate validation data. The authentication system compares the verified untrusted certificate validation data with the trusted certificate validation data and, based on the comparison, authenticates the entity and issues the requested digital certificate.

Abstract: A communication channel merging system detects that a first communication session that is provided via a first communication channel between a first user and a first service provider is concurrent with a second communication session that is provided via a second communication channel between the first user and a second service provider. The system then generates a user score based on information associated with the first and second communication sessions and determines that the user score satisfies a condition that causes the first and second communication sessions to be merged into a merged communication session. The system generates a first channel score for the first communication channel and a second channel score for the second communication channel and determines based on those channel scores that the first communication channel should provide the merged communication session. The system directs the merged communication session to be provided on the first communication channel.

Abstract: The disclosed computer-implemented method includes determining that incoming media item requests are to be skewed from a random distribution among server nodes, using a random distribution algorithm, to a directed distribution among the server nodes. The method then includes identifying, in a loading assignment, which media items are to be loaded onto specific server nodes to produce the directed distribution of media item requests. The method next includes preloading the identified media items onto the server nodes according to the loading assignment and receiving media item requests for the preloaded media items. The method then includes routing the received media item requests to the server nodes using the random distribution algorithm, where the random distribution algorithm is skewed to the directed distribution based on the preloading of the media items according to the identified loading assignment. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method may include receiving a domain name system (DNS) query at a network device, where the DNS query may be associated with a traffic flow identified for rerouting through an alternative path utilizing an alternative network device instead of a default path. The method may also include rewriting the DNS query such that the DNS query is routed through the alternative network device along the alternative path and to a DNS server associated with the alternative path. The method may additionally include receiving a DNS response from the DNS server, where a resource identified in the DNS response may be based on the DNS query coming through the alternative network device.

Abstract: Methods and systems for connecting client devices to anonymous sessions via helpers are described herein. One or more anonymous sessions may be generated on one or more target machines. Configuration information for generating an anonymous session may be used to initiate generation of the anonymous session on a target machine. A helper process may be created and associated with the anonymous session. A request to start a virtual application or desktop may be received from a client device, and the client device may be connected to the anonymous session on the target machine. The helper associated with the anonymous session may retrieve credentials associated with a user of the client device and/or may use the credentials associated with the user to start the virtual application or desktop on the target machine as the user.

Abstract: Methods and systems provide for dynamically generating a note with captured content from a communication session. In one embodiment, a method presents, to each of a number of participants within a communication session, a UI which includes session content produced during the communication session. The method records at least a portion of the session content. The method receives a request from one of the participants to generate a note. In response to receiving the request, the method generates a note which includes at least a designated portion of the recorded session content. Finally, the method provides access to the requesting participant to the portion of the session content in the note upon demand.

Abstract: A system for validating an authorization request to facilitate controlling access to content or computer commands, in which the access is requested by multiple entities operated on discrete computing environments. The techniques make use of a system including a switchboard and a rule engine that collect parameter sets required for validation from the entities and dynamically generate a lock and key combination based on the collected parameter sets. The key of the lock and key combination allows the system to validate each entity independently regardless of the required parameters specified in the lock and key combination.

Abstract: The present disclosure provides computing systems and techniques for indicating an emotional and/or environmental state of a user in a digital messaging application. A computing device can determine an emotional and/or environmental state of a first user responsive to reading or responding to a message and can convey the determined emotional and/or environmental state to a second computing device, to be transiently presented by the second computing device.

Abstract: The cyber security appliance can have at least the following components. A phishing site detector that has a segmentation module to break up an image of a page of a site under analysis into multiple segments and then analyze each segment of the image to determine visually whether a key text-like feature exists in that segment. A signature creator creates a digital signature for each segment containing a particular key text-like feature. The digital signature for that segment is indicative of a visual appearance of the particular key text-like feature. Trained AI models compare digital signatures from a set of key text-like features detected in the image of that page under analysis to digital signatures of a set of key text-like features from known bad phishing sites in order to output a likelihood of maliciousness of the unknown site under analysis.

Abstract: Embodiments include methods performed by a processor of a mobile device for allocating resources to a plurality of mobile devices in communication with an Edge network. The processor may receive from the plurality of mobile devices one or more capabilities of each mobile device related to a computing task in which the plurality of mobile devices are participating. The processor may determine a fairness result for the plurality of computing devices based on the one or more capabilities of each mobile device and the computing task. The processor may allocate resources to each of the plurality of mobile devices based on the determined fairness result.

Abstract: A system includes a plurality of computer devices connected to a network. The computer devices are operable by a plurality of users. The system further includes a server connected to the network. The server is to communicate data with the plurality of computer devices. The system further includes a bridge device connected to the network. The bridge device is to receive connection requests from the plurality of computer devices via the network. The bridge device is further to receive connection requests from the server via the network. The bridge device is further to mediate data communications between the plurality of computer devices and the server by communicating data through open connections made based on connection requests received from the plurality of computer devices and the server.

Abstract: The present disclosure is directed systems and methods for control embedding data packets for ARP queries, the methods including the steps of receiving a data plane packet from a first user device, the data plane packet requesting a hardware address associated with a second user device; generating a northbound control plane packet for transmission to a control plane node, the northbound control plane packet for requesting from the control plane node the hardware address associated with the second user device; embedding the data plane packet in the northbound control plane packet; and forwarding the northbound control plane packet with the data plane packet to the control plane node for respective processing of the northbound control plane packet and the data plane packet.

Abstract: A method for establishing network connections includes connecting a device to a first network, retrieving voice input of a user, sending a message including data related to the voice input to at least one gateway device on the first network, receiving configuration data for a second network via the first network in response to the message, and establishing a connection of the device to the second network using the configuration data received via the first network. Furthermore, an electronic device, a network gateway device and a system are defined.

Abstract: An online system receives video data items from users and encodes the video data items using various codecs. To account for different computational resources used for encoding using different codecs, the online system ranks combinations of video data items by ratios of encoding video data items with different codecs to computational costs of encoding different video data items with different codecs. The benefit of encoding a video data item with a codec is based on a compression efficiency of the codec and a predicted aggregate amount of the video data item displayed to various users of the online system. Encoding video data items with codecs based on the determined ratios allows the online system to optimize a duration of video data having at least a threshold video quality to users.

Abstract: A computer-implemented method, computer program product and computing system for recording video information on the computing device during a monitored event. Execution information is recorded on the computing device during the monitored event. The video information and the execution information are temporally synchronized to form temporally-synchronized diagnostic content.

Abstract: A community reporting system is described. The system includes a computer server and a plurality of user computing devices. The system operates to receive from the user computing device a signal having community condition information including a community condition in a corresponding community. The community condition information is geotagged. The system automatically accumulates the community condition information and aggregates the community condition information within the memory of the computer server to store the accumulated and aggregated information corresponding to the community information in which the community condition occurred. The system maintains the community condition information stored in the memory of the computer server. The system also operates to send alerts to user computing devices of the system regarding community conditions corresponding to the stored community condition information within the server.

Abstract: Multi-site distributed storage systems and computer-implemented methods are described for providing an automatic unplanned failover (AUFO) feature to guarantee non-disruptive operations (e.g., operations of business enterprise applications, operations of software application) even in the presence of failures including, but not limited to, network disconnection between multiple data centers and failures of a data center or cluster.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for protecting user privacy in the playback of user sessions are described. In one aspect, a method includes accessing, for a user session with one or more user interfaces, event data that includes interface data specifying a structure of the user interface(s), and, for each of one or more user interface elements for which content was presented by the user interface(s) during the user session, an encrypted content element including the content of the user interface element encrypted using a public key corresponding to a rule enabling recording of the content of the user interface element and data identifying the rule. Playback of the user session is generated including, for each of the interface element(s), decrypting the encrypted content element for the user interface element and presenting the decrypted content during the playback of the user session.

Abstract: A packet processing method and a gateway device are provided. The method includes: A first gateway device receives, by using a first link, a first one-arm BFD echo packet returned by a network device, where the first one-arm BFD echo packet includes identification information, and the identification information is used to uniquely identify a second gateway device. The first gateway device determines, based on the identification information, to forward the first one-arm BFD echo packet to the second gateway device. The first gateway device sends the first one-arm BFD echo packet to the second gateway device. The network device is multi-homed connected to the first gateway device and the second gateway device. The first gateway device and the second gateway device form a multi-active gateway. According to the method, efficiency of detecting, by using a one-arm BFD echo session in a VXLAN multi-active gateway scenario is improved.

Abstract: Systems and methods for facilitating user design of a computerized marketing system executable campaign or message thereof, include: providing a graphical user interface for user interaction with a virtual canvas; retrieving, from a database, component data useable by the virtual canvas module to visualize component icons; visibly arranging, within the virtual canvas and in response to user interaction with the virtual canvas via the user interface, the component icons into at least one of: a campaign design or a message design, wherein each component icon represents an action to be taken by the computerized marketing system in executing the campaign and/or the message thereof; and generating, by a build engine, the campaign and/or the message from and in accordance with the respective campaign design and/or message design.

Abstract: Systems, methods, and instrumentalities are disclosed for an access control and mobility management function (AMF) node, comprising a processor configured to receive a N2 session management (SM) information from a session management function (SMF) node, wherein the N2 SM information indicates an available area for N2 information, receive a service request from a wireless transmit receive unit (WTRU), determine whether to update the N2 SM information based on a location of the WTRU and the available area for N2 information, wherein if the WTRU is outside of the available area for N2 information, the processor is configured to request a second N2 SM information from the SMF node and update the N2 SM information with the second N2 SM information, and send an N2 request with the N2 SM information to an access network associated with the WTRU.

Abstract: A system includes at least one server that is configured to provide a multi-client network service to a plurality of existing users. When the server receives requests to join the multi-client network service from new users, the server may issue timestamps to each new user, obtain load metric based on the requests or timestamps, and collect the load metric to obtain historical data characterizing a demand in the multi-client network service over time. Further, based on the historical data, the server can predict a future load demand in the multi-client network service and selectively enable to join the multi-client network service by at least one of the plurality of new users based on the future load demand.

Abstract: A method for providing watermark to subscribers is provided. The method comprises observing a request for a first content from a subscriber, determining if the subscriber can receive a watermark, generating a second content comprising the watermark if the subscriber can receive a watermark, causing the subscriber to fetch the first content, and causing the subscriber to fetch the second content comprising the watermark overlaying the first content.

Abstract: A database system includes a plurality of DBMSs included in a plurality of nodes. Each DBMS is a first or a second DBMS. The first DBMS transfers a search query and does not execute data retrieval, and the second DBMS executes data retrieval. The plurality of nodes configure one or more node groups. Each node group includes a first node and one or more second nodes. In each node group, the first node is a logical computer that provides a first storage area and executes a first DBMS and the second node is a logical computer that provides a second storage area and executes a second DBMS, each node in the node group stores the same database therein, and data retrieval from the database in the node group is executed by one or more second DBMSs in the node group.

Abstract: The invention relates to a system and a method for adapting a response provided by a first device. The system comprises the first device with means for receiving from at least one client device, as at least one second device, a data access request comprising at least one client identifier and a predetermined application programming interface or service provider interface associated with the first device. The first device comprises means for processing the data access request that provides the response to the data access request and means for sending the response. The system comprises adapting means for intercepting and adapting the response sent by the first device. The adapting means adapts the response while being specific to the client and provides an adapted response. And the system comprises adapted response sending means for sending at least a part of the adapted response to the second or a third device(s).

Abstract: Systems and methods are described herein for streaming during unavailability of a content server. Upon determining that there are conditions indicating buffering issues during delivery of a media asset, a server determines a first group of devices suitable for receiving the media asset from the server and sharing the media asset on a peer-to-peer network. Then, the server determines a second group of devices suitable for receiving the media asset on a peer-to-peer network from a first group device. The server then determines groupings within which to share and receive the media asset. Next, the server transmits instructions to the devices in the first group to maintain in buffer and share certain portions of the media asset with the second group devices within their grouping. Finally, the server updates information detailing the media asset portions the devices are maintaining in buffer and sharing.

Abstract: A communication device may accept an input of user authentication information, cause an output unit to output specific information obtained by using a public key in a case where authentication using the inputted user authentication information is successful. In a case where the authentication using the inputted user authentication information fails, the specific information is not outputted. The communication device may receive an authentication request in which the public key is used from a first external device, send an authentication response to the first external device, receive first connection information from the first external device, and establish a first wireless connection between the communication device and a second external device by using the first connection information.

Abstract: A real-time third-party payment system accepts payments to a lender from third-party merchants in real-time. The payment system may receive real-time payment information from the third-party, and various services within the payment system validate the customer account information, create a payment, store the payment in a database, and post the payment to a real-time ledger. The payment system may also receive an end-of-day file including file-based payment information. The file-based payment information may be verified against the real-time payments stored in the database. Upon validation, the payment system creates a file based payment and posts the file-based payment to a file-based ledger. The payment system may detect fraud, errors, and other discrepancies in real-time payments and make corrections based on settlement rules and self-healing rules provided by the third-party.

Abstract: Techniques for implementing a dynamic API bot for robotic process automation are disclosed. In some embodiments, a computer system performs operations comprising: providing a data file having a predefined template comprising dedicated fields for an identification of an API, a type of call method, metadata identifying one or more objects, and data of the object(s); providing a low-code no-code (LCNC) development platform configured to enable a user to develop a bot by dragging and dropping application components of the bot; receiving, via the LCNC development platform, a configuration of the bot comprising a configuration of the application components of the bot and an identification of the data file; and running the bot, the bot being configured to generate a request using the data file, converting the data of the object(s) into a payload in a format required by the API based on the data file.

Abstract: Provided are an information exchange method and apparatus, an electronic device, and a storage medium. The method includes, in response to detecting a coedit trigger operation with regard to a mail, determining a coeditor; acquiring a synchro edit interface containing the content of the mail; and presenting the synchro edit interface to allow the coeditor to coedit the content of the mail through the presented synchro edit interface.

Abstract: A router including a communication device, a first processor, and a second processor. The communication device is configured to receive a plurality of first packets of a connection and at least one second packet of the connection subsequent to the first packets The first processor, coupled to the communication device, and configured to analyze the first packets to determine at least part of a plurality of transport-layer parameters associated with the connection, receive a traffic control rule associated with the connection, and offload processing of the at least one second packet of the connection to a second processor after the at least part of the transport-layer parameters is determined. The second processor is configured to perform traffic control on the second packet according to the traffic control rule and the at least part of the transport-layer parameters.

Abstract: A data management system includes a management apparatus including a processor, and plural storage devices. The processor is configured to generate hash values corresponding to data to be managed according to a predetermined calculation rule, the plural storage devices stores first hash values that are hash values generated by the processor at a first point in time, and the processor is configured to perform determination of invariance related to the plural first hash values or the data by comparing sets including the plural of first hash values read out from the plural storage devices and second hash values that are hash values regenerated according to the calculation rule at a second point in time later than the first point in time.

Abstract: A system, device and method to securely notify a user of a compromise of a device are provided. The system, device and method may include a detection device adapted for determining a compromise of the device communicatively coupled to the first path, a user database including at least information regarding the device and other devices associated with the user, and the secure signal path to at least one of the other devices.

Abstract: The present disclosure relates to systems for “cookieless” tracking across a wide range of websites and mobile applications. The systems do not involve the use of tracking pixels or code on individual webs pages and associated web or other servers and may be achieved through use of a single URL for tracking a user across multiple websites while a browser session is initiated. Methods of enhanced tracking of user activity without requiring cookies or tracking pixels are also described herein.

Abstract: A device may receive a secure signal message from an IoT device provided in a first security zone, and may provide the secure signal message from the first security zone to a second security zone, via a first secure data layer. The device may generate two processed secure signal messages from the secure signal message, and may provide the two processed secure signal messages from the second security zone to a third security zone, via a second secure data layer. The device may calculate a secure analytics message, that includes a graph, based on the two processed secure signal messages, and may provide the secure analytics message from the third security zone to a fourth security zone, via a third secure data layer. The device may store the secure analytics message in a data structure associated with the fourth security zone.

Abstract: The technologies described herein are generally directed toward shedding processing loads associated with route updates. According to an embodiment, a system can comprise a processor and a memory that can enable operations facilitating performance of operations including facilitating receiving, from a second routing device via a network, a communication. The operations can further comprise, in response to a queueing delay being determined to be less than a threshold, queueing, in the queue, the communication for a third routing device selected according to a first selection process as being on a route to a destination routing device for the communication. Further, operations to, in response to the queueing delay of the queue being determined to be equal to or above the threshold, transmit the communication to a fourth routing device, with the fourth routing device being selected according to a second selection process different than the first selection process.

Abstract: To secure communications from a process plant across a unidirectional data diode to a remote system, a sending device at the plant end publishes data across the diode to a receiving device at the remote end. The publication of various data is respectively in accordance with context information (e.g., identification of data sources, respective expected rate of data generation/arrival, etc.) that is descriptive of data sources of the plant and that is recurrently provided by the sending device across the diode. A recurrence interval may be based on a tolerance for lost data or another characteristic of an application, service, or consumer of data at the remote system. The publishing may leverage an industrial communication protocol (e.g., HART-IP) and/or a suitable general-purpose communication protocol (e.g., JSON).

Abstract: Various implementations relate to generating, locally at an assistant client device, specific control commands that, when transmitted to a corresponding smart device, are directly interpretable by the corresponding smart device to effectuate a state change at the corresponding smart device, or at a corresponding additional smart device directly controlled by the corresponding smart device. Various implementations additionally or alternatively relate to utilizing local assistant client devices in discovering, provisioning, and/or registering smart devices for an account of a user.

Abstract: Methods and systems include managing bandwidth in Fibre Channel over Internet Protocol (FCIP) communication channels. A method includes monitoring traffic demand at an FCIP communication channel and, in response to an anticipated period of throughput demand on the FCIP communication channel, reallocating physical throughput bandwidth of the FCIP communication channel by configuring bandwidth of one or more tunnels of the FCIP communication channel.

Abstract: In one embodiment, a domain name system (DNS) server processes a DNS query based on a policy statement that is attached to the DNS query. Upon receiving the DNS query, the DNS server executes one or more commands specified in the policy statement to generate a query state. The query state controls DNS resolution behavior that the DNS server implements as part of processing the DNS query. The DNS server then performs one or more DNS resolution operations based on DNS query and the query state to generate a response. Advantageously, because the semantics of the policy statement are encapsulated within the policy statement, the policy statement enables a client to unambiguously control DNS resolution behavior. By contrast, conventional DNS resolution guidance mechanisms that rely on DNS servers to infer policies based on client data may not reflect the preferences of the clients.