Abstract: Systems and methods for dynamic, hyper context-based microsegmentation are described. In one aspect, a computing device is detected on a network. A network hyper context is assigned to the computing device based on network properties and computing device properties associated with the computing device. A policy defining a segment identifier identifying a network segment and corresponding to the network hyper context is accessed. The segment identifier is assigned to the computing device. The computing device is segmented onto the network responsive to detecting the computing device.

Abstract: A system for facilitating a plurality of virtual transmission control protocol connections between a target application and a source application is provided. The system includes a server proxy, a client proxy, and a network protection interposed between the server proxy and the client proxy. The server proxy is configured to receive an open request from the client proxy via a stateless protocol, including a target identifier, the open request originating from the source application, open a connection between the server proxy and the target application based on the target identifier, provide a response to the client proxy indicating a status of the open request, the response including at least one of a session identifier or a sequence identifier, receive, a data request from the client proxy, including the session identifier and an incremented sequence identifier, and provide the data request to the target application.

Abstract: A system includes an interface, a processor, and a memory. The interface is configured to receive a version of a model from a model registry. The processor is configured to store the version of the model, start a process running the version of the model, and update a proxy with version information associated with the version of the model, wherein the updated proxy indicates to redirect an indication to invoke the version of the model to the process. The memory is coupled to the processor and configured to provide the processor with instructions.

Abstract: A set of network requirements is received. At least a portion of the set of network requirements is stored on a system data store. Device requirements for a plurality of network devices are stored on the system data store. At least a portion of the stored device requirements is received at a proxy agent. Native hardware instructions are generated based on the received device requirements to configure at least one of the plurality of network devices.

Abstract: A system and method allows one or more users to purchase an offering of goods or services using at least three computer systems, by one user making a proposal for the two to jointly consume the offering, and the other user accepting the proposal.

Abstract: A service management system communicates via wide area network with gateway devices located at respective user premises. The service management system remotely manages delivery of application services, which can be voice controlled, by a gateway, e.g. by selectively activating/deactivating service logic modules in the gateway. The service management system also may selectively provide secure communications and exchange of information among gateway devices and among associated endpoint devices. An exemplary service management system includes a router connected to the network and one or more computer platforms, for implementing management functions. Examples of the functions include a connection manager for controlling system communications with the gateway devices, an authentication manager for authenticating each gateway device and controlling the connection manager and a subscription manager for managing applications services and/or features offered by the gateway devices.

Abstract: Devices, systems and methods for a cloud-based meter management system are provided. The present disclosure includes a meter cloud server, a plurality of IEDs or meters, and one or more clients (e.g., a web browser client), which are coupled via a network (e.g., via various wireless and/or hardwired communication networks). The various components and modules of the present disclosure provide a plurality of functions to enable one or more users to manage a plurality of IEDs or meters via the at least one client device.

Abstract: Systems and methods are disclosed for data protection in a cluster of data processing accelerators (DPAs) using dynamic partitioning of DPAs into, or out of, one or more groups of DPAs in the cluster. A host device instructs each DPA in the cluster to link, or unlink, with one or more DPAs in the cluster to establish groups of DPAs in the cluster. A DPA that is not linked to any DPA is set to a low-power mode. Once grouped, the host device and a DPA can access all resources of the DPA. DPAs in the same group as a first DPA can access non-secure resources, but not secure resources, of the first DPA. DPAs in a different group from the first DPA cannot access any resources of the first DPA. A scheduler in the host device allocates processing tasks for one application or user to a group.

Abstract: A web browser can manage different session cookies associated with a website by storing the session cookies in distinct tab storage locations associated with different tabs of the web browser, instead of in a global storage location accessible by any tab of the web browser. When the web browser prepares to send a request associated with an active tab to a server associated with the website, the web browser can temporarily copy a corresponding session cookie into the global storage location from the tab storage location associated with the active tab. Accordingly, even if the website does not natively support multiple concurrent user sessions with the web browser, the web browser can send different session cookies to the website based on which tab of the web browser is active, and thereby allow users to engage in different user sessions with the website in different tabs.

Abstract: A resiliency controller may monitor execution of a plurality of services, each service of the plurality of services associated with a different container of a containerized computing system. In response to requests received from a plurality of connected client computing systems, the resiliency controller predicts, based on historical container operation information, a first predicted latency associated with the first request and a second predicted latency associated with the second request. The resiliency controller associates a first latency response to the first request and a second latency response to the second request, and initiates a selected latency response based on an indication that at least one of the first predicted latency or the second predicted latency has been exceeded.

Abstract: Disclosed are various examples for segregating virtual private network (VPN) traffic based on the originating client application. A network gateway receives network traffic from a tunnel endpoint of an application-specific virtual private network tunnel. The network traffic originates from a client application executed in a client device. The network gateway identifies a particular virtual local area network through which the network traffic is received. The network gateway determines, using an identifier of the particular virtual local area network and a mapping of virtual local area network identifiers, characteristics of the client application or the client device from a set of mobile device management attributes. The network gateway determines whether to route the network traffic to a destination based at least in part on the characteristics.

Abstract: Aspects of the technology described herein provide a collaborative browsing experience in which real-time browsing activity and saved browsing activity of session collaborators in a collaborative browsing session are shared with the collaborators. A collaborative session may be initiated, which may create a tab group associated with the session and linked to a collaborator. Other collaborators may be invited to join the session, and additional tab groups for each collaborator may be created. The tab groups of the collaborators may be included in a collective tab group, which may be updated in real-time with changes made by any of the collaborators. For example, client changes may be handled locally and communicated to a service to which each client is connected. The service may sequence and broadcast the ordered changes to the clients, which may each implement the changes according to the sequence to synchronize a shared state amongst clients.

Abstract: Provided are a broadcast control method, a terminal device and a non-transitory computer-readable storage medium. While received broadcast information is to be sent to a target frozen App, the target frozen App is temporarily unfrozen in response to determining that a temporary unfreezing condition for the target frozen App is met, and the broadcast information is sent to the temporarily unfrozen App; or otherwise, the broadcast information is directly discarded.

Abstract: A smart forms solution that enables transactions institutions to provide configuration parameters in a streamlined manner so that developers can construct end-to-end solutions in an automated manner includes performing, by a processor, operations including: receiving data from a form in a webpage; validating the received data; saving the validated data; determining a location to send the saved data; sending the saved data to the determined location; invoking an API at the determined location with the saved data; and using the saved data to perform a manual operation.

Abstract: An image forming apparatus capable of achieving both convenience of a user and defense against external threats is provided.

Abstract: A method that includes establishing an open connection for responding to requests from clients supported by an application server. The method may further include establishing a set of queues configured for storing requests received from the client via the open connection. The method may further include selecting requests from the queues based on a rate limit threshold and burst limit threshold of the application server. The rate limit threshold may refer to a number of requests that the application server can process within a first time duration, while the burst limit threshold may refer to a number of requests that the application server can process within a second time duration that is shorter than the first time duration. The method may further include transmitting the requests to a set of data processing servers connected to the application server and receiving an indication that the requests have been processed.

Abstract: Technologies for the hierarchical clustering of hardware resources in network function virtualization (NFV) deployments include a compute node that is configured to create a network function profile that includes a plurality of network functions to be deployed on the compute node. Additionally, the compute node is configured to translate the network function profile usable to identify which of the plurality of network functions are to be managed by each of the plurality of interconnected hardware resources into a hardware profile for each of a plurality of interconnected hardware resources. The compute node is further configured to deploy each of the plurality of network functions to one or more of the plurality of interconnected hardware resources based on the hardware profile. Other embodiments are described herein.

Abstract: A network traffic flow is directed to a computing services system is determined as being unrelated to the service that the system provides. In response, the network traffic flow is deflected away from the computing services system. Demand of the sender of the network traffic flow is managed by shaping the deflected network traffic flow in responding to the sender and/or by misinforming the sender in responding to the sender.

Abstract: Embodiments of the invention provide a method, system and apparatus for centralized session management in an aggregated application environment. In one embodiment, a centralized session management method can include aggregating a set of applications in a host aggregation environment. Subsequently, each of the applications can be centrally kept alive so as to avoid a time out condition in any one of the applications so long as interactivity is detected within any one of the applications or within the host aggregation environment. In one aspect of the invention, the aggregating step can include aggregating a set of portlets in a portal environment.

Abstract: The invention relates to a method for adjusting a performance of a computing system, the method comprising receiving by the computing system at least one command to execute a computational workload from a client, applying by the computing system an identification method identifying a first system resource of the system resources which limits an execution performance of the computational workload, performing a temporary adjustment of an allocation of the first system resource to the client and evaluating whether this improves an execution performance of the computational workload, and, if this is the case, offering to the client to permanently adjust the allocation of the first system resource to the client and adjusting the allocation of the first system resource to the client permanently in case of receiving a corresponding instruction from the client. The invention also relates to a computing system and a computer program product which implement the method.

Abstract: A method comprises receiving, at a system from an application server, a request for a service, the system comprising two or more global session databases, and the request associated with a session; identifying among the two or more global session databases, a first global session database to fulfill the request based on a criteria; storing, by the application server, the session at the first global session database; and transmitting, by the session, data associated with the request for the service in accordance with a configuration table. Additional methods, systems, and non-transitory computer-readable media or computer program products provide similar or alternative functionality.

Abstract: Communications is the exchange of thoughts, messages, or information. However, whilst immense investments into evolving communications infrastructure supporting multiple communications channels have been made the vast majority of communications models, standards, and developments focus to the transmission of the message as a single process with other aspects of the communications channel are considered simply delays in the communications channel.

Abstract: In an attempt to establish a communication session between a first communication entity and a second communication entity, a first message is received. For example, the first message may be a SIP INVITE message. A determination is made, based on a registration message from the first communication entity and/or the second communication entity, that at least one of the first communication entity or the second communication entity is Internet Protocol (IP) version intolerant. In response to determining that the at least one of the first communication entity or the second communication entity is IP version intolerant, one or more IP addresses are adapted in messages (e.g., the SIP INVITE message) for establishing the communication session. The adaption changes/removes the one or more IP addresses to a different IP version to ensure proper IP compatibility.

Abstract: Techniques for federated service registries are provided. A first access server determines a first plurality of services available within a local network associated with the first access server, as well as a second plurality of services available at one or more remote networks. A request for a first service is received from a client device, where the first service is not included in the first plurality of services and is included in the second plurality of services. A tunnel is established from the client device to one or more remote networks.

Abstract: A computer network device (such as a switch or a router) that implement host tracking is described. During operation, the computer network device may receive a report message that is associated with a host, which indicates that the host wants to join a group in a network that receives an audio-video channel from a source. In response, the computer network device may add information associated with the host to a group data structure associated with one or more hosts in the group. Then, when the computer network device receives a leave message that is associated with the host, the computer network device may remove or deactivates the host from the group data structure. Moreover, when the group data structure is empty or has no active hosts, the computer network device may stop forwarding the audio-video channel from the source to the group without further delay.

Abstract: Programmable network switches configured to perform various functions including session management, data processing, routing, and pipeline processing functions. Exemplary programmable network switches include pipeline processing components to transport data packets to network nodes, and data processing components to perform management functions including instructing the pipeline processing component how to transport the data packets. Auxiliary processing components can also be included to perform pre and post processing. The pipeline processing and auxiliary processing components can include ASICs, FPGAs, and other processors in any combination within a single rack mountable unit.

Abstract: Techniques for reducing network bandwidth for remote content display include storing, in a buffer, by a first client device of a plurality of client devices participating in a co-editing session, a plurality of cursor coordinates of a cursor displayed on a display of the first client device. The plurality of cursor coordinates are stored in the buffer during a throttle time period. Responsive to a determination that the throttle time period has elapsed, the first client device obtains from the buffer and transmits the plurality of cursor coordinates in a data packet. Receipt of the plurality of cursor coordinates enables a representation of the cursor to be displayed on displays of each of the plurality of client devices other than the first client device based at least in part on the plurality of cursor coordinates.

Abstract: Examples described herein include virtualized environments including a virtualized file server. Examples of secure domain join processes are described which may facilitate joining a virtualized file server or portions thereof to a domain. In some examples, the secure domain join process itself, and/or an associated file server virtual machine, may have insufficient credentials to write objects into an active directory. The active directory credentials need not be shared with the file server virtual machine. Rather, in some examples, the secure domain join process may provide a user system with a list of actions to be performed using active directory credentials.

Abstract: Disclosed herein are systems and methods related to slot assignments to traffic streams. In one aspect, a first wireless communication device sends, to a second wireless communication device, a request message including a latency marker having a requested value. The requested value indicates that a corresponding traffic stream between the first wireless communication device and the second wireless communication device is latency sensitive. Responsive to the request message, the first wireless communication device receives, from the second wireless communication device, a response message including a response latency marker. The response latency marker includes a response value for the corresponding traffic stream. When the response value is the same as the requested value, the first wireless communication device communicates corresponding traffic stream as a prioritized traffic stream instead of a regular traffic stream, with the second wireless communication device.

Abstract: Approaches, techniques, and mechanisms are disclosed for automatically inserting supplemental items into documents. According to an embodiment, a first request is received, comprising document information that identifies a particular document. A target repeated structure type, to which a group of items in the particular document conform, is identified within the particular document. Based on the target repeated structure type, a template is generated. A new content item is generated by applying descriptive metadata that describes the new content item to the template. The new content item conforms to the target repeated structure type. The new content item is inserted in the particular document at an insertion point before or after a particular content item that conforms to the target repeated structure type.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for facilitating early detection and warning for system bottlenecks in an on-demand services environment according to one embodiment. In one embodiment and by way of example, a method includes detecting waits during processing of a query within a processing pipeline, wherein the waits include one or more of application-specific waits and database-specific waits; diagnosing the waits to identify a wait that has turned into a bottleneck; classifying one or more types of issues causing the wait to turn into the bottleneck; generating an alert having associated information detailing the issues based on the one or more types and a location of the wait within the processing pipeline; and transmitting the alert to facilitate correction activities.

Abstract: A controller is configured to: acquire access information indicating a transmission source of instruction data, a process to be executed by a printer including download printing of downloading a document from a storage on a network and printing the document, a print mode in the download printing including first and second modes, based on the access information, access, via a communication interface, a server that is the transmission source of the instruction data, and receive the instruction data transmitted from the server; and in response to determining that the instruction data includes an execution instruction of the download printing, determine the print mode based on characteristics of the document; and based on the determined print mode, download the document via the communication interface, from a particular storage instructed by the instruction data, thereby receiving the document, and perform printing based on the received document, thereby performing the download printing.

Abstract: Systems and methods for file sharing over secure connections.

Abstract: The present disclosure relates to methods, systems, and non-transitory computer-readable media for determining a cognitive, action-selection bias of a user that influences how the user will select a sequence of digital actions for execution of a task. For example, the disclosed systems can identify, from a digital behavior log of a user, a set of digital action sequences that correspond to a set of sessions for a task previously executed by the user. The disclosed systems can utilize a machine learning model to analyze the set of sessions to generate session weights. The session weights can correspond to an action-selection bias that indicates an extent to which a future session for the task executed by the user is predicted to be influenced by the set of sessions. The disclosed systems can provide a visual indication of the action-selection bias of the user for display on a graphical user interface.

Abstract: An embodiment detects, by a packet detection module on a first worker node, a first synchronization message (SYN) issued from a client pod on the first worker node and directed to a first server pod on a second worker node and generates a first SYN record in a connection table stored on the first worker node. The embodiment detects, by the packet detection module, a second SYN issued from the client pod and directed to the first server pod and generates a server pod status record stored in memory on the first worker node indicative of the first server pod having an unhealthy status. The embodiment identifies an available server pod having a healthy status and generates a detour routing rule in a routing table on the first worker node indicative of a revised connection in which the identified available server pod replaces the first server pod.

Abstract: Methods, apparatus, systems and articles of manufacture are disclosed including means for identifying to identify a first request having a first source port number, from a device, determine whether a second request, having a second source port number, is within a threshold number of ports from the first source port number, group the first and the second requests as a first session when the second source port number is within the threshold number of ports from the first source port number, and means for classifying to generate session windows, the session windows including the threshold number of ports, wherein the session windows are applied to lowest and highest source port numbers associated with a current session.

Abstract: A server system can include an internal computer network including at least one client server configured to establish a data transfer connection to an external computer network, and at least one proxy server system positioned between the internal computer network and the external computer network. The proxy server system can include a proxy server positioned between a first firewall and a second firewall, where the first firewall is positioned between the first proxy server and the internal computer network, and the second firewall is positioned between the proxy server and the external computer network. The server system can develop and maintain a proxy server system that includes a whitelist of sites deemed necessary and/or desirable for system operation. The whitelist can be updated as a user works with and uses the system. Such updates can take place continuously in real or near-real time or periodically as frequently as desired.

Abstract: Methods, systems, and computer-readable media for automated packetless network reachability analysis are disclosed. An analysis is performed of network configuration data for a network comprising a host computer. Based at least in part on the analysis, one or more ports at the host computer that are reachable from another computer are determined. Based at least in part on the analysis, one or more routes to the one or more ports are determined. A report is generated that is descriptive of the one or more ports and the one or more routes.

Abstract: Techniques for establishing connections between user devices and headless devices attempting to connect to networks. A headless device may attempt to connect to an access point that requires interaction with a captive portal webpage for access to a network. However, the headless device my lack a display to present the captive portal webpage. The headless device may establish a connection with a user device using a PAN protocol. The headless device may then receive the captive portal webpage received from the access point, and relay the webpage to the user device using the PAN protocol. A user may use the user device to interact with the captive portal webpage, and the user device may then relay interaction data back to the headless device using the PAN protocol. The headless device may then provide that interaction data to the access point to be provided access to the network.

Abstract: Systems and methods are disclosed for transitioning communication sessions across services. In one implementation, a first communication is received from a user via a first service. The first communication is associated with a communication session. The first communication is processed to identify a request with respect to a second service. The second service is initiated in response to the request.

Abstract: A method for selectively providing, to a subset of authorized user accounts, wake-on-demand access to session servers during a period of scheduled unavailability includes receiving, by a service broker machine, from a client machine, at least one credential. The service broker machine requests, from a database, connection information associated with the at least one credential. The service broker machine receives, from the database, connection information. The service broker machine determines that the at least one virtual resource is unavailable. The service broker machine determines whether the received credential indicates that a user of the client machine is authorized to request reactivation of the unavailable at least one virtual resource. The service broker machine directs, reactivation of the unavailable at least one virtual resource. The service broker machine provides, to the client machine, the connection information.

Abstract: A system and method for customized scheduling of sources, including breaking down a source of content into at least two categories, including posts and engagements, and gathering content related to a specific source. A scheduler handles scheduling of posts and engagement for a single source and entities that are due to be crawled are sent to a scheduling queue, in which each content type for a source can have its own queue. A process points to the correct scheduler queue in order to request content to be crawled, attaches to the proper queue, processes requests, queries the social network for content, parses the response and sends any new data to be saved to the system.

Abstract: The disclosure provides an approach for performance management. Embodiments include receiving, at a port of a router, a transport control protocol (TCP) or user datagram protocol (UDP) packet generated by a performance component of the router. Embodiments include identifying, by the router, a rule related to the TCP or UDP packet. Embodiments include forwarding, by the router, the packet to an interface of a kernel based on the rule. Embodiments include receiving, by the performance component, in response to the TCP or UDP packet, an additional packet from the interface of the kernel. Embodiments include determining, by the performance component, a performance metric based on the TCP or UDP packet and the additional packet.

Abstract: Examples relate to a BC network including a plurality of network devices deployed in a network. The plurality of network devices includes an authoritative network device that generates a transaction in a distributed ledger. The transaction includes location information of a new public key certificate to be deployed in each of the network devices. In order to verify the transaction, a network device of the plurality of network devices verifies, using a smart contract, whether the new public key certificate is valid and whether the new public key certificate is different from a previously recorded public key certificate in the distributed ledger. In response to successful verification by at least a predefined number of network devices of the plurality of network devices, each of the network device record the transaction in the distributed ledger.

Abstract: A carrier-grade network address translation (NAT) gateway system includes a switch having a gateway function configured to receive packets that are communicated via its ingress and egress ports. The switch having the gateway function has a first link to a first NAT processing function and a second link to a second NAT processing function. The first NAT processing function has a first deterministic address/port translation function and a first mapping table for storing first binding entries. The second NAT processing function has a second deterministic address/port translation function and a second mapping table for storing second binding entries. Preferably, the first and the second deterministic address/port translation functions are the same. The switch is configured to communicate each received packet for processing at both the first and the second NAT processing functions (e.g., in either a serial manner or a parallel manner), which provides redundancy in state information.

Abstract: Various systems and methods are provided for accessing and traversing one or more data structures and generating a functional user interface that can enable non-technical users to quickly and dynamically search for resources of an organization and/or associated documents, events, entities, and/or other data. The user interfaces are interactive such that a user may make selections, provide inputs, and/or manipulate outputs. In response to various user inputs, the system automatically accesses and traverses data structures relating to resources, documents, events, entities, and other data, identifies resources, documents, events, entities, and/or other data that meet search criteria, and returns search results including resources that meet the search criteria and/or resources that are associated with documents, events, entities, and/or other data that meet the search criteria.

Abstract: A monitor includes a casing with a display, a display controller disposed within the casing and that controls the display, a processor disposed within the casing that controls the display and communicates with a fifth generation (5G) network, a 5G antenna that connects the monitor to the 5G network, and a switch that switches the processor between an activated state and a deactivated state. The monitor is a zero-client system when the processor is in the activated state and a plain display when the processor is in the deactivated state.

Abstract: A system and method for secure storage and management of transitory data, comprising at least a profile manager, a callback manager, a context analysis engine, and a vault manager, which allows a user to create a data container to store data preferences, which encrypts the data stored within a data container, which creates a password for accessing the data container, which temporarily stores the data container, which manages data container interactions between the system user and a second user, such as a business enterprise, and which establishes default preferences and creates a default container based upon context content data.

Abstract: This disclosure describes techniques that enable a Radio Frequency (RF) signal controller and optional digital signal translator to use the existing telecommunication infrastructure of a business or residential establishment to deliver wireless communication services to the business or residential establishment. The data signal controller may transceive a first data signal via a first signal interface, determine if/how to process the first data signal to generate a second data signal that is suitable to be transported into the establishment via legacy telecommunications infrastructure.

Abstract: The present disclosure provides a method of establishing a device correlation and an electronic device. The method includes: receiving a first correlation establishment request transmitted by a first device, wherein the first correlation establishment request indicates establishing a correlation between a first device and a second device, and a device correlation is established between the second device and a third device; acquiring a first correlation strength between the first device and the second device, and a second correlation strength between the second device and the third device; establishing a device combination correlation between the first device, the second device and the third device in response to the first correlation strength being less than or equal to the second correlation strength; and establishing a device preemption correlation between the first device and the second device in response to the first correlation strength being greater than the second correlation strength.