Abstract: The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). A method for performing device-to-device (D2D) communication by an in-coverage user equipment (UE) in a cellular communication system is provided. The method includes receiving a scheduling grant through a downlink control channel from a base station (evolved Node B (eNB)) and transmitting a scheduling assignment (SA) message in an SA region of a D2D communication frame and data in a data region of the D2D communication frame, based on the scheduling grant, wherein the scheduling grant indicates a resource pattern for transmission (RPT) corresponding to a set of resource units or a subset of a resource unit in a time domain and a frequency domain that is used for transmission of the data.

Abstract: An image forming apparatus that attaches a consumable including a memory that stores information for indicating use results of a consumable material and that forms an image by using the consumable material accommodated in the consumable, in a case that an obtainment of information from the attached consumable succeeds, creates a record of the attached consumable based on the obtained information, and in a case that the obtainment of the information fails, creates a record of the attached consumable that makes identification information of the attached consumable be predetermined information. Then, in a case that identification information of the consumable included in obtained the information does not match identification information of the consumable obtained previously, changes the identification information of the consumable obtained previously based on the information obtained currently.

Abstract: A method for facilitating the configuration, resource installation, and direct printing of print jobs to a printer device from a host system that may not require installation of drivers or host software is described. The printer device is coupled to a host system via a universal serial bus (USB) interface. The printer device presents to the host system a USB mass storage profile that includes one or more smart folders. The printer device receives from the host system a data file and stores the data file in one of the one or more smart folders causing a corresponding action event to automatically be triggered in the printer device. The corresponding action events may include setting-up a printer configuration, printing a print file or image file, installing a font file or an image file, and installing a firmware upgrade.

Abstract: An application deployed in a public cloud is enabled to access an on-premises resource securely and without requiring additional ports on a firewall. A pair of security gateways is instantiated, one at the cloud, and another located on-premises. Each gateway can access information that is necessary to locate and establish a secure connection to the on-premises resource. In response to a determination that the application needs to access the on-premises resource, the data set is used to locate the resource. A communication request is then issued from the cloud gateway to the on-premises gateway over a socket-based communication channel established between the gateways. The communication request is sent over an HTTP-based protocol such that the application is able to access the on-premises resource without requiring an additional IP address/port to be defined at the firewall. Proxied connectivity is then enabled from the application to the on-premises resource.

Abstract: The present disclosure relates to a content supply device, a content supply method, a program, a terminal device, and a content supply system in which the reception side that acquires a FLUTE session can be notified of the reception mode. A content supply device according to the present disclosure includes: a fragment stream generating portion that generates a fragment stream on the basis of source data of content; a FLUTE-stream generating portion that generates a FLUTE stream from the generated fragment stream; an SDP creation portion that creates an SDP including a reception mode in the case of a reception side receiving a FLUTE session including the FLUTE stream; and a multicast delivery portion that delivers the FLUTE stream over FLUTE multicast and, prior to delivery of the FLUTE stream over FLUTE multicast, delivers the SDP over FLUTE multicast. The present disclosure can be applied to a system that delivers content over FLUTE multicast.

Abstract: The disclosure relates generally to transfer of audio and/or video streams, and, more particularly, to system and method for real-time transfer of the audio and/or video streams through an Ethernet audio/video bridging (AVB) network. In one embodiment, multiple audio and/or video streams from multiple AVB enabled devices are received by an AVB enabled network device. Each of the multiple AVB enabled devices has a static priority based on criticality of an application that each of the multiple AVB enabled devices is performing. Further, each of the multiple audio and/or video streams is dynamically queued, by the AVB enabled network device, based on the static priority of the associated one of the AVB enabled devices. Furthermore, real-time transfer of the multiple audio and/or video streams to a user device is enabled, by the AVB enabled network device, through an Ethernet AVB network upon queuing the multiple audio and/or video streams.

Abstract: An application deployed in a public cloud is enabled to access an on-premises resource securely and without requiring additional ports on a firewall. A pair of security gateways is instantiated, one at the cloud, and another located on-premises. Each gateway can access information that is necessary to locate and establish a secure connection to the on-premises resource. In response to a determination that the application needs to access the on-premises resource, the data set is used to locate the resource. A communication request is then issued from the cloud gateway to the on-premises gateway over a socket-based communication channel established between the gateways. The communication request is sent over an HTTP-based protocol such that the application is able to access the on-premises resource without requiring an additional IP address/port to be defined at the firewall. Proxied connectivity is then enabled from the application to the on-premises resource.

Abstract: A method for delivering content in a communication network includes receiving, by a cache, a request message requesting content to be served. The method includes storing multiple cache manifests corresponding to indicating content and capabilities of a plurality of caches. Each cache manifest indicates content and capabilities of a respective one of the caches and lists descriptions of the content stored in the respective cache. The method includes determining, based on information in the plurality of cache manifests, to serve the requested content, by selecting a cache from which to serve the requested content. The method includes in response to the determination, instructing the selected cache to transmit the requested content to a client device that generated the request message; and alternatively determining to not serve the requested content, based on the information in the plurality of cache manifests, and forwarding the request message to a higher level device.

Abstract: An infrared converter tag device is disclosed. A housing contains an infrared receiver that is ported through the housing to receive infrared encoded data and provide an electrical signal representing the encoded infrared data as an output. A display or a radio transmitter is provided and a processor is programmed to receive the electrical signal output from the infrared receiver and convert the output to a signal that is provided to the display where the display represents the signal as a visual image or provide a signal that is transmitted as an RF signal.

Abstract: An Enterprise Resource Planning (ERP) context-aware environment may be provided. A user's interactions and operations within the context-aware environment may be tracked, recorded, and/or analyzed. Upon receipt of an action request, a context state may be updated. The context state may be analyzed to determine whether the context state is associated with at least one predicted objective. If so, a suggested next action associated with the at least one predicted objective may be provided. The environment may use other context clues to evaluate relative probabilities of each objective and present the suggested next action associated with the highest probability objective.

Abstract: Systems, methods, and nodes that implement multipath TCP (MPTCP) in a communication system establish first and second data link layer connections to a remote node, notify a transport layer of the establishment of the first and second data link layer connections, and establish first and second transport layer connections with the remote node over the first and second data link layer connections. A packet received at the data link layer for transmission to the remote node is inspected to determine if MPTCP is enabled for the packet, and, in response to determining that MPTCP is enabled for the packet, the packet is assigned to one of the first data link layer connection and the second data link layer connection based on an affinity between an MPTCP sub-flow associated with the packet and the one of the first data link layer connection and the second data link layer connection.

Abstract: A cloud-based media content management system for managing access to media content items is disclosed. Managing access to media content items by a cloud-based media content management system may include, for example, managing uploads of media content items from a population of media devices, reducing duplication of media content data stored in cloud-based storage, and providing user-controlled access to media content items stored in cloud-based storage across any number of user devices. In this context, a cloud-based media content management system and cloud-based storage system generally refer to hosted computing and data storage services that may be accessed by media devices and other devices over a digital network such as the Internet.

Abstract: A virtual private router (VPR) intercepts DNS requests and returns a pseudo IP address to the requesting application and the pseudo IP address is mapped to a domain name in the request. Requests for content including the pseudo IP address are modified to include the corresponding domain name and transmitted to an intermediary server, which resolves the domain name to a real IP address and forwards the content request. The content is received by the intermediary server, which returns it to the requesting application, such as by way of the VPR. Real IP addresses may be returned by the intermediary server such that subsequent content requests to the domain name may bypass the intermediary server. Requests for certain domains, ports, and/or protocols may bypass the intermediary server such that the VPR resolves the domain names to real IP addresses.

Abstract: A system that incorporates teachings of the present disclosure may include, for example, a media distribution system having a controller to identify a plurality of media presentation devices of a user of the media distribution system, identify one or more distribution preferences supplied by the user for distributing media content to the plurality of media presentation devices, receive media content from one of a plurality of media sources of the user, determine a media content type from the received media content, and distribute the received media content to one or more of the plurality of media presentation devices according to the one or more distribution preferences and the media content type. The one or more distribution preferences comprise in part media content distribution arrangements assigned by the user between the plurality of media sources of the user and the plurality of media presentation devices of the user. Other embodiments are disclosed.

Abstract: Some embodiments provide systems and methods for determining a server of a distributed hosting system to optimally distribute content to an end user. The method includes identifying an IP address of the end user. Based on the IP address, a set of servers send packets to the end user to derive performance metrics. The performance metrics are used to determine a server from the set of servers that optimally distributes content to the end user. The method modifies a configuration for resolving end user requests such that the optimal server is identified to the end user when the end user requests content from the hosting system. Some embodiments determine the optimal server by providing downloadable content that is embedded with a monitoring tool. The monitoring tool causes the end user to derive performance metrics for the hosting system when downloading a particular object from a set of servers.

Abstract: Improved methods, systems and articles-of-manufacture permit the tracking of secondary referral sources in network-based e-commerce environments, thereby enabling advantageous commission-sharing arrangements between primary and secondary referral sources.

Abstract: The subject technology discloses configurations for determining, at a first computing device, if a second computing device is within a predetermined distance of the first computing device. The subject technology then establishes, at the first computing device, a wireless near field communication (NFC) connection with the second computing device. Information for configuring a wireless tethering connection with the second computing device is then transmitted over the wireless NFC connection. Further, the subject technology receives, over the wireless NFC connection, confirmation that the wireless tethering connection has been configured.

Abstract: One embodiment provides a system that facilitates an efficient transport protocol. During operation, the system receives a first interest which indicates a query for optimal transport parameters, wherein a name for an interest is a hierarchically structured variable length identifier that includes contiguous name components ordered from a most general level to a most specific level, wherein the query is based on a name prefix that includes one or more contiguous name components. The system computes the optimal parameters based on historical information associated with the name prefix. The system transmits a first response which includes the computed optimal parameters to a requesting entity, thereby facilitating a transport protocol which increases network efficiency.

Abstract: A UE 100-1 and a UE 200-2 perform D2D communication that is direct device to device communication. The UE 100-1 transmits a D2D termination preliminary notification indicating that termination of the D2D communication is wished to the UE 100-2 during the D2D communication. The UE 100-1 terminates the D2D communication after transmitting the D2D termination preliminary notification.

Abstract: A UE 100-1 and a UE 200-2 perform D2D communication that is direct device to device communication. The UE 100-1 transmits a D2D termination preliminary notification indicating that termination of the D2D communication is wished to the UE 100-2 during the D2D communication. The UE 100-1 terminates the D2D communication after transmitting the D2D termination preliminary notification.

Abstract: Methods and apparatuses of classifying user information and obtaining user group information, which mainly include: obtaining, by an instant messaging server, an entity data unit posted by a first user from a target database; matching conversation information generated between a second user and the first user through an instant messaging client with the entity data unit; and determining user group information of the first user to which user information of the second user corresponding to the conversation information belongs based on a matching result, where the user group information of the first user is determined according to attribute information and/or name information of the entity data unit posted by the first user.

Abstract: A processor, such as a low-cost microcontroller unit, uses a DMA controller to facilitate direct memory transactions between hardware subsystems independently of the CPU. To enable those transactions to be carried out security, gateways are provided to the DMA controller and peripheral bridge. The gateways, which have access to multiple access policies, switch between those policies depending on a hardware context and/or subcontext, such as the bus master originating the transaction and/or the DMA channel associated with the transaction. The gateways are operable to administer those policies independently of the CPU. In various implementations, gateways are provided for the DMA controller, the peripheral bridge, and/or individual peripherals. The processor is able to support secure, fully containerized operations involving its peripherals without constant CPU intervention.

Abstract: A method for learning a MAC address of an end machine that is logically connected to a logical network is described. The method receives configuration data for implementing a distributed logical router having different logical ports each of which is associated with a logical port of a logical switch. The method receives a packet through a first logical port of the logical router that has a destination IP address associated with a particular logical switch that is associated with a second logical port of the logical router. In order to learn the MAC address of the end machine, the method sends a first broadcast packet with a first source MAC address to a first set of forwarding elements that implements the particular logical switch, and sends a second broadcast packet with a second source MAC address to a second set of forwarding elements that also implements the particular logical switch.

Abstract: Disclosed are systems, methods, and machine readable storage media that cause a storage computer and a client computer to perform a method of providing access to one or more resources on the storage computer for the client computer. The storage computer is operable for initiation of a network connection between the client computer and the storage computer. Initiation of the network connection between the client computer and the storage computer by the storage computer is enabled, and initiation of the network connection between the client computer and the storage computer by the client computer is disabled. The client computer and the storage computer are operable for maintaining the network connection between the client computer and the storage computer.

Abstract: Methods and systems for switching between computing devices during an online meeting are described herein. A collaboration server may receive a token from a first computing device connected to an online meeting hosted by the collaboration server. The collaboration server may receive another token from a second computing device and determine whether the received tokens match. If so, the collaboration server may establish an association between the second computing device and the meeting participant attending the online meeting via the first computing device. The collaboration server may accept a request from the second computing device to join the online meeting thus allowing the meeting participant to continue the online meeting from the second computing device.

Abstract: Systems and methods include instantiating an application on first and second display devices. The application includes objects and an integrated wiki module. The integrated wiki module includes object wiki pages associated with the objects. The first display device is controlled to display a control module when an object is displayed thereon and to display an object wiki page in response to receiving a selection of the control module. The object wiki page includes content associated with the object. Instructions are received to change the content included in the object wiki page. The second display device is controlled to display the control module when the object is displayed on the second display device and to display the object wiki page including the changed content in response to receiving a selection of the control module after receiving the instructions to change the content.

Abstract: A proxy requestor, who is expected to participate in events hosted on a computing network, may hope to find a proxy to handle the events for the proxy requestor. The proxy requestor, using a requestor device, may submit a request for such proxy to a proxy service provider during or prior to the event. In some examples, the proxy service provider may transmit one or more candidate proxies to the requestor device. Once the proxy requestor device selects a proxy from among the one or more candidate proxies, the requestor device may either facilitate or schedule a connection between the selected proxy and other participants of the events.

Abstract: A method in a distributed storage (DS) unit begins by the unit receiving one or more data slices to store. The method continues by determining a memory utilization method for the one or more data slices. The method continues when a multiple memory utilization method is determined. The method continues by determining a data slice distribution method. The method continues by storing a plurality of the one or more data slices in the multiple memories using the data slice distribution method and updating a virtual address to physical location table to reflect the storing.

Abstract: A method for displaying a view of a target comprises establishing a network including a plurality of display devices, requesting by a first display device in the network having an obstructed view of the target, at least one of position and orientation data from one or more remaining display devices in the network each having a different view of the target than the obstructed view, selecting a remaining display device as a view provider to provide the different view of the target to the first display device, requesting the different view of the target from the selected view provider; providing the different view of the target to the first display device, and displaying the different view of the target via the first display device.

Abstract: An information processing device may search for a communicable communication device which is a communication device capable of communication. The information processing device may display, in a case that a communicable communication device is detected, a device image and an interface image associated with each other on a display unit of the information processing device. The device image may indicate the detected communicable communication device. The interface image may indicate the communication interface corresponding to the detected communicable communication device. The information processing device may display, in a case that a plurality of communicable communication devices is detected, a plurality of device images corresponding to the plurality of detected communicable communication devices and a plurality of interface images corresponding to the plurality of detected communicable communication devices in one display screen on the display unit.

Abstract: A subscriber communicates over an IP-based wireless telecommunications network through an access point. Identifiers associated with the access point (e.g., MAC address IP address, FQDN . . . ) are stored in a database. Each access point is mapped into one or more service zones, where service zones are mapped to service types. The subscriber has a rate plan that is based on a selection of one or more service types. When a wireless connection between the subscriber and the IP-based wireless telecommunications network is established, the access point identifiers are used to retrieve a service zone ID from the database. Upon completion of the communication, a call detail record can be generated that includes the service zone ID for the communication. The billing system can then retrieve billing plan information to determine an appropriate rate for the subscriber based on the service zone ID.

Abstract: Methods and apparatus for pre-configured virtual gateways for isolated virtual networks are described. An isolated virtual network (IVN) is configured at a provider network on behalf of a customer. The IVN includes one or more devices whose network addresses are not accessible from the public Internet. In response to a request from a connectivity intermediary, a virtual private gateway (VPG) is established, configurable to enable connectivity between IVNs of the provider network and devices outside the provider network. The VPG is included within a set of candidate VPGs indicated programmatically to the customer. Connectivity is established between the customer's IVN and an external device via the VPG.

Abstract: The present invention relates to a distributed data storage system comprising a plurality of storage nodes. Using unicast and multicast transmission, a server application may write data in the storage system. When writing data, at least two storage nodes are selected based in part on a randomized function, which ensures that data is sufficiently spread to provide efficient and reliable replication of data in case a storage node malfunctions.

Abstract: The subject technology discloses configurations for determining, at a first computing device, if a second computing device is within a predetermined distance of the first computing device. The subject technology then establishes, at the first computing device, a wireless near field communication (NFC) connection with the second computing device. Information for configuring a wireless tethering connection with the second computing device is then transmitted over the wireless NFC connection. Further, the subject technology receives, over the wireless NFC connection, confirmation that the wireless tethering connection has been configured.

Abstract: A system and method of executing a script includes receiving, by a service user account module, a user script from a first user account. The method includes issuing, by a management system, execution data including the user script and validation parameters. The method includes signing, by the management system, the execution data with a private key. Responsive to signing the execution data, the execution data further includes a digital signature. The method further includes authorizing, by the management system, communication to a remote execution tool, where authorization requires the digital signature. The method further includes sending, to the remote execution tool, the execution data including the digital signature. The method further includes confirming, by the remote execution tool, the validation parameters. The method further includes, responsive to confirming the validation parameters, executing, by the remote execution tool, the user script on a remote system for the first user account.

Abstract: In one embodiment, a system for conditionally refreshing workarea user interfaces (UIs) includes logic adapted to receive a request to refresh one or more workarea UIs, wherein the one or more workarea UIs are provided within a document object model (DOM), logic adapted to determine whether to reload the DOM or to refresh the one or more workarea UIs within the DOM without reloading the DOM; logic adapted to reload the DOM when it is determined to reload the DOM; and logic adapted to refresh the one or more workarea UIs without reloading the DOM when it is determined to refresh the one or more workarea UIs. Other systems, methods, and computer program products for conditionally refreshing workarea UIs are described according to more embodiments.

Abstract: One embodiment provides a system that facilitates a content requesting device to handle a potential timeout event. During operation, the system receives, by a content producing device, a packet that corresponds to a first Interest message from a content requesting device, where the first Interest includes a name. Responsive to determining that additional time is required to generate a matching Content Object for the first Interest, the system generates a notification message which indicates a time period after which a second Interest is to be sent out by the content requesting device. The name for the second Interest can be the same as the name for the first Interest or a new name as indicated in the notification message. The system transmits the notification message to the content requesting device, thereby facilitating the content requesting device to handle a potential timeout event.

Abstract: Signalling messages in an Internet Protocol, IP, communications network comprising a chain of at least two entities applying object oriented processing of signalling messages are exchanged between the at least two entities of the IP communications network comprising object oriented based data items. Parsing and inverse parsing of text based signalling messages are effectively avoided, thereby reducing system resources and increasing processing speed of the system as a whole.

Abstract: A method, and associated system, for determining an automatic action to be performed in response to an unsuccessful communication request. A first set of data, obtained from a first electronic communication device, is transmitted by the first electronic communication device to the computing system in response to a determination by the first electronic communication device that a called user of the first electronic communication device is unable or unwilling to accept a communication request from a calling user of a second electronic communication device. The first set of data is associated with the called user, the first electronic communication device, the second electronic communication device, or combinations thereof. A second set of data is obtained from the second electronic communication device and associated with the calling user, the second electronic communication device, or both. The action to be performed is determined based on the first and second sets of data.

Abstract: One feature pertains to a method operational at a device. The method includes performing authentication and key agreement with a session key management entity (SKME) device. The method also includes generating an authentication session key based in part on a secret key shared with a home subscriber server, the authentication session key being known to the SKME device. The method further includes generating a mobility session key based in part on the authentication session key, the mobility session key being known to a mobility management entity serving the device. Data sent from the device to a wireless communication network is cryptographically secured using the mobility session key.

Abstract: A method is provided that uses a consistent hashing technique to dispatch incoming packets in a stable system prior to adding of a node. The method uses a hash table and assigns hash buckets in the table to each network node. A set of fields in each incoming packet is hashed and is used to identify the corresponding hash bucket. The packets are then dispatched to the network nodes based on the nodes' hash buckets. During an observation period, the method identifies the ongoing sessions by creating a bit vector table that is used to identify the old and new sessions during a re-dispatching period. The method uses the consistent hashing method and the probabilistic method dispatch the incoming packets such that each packet that belongs to an old session is dispatched to the same old node that has been processing the other packets of the session.

Abstract: Wireless fidelity (Wi-Fi) access points (APs) can advertise their support of both OMA-DM and SOAP-XML protocols by including protocol capability information in a broadcast or probe response message. The protocol capability information can include an OSU method list subfield that indicates that the Wi-Fi AP supports both OMA-DM and SOAP-XML protocols. The broadcast message may be an Access Network Query Protocol (ANQP) message, a beacon message, or some other generic advertisement services (GAS) message. Wi-Fi APs can also specify which WLAN type is preferred by a network operator by including a WLAN access type indication in a broadcast or probe response message. The WLAN access type indication may specify that a network operator prefers a passpoint, non-passpoint, vendor specific WLAN. The WLAN access type indication may be included in an access network discovery and selection function (ANDSF) management object (MO).

Abstract: There is provided a method of controlling a rate at which content data is received at a receiver over a network, wherein the receiver has caused a first stream of real-time communication event data to be received at the receiver, and a second stream of content data to be received at the receiver, the method comprising steps of: dynamically measuring network conditions of the network based on the real-time communication event data; and limiting the rate at which the content data is received at the receiver based on the dynamically measured network conditions.

Abstract: A portal server comprises memory, a profile manager, a profile selector, and a profile initiator. The profile manager is configured to manage a plurality of profile records in a profile database. The profile selector is configured to select at least one of the plurality of profile records based on context data collected at a client and context data collected at the portal server. The collected context data corresponds to particular user interaction activity with the portal server. The profile initiator is configured to adapt a user interface based on the profile selected by the profile selector.

Abstract: Methods, computer systems, and computer-storage media are provided for connecting devices. Shared spaces may be created among one or more users and/or devices. Based on various factors including locations, histories among users, time of day, etc., spaces may be created among users such that content may be shared within the shared space. The spaces may be created using multiple technologies such that one user may connect to the space via a first identifier format while a second user may connect to the space via a second identifier format. Once created, content may be shared with one or more users of the space. Depending on privacy and/or security settings of the space, any user may invite other users to join the space. The content may be available to any participant once the space has terminated.

Abstract: Devices, computer readable media, and methods for supporting services at an application service layer (ASL) are disclosed. The ASL may be a machine-to-machine (M2M) services capability layer (SCL). Content functions may interpret the data to generate a semantic description of the data. Semantic information associated with data may be stored. Context aware functions may process the semantic description of the data to generate lower level contextual cues. Context aware reasoning functions may process the lower level contextual cues to deduce higher level context. An application or a second ASL may use the contextual cues and the situational context to trigger an action. The ASL may create a trigger condition based on a received message. The ASL may invoke a function based on detecting a trigger condition. The ASL may perform a command based on a received command. The ASL may use a objective function and feedback to control a device.

Abstract: A method of managing fixed and mobile terminals in an environment comprising a mobile network including an IMS network, and an enterprise network including IP-PBX equipment, the method consisting in particular in: determining (S30) the mobile terminals of the mobile network that are registered with the IMS network and the enterprise terminals that are registered with the IP-PBX equipment of the enterprise network; while a multimedia communications session involving any terminal that is determined as being registered with the IMS network or with the IP-PBX equipment as the case may be, is being initialized via the IMS network, obtaining (S32) the capabilities of said terminal; and updating (S31, S33) a database with information identifying the mobile terminals of the mobile network that are registered with the IMS network and the enterprise terminals that are registered with the IP-PBX equipment, and with information representative of the capabilities that have been obtained for each identified terminal.

Abstract: There is provided a method for allowing a remote access device to access a remote access target device within a home network. The method includes receiving, from a remote access agent of the home network, access information of the remote access target device within the home network and access information of the remote access agent; receiving a request for the access information of the remote access target device from the remote access device; requesting, to the remote access agent, port forwarding for the remote access target device based on the access information of the remote access target device and the remote access agent; receiving an answer to the request from the remote access agent, and updating the access information of the remote access target device based on the received answer; and sending the updated access information to the remote access device.

Abstract: Systems and methods are disclosed for a single sign-on (SSO) enterprise system with multiple data centers that use a lightweight cookie on a user's client device. The lightweight cookie includes a reference to a data center in which the user is already authenticated, and a new data center contacts the old data center for creating a session for the user on the new data center. If the old data center is unavailable, then the new data center may fall back to accessing a local security store, a backup of keys, security tokens, and/or other security data, in order to create a local session for the user on the new data center.

Abstract: There are provided a system, a method and a computer program product for operating a cloud computing storage system. The cloud computing storage system allocates and manages virtual disks. A virtual disk provides a logical data storage. The cloud computing storage system divides data stored in the virtual disks into chunks and allocates the chunks to physical data storage devices. The cloud computing storage system monitors I/O access patterns and user requests to change data storage capacities and throughputs of the virtual disks in real time. The cloud computing storage system dynamically reconfigures an allocation of the chunks to the physical data storage devices.