Abstract: A method to display an illustration to conduct an expedited electronic transaction is provided. Consumer identification information identifying a consumer is received. The consumer identification information is stored in association with a web browser of a consumer's device. A customized illustration is displayed based on the received consumer identification information on the consumer's device. A request is received for the expedited electronic transaction by swiping the customized illustration across a portion of the display of the consumer's device. Transaction data sufficient to complete the electronic transaction is sent to the merchant based on the swipe of the customized illustration across display of the consumer's device.

Abstract: From received data packets intended for a target virtual machine of a virtualization system, a destination network address of the target virtual machine is determined, and a current write buffer pointer is identified that points to a buffer associated with the identified target virtual machine corresponding to the destination network address. If the identified write buffer pointer indicates that the buffer has sufficient available space to accept the data packets, and if the associated buffer has sufficient available space, the data packets are placed in the associated buffer in buffer data locations according to a calculated new write buffer pointer value, and a wakeup byte data message is sent to a designated socket of the target virtual machine. Generally, the target virtual machine detects the wakeup byte data message at the designated socket and, in response, retrieves the data packets from the associated buffer in accordance with the new write buffer pointer value.

Abstract: An information processing apparatus accepts migration of data from a migration source information processing apparatus. The information processing apparatus includes a processor to execute an operation for operation target data as a target of a processing request given from a client apparatus when the operation target data is migrated from the migration source information processing apparatus and the processing request is received from the migration source information processing apparatus, and to notify the client apparatus of a processing result of the operation, the result containing arrangement information of the operation target data.

Abstract: A method of transmitting data to a virtual group consisting of multiple user devices. A plurality of network-connected user devices are grouped together into a virtual group using their International Mobile Subscriber Identification (IMSI) or Mobile Station International Subscriber Directory Number (MSISDN) contained within a SIM card residing within each user device. An application programming interface (API) and a single identification are established for the virtual group and are exposed to an application server. Data packets sent to the virtual group via a communications protocol from the application server are intercepted and directed to each user device within the virtual group. The plurality of user devices within the virtual group can simultaneously receive the data stream.

Abstract: In one example, a presentation control device may allow a presenter, such as a teacher, to control interactions between audience members and the presenter. The presentation control device may display a presentation controlled by a presenter to a presentation audience as part of a group presentation session. The presentation control device may receive from the presenter a communication rule controlling an interaction between an audience member device and the presentation control device as part of controlling the presentation. The presentation control device may receive a communication regarding the presentation from an audience member in the presentation audience via the audience member device. The presentation control device direct the communication based on the communication rule.

Abstract: Techniques for sharing virtual machine (VM) resources are provided. A relative location for a resource within a VM is created; the relative location dynamically resolves to a particular physical location when a principal requests access to the resource at runtime. The principal is located outside an environment associated with the VM. Authentication and access restrictions are dynamically enforced against the requests made by the principal before a connection is permitted between the principal and the resource (the resource located within the environment of the VM).

Abstract: In one embodiment, a method implements virtualized network functions in a serverless computing system having networked hardware resources. An interface of the serverless computing system receives a specification for a network service including a virtualized network function (VNF) forwarding graph (FG). A mapper of the serverless computing system determines an implementation graph comprising edges and vertices based on the specification. A provisioner of the serverless computing system provisions a queue in the serverless computing system for each edge. The provisioner further provisions a function in the serverless computing system for each vertex, wherein, for at least one or more functions, each one of said at least one or more functions reads incoming messages from at least one queue. The serverless computing system processes data packets by the queues and functions in accordance with the VNF FG. The queues and functions processes data packets in accordance with the VNF FG.

Abstract: A mechanism is provided for sending a password to a terminal. A password send request is received. The status of each of a plurality of terminals coupled to the information processing device via a network is acquired. On the basis of the acquired statuses, at least one item is selected from a group comprising the terminal serving as a destination for the password, the communication method with the terminal, or the method for inputting the password in the terminal. The password is then sent to the selected terminal via a network.

Abstract: A processor is configured to receive, from a client, a first message indicating a request to establish a connection between the client and a server, to ascertain that the first message does not include any cookie satisfying one or more criteria, to send, to the client, a second message that includes a first cookie, without allocating an endpoint on the server for the connection, in response to ascertaining that the first message does not include any cookie satisfying the criteria, to receive subsequently, from the client, a third message, to ascertain that the third message includes a second cookie, and that the second cookie satisfies the criteria, to allocate the endpoint for the connection in response to ascertaining that the second cookie satisfies the criteria, and to send, to the client, a fourth message indicating that the server is ready to receive data communication at the allocated endpoint.

Abstract: A virtual machine storage service can be use a unique network identifier and a SR-IOV compliant device can be used to transport I/O between a virtual machine and the virtual machine storage service. The virtual machine storage service can be offloaded to a child partition or migrated to another physical machine along with the unique network identifier.

Abstract: Examples are disclosed for distributing Ethernet data processing across multiple processing cores. In one example, a computing system includes a main host processor including multiple processing cores and a shared on-chip memory accessible by each of the multiple processing cores, and an Ethernet hardware subsystem communicatively coupled to the main host processor via a direct memory access (DMA) subsystem, the DMA subsystem configured to route data from the Ethernet hardware subsystem to one or more of the multiple processing cores.

Abstract: The accessibility of a hyperlinked files is displayed. A hyperlink that references a resource is extracted from a target file. An attempt to acquire the resource is made by performing a first authentication operation. A first object is received in response to performing the authentication operation. A second object is acquired by performing a second authentication operation using pre-determined authentication information. The first object and the second object are compared to determine if the first object is the same as the second object. Information indicating the accessibility of the resource is presented via a display apparatus.

Abstract: It is provided a method for pairing two devices, one of which is a first device the other is a second device, wherein the method is implemented at the first device, including: generating a pattern to be displayed on either of or both of the first and second devices; sending whole or a part of the tracing pattern to the second device for displaying the tracing pattern on the second device if any; displaying the corresponding pattern on the first device; receiving information indicating the result of tracing the pattern on the second device; and accepting pairing the two devices.

Abstract: A method, system, and program product for remotely attesting to a state of computing system is provided. Specifically, the present invention allows a remote system to establish trust in the properties of the computer system. The properties to be trusted are expanded from the usual system software layers and related configuration files to novel types of data such as static data specific to the computer system, dynamic data determined at system startup, or dynamic data created as the computer system runs applications.

Abstract: Systems and methods for providing supplemental information with a response to a command are provided herein. In some embodiments, audio data representing a spoken command may be received by a cloud-based information system. A response to the command may be retrieved from a category related to the context of the command. A supplemental information database may also be provided that is pre-populated with supplemental information related to an individual having a registered account on the cloud-based information system. In response to retrieving the response to the command, supplemental information may be selected from the supplemental information database to be appended to the response to the command. A message may then be generated including the response and the supplemental information appended thereto, which in turn may be converted into audio data representing the message, which may be sent to a voice-controlled electronic device of the individual.

Abstract: Systems, methods and articles of manufacture are disclosed for generating a webpage. In one embodiment, a request may be received from a user to view the webpage that includes portlets. A time of the request may be identified. The portlets may be provided. Based on an interaction history of the user and the identified time of the request, the portlets may be arranged on the webpage. The webpage may be output for display, in response to the request.

Abstract: A method of operating a data network may include establishing a data path through the data network between a routing gateway and service provider equipment providing a data service. Moreover, the data service may be provided for use at the routing gateway over the data path during a data session. A request may be received from the service provider equipment where the request defines a data flow characteristic for the data path between the routing gateway and the service provider equipment providing the data service. The data flow characteristic may then be transmitted to a network element along the data path between the routing gateway and the service provider equipment. A request from service provider equipment can include an allowed bandwidth or prioritization. Related methods, data networks, data service providers, routing gateways, and computer program products are also discussed.

Abstract: Evaluating computers, devices, or endpoints on a network, such as a large network of computers in an enterprise environment. Detecting computers, devices, or endpoints that may present a security risk to the network or may be compromised in some way. Generating network traffic that, in some cases, should be ignored or should prompt specific, known responses. Detecting endpoint(s) that respond to such network traffic in an anomalous way, or otherwise attempt to perform certain operations based on such network traffic.

Abstract: A method of controlling the medical master/slave system comprising a bendable master apparatus operated by an operator and a slave apparatus inserted through the body. The control method includes an ordinary actuation mode (Step S101) in which, based on a bending state of the master apparatus, the slave apparatus is actuated in such a way as to become similar in operation to the master apparatus, a reversal actuation mode (Step S105) in which, based on a bending state of the master apparatus, the slave apparatus is actuated in such a way as to be reversed relative to the operation of the master apparatus, and a transition mode (Step S103, S104, S107, S108) for transition between the ordinary actuation mode and the reversal actuation mode.

Abstract: A communication management system includes: a storage unit configured to store destination information of a first communication terminal that establishes a first session with a relay device that relays communication data, destination information of a conversion system that performs mutual conversion between communication schemes of communication data transmitted from the first communication terminal and a second communication terminal and establishes a second session with the relay device, and destination information of the second communication terminal that establishes a third session with the conversion system; a receiving unit configured to receive start request information to start communication between the communication terminals from the first communication terminal; an extracting unit configured to extract destination information of each communication terminal and the conversion system stored in the storage unit, based on the received start request information; and a transmitting unit configured to tra

Abstract: One or more systems and/or methods for storing personal information within a first device and/or for providing personal information from the first device to the second device are provided. The first device (e.g., a smartphone) may identify a user interface (e.g., a movie streaming website) populated with user specified data (e.g., a password). The user specified data may be evaluated to identify personal information of the user (e.g., a movie streaming website password). The personal information may be stored within the first device. Responsive to determining that a second device (e.g., a smart television) displays a personal information input field (e.g., a movie streaming website password input field), an input event comprising the personal information may be provided from the first device to the second device. The input event may invoke the second device to input the movie streaming website password into the movie streaming website password input field.

Abstract: A hybrid-fabric apparatus comprises a black box memory configured to store a plurality of behavior metrics and an anomaly agent coupled to the black box. The anomaly agent determines a baseline vector corresponding to nominal behavior of the fabric, wherein the baseline vector comprises at least two different behavior metrics that are correlated with each other. The anomaly agent disaggregates anomaly detection criteria into a plurality of anomaly criterion to be distributed among network nodes in the fabric, the anomaly detection criteria characterizing a variation from the baseline vector, and each of the plurality of anomaly criterion comprising a function of a measured vector of behavior metrics. The variation can be calculated based on a variation function applied to a vector of measured behavior metrics having elements corresponding to member elements of the baseline vector.

Abstract: Embodiments of the present invention relate to system, method, computer program product embodiments and combinations and sub-combinations thereof for generating dynamic attribute elements and dynamic attributes for MBOs. An embodiment includes generating dynamic attribute elements for MBO metadata in a manner that enables a mobile application to directly access and modify dynamic attributes included within the dynamic attribute elements. In an embodiment, dynamic attributes are included within the dynamic attribute elements arbitrarily to synchronization sessions of a server and a mobile application. The embodiment also allows the mobile application to set a value associated with a dynamic attribute. Another embodiment includes embedding a dynamic attributes entity in generated client code and downloading dynamic MBO attributes and associated metadata when the client synchronizes with the server.

Abstract: Embodiments of the present invention disclose a user pairing method, a device and a system for realizing user scheduling. The method comprises: determining a first user of a time-frequency resource according to a preset resource allocation criterion; searching a preset pairing table according to a downlink channel state quantization code of the first user; and obtaining a paired downlink channel state quantization code which is paired with the downlink channel state quantization code of the first user, wherein the preset pairing table includes a pairing relationship among the downlink channel state quantization codes obtained by pre-calculating; identifying a paired user of the first user from users to be paired, wherein a downlink channel state quantization code of the paired user is the same as the paired downlink channel state quantization code. Through adopting of the present invention, complexity of real-time calculation of pairing during user scheduling can be lowered.

Abstract: Methods and devices for controlling machines are disclosed. A method for controlling machines is performed at an electronic device having one or more processors and memory. The method includes: providing a chat interface for a social network platform on the electronic device; providing a listing of social network contacts for a user account within the chat interface, the listing of social network contacts including at least a first contact that is a human user, and at least a second contact that is a machine; and establishing a chat session between the user account and the second contact which is the machine, wherein a chat message transmitted during the chat session causes the machine to perform a requested function of the machine.

Abstract: Provided are a device and method of managing data stored in memory. The device may include a buffer for storing data blocks including a head data block, a tail data block, and intermediate data blocks. Non-used blocks may be further included in the buffer between the head data block and the tail data block. The device may further include a controller for managing the data blocks within the buffer. The managing may include determining a shift direction for the data blocks based on a distribution of the data blocks within the buffer, shifting at least one data block from among the data blocks in the determined direction, and shifting the one or more non-used blocks in an opposite direction from which the at least one data block is shifted. As a result of the shifting, the data blocks may be aggregated within the buffer.

Abstract: Access to location information related to mobile devices is disclosed. A component can receive a subscription request related to returning location related data associated with a set of network event locating system (NELOS) information. NELOS information can be received from a NELOS component and can be derived from timed fingerprint location (TFL) information associated with a user equipment (UE). TFL information and NELOS information can be distinct from location information determined from conventional techniques, which can provide for additional benefit. The subscription request can indicate continuing access to location information without subsequent requests. Moreover, access can be via a push of information to a subscribing device.

Abstract: System and method for using multiple global identification subnet prefix values in a network switch environment in a high performance computing environment. A packet is received from a network fabric by a first Host Channel Adapter (HCA). The packet has a header portion including a destination subnet prefix identifying a destination subnet of the network fabric. The network HCA is allowed to receive the first packet from a port of the network HCA by selectively determining a logical state of a flag and, selectively in accordance with a predetermined logical state of the flag, ignoring the destination subnet prefix identifying the destination subnet of the network fabric.

Abstract: An apparatus for reporting connection setup request, includes a request transmitting unit configured to transmit a connection setup request for device-to-device communication to a network side when it is determined according to pre-obtained configuration information that the connection setup request for device-to-device communication can be transmitted to the network side.

Abstract: Features are disclosed for authentication of mobile device applications using a native, independent browser using a single-sign-on system. An authentication module within the mobile application can direct the mobile device's native browser to a URL to initiate authentication with an authentication appliance. The mobile browser can receive and store a browser-accessible token to indicate previous authentication performed by the user. The mobile application can receive from the application appliance and store a client application ID token that may be presented to network services for access. A second mobile device application may direct the same browser to the authentication appliance. The authentication appliance may inspect the persistent browser-accessible token and issue a second client application ID identity to the second application without collecting additional authentication information, or collecting additional authentication information that is different from the first authentication information.

Abstract: An embedded Universal Integrated Circuit Card (“eUICC”) controller may transfer wireless network service between different User Equipment (“UE”) by moving or exchanging one or more profiles between the eUICC of different UEs. The eUICC controller may directly access the eUICC of the UEs in order to control eUICC profile synchronization, disabling, downloading, and/or perform other eUICC management.

Abstract: Method of creating an information infrastructure for processing data throughput or a method for processing data throughput in a distributed computing system works on sensitive content (e.g., trade secrets) or select content (e.g., critical content) and generates or reduces sensitive/select data with configurable filters (expanding, contracting, hierarchical/orthogonal classifier filters) to separate and store sensitive/select data in designated, distributed data stores. Sensitive/select data stores may have security clearance requirements.

Abstract: Embodiments of the present disclosure provide a method, an apparatus, and a system for communication between an OpenFlow device and an IP network device. According to the embodiments of the present disclosure, an OpenFlow control message is used to carry payload information, a field value that is in a packet header and that is used to determine a protocol type, and identification information of the IP network device that are in a TCP/IP data packet of an IP network control plane protocol message in order to encapsulate the IP network control plane protocol message into the OpenFlow control message for transmission between an OFS and an OFC, such that communication between the OpenFlow device and the IP network device can be implemented, the OFC does not need to process a TCP/IP protocol stack twice, and extra overheads of the OFC are avoided.

Abstract: The present disclosure involves systems and methods of communicating between devices in a shopping session. In one aspect, a method includes receiving a session identifier associated with a shopping session of a user, the session identifier being generated based on a hash created from a shopping location and at least one other value associated with the shopping session. The method further includes notifying an electronic shopping system associated with the shopping location about a selected product from the shopping session based on the session identifier. The receiving and the notifying are each performed by a computing system.

Abstract: The present disclosure describes a system for dynamic transaction-persistent server load balancing. The disclosed system receives a client request associated with a new transaction. In response to receiving the client request, the system dynamically infers relative capacities of a plurality of servers coupled to the device in a network. In particular, the system maintains a set of variables corresponding to the servers. Each variable indicates a number of outstanding requests transmitted from the device to a respective server. The system infers relative server capacities and transmission latencies between the device and the servers based on a comparison of current values of the variables. The system identifies and selects a server associated with high capacity or low transmission latency between the device and the server relative to one or more other servers, and transmits an outstanding request corresponding to the client request from the new transaction to the identified server.

Abstract: Methods and systems are provided for allocating user device parameters based on one or more Internet Protocol versions with which a user device is capable of communicating. An indication is received that the user device is requesting to be authenticated in a wireless communications network. It is determined that the user device is capable of communicating in the wireless communications network using IPv6 only. One or more configurable user device parameters, such as a DNS server, are assigned to the user device based, at least, on the user device being capable of communicating using IPv6 only and not IPv4 only or IPv6 and IPv4. This eliminates a need for a new APN to be configured on the user device.

Abstract: A method includes loading a guest virtual machine onto a host system, determining, with the host system, an encapsulation method to be used in association with a virtual network associated with the guest virtual machine, determining an overhead value based on the encapsulation method, determining an adjusted maximum transmission unit (MTU) value based on the overhead value, and passing, information related to the adjusted MTU value from the host system to the guest virtual machine.

Abstract: Playlists having media items from more than one source are described. Media items in a first library are mapped to media items from an online media item store. Media items within the playlist that can be found in the first library will be played from the first library, while media items not within the first library will be played from the online media store. By identifying media items present in both libraries and playing them only from the first library, the described method can reduce the royalties needing to be paid by the online media store. Further methods are disclosed for setting limits on the number of media items that can be shared by a second library.

Abstract: A realtime kernel supports realtime communications between communicants operating on respective network nodes. The realtime kernel handles the complex tasks of connecting to communicants, virtual areas, and other network resources, switching those connections in response to user inputs, and mixing realtime data streams. The realtime kernel enables developers to focus on developing high-level communications functionality instead of low-level plumbing code. The realtime kernel imposes relatively low computational resource requirements so that realtime communications performance can be achieved using a wide range of computing devices and network connections that currently are available.

Abstract: An access control policy can be received. The access control policy can identify privileges of a client to use resources to perform authorized actions with the resources. A set of related actions that are related to the authorized actions can be determined. The access control policy can be modified to include at least one related action.

Abstract: In various example embodiments, systems and methods for administering machine access to a cloud service are presented. A first device or machine can access an enrollment service in a cloud environment using user-based credential data. The enrollment service can request registration of the first device with an authorization service. If the authorization service accepts the request, then the authorization service can provide credential data for the first device to use to access one or more cloud-based services. In an example embodiment, a third party application provides devices and an enrollment service with credential data that can be used to facilitate device enrollment with cloud services.

Abstract: A device pairing method relates to steps of transmitting authentication information to a second device from a first device via a physical connecting line. First, a connectivity interface on the second device is electrically connected to an authentication connectivity interface on the first device via a connecting line; second, the first device in the mode of the virtual authentication disk is electrically connected to the second device; third, authentication information in the virtual authentication disk is accessed by an application program of the second device; fourth, an electrical connection between the second device and the first device is disabled with the connecting line removed; finally, the first device is accessed by the application program of the second device when the authentication information is transmitted to a network interface on the first device through some wireless networks of the second device.

Abstract: Methods and systems are presented for accessing customer relationship management (CRM) information stored in a carrier system associated with a user of an identified client device. A client device is identified based on client device identification information received from a carrier system. CRM information associated with the identified client device is received from the carrier system, and data corresponding to at least a subset of the CRM information is output to the client device. The client device may be configured to pre-populate data fields of a transaction based on the data corresponding to at least a subset of the CRM information.

Abstract: Aspects of the present disclosure generally relate to one or more systems, methods, and/or devices for secure communication between devices, such as devices within a vehicle. For example, some vehicles have integrated mobile computing platforms that enable communication with an extended productivity device. However, communication between the mobile computing platform and the extended productivity device may lack sufficient security. As such, the present disclosure provides for secure communication between the mobile computing platform and the extended productivity device by verifying, for example, an identity of the extended productivity device.

Abstract: A request to establish a bi-directional full-duplex network connection is received. The request conforms to a half-duplex network connection protocol and the half-duplex connection protocol is a HTTP based protocol. The request is processed to determine a decision on whether to allow the bi-directional full-duplex connection. In the event the decision is to allow the bi-directional full-duplex connection, the bi-directional full-duplex network connection is established using the half-duplex network connection protocol. The bi-directional full-duplex connection utilizes a WebSocket communication protocol. Establishing the bi-directional full-duplex connection utilizes a plurality of half duplex connections. A confirmation that the bi-directional full-duplex network connection has been established is provided.

Abstract: A processing system includes a processor to construct an input message comprising a plurality of padding bits and a hardware accelerator, communicatively coupled to the processor, comprising a first plurality of circuits to perform a stage-1 secure hash algorithm (SHA) hash based on the input message, wherein the hardware accelerator comprises a first data path coupled between a first reference node and a first input node of the first plurality of circuits to feed a first padding bit of the plurality of padding bits to the first input node.

Abstract: Disclosed are various embodiments for distributing data items within a plurality of nodes. A data item that is subject to a data item update request is updated from a master node to a plurality of slave notes. The update of the data item is determined to be locality-based durable based at least in part on acknowledgements received from the slave nodes. Upon detection that the master node has failed, a new master candidate is determined via an election among the plurality of slave nodes.

Abstract: Systems, methods, and software described herein facilitate the management of virtual clusters in a large-scale processing environment. In one implementation, a method of operating a control node includes receiving a request to configure a virtual cluster with one or more data processing nodes, and identifying a tenant associated with the request. The method further provides identifying a namespace for the tenant, and identifying internet protocol (IP) addresses for the one or more data processing nodes. The method also includes generating namespace to IP address pairs for the one or more data processing nodes based on the namespace and the IP addresses, and configuring a domain name system (DNS) for the virtual cluster with the namespace to IP address pairs.

Abstract: Devices, server nodes and associated methods related to communication services applying webRTC are disclosed. The method performed by a device includes creating an RTCPeerConnection object and instructing the RTCPeerConnection object to create a RTCSessionDescription, SDesc_1, for a session containing audio and video components. The method further includes determining which capabilities that are supported by the device based on information in the SDesc_1, and further indicating information related to the determined capabilities to a first user on a user interface. A first user, when using the service, is enabled to select a type of user communication, based on the indicated information, that can be provided by the device.

Abstract: Telemetry data from a plurality of peer computers of a peer-to-peer network is aggregated via a computer network. Each of the plurality of peer computers sends telemetry data relating to transfer of a digital content item within the peer-to-peer network. A designated peer computer is quarantined from transferring a digital content item within the peer-to-peer network according to one or more health metrics of the peer-to-peer network derived from the telemetry data aggregated from the plurality of peer computers.