Abstract: A computer-implemented method is provided. The method includes executing a game application on one or more servers of a data center. The game application is for a game and the game is played by a first user of a first client device remote to the data center. The one or more servers interfaced with one or more encoders for compressing interactive video from the game application responsive to input from the first client device and streaming of the interactive video in a compressed format to the first client device for decompression and rendering to a display of the first client device. The method includes storing, at the data center, a recording of at least part of the game played by the first user using the first client device. The method includes storing, at the data center, state data for at least part of the game played by the first user using the first client device. The method includes generating a replay of the recording responsive to input from a second user device.

Abstract: Described herein is a computer implemented method comprising receiving a navigation event generated at an application; determining the navigation event is a start navigation session event and recording the event as a startpoint of a navigation session; determining an end of the navigation session has occurred and, in response, recording an endpoint of the navigation session. The method further comprises calculating a navigation session metric for the navigation session; determining a particular category of the navigation session; and determining a measure of navigation success for the navigation session based on the navigation session metric and particular category.

Abstract: Systems and methods of the present disclosure are directed to providing remote control capabilities in information technology infrastructure. In particular, systems and methods of the present disclosure can provide remotely control capabilities to facilitate the management, configuration, or maintenance of information technology infrastructure.

Abstract: Embodiments of the present invention provide a packet processing method, a forwarding plane device and a network device, the method includes: receiving, by a forwarding plane device, a first packet transmitted by a user, where an identity of the user is comprised in the first packet, and a forwarding table is comprised in the forwarding plane device; determining, by the forwarding plane device, an identity of a service according to a corresponding relationship between the identity of the user and the identity of the service as well as the identity of the user in the first packet; generating, by the forwarding plane device, a second packet by encapsulating the first packet with the identity of the service; and transmitting the second packet to a network device, to enable the network device to manage the service according to the identity of the service in the second packet.

Abstract: A system and method for secure authentication of user entity and user entity device identity. The system and method described herein allows an identity to be continuously proven because of user entity's behavior and their biometrics. With all the fraud and risk that exists today, if someone has a user entity's driver's license they can do a lot of harm. A primary identity provider passes user contextual and behavioral information to third party secondary identity providers to allow risk based continuous authentication and step up post-authorization authentication or termination of session as required upon detection of an anomaly.

Abstract: Methods, systems, and devices for wireless communications are described. When operating in a high-pathloss mode, wireless devices in a network may transmit or receive downlink control information (DCI) that schedules a transmission time interval (TTI) for a physical shared channel (such as a physical uplink shared channel (PUSCH) or a physical downlink shared channel (PDSCH)). A wireless device may determine one or more intervals that correspond to a periodic signal that collides with portions of the TTI. Based on the identified intervals, the wireless device may communicate over the physical shared channel during the TTI. In such cases, the TTI may overlap in time with the one or more intervals to allow communication of the periodic signal during the portions of the TTI. For instance, a periodic signal may be transmitted or received during each of the one or more intervals.

Abstract: A classification system is provided that separates unclassified pages into unclassified, separated documents and classifies the separated documents. The classification system applies a page-level recognition model to the unclassified pages to recognize the logical boundaries between documents and, based on the logical boundaries, separates the pages into unclassified, separated documents. The classification system further applies a document-level recognition model to classify the separated documents.

Abstract: An apparatus includes a processor to receive a request to provide a view of an object associated with a job flow, and in response to determining that the object is associated with a task type requiring access to a particular resource not accessible to a first interpretation routine: store, within a job queue, a job flow generation request message to cause generation of a job flow definition the defines another job flow for generating the requested view; within a task container in which a second interpretation routine that does have access to the particular resource is executed, generate the job flow definition; store, within a task queue, a job flow generation completion message that includes a copy of the job flow definition; use the job flow definition to perform the other job flow to generate the requested view; and transmit the requested view to the requesting device.

Abstract: An approach includes providing support multi-tenancy support on a DHCP protocol. The approach includes receiving a dynamic host configuration protocol (DHCP) packet, inserting a tenant-specific option information within the DHCP packet, and transmitting the DHCP packet with the tenant-specific option information.

Abstract: A system and method for a cloud callback platform, comprising at least a profile manager, callback manager, interaction manager, media server, context analysis engine, and context aggregator mechanism, allowing user to call business, agents in contact centers, or other users who are connected a cloud callback platform, and, failing to connect to the individual they called, or by request, allow for an automatic callback object to be created, whereby the two users may be automatically called and bridged together at a time when both users are available, and a context summary report is sent to one or more user.

Abstract: An electronic device includes at least one display, a communication circuit, at least one processor, and a memory. The processor is configured to obtain information on a first display aspect ratio associated with a current state of the at least one display if an input indicating initiation of a video call is received. The processor is configured to determine at least one first image ratio associated with the video call based on the information on the first display aspect ratio. The processor is configured to transmit, to an external electronic device, a first signal including information on the at least one first image ratio. The processor is configured to receive, from the external electronic device, a second signal including information on a second image ratio associated with the video call. The processor is configured to perform the video call based on the second image ratio.

Abstract: Methods and apparatuses for data transmission. A method implemented at a first network function may comprise obtaining information related to network slice selection; and sending a reroute message to an access network node, wherein the reroute message including a container comprising at least one information element of the information related to network slicing selection.

Abstract: A system and method for encrypting a data frame of a low-power communication protocol. The method includes providing an input data frame, the input date frame includes a random number, a unique identifier, and a payload data, encrypting the payload data, generating a Message Integrity Code (MIC), generating a rotating identifier by encrypting the unique identifier, and generating an output frame based on the generated rotating identifier, the generated MIC, and the encrypted payload data.

Abstract: An access control system includes an energy efficient access control that operates as a Wi-Fi access point that broadcasts a Service Set Identifier (SSID) as indicator of access control level to communicate with a mobile device with WPA2 PSK.

Abstract: Systems and apparatuses for provisioning computer services or resources and methods for making and using the same. In one embodiment, an exemplary method for performing an iterative search can include selecting a service from a group of available services for adjustment. An application associated with the selected service can be run, and an amount of resources consumed while the application is run can be captured. A provision level for the selected service, a provision type for the selected service or both can be adjusted based upon the captured amount of resources consumed. The method then can determine whether provision levels of the available services, provision types of the available services or both require further adjustment to be most performant. The approaches described herein advantageously can be applied, for example, to “right-size” or “scale” multiple resources.

Abstract: A mid-tier messaging system receives a request to initiate a communication session via a first messaging channel that includes a first messaging interface of a first messaging application provided at a user device and a first message provider of a plurality of message providers. The mid-tier messaging system establishes a first session that is mapped to the communication session. The mid-tier messaging system establishes the communication, using the first session, between the first messaging interface and the first message provider. The mid-tier messaging system provides, through the first session, first message communications between the first message provider and the first messaging interface. The mid-tier messaging system seamlessly switches to a second message provider service when the first message provider service cannot service an intent of the first communication session.

Abstract: Some embodiments of the subject technology provide a novel system for synchronizing content items among a group of peer devices. The content synchronizing system of some embodiments includes the group of peer devices and a set of one or more synchronizing servers communicatively connected with the peer devices through one or more networks. In some embodiments, the synchronizing system uses a star architecture, in which each peer device offloads its synchronization operations to the synchronizing server set. Without establishing a peer-to-peer communication with any other peer device, the particular peer device in these embodiments supplies an encrypted content item set along with the N?1 encryptions of a content key used to encrypt the content item set to the synchronizing server set so that this server set can distribute the encrypted content item set and an encrypted content key to each of the N?1 peer devices.

Abstract: Systems and methods for accessing remote digital services by using embedded circuitry included in an electronic device.

Abstract: There is described a device and method of removing unwanted data from original data for prohibiting unwanted data transfer between a first device and a second device along a communication pathway. The communication pathway includes at least one data channel and at least one control channel. The method includes providing programmable hardware at a position along the at least one control channel. Original data applied to the device includes control data and associated protocol data, the control data including wanted and unwanted data. The control data is checked to determine whether the associated protocol data conforms to at least one predetermined protocol mode criteria at the programmable hardware. The programmable hardware is terminated where the control data is deemed to be unwanted data. The resulting data which is left over is substantially free of unwanted data, enabling associated protocol data transmission along the data channel.

Abstract: The present disclosure relates to importing license data from a license metric tool server (LMTS) into a configuration management database (CMDB). License records are requested and received from the LMTS and are subsequently imported as into the CMDB of a client instance as configuration item (CI) data. In certain circumstances, a license record may have an identifier field (ID) value that does not correspond to a CI of the CMDB, resulting in the license record failing to import. The disclosed process involves flagging license records that fail import, and then clustering the flagged license records into suitable groups. The flagged license records are then re-pulled from the LMTS in groups, rather than using individual requests for each flagged license record. By effectively clustering of the flagged license records into groups, the disclosed importation process enables a reduction in processing, memory, and/or communication overhead, improving operation of the client instance.

Abstract: A non-transitory, processor-readable medium includes code representing instructions to cause a processor to perform a method. The method includes receiving, from a traffic filter at a boundary of a network, a network communication and determining the network communication is a first anomalous communication associated with a service that does not exist within the network, uses a non-readable character set, or includes a malicious payload. The method further includes, at least partially based on the determining, generating a first rule, at least partially based on an analysis of a subset of partial or exact fingerprints of the first anomalous communication. The first rule is communicated to the traffic filter for the traffic filter to filter, from network communications external to the network, a second anomalous communication.

Abstract: A network performance improvement method and an apparatus for user equipment. In the network performance improvement method, user equipment establishes a first PDN connection and transmits data of a first application program through the first PDN connection. Then, the user equipment starts a second application program and determines whether a current network status satisfies a quality of service requirement of the second application program. When determining that the current network status does not satisfy the quality of service requirement of the second application program, the user equipment starts to establish a second PDN connection, and transmits, after the second PDN connection is successfully established, at least a part of application data of the second application program through the second PDN connection.

Abstract: A method comprising: receiving portions of a search query searching amongst multiple entries in a set of one or more data sources; triggered by the receipt of each respective portion, performing a respective caching operating comprising querying each of one or more data sources of the set to retrieve entries matching the search query as composed from the portion or portions received so far, and caching the retrieved entries in a corresponding cache group for each of the queried data sources; rendering an application view displaying a visual representation of at least some of the retrieved entries; and with each caching operation, selecting one or more of any newly retrieved entries in the cache following the retrieval based on the search query as now including the respective portion of the search query, and updating the application view to include the one or more selected entries from the cache.

Abstract: A permissions management system is disclosed for enabling a user to securely authorize a third-party system to access user account data and initiate transactions related to a user account, without disclosing to the third-party system account credentials. The system enables the user to also securely de-authorize the third-party system. For example, records may be automatically generated that securely store account information, including one or more permissions related to the account and/or the third-party. A token associated with a record may be shared with the third-party system, but neither the record itself, nor the user account credentials, may be shared with the third-party. Accordingly, the third-party may request user account data and/or initiate transactions by providing the token, but does not itself know, e.g., the user account credentials. Further, the user may set various permissions related to the token, and may also revoke the token (e.g.

Abstract: A download module accesses a download queue including at least two file download requests from an application running on a client device of a server. The application and each of the file download requests is associated with a context that comprises a set of context components that each indicates a part of the application. The file download request context components indicate parts of the application that use the requested file and the application context components indicate parts of the application that are active. The download module ranks each of the file download requests based on a comparison of the respective file download request context components of each file download request to the application context components of the application. The download module then selects two or more file download requests in the download queue for concurrent execution based on the respective rankings of the file download requests in the download queue.

Abstract: A portable web widget for distribution of multimedia content over a computer communications network, the web widget adapted for viral distribution and execution in a web browser on a client device wherein the widget includes a content retrieval component communicatively coupled to an application server over the computer communications network, the content retrieval component configured to retrieve one or more multimedia display files and metadata into an embedded electronic commerce store in the web widget after it enters an active operational mode, the widget also including a content preview component configured to enable a streamed execution of a portion of the multimedia content files associated with each of the multimedia display files from a multimedia content distribution system executing on the application server, and a transaction processing component operative to execute and complete a commercial transaction in the embedded electronic commerce store pertaining to the multimedia content files.

Abstract: Devices, methods, systems, and computer-readable media for using connectionless loops for monitoring data link health using connectionless loops over redundant Internet Protocol (IP) networks are described herein. One system includes an IP network device connected to a device used by a party to communicate with another party through an IP network, a first network device operating a first network and referring to the IP network device with a first identifier, a second network device operating a second network and referring to the IP network device with a second identifier, an intermediary device allowing communication between the first and second networks, and instructions to create a connectionless packet, send the packet through the first network addressed to the second identifier, such that the packet is routed from the first network to the intermediary device and into the second network based on the second identifier, and receive the packet.

Abstract: A computer system including a memory, a network interface, and at least one processor is provided. The at least one processor can transmit, via the network interface, a first message to a server application to initiate a handshake process; receive, via the network interface, a first copy of a security certificate from the server application; determine whether the first copy is valid; store, in response to a determination that the first copy is valid, the first copy in the memory; establish an initial secure connection to the server application; transmit, via the network interface, a second message to the server application to request a subsequent secure connection to the server application; receive, via the network interface, a second copy of the security certificate from the server application; determine whether the second copy matches the first copy; and establish the subsequent secure connection to the server application.

Abstract: Systems, methods, and computer-readable media for offloading session management processing into a forwarding plane. In some examples, a subscriber is coupled to a network endpoint through a session manager during a network session of the subscriber in a network environment. A session manager offloading system of the session manager can be maintained in a vector packet processing system in a forwarding plane of the network environment. The session manager offloading system can be configured to offload processing from the session manager into the forwarding plane. Further, at least a portion of subscriber traffic in a stream between the subscriber and the network endpoint through the session manager can be intercepted. Subsequently, the at least the portion of the subscribed traffic that is intercepted can be processed at the session manager offloading system as part of offloading the processing from the session manager into the forwarding plane.

Abstract: A hands-free device is disclosed, in which a memory and a hardware processor connected to the memory are included. The hardware processor establishes a connection with a mobile phone using a hands-free communication protocol for making a hands-free call. The hardware processor establishes a connection with the mobile phone using a data transfer protocol for transferring phone data about a phone to receive the phone data transferred from the mobile phone, and stores the phone data into the memory. When a phone communication state of the mobile phone is transitioned while the phone data is being transferred, the hardware processor executes transfer control in accordance with transfer criteria, each depending on a type of the phone data being transferred and the phone communication state after the transition.

Abstract: An information processing system includes a control unit (200) that controls: a personal agent personalized to a user; and a group agent that provides support for a group made up of a plurality of users corresponding to a plurality of the personal agents.

Abstract: The present disclosure is directed towards systems and methods for validation of a secure socket layer (SSL) certificate of a server for clientless SSL virtual private network (VPN) access. An intermediary device can receive a first request from a client for a clientless SSL VPN connection to a first server. The intermediary device can determine, using a preconfigured policy, that the first server in the first request meets a condition of the preconfigured policy. The intermediary device 801 can perform, responsive to the determination, an action to validate a SSL certificate of the first server using one or more certificate authority (CA) certificate files available to the intermediary device. The one or more CA certificate files can be specified by the preconfigured policy for the action.

Abstract: Systems, methods, and related technologies for parsing network traffic are described. Network traffic transmitted by a set of devices communicatively coupled to a network is obtained. A set of protocol fields for parsing the network traffic is determined. The set of protocol fields are associated with a set of processing engines. The network traffic is parsed to determine a set of field values from the network traffic based on the set of protocol fields. The set of field values are transmitted to the set of processing engines.

Abstract: The present disclosure describes a method, system, and non-transitory computer readable medium that includes instructions that permit users of different secure communication networks to exchange secure communications. A secure communication platform includes a user database that allows users from different secure communication networks to access keys for recipients outside of their network. Additionally, the secure communication platform provides a high degree of trust regarding the sender's identity, allowing the receiving network to trust the sender.

Abstract: A portable web widget for distribution of multimedia content over a computer communications network, the web widget adapted for viral distribution and execution in a web browser on a client device wherein the widget includes a content retrieval component communicatively coupled to an application server over the computer communications network, the content retrieval component configured to retrieve one or more multimedia display files and metadata into an embedded electronic commerce store in the web widget after it enters an active operational mode, the widget also including a content preview component configured to enable a streamed execution of a portion of the multimedia content files associated with each of the multimedia display files from a multimedia content distribution system executing on the application server, and a transaction processing component operative to execute and complete a commercial transaction in the embedded electronic commerce store pertaining to the multimedia content files.

Abstract: A message management service can enable a client to search and retrieve of messages from one or more messaging services. The message management service can stage delivery of results to the client to reduce response time for identification of messages satisfying a query. Initially, the message management service can send information descriptive of results, which the client can display. The message management service can send subsequent responses including supplemental information associated with a result and/or actual messages.

Abstract: In general, various aspects of the present invention provide methods, apparatuses, systems, computing devices, computing entities, and/or the like for generating and managing custom attributes and corresponding values for domain objects defined within microservices. In accordance with various aspects, a method is provided that comprises: receiving a custom attribute request for a domain object defined in a microservice that comprises a domain object identifier, a custom attribute to add to the domain object, and a value type for the custom attribute; identifying, based on the domain object identifier and the value type, a custom value table for the domain object that comprises placeholder fields; identifying a placeholder field that is available in the custom value table; and storing a record in the attribute schema table for the domain object and the custom attribute comprising mapping data that maps the custom attribute to the placeholder field for the custom value table.

Abstract: The present invention relates to the method and the system for initializing secure network access for POS terminals. Said system comprises a terminal backend system and a POS terminal. The POS terminal is provided with: a security module, which was preloaded with a terminal default public key certificate, a private key file, and a CA public key certificate of the terminal backend system in the setting of leaving the factory; a transaction module, which is used for performing the acquiring operation with the following core trading module; and a parameter initializing module, which is used for implementing network access.

Abstract: A method for performing communication in a wireless communication system in includes establishing, by a network entity, a context of a user equipment (UE) in a network, receiving a message for registration request from the UE in a registered state, identifying that the UE is genuine by executing an authentication procedure with the UE, and in case that the UE is genuine, performing a deletion of the established context of the UE and a process of the registration request.

Abstract: An authentication/authorization server that manages access to a resource server is provided. The server comprises a management unit that manages an expected completion time of a change to an access destination authentication/authorization server with respect to a client for which the access destination authentication/authorization server is to be changed; an issuing unit that issues an access token for accessing the resource server, the token having an expiration time; and a response unit that returns the access token to the client, wherein if an expected completion time of the change to the access destination authentication/authorization server is managed with respect to the client that is the source of the token issuance request, the issuing unit sets the expiration time of the access token that has been issued to expire no later than the expected completion time of the change.

Abstract: A system for detecting and profiling endpoints of a computer network is provided. The system includes a first computing device including at least one processor in communication with at least one memory device. The first computing device is in communication with a computer network. The at least one memory device stores a plurality of instructions, which when executed by the at least one processor cause the at least one processor to receive a plurality of packets transmitted to the computer network, determine an identity of a first end point device associated with the plurality of packets, determine a behavior pattern for the first end point device based on the plurality of packets, and generate a synthetic profile for the first end point device based on the identity and the behavior pattern.

Abstract: A network application program product and a method for processing an application layer protocol are provided. The network application program product includes a network application program executed in a user mode and a packet filtering module executed in a kernel mode. The network application program transmits connection information, associated with network connection to the network application program, to the packet filtering module. The packet filtering module captures a to-be-processed packet on the network connection according to the connection information; analyzes the to-be-processed packet into at least one protocol data unit; compares the protocol data unit with preset code content; and transmits the protocol data unit to the network application program or the data access module according to the comparison result for later processing.

Abstract: A hook driver and a UWP load modifier can be employed on a Windows device to modify the process of loading UWP applications so that both UWP and Win32 applications can be run in kiosk mode without needing to run Windows Explorer in a typical manner. To accomplish this, the UWP load modifier can implement a proxy function that is called when the UWP loader attempts to launch a UWP application. In some configurations, when the proxy function is called, it can start Windows Explorer, cause the UWP application to be launched while Windows Explorer is running and then stop Windows Explorer once the UWP application is launched. In other configurations, when the proxy function is called, it can cause the UWP application to be launched in a separate desktop in which Windows Explorer is running and then, after it is launched, move the UWP application to the default desktop.

Abstract: A session management method, device, and system, such that a terminal can access a local data network using a local user plane function (UPF) network element even when the terminal is out of a management area of a remote anchor session management function (SMF) network element. The method includes: receiving, by an intermediate session management network element, one or more local data network access identifiers (DNAIs); and determining, by the intermediate session management network element, a target DNAI based on current location information of a terminal and the one or more local DNAIs, where the target DNAI is used to select a local session management network element for the terminal.

Abstract: A system and method for secure storage and management of transitory data, comprising at least a profile manager, a callback manager, a context analysis engine, and a vault manager, which allows a user to create a data container to store data preferences, which encrypts the data stored within a data container, which creates a password for accessing the data container, which temporarily stores the data container, which manages data container interactions between the system user and a second user, such as a business enterprise, and which establishes default preferences and creates a default container based upon context content data.

Abstract: The technology disclosed relates to formulating and refining field extraction rules that are used at query time on raw data with a late-binding schema. The field extraction rules identify portions of the raw data, as well as their data types and hierarchical relationships. These extraction rules are executed against very large data sets not organized into relational structures that have not been processed by standard extraction or transformation methods. By using sample events, a focus on primary and secondary example events help formulate either a single extraction rule spanning multiple data formats, or multiple rules directed to distinct formats. Selection tools mark up the example events to indicate positive examples for the extraction rules, and to identify negative examples to avoid mistaken value selection. The extraction rules can be saved for query-time use, and can be incorporated into a data model for sets and subsets of event data.

Abstract: An audio mixing system including an on-site digital audio workstation and an off-site audio workstation may be provided. The on-site digital audio workstation may be configured to receive a number of audio data channels and may produce a multi-channel mix by mixing the number of audio data channels. The off-site audio workstation may be coupled, by a remote dynamic host configuration protocol server, to the digital audio workstation and may transmit mixing control data to the digital audio workstation, thereby changing properties of the multi-channel mix.

Abstract: A system and method for topology construction in hybrid cloud environments includes receiving connection information from a local perimeter edge router of a local network that has a known topology and receiving connection information from a remote perimeter edge router of a remote network that is provided by a cloud provider. The received local perimeter edge router connection information is associated with the received remote perimeter edge router connection information. The associated connection information is normalized to a generic model, the generic model representing connections having different link layer policies in a generic way and the normalized connection information is applied to a network topology of the local network and the remote network.

Abstract: A shared session cache can be accessible by multiple load balancers, and can indicate whether client devices are associated with specific backend servers of a server pool. When a client device connects to a load balancer, the load balancer can use the shared session cache to determine if the client device is already associated with a specific backend server. If so, the load balancer can connect the client device to that specific backend server so that it can continue an existing session with the specific backend server. If not, the load balancer can select a new backend server for the client device, connect the client device to the newly selected backend server, and create an entry in the shared session cache indicating that the client device is associated with the newly selected backend server.

Abstract: A Session Management Function (SMF) provides session and service continuity for a User Equipment (UE) transitioning between User Plane Functions (UPFs). The SMF establishes a first session between the first UPF and the UE using a first network address. The SMF determines that the UE transitions to the second UPF and establishes a second session between the second UPF and the UE using a second network address for new flows on the second session. The SMF queries the first UPF to determine any ongoing flows in the first session. The first UPF forwards packets in the ongoing flow(s) to the UE via the second UPF. The second UPF forwards packets in the ongoing flow(s) to the first UPF with the first network address. The SMF directs the second UPF to replace the first network address with the second network address in packets of a new flow for the UE.