Abstract: Examples herein describe systems and methods for concealing internal applications that are accessed over the internet. A user device can select a remote internal application to access using a client. The user device can send an access request to an open listening port of an access server. The access server can be a gateway and proxy to the internal application, which can reside elsewhere. The access server can open a different randomized access port for establishing the connection by proxy to the internal application. The port number for the access port can be identified in the access request at the listening port. The access server can open the access port for a short time interval. The connection can be made through the access port during that time interval. A firewall can then close the access port but maintain an established connection between the user device and the internal application.

Abstract: A batching module that prepares a plurality of blocked expressions for batch evaluation. The plurality of blocked expressions comprises a plurality of expressions in a blocked state. The batching module divides the plurality of blocked expressions into one or more partitions. For each particular partition of the one or more partitions, a single batch processing call is dispatched to an application server to perform a batch evaluation.

Abstract: In one embodiment, a method includes creating on a per-tunnel basis, by a hardware processor, statistics about overlay-encapsulated packets which are received by or sent by the hardware processor across an overlay network, including counting events associated with de-encapsulation of one or more inner packets from an overlay-encapsulated packet; recording, by the hardware processor, the statistics in association with a virtual network identifier and a tunnel identifier that identifies a tunnel on which the overlay-encapsulated packets are received or sent; and maintaining, by the hardware processor, a table indexed for the virtual network identifier and the tunnel identifier, the table including the virtual network identifier; the tunnel identifier; and statistic bucket identifiers pointing to locations where statistics associated with the virtual network identifier and the tunnel identifier are stored.

Abstract: The playback device 2 receives fragment data of content via the network 4 to play back the content on the basis of the fragment data. The playback device 2 alternately connects the servers 3 distributing the content and receives the acquisition number of the fragment data continuing in the content from each server 3. The player 16 measures the network characteristics when the fragment data is distributed from the server 3 to the playback device 2. The player 16 compares the respective network characteristics of the servers 3, selects the server 3 with the best network characteristic as the high priority server 3, decides the server 3 other than the high priority server 3 as the low priority server 3, and increases the second acquisition number from the high priority server 3 above the third acquisition number from the low priority server 3.

Abstract: Technologies for seamless data streaming include a control server and one or more client computing devices. A client computing device receives user presence data indicative of whether a user is nearby from one or more sensors. The client computing device may receive user interest data indicative of the user's interest level in the current data stream from one or more sensors. The control server identifies available client computing devices based on the user presence data, selects a target client computing device, and causes the data stream to transition from the current client computing device to the target client computing device. The target client computing device may be selected based on proximity of the user or the user's interest level in the data stream. The volume or balance of the data stream may be adjusted to provide a smooth transition between client computing devices. Other embodiments are described and claimed.

Abstract: Systems and methods observe and classify device events. A model containing a set of features to be observed can be determined based on machine learning and training methods. A client application can issue a transaction request to an operating system service. A determination can be made whether the operating system service, a method associated with the transaction request, and the client application are currently being observed. In response to determining that the operating system service, a method associated with the transaction request, and the client application are being observed, a behavioral vector associated with the client application can be modified to indicate that the feature represented by the method is associated with the client application. The behavioral vector can be used to determine if the client application is malware.

Abstract: Methods and apparatus for providing multi-provider services in a virtualised network. The method in a first lifecycle management, LCM component, in a virtual network; wherein the virtual network comprises trusted provider configured to provide a decentralised trust system between a plurality of LCM components controlled by different service providers in the virtual network. The method comprises storing a detailed description of one or more local services that the first service provider is capable of providing; generating a local tag representative of the one or more local services, wherein the local tag comprises less detail about the one or more local services than the detailed description; and enrolling with the decentralised trust system using the local tag.

Abstract: Mechanisms are provided for implementing intelligent input/output (I/O) operation completion modes in a high-speed network. An application thread executing on a central processing unit in the data processing system, receives a first indication to enter a mode of operation. The application thread enters the mode of operation, arms an arm file descriptor, and processes further completions that enter the completion queue until a second indication is received indicating that the mode is to be exited. Responsive to receiving the second indication to exit the mode, the application thread exits the mode of operation and disarms the arm file descriptor.

Abstract: A system, method and computer program product for retrieving trajectory data from huge datasets. In the method, there is received, at a processor device, a user query including a request for displaying trajectory data at a user device. From the user query, a query type and a current map visualization scale setting (mapscale) for visualizing the trajectory data on the user device display is determined. Then, responsive to a user query type and the determined mapscale setting, a corresponding reference level is selected. Based on the selected reference level, there is accessed from a memory storage device a data set of compressed trajectory data. This compressed trajectory data set is communicated to the user device, for presentation on the user device display. In one aspect, the system and method is adaptive, enabling storage and retrieval of trajectory data according to various degrees of visualization or granularity.

Abstract: A communication device may send a first negotiation request including first version information to a first external device via a communication interface of the communication device, execute first communication with the first external device via the communication interface by using the predetermined communication protocol of a second version, send a second negotiation request including second version information to the first external device via the communication interface in a case where an error notification is received from the first external device in the first communication, and execute second communication with the first external device via the communication interface by using the predetermined communication protocol of the first version.

Abstract: Example implementations relate to software updates of a plurality of computing systems. An example system includes a plurality of computing systems including a first computing system and a second computing system. The first computing system includes a first board management controller and the second computing system includes a second board management controller. The first computing system and the second computing system are capable of staging from each other through the first board management controller and the second board management controller via a network protocol.

Abstract: A triggering system of a message processing service invokes a dispatch function to execute code to determine a set of message consumption functions to launch in order to process a set of messages from a queue. The dispatch function determines, based at least in part on the number of messages in the queue, the number of message consumption functions of the set that are to process these messages. The dispatch function invokes, based on the determination, the set of message consumption functions to process the set of messages from the queue.

Abstract: Methods, devices and systems for computing interactive customized content in response to a scan of a machine-readable label are provided. Illustrative methods may include receiving, from a user, a scan of a machine-readable optical label captured using a camera of a mobile device. Methods may include determining, based on the scan, a redirect Uniform Resource Locator (URL). Methods may include generating, based on a user profile and a redirect service that is accessed using the redirect URL, comprising the customized content associated with the scan. Methods may include redirecting the user to a target landing page URL, and providing, to the user through a browser on the mobile device, a target landing page that includes the customized content.

Abstract: Systems and processes of accessing selected backend services throughout a software development lifecycle with a singly deployable mobile application is provided. The method includes deploying a mobile application a single time on a mobile device during a development lifecycle. The method further includes providing the singly deployed mobile application access to different service endpoint destinations during the development lifecycle based on one or more application policies associated with at least the mobile application.

Abstract: Disclosed herein are a method, a device and a storage medium of forwarding voice information in instant messaging. The method comprises: acquiring voice information to be forwarded and a receiving user which are selected by a sending user; if it is determined that the voice information to be forwarded is voice information inputted by the sending user, forwarding the voice information to be forwarded to the receiving user. The forwarding efficiency can be increased by applying the technical solution of the present invention.

Abstract: The present application provides methods and apparatuses for scheduling multi-flow transmission. A method includes: receiving from a base station, a first MAC layer configuration parameter corresponding to a first MAC entity and a second MAC layer configuration parameter corresponding to a second MAC entity, each comprising a set of mapping and a MAC-layer related parameter corresponding to the set of mapping; executing the mapping corresponding to each MAC entity; and independently executing a MAC layer function based on the MAC layer-related parameter corresponding to each MAC entity. Embodiments of the present application can satisfy a demand of multi-flow transmission.

Abstract: A system and method of sharing content by using a plurality of storages is provided. A mobile communication terminal includes a storage information collecting unit collecting a plurality of pieces of storage information about the plurality of storages connected to the mobile communication terminal, a User Interface (UI) generating unit dividing the plurality of storages according to attributes that are previously configured, based on the plurality of pieces of storage information, and generating a storage share setting screen with respect to the plurality of storages, a display unit displaying the storage share setting screen, and a storage setting unit activating sharing of content stored in the plurality of storages, for each of the plurality of storages.

Abstract: Systems, methods, and related technologies for analyzing traffic based on naming information are described. In certain aspects, name information and address information from a name translation response are stored. The name information is associated with a device based on the device sending a communication to an address associated with the name information.

Abstract: A method coordinates an exchange of power between a plurality of technical small units on the one hand and a transmission network on the other hand. A central control device forms a general schedule from individual schedules of all available small units and controls the exchange of power of the small units with the transmission network according to the general schedule, wherein a delta schedule is calculated by the control device from a balancing of the general schedule and a predetermined call-off plan of a network operator or an electricity exchange. A central memory connected to the transmission network is controlled according to the delta schedule, such that the central memory exchanges an electrical compensation power with the transmission network, such that the technical small units and the central memory together carry out the call-off plan.

Abstract: A method of communication, in which a communicating device is situated behind a residential gateway able to implement the QUIC (Quick UDP Internet Connection) protocol and connected to a plurality of paths Pi, where i=1, . . . , N, on which the gateway can dispatch data packets received from the communicating device, and receive packets of data intended for the communicating device. The method includes: the gateway associating a respective connection identifier C_ID #i with each of the paths Pi; and, when the gateway receives a data packet from the communicating device, the gateway transmits this data packet on one of the paths Pi while taking into account the connection identifier C_ID #i corresponding to this path Pi.

Abstract: Server-side chart layout for web applications is provided. Output of a server-side layout engine is exposed on the web via a server-side web service and a client-side web player that communicates with the web service. The web player is operative to send chart definitions to the web service, and receive a scene graph of a resultant chart layout. The scene graph includes normalized and annotated information to draw the chart, animate transitions, implement interactivities, and provide standardized accessibility locally within a web client. Aspects enable chart fidelity across native and browser endpoints, and provide faster chart load and render performance that is unaffected by growth of data size or expansions in provided chart features.

Abstract: Systems and methods for managing multiple wireless devices are disclosed. An exemplary system includes multiple domains each having a particular type of wireless device management system and respective (application programming interface) APIs. API call modules corresponding to each domain enable accessing of the APIs exposed by each of the respective domains. A management console enables compiling of a consolidated list of devices and users from each of the device management systems into a single view. An exemplary method includes querying multiple domains to obtain user information, compiling a consolidated list of users, displaying the consolidated list in a user interface, selecting a user from the consolidated list, and submitting a command to either all or a specific domain for the selected user.

Abstract: A Remote Direct Memory Access (RDMA) based data transmission method is disclosed. In this method, an RDMA network interface card is used to encrypt data to improve the security of data transmission. In addition, the data encryption and decryption operation is implemented inside the RDMA network interface card and is transparent to software, thereby ensuring security without adversely affecting performance of an application program.

Abstract: A mobile announcement system distributed on one or more servers operably coupled to one or more client computing devices and one or more service provider computing devices and one or more mobile announcement devices by a public network which supports a mobile announcement program accessible by browser based on-line processing or downloadable by the client computing devices or the service provider computing devices to establish on-line or off-line wired or wireless connection with one or more mobile announcement devices which operate based on pre-selected announcement conditions to make visual or audio announcements.

Abstract: Systems and methods for managing a network are disclosed. One method can comprise causing transmission of a first beacon and a second beacon associated with available networks. After receiving a first request associated with the first beacon, the first request may be suppressed. Thereafter a second request may be received from the user device associated with the second beacon, and access may be provided to a network in response to the second request.

Abstract: A processor of a storage controller stores a parameter according to a command that has been transferred from a front-end unit to a first area in a first memory area and issues notification to the front-end unit regarding an address of a second area in a second memory area which is mapped to the first area, the front-end unit generates a data packet whose destination is the notified address and stores the generated data packet at the address of the second memory area, and an interface unit reads the parameter stored in the first area in the first memory area which is mapped to the second area of the address based on the destination address stored in a header of the data packet which has been stored in the second memory area and executes processing of the system function according to the command.

Abstract: Methods, apparatus and articles of manufacture for distributing communication of a data stream among multiple devices are disclosed. Example methods disclosed herein include sending a message from a first electronic device to a second electronic device to announce the first electronic device is available for inclusion in a shared connection to be established by the second electronic device with a service provider, the shared connection to split a first data stream from a source into a plurality of partial data streams to be distributed among a plurality of electronic devices. Disclosed example methods also include establishing a data connection with the service provider to receive a first one of the partial data streams associated with the shared connection. Disclosed example methods further include relaying the first one of the partial data streams associated with the shared connection from the service provider to the second electronic device.

Abstract: A method, device and system for correcting errors in a group of received packets having a redundant packet. The method includes determining an inconsistent bit indicator for a bit position of the packets, determining a bit reliability indicator indicative of a potential bit error location in at least one packet, calculating a number of potential bit error locations for the bit position and identifying a correctable bit location accordingly. A method, device and system for correcting an error in a received packet. The method is adapted to calculate a checksum value of the received packet, verify if the checksum value is indicative of at least one bit error in the received packet, identify a predefined Checksum Pattern Type (CPT) according to the checksum value and determine at least one bit error event (BEE) accordingly. A method, device and system for decoding a plurality of received fountain encoded symbols.

Abstract: A Delay Indicator parameter is contained in CoAP messages to reflect delay tolerance information. The Delay Indicator is leveraged by CoAP Clients and CoAP Servers to improve their behavior such as entering sleep mode to save energy while not violating delay requirements. A timeout mechanism for CoAP Response is enabled by a RESPONSE_Timer based on the Delay Indicator in CoAP ACK. Cancellation of CoAP Requests is enabled by leveraging the delay tolerance information as indicated by Delay Indicator.

Abstract: A method for data communication between a first node and a second node over a data paths coupling the first node and the second node includes transmitting messages between the first node and the second node over the data paths including transmitting at least some of the messages over a first data path using a first communication protocol, and transmitting at least some of the messages over a second data path using a second communication protocol and determining that the first data path is altering a flow of messages over the first data path due to the messages being transmitted using the first communication protocol, and in response to the determining, adjusting a number of messages sent over the data paths including decreasing a number of the messages transmitted over the first data path and increasing a number of messages transmitted over the second data path.

Abstract: Systems and methods for establishing a secure connection are described. A server receives a plurality of routing tokens for establishing a service connection between a service node and the server along a network path through a plurality of network devices. The routing tokens can be validated by a corresponding network device. The server transmits a packet including the routing tokens to a first network device. The first network device validates a first routing token associated therewith, then directs the packet along the network path to a second network device, and so forth, until each of the network device receives and validates their routing token. The server establishes a cryptographic context between the service node and server for establishing a secure channel between the service node and the server. The server transmits a service node routing token to the service node via the secure channel for validation.

Abstract: An apparatus in one embodiment comprises a host device configured to communicate over a network with a storage system comprising a plurality of storage devices. The host device comprises an MPIO driver that is configured to deliver input-output operations from the host device to the storage system over the network. The MPIO driver is configured to obtain a command generated by the host device under a first protocol for communicating with one or more of the storage devices. The command is directed to a target storage device of the plurality of storage devices. The target storage device is configured to communicate using a second protocol that is different than the first protocol. The MPIO driver is further configured to convert the command for communication under the second protocol and to provide the converted command to the target storage device.

Abstract: A server has a processor and a memory storing instructions executed by the processor to maintain an ephemeral gallery of ephemeral messages, where each ephemeral message is a photograph or a video. An ephemeral message is posted to the ephemeral gallery. The ephemeral message has an associated message duration parameter and a gallery participation parameter. An ephemeral message is removed from the ephemeral gallery in response to the identification of an expired gallery participation parameter. The ephemeral gallery is eliminated upon expiration of either a gallery timer or upon expiration of the gallery participation parameter of a last message posted to the ephemeral gallery. The ephemeral gallery is preserved in response to a gesture applied to an indicium to save the ephemeral gallery to produce a preserved gallery.

Abstract: Disclosed is a method for continuous in-line monitoring of data-centric traffic to guarantee application performance. The method includes, in each switch of a plurality of switches in a network fabric, grouping all packets entering each respective switch of the plurality of switches based on either 5-tuple applications or EPG based applications, collecting performance statistics at every hop in the network fabric across all flows in—line in a flow table maintained in each respective switch and periodically exporting the performance statistics to analysis module.

Abstract: A technique for Transport Protocol, TP, selection and setup of a connection between a client and a server is disclosed. An exemplary method aspect (in the client), comprises the steps of preparing a session setup message comprising: i) setup information for at least one candidate TP, and ii) a preference order for setup of the at least one TP; transmitting the prepared session setup message towards the server; and receiving, in response to the transmitted session setup message, a setup response message comprising setup information pertaining exclusively to one TP selected for the connection. A further method aspect (in the server) comprises the steps of receiving the session setup message; selecting, depending on availability of the candidate TPs, the most preferred TP on the basis of the preference order; and transmitting, in response to the received session setup message, the setup response message.

Abstract: An overlay network for use with a data network that routes packets from one location on the data network to another location on the data network, the overlay network comprising one or more software nodes, at least one of the software nodes configured to receive commands from an application, the application including software for generating the commands and sending the commands to the at least one of the software nodes, the commands used by the at least one of the software nodes to control routing of packets, generated by the application, through the data network. In addition, a method of routing packets through a physical network by providing one or more software nodes connected to each other over the physical network to form an overlay network and forming a communications channel between at least one of the software nodes and an application, wherein the application instructs the at least one software node on how to route data over the physical network.

Abstract: A network device providing audio-video packet delivery over a local area network may include a memory and at least one processor. The at least one processor may be configured to receive data packets from a server, the data packets being addressed to an electronic device downstream from the network device. The at least one processor may be further configured to determine whether the data packets satisfy an offload condition. The at least one processor may be further configured to, when the data packets satisfy the offload condition: transmit, to the server, acknowledgement packets corresponding to the received data packets, store the data packets in a buffer, transmit the data packets to the electronic device, and retransmit the data packets to the electronic device responsive to request therefor, the retransmitted data packets being retrieved from the buffer.

Abstract: An access point that implements operating modes in which beacons may be selectively disabled. Beacons may be disabled when no device is actively associated through the access point. Beacons may be enabled in response to one or more triggers, which may include events such as a client forming an association through the access point following a probe request message identifying the access point. In addition, active beaconing may be triggered by user input or may occur during periodic brief intervals that allow client devices to discover the network identifier for the access point. Selective control of beaconing may lead to more effective wireless communication, particularly in areas where users congregate with computers implementing soft APs for personal networks.

Abstract: Techniques leveraging CPU flow affinity to increase throughput of a layer 2 (L2) extension network are disclosed. In one embodiment, an L2 concentrator appliance, which bridges a local area network (LAN) and a wide area network (WAN) in a stretched network, is configured such that multiple Internet Protocol Security (IPsec) tunnels are pinned to respective CPUs or cores, which each process traffic flows for one of the IPsec tunnels. Such parallelism can increase the throughput of the stretched network. Further, an L2 concentrator appliance that receives FOU packets is configured to distribute the received FOU packets across receive queues based a deeper inspection of inner headers of such packets.

Abstract: Various systems, device and automated processes allow video streaming hosts or other server devices to submit their media access control (MAC) addresses to a backend address server operating on a wide area network (WAN) such as the Internet. Client devices attempting to subsequently contact the server device can contact the address to obtain the MAC address of the target server, thereby allowing the client device to locate and contact the server device using the obtained MAC address.

Abstract: A method is implemented by a network device that receives a packet at an access gateway function from a residential gateway, detects an Ethertype for the received packet, detects a version for the received packet, looks up session and state information for the packet as a result of the detecting of the Ethertype and the version indicating that the packet is a fixed mobile convergence (FMC) user plane (UP) encapsulation, and processes the packet according to policies for FMC UP encapsulation.

Abstract: Providing secure software defined storage includes identifying data directed to be stored in a software defined storage location, intercepting the data, performing a security operation on the intercepted data, and transmitting the data to the software defined storage.

Abstract: A secure data exchange system comprising a security device including a first external device plug, and a security engine operative to enforce a security policy on data transfer requests received from the host; an external device including a second external device plug; and a host including a first external device port operative to communicatively couple with the first external device plug, a second external device port operative to communicatively couple with the second external device plug, and a driver, e.g., a redirect driver, operative to transfer a data transfer request to the security device before executing the data transfer request.

Abstract: A method, computing device and computer program product parse an electronic message and construct multiple differently prioritized messages therefrom. For a method, an electronic message is parsed to separately identify the first and second differently formatted portions and the electronic message is analyzed to identify an action to be taken based thereupon. If a first action is to be taken, a first message is constructed based upon the first portion formatted in accordance with the first predefined format to be transmitted to a first request processor and a first response is then received therefrom. A second message is constructed based upon the second portion formatted in accordance with the second predefined format. The first response is analyzed and, if the first response is of a first type, the second message is transmitted to a second request processor and a second response is then received from the second request processor.

Abstract: A computer-implemented method of providing insurance discounts to risk averse home owners having standby generators. The method may include, with customer permission or affirmative consent, (1) receiving, at an insurance provider remote server, data that is indicative of whether a standby generator is associated with a home; (2) receiving, at the insurance provider remote server, data indicative of the current operational condition of the standby generator; and (3) determining, by the insurance provider remote server, data associated with the terms of the residential insurance coverage for the home based upon the data indicative of whether the standby generator is associated with the home and the data indicative of the current operational condition of the standby generator. The standby generator data may be generated or collected by a smart home controller, and transmitted to the insurance provider via wireless communication over one or more radio links or communication channels, for instance.

Abstract: A device may receive information identifying a plurality of requests and identifying a plurality of targets for the plurality of requests. The device may generate respective routes for the plurality of targets, where a route, of the respective routes, for a target, of the plurality of targets, identifies a set of transformations to be applied to a corresponding request of the plurality of requests. The device may apply the respective routes to the plurality of requests to generate processed requests, and may communicate with at least one of the plurality of targets based on the processed requests. The device may receive results based on communicating with the at least one of the plurality of targets, wherein the results are based on the processed requests, and may provide information based on the results.

Abstract: In general, techniques are described for detecting duplicate hardware addresses in network devices of a computer network. A network device sends a request message on a network, the request message specifying the range of hardware addresses starting from the target hardware address. A network device determines whether at least a subset of the range of hardware addresses starting from the target hardware address is available based on response messages received from other network devices. The network device then reserves the available addresses for assigning to virtual machines (VMs) executing on the network device.

Abstract: Provided are a call deflection and response system and method, wherein a voice call from a caller device is received, a skill group is determined to resolve an issue associated with the call, and a callback or a text response to the issue is provided to the caller device, providing a context-based personalized response. A caller leaves a detailed voicemail explaining an issue needing resolution, which is electronically transcribed and then run through a classifier to determine concepts and intents associated with the call. Based on the concepts and intents, responsibility for the call and associated files are transferred to a particular skill group on a response system for resolution. A response entity from the appropriate skill group determines and provides an issue response via callback or text message to the caller device, e.g., to the caller's mobile phone.

Abstract: A method is provided. The method includes receiving a device type identifier, network access data, and a user identifier that correspond to an order identifier from a terminal. An allocated device serial number corresponding to the order identifier is obtained, the device type identifier, the device serial number, the network access data being written into a customized controlled device. The customized controlled device that is identified by the allocated device serial number and the device type identifier is connected to. A device registration request is received from the terminal and, in response to receiving the device registration request, device registration is performed based on the device type identifier, the allocated device serial number, and the user identifier.

Abstract: The present invention relates to a system comprising glasses (101), a communication unit (103) and a cable (102), whereby the cable comprises two galvanic connections adapted for transporting power and bidirectional data traffic, whereby the glasses and the communication unit are arranged for multiplexing a plurality of outgoing data streams into a multiplexed data stream to be transmitted over said cable and arranged for receiving an incoming data stream and demultiplexing said incoming data stream into separate data streams, and whereby said communication unit (103) is arranged for being connected wired or wirelessly to an external processing device (201), preferably the external processing device being a smartphone.