Abstract: Techniques described herein provide users with the ability to persistently adjust settings for boot-time features (BTF) of a computing device. A user requests a particular BTF configuration adjustment for a device via a device driver. The driver instructs trusted firmware of the device to store a boot override record in persistent storage accessible by a bootloader for the device. Upon implementation of the boot sequence for the device, the bootloader applies the changes reflected in the record to BTF configuration data. The boot override information is persistently available to the bootloader, which ensures that the configuration changes that the boot override record(s) represent are applied to the BTFs of the device until the boot override record(s) are cleared or invalidated. Further, to ensure the security of boot override record(s), the trusted firmware generates, for each record, an HMAC tag using an HMAC key derived from a Chip Endorsement Fused Secret from the hardware.

Abstract: Techniques are described herein for cross-device data synchronization based on simultaneous hotword triggers.

Abstract: A device comprising: a bus forming a ring path for circulation of one or more data packets around the bus, wherein the one or more data packets comprises a trace report packet for collecting trace data from a plurality of components attached to the bus, wherein the bus is configured to repeatedly circulate the trace report packet with a fixed time period taken for each circulation of the ring path performed by the trace report packet; and the plurality of components, each of which comprises circuitry configured to, upon reception of the trace report packet at the respective component, insert one or more items of the trace data that have been obtained by the respective component.

Abstract: Techniques are disclosed for maintaining processing unit core affinity for fragmented packets. In one example, a service physical interface card (PIC) implementing a service plane of a network device receives fragmented and/or non-fragmented packet data for a traffic flow. The service PIC comprises at least one processing unit comprising multiple cores. A routing engine operating in a control plane of the network device defines one or more core groups comprising a subset of the cores. The routing engine assigns the traffic flow to a core group and a forwarding engine operating in a forwarding plane of the network device forwards the packet data for the traffic flow to the assigned core group. A core of the assigned core group applies a network service to the fragmented and/or non-fragmented packet data for the traffic flow, and the forwarding engine forwards the packet data for the traffic flow toward a destination.

Abstract: A method for providing and maintaining secure storage of target data includes, during a first time period in which a server provides a first mapping between user-specific cloaking sequence elements and hidden sequence elements, cloaking the target data using a first set of user-specific cloaking sequences and the first mapping, and storing the cloaked data in a persistent memory. The method further includes, during a later, second time period in which the server provides a different, second mapping between the user-specific cloaking sequence elements and the hidden sequence elements, re-cloaking the cloaked data using the first set of user-specific cloaking sequences and the second mapping, and storing the re-cloaked data in the persistent memory.

Abstract: A local cache content management is configured to improve the speed and reliability of access of the content management system across poor or intermittent connections. Additional techniques are used to allow document use and storage when the content management system is unavailable, and to maintain synchronization between the local cache and the content management system.

Abstract: A method and a device for a reaction-free and integrity-protected synchronization of log data between at least one first network and a second network is provided. The log data is copied by means of a monitoring device upon being transmitted from devices to a first log server in the first network. Metadata of the log data is additionally generated in a first managing unit, the metadata including time information, integrity information, origin information, and/or completeness information. The copied log data and the corresponding metadata are transmitted to the second network via a unidirectional coupling unit in a reaction-free manner. The lot data is checked and ordered chronologically in the second network using the metadata. Thus, a synchronized copy of the log data from the first network is promptly provided in the second network.

Abstract: The technology disclosed herein enables a first computing process to execute within a trusted execution environment to protect its data from other processes while selectively enabling a second computing process (e.g., a kernel process) to inspect data for compliance. An example method may include: establishing, by a processor, a trusted execution area for the first computing process, wherein the trusted execution area comprises an encrypted storage area; copying data of the first computing process into the trusted execution area, wherein the data comprises executable data or non-executable data; enabling the second computing process to access the copy of the data of the first computing process; and executing, by the processor, the first computing process using the trusted execution area.

Abstract: The disclosure provides methods for processing a mini program and related devices, and relates to mini program technologies in the field of computer technologies. The solution may include: accessing to a first application; determining whether the first application has a capability to be hosted by any mini program; when the first application has the capability to be hosted by any mini program, searching a target mini program matching with the first application in a mini program library, in which the mini program library includes at least one mini program; and sending mini program information of the target mini program to a second server; in which the second server is configured to provide a service of the first application and add the mini program information to the first application, and the mini program information is configured for the first application to run the target mini program.

Abstract: Systems and methods for providing secure single sign-on authentication and management of encrypted vault in a fully cloud-based zero-knowledge environment. A user on a client device attempts to use a network resource. The user is directed to login to the identity provider. The identity provider authenticates the user through a login process. If the user is identified to be a valid user, the identity provider sends the user an attestation sign-on key to confirm the user is valid. The client device sends the attestation sign-on key to a vault service provider, which verifies the attestation using a configured public key. The client device retrieves a data decryption key and an encrypted data key, which are stored in different entities in the system. The encrypted data key is decrypted on the client device using the data decryption key.

Abstract: Embodiments of the invention are directed to utilizing an extension to software defined networking (SDN) to manage storage area networks (SANs) by receiving, at a switch configured with and managed by a SDN architecture, at least one table. The at least one table being operable in the SDN architecture and including routing information. The switch routes traffic over a SAN using the routing information in the at least one table.

Abstract: A computer-implemented method, operable on a device in a content delivery network (CDN), wherein the CDN delivers content on behalf of at least one content provider, the device implementing a content delivery (CD) service, the method includes receiving a request from a client for particular content; determining a second device in the CDN, the first device being in a first cluster and the second device being in a second cluster distinct from the first cluster; migrating the request to the second device; and then providing the second device with network traffic from the client.

Abstract: A semiconductor apparatus may include a data output path connected to a data input/output pad and configured to output read data according to a read command, and at least one circuit configuration included in the data output path may perform a pre-toggling operation of toggling its own output signal at least once in an interval between a time point at which the read command has been generated and a time point at which the read data is outputted through the data output path.

Abstract: Method for establishing a trust chain, comprising: requesting a third CA for a third key pair and a third certificate, writing a private key of the third key pair and the third certificate into a security storage area, the third certificate comprising model information of the smart television (SMTV) terminal and information of a public key of the third key pair. The SMTV terminal check its possession of a fourth certificate on every start, generate a unique fourth key pair in absence of a fourth certificate, submit online a public key of the fourth key pair and a unique identification of each SMTV terminal to a fourth CA to request for a fourth certificate, and send along the third certificate and a signature signed on the request with the private key of the third key pair; write the fourth certificate into the security storage area upon receiving the fourth certificate.

Abstract: Representative embodiments set forth herein disclose techniques for enabling a local file system implemented on a computing device to interact with remote files that have not yet been synchronized to the local file system. According to some embodiments, a method can be implemented at the computing device, and include the steps of (1) receiving a system call directed to an operating system kernel to access a file stored on a remote server device, (2) invoking a fault handler in response to processing the system call, (3) generating a remote procedure call (RPC) associated with the user space application to store the file in a local file system implemented on the computing device, and (4) executing a callback function associated with the RPC when the file is stored in the local file system.

Abstract: The systems and methods of modeling a private network communication, comprising: associating a with a digital identity of a first profile; allowing access by other profiles with digital invitation only; optionally adding another profile to the blacklist by default when a request to communicate is initiated without a digital invitation; sharing the credentials after authentication of the digital invitation; receiving an encrypted digital relationship request from a second profile for the first profile with an embedded temporal key; decrypting the temporal key and a digital identity of the requestor; sending an authenticated response from the first profile and performing one of the following: adding the second profile to a whitelist and communicating with the second profile using a secure channel if it determined that the authenticated response signal acceptance; or adding the second profile on a blacklist when the request is not desired or fails verification.

Abstract: Apparatuses (e.g., systems and devices) and methods for remotely accessing a local (e.g., home, office, etc.) network of devices connected to a local router.

Abstract: The invention discloses a method and a device for transmitting uplink information on an unlicensed carrier, and implementing uplink information transmission on the unlicensed carrier. The method comprises: a terminal device determines a current time resource set for performing data transmission on an unlicensed carrier with respect to network equipment, wherein the network equipment uses a time resource set obtained by means of competition to perform data transmission on an unlicensed carrier, each time resource set comprises continuously distributed time resources, and time resources in different time resource sets are separated by an interval; and the terminal device transmits, to the network equipment, on the unlicensed carrier using a first time resource in the current time resource set, the uplink information, wherein the uplink information corresponds to downlink information transmitted by the network equipment using at least one previous time resource set in the current time resource set.

Abstract: The invention discloses a method and a device for transmitting uplink information on an unlicensed carrier, and implementing uplink information transmission on the unlicensed carrier. The method comprises: a terminal device determines a current time resource set for performing data transmission on an unlicensed carrier with respect to network equipment, wherein the network equipment uses a time resource set obtained by means of competition to perform data transmission on an unlicensed carrier, each time resource set comprises continuously distributed time resources, and time resources in different time resource sets are separated by an interval; and the terminal device transmits, to the network equipment, on the unlicensed carrier using a first time resource in the current time resource set, the uplink information, wherein the uplink information corresponds to downlink information transmitted by the network equipment using at least one previous time resource set in the current time resource set.

Abstract: In one or more embodiments described herein, device, computer-implemented methods, and/or computer program products that facilitate enhancing test coverage of dialogue models. According to an embodiment, a system can comprise a processor that executes computer executable components stored in memory. The computer executable components can comprise a conversation processing component that receives and processes a first conversation. The computer executable components can further comprise a node marking component that tags a first node of a node map as an accessed node if the first node was accessed during processing of the first conversation. The computer executable components can further comprise a reporting component that generates a report comprising a list of nodes, wherein the list of nodes comprises one or more second nodes that were not accessed during processing of the first conversation.

Abstract: Systems, methods, and apparatuses relating to debugging a configurable spatial accelerator are described. In one embodiment, a processor includes a plurality of processing elements and an interconnect network between the plurality of processing elements to receive an input of a dataflow graph comprising a plurality of nodes, wherein the dataflow graph is to be overlaid into the interconnect network and the plurality of processing elements with each node represented as a dataflow operator in the plurality of processing elements, and the plurality of processing elements are to perform an operation by a respective, incoming operand set arriving at each of the dataflow operators of the plurality of processing elements. At least a first of the plurality of processing elements is to enter a halted state in response to being represented as a first of the plurality of dataflow operators.

Abstract: Methods and systems of breaking pursuit of a target. One example embodiment includes an electronic processor configured to develop a first identifier for the target and determine a breaking junction and an intercept point associated with a cornering route. The processor is configured to determine a geographical area associated with at least one possible target flee route for the target and determine a second identifier for an object within the geographical area. The processor is configured to develop a discrimination factor representing a degree of differentiation of the first identifier from the second identifier. The processor is configured to predict whether the discrimination factor will exceed a threshold when the pursuit asset arrives at the breaking junction. The processor is configured to, in response to the discrimination factor exceeding the threshold, notify the pursuit asset to break pursuit of the target at the breaking junction to execute the cornering route.

Abstract: Computer systems and methods for constructing and using a virtual index server. The index of the virtual index server may specify locations of respective portions of data at a plurality of remote storage providers. The index may graft multiple files and folders from multiple storage providers together into a single hierarchical index tree. The virtual index server may be automatically updated to reflect changes in data content at the plurality of remote storage providers. The computer system may automatically retrieve log files from a content delivery network (CDN), normalize the log files according to a first analytics provider, and automatically provide the normalized log files to the first analytics provider.

Abstract: Described herein are a system and techniques for increasing efficiency of communications and quality of a user's experience by implementing dynamic time-out intervals. When a service slows due to demand, malfunction on the server side, or local constraints near the client such as local wireless network connectivity, a client-side time-out interval can be dynamically increased so that clients are less likely to depart before receiving requested services. A server that cannot provide requested services can indicate that a client-side time-out interval should be zero so that clients do not wait on a request that will not be fulfilled. A server seeing service requests but few completions or satisfied service requests can indicate different time-out intervals to different clients, observe which intervals have higher completion success rates and then indicate revised time-out intervals accordingly.

Abstract: An operation processing apparatus is provided. The operation processing apparatus includes a vector operator and cores. The vector operator processes a vector operation with respect to an instruction that uses the vector operation, and each core includes a scalar operator that processes a scalar operation with respect to an instruction that does not use the vector operation. The vector operator is shared by the cores.

Abstract: Techniques are described for priming virtual machines in advance of the user login, thereby effectively distributing the load on the hosting resources over a wider time interval. A portion of VMs in the pool is allocated for priming. This process is initiated from an advisory service, which can analyze data from different sources, including usage history, rules, and location services. A VM is assigned from the pool and started. One or more application storage volumes and/or writable volumes are attached to the VM. A reclaim timer is then started. If no login event is detected for the user prior to the expiration of the reclaim timer, the VM is reclaimed back in to the pool and made available for other users. If the login event for the user is detected before expiration of the reclaim timer, the user returned the primed VM and the reclaim timer is canceled.

Abstract: A method for bandwidth sharing is provided. The method may include getting a list of neighboring communications hubs, the neighboring communications hubs being disposed in respective neighboring residences. The neighboring communications hubs may be communicatively coupled to the first communications hub using a first broadband data network provisioned by an Internet Service Provider (ISP), and the neighboring residences may be within a same predetermined geographic region as the first residence or within a predetermined temporal distance on a data network from the first residence. The method determines if a data requirement exceeds bandwidth available to the first communications hub and provides a request for data to a neighboring communications hub. The request corresponds to the data requirement. The method then receives data responsive to the request from the neighboring communications hub.

Abstract: Embodiments herein disclose formats for MCData messages and notifications, and methods for coding (encoding and decoding) MCData messages and notifications in a MCData communication system. The method includes generating, by a first UE, an encoded MCData message or notification comprising of signaling payload and data payload content related to one or more MCData user payloads. Further the method includes deriving, by a second UE, the actual MCData messages or notifications by decoding the received encoded MCData messages or notifications. The formats for MCData messages and MCData notifications optimize control headers and allow maximum user data size that can be carried in a single message over signalling, which aids in sending multiple user payloads in a single message.

Abstract: In a parallel computer, performing optimized collective operations in an irregular subcommunicator of compute nodes may be carried out by: identifying, within the irregular subcommunicator, regular neighborhoods of compute nodes; selecting, for each neighborhood from the compute nodes of the neighborhood, a local root node; assigning each local root node to a node of a neighborhood-wide tree topology; mapping, for each neighborhood, the compute nodes of the neighborhood to a local tree topology having, at its root, the local root node of the neighborhood; and performing a one way, rooted collective operation within the subcommunicator including: performing, in one phase, the collective operation within each neighborhood; and performing, in another phase, the collective operation amongst the local root nodes.

Abstract: A network element includes multiple ports, a memory, multiple processors and cache-flushing circuitry. The multiple ports are configured to serve as ingress and egress ports for receiving and transmitting packets from and to a network. The memory is configured to store a forwarding table including rules that specify forwarding of the packets from the ingress ports to the egress ports. The multiple processors are configured to process the packets in accordance with the rules. The two or more cache memories are each configured to cache a respective copy of one or more of the rules, for use by the multiple processors. The cache-flushing circuitry is configured to trigger flushing operations of copies of rules in the cache memories in response to changes in the forwarding table, and to reduce a likelihood of simultaneous accesses to the forwarding table for updating multiple cache memories, by de-correlating or diluting the flushing operations.

Abstract: A method for maintaining a dialogue state associated with a dialogue between a user and a digital system includes receiving, by a dialogue state tracker associated with the digital system, a representation of a user communication, updating, by the dialogue state tracker, the dialogue state and providing a system response based on the updated dialogue state. The dialogue state is updated by evaluating, based on the representation of the user communication, a plurality of member scores corresponding to a plurality of ontology members of an ontology set, and selecting, based on the plurality of member scores, zero or more of the plurality of ontology members to add to or remove from the dialogue state.

Abstract: A cluster compute server stores different types of data at different storage volumes in order to reduce data duplication at the storage volumes. The storage volumes are categorized into two classes: common storage volumes and dedicated storage volumes, wherein the common storage volumes store data to be accessed and used by multiple compute nodes (or multiple virtual servers) of the cluster compute server. The dedicated storage volumes, in contrast, store data to be accessed only by a corresponding compute node (or virtual server).

Abstract: A device that includes a first node, a second node, and a third node implemented by a node engine. The first node is configured to receive a first correlithm object, fetch a second correlithm object from a first node table based on the first correlithm object, and output the second correlithm object to the second node and the third node. The second node is configured to fetch a third correlithm object from a second node table based on the second correlithm object in response to receiving the second correlithm object, and output the third correlithm object to the third node. The third node is configured to fetch a fourth correlithm object from a third node table based on the second correlithm object and the third correlithm object in response to receiving the second correlithm object and the third correlithm object.

Abstract: A processing device receives a request to identify whether a file is a complete file. The processing device determines a first size of the file. The processing device determines whether the first size satisfies a size criterion. The processing device determines that the file is a complete file responsive to the determination that the first size satisfies the size criterion.

Abstract: A residential gateway, which acts, after detecting a fault including at least one service to which the gateway normally gives access not being accessible or the quality of at least one service to which it normally gives access being degraded: to search for at least one IP route, referred to as an “emergency route”, to a destination for data associated with the service, and, if the gateway finds such an emergency route, using it to provide the service. The residential gateway is applicable to domestic gateways and to business gateways.

Abstract: There are provided a storage device having improved security and an operating method thereof. In a storage device including a memory controller for controlling a memory device including a plurality of memory blocks, the storage device includes: a host interface configured to receive an analog connection request signal provided by a host; and a host access controller configured to control access by the host according to host information acquired from the connection request signal.

Abstract: Techniques are presented for clustering data storage including (a) announcing, using zeroconf, to a local network, a service provided by a DSA and an unreserved state of the DSA, the service being of a clusterable data storage type, (b) receiving a cluster command from a configuration management device connected to the local network, the cluster command directing the DSA to join a storage cluster to present combined storage of the DSA and at least one other DSA, and (c) in response to receiving the cluster command: (1) announcing to the local network via L2 multicasting that the DSA has entered a reserved state using zeroconf, (2) afterwards, performing configuration operations including updating system parameters, resulting in the DSA becoming part of the storage cluster, and (3) while in the reserved state, receiving another cluster command directing the DSA to join another storage cluster, and, in response, refusing the other cluster command.

Abstract: A method for initializing the border gateway protocol (BGP) on network devices. The method includes initializing, by a first network device, a BPG session with a second network device. The method further includes receiving, by the first network device from the second network device, route updates and an end of routing information base (EOR) marker. The method further includes updating an n_EOR variable maintained by the first network device after receiving the EOR marker and, after updating the n_EOR variable, determining that the first network device has received route updates from all peer network devices, and subsequently updating, in the first network device, a routing information base (RIB) using route updates received from the peer network devices. The method further includes updating, in the first network device, a forwarding information base (FIB) using the updated RIB and advertising, to all peer network devices by the first network device, routes.

Abstract: Apparatus and methods are disclosed, including a memory device or a memory controller configured to determine that a condition has occurred that indicates a performance throttling operation, implement a performance throttling responsive to the determined condition, responsive to implementing the performance throttling, set a performance throttling status indicator in an exception event status attribute, receive a command from a host device across a memory device interface, perform the command, prepare a response to the command, the response including a flag indicating that the performance throttling status indicator is set in the exception event status attribute, and send the response to the host device. Methods of operation are disclosed, as well as machine-readable medium and other embodiments.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for facilitating a quorum-based coordination of broker health for management of resources for application servers in an on-demand services environment. In one embodiment and by way of example, a method includes monitoring, via health checkers, health of a cluster of brokers in a distributed environment having application servers in communication over a network, receiving an indication from at least one health checker that a broker is failing, wherein the broker is associated with a cluster of worker nodes, collecting health status reports relating to the broker from the health checkers, examining the health status reports based on a quorum-based voting policy, and classifying the broker as unhealthy if, based on the quorum-based voting policy, a percentage of the health status reports regards the broker as failed, wherein the percentage is greater than a first threshold percentage.

Abstract: A videoconferencing system has a videoconferencing unit that use portable devices as peripherals for the system. The portable devices obtain near-end audio and send the audio to the videoconferencing unit via a wireless connection. In turn, the videoconferencing unit sends the near-end audio from the loudest portable device along with near-end video to the far-end. The portable devices can control the videoconferencing unit and can initially establish the videoconference by connecting with the far-end and then transferring operations to the videoconferencing unit. To deal with acoustic coupling between the unit's loudspeaker and the portable device's microphone, the unit uses an echo canceller that is compensated for differences in the clocks used in the A/D and D/A converters of the loudspeaker and microphone.

Abstract: Systems and techniques for streaming video with dynamic jitter tolerance are described. In one example, a system includes a server executing an application and generating image frames associated with the application at a frame rate, and a client which displays the image frames on a display that has a predetermined refresh rate and which monitors arrival times of the image frames in relation to the predetermined refresh rate. The server is further configured to dynamically change the frame rate based on the monitoring so that the frame rate more closely corresponds to the predetermined refresh rate of the client's display.

Abstract: A data transfer system (100) includes a data transmission device (103). The data transmission device can include a data communication circuit (206), a memory (202), and a control circuit (201) operable with the communication circuit and the memory circuit. The control circuit can transfer data (306) to a remote device, establish a sliding window (307) spanning a predetermined amount of data, and store the predetermined amount of data. In response to receiving an error message (311) identifying particular data (312) encountering errors in transfer, the control circuit can retransfer the particular data so long as the particular data is within the sliding window.

Abstract: A cloud computing system and a method therein. The cloud computing system includes: a resource server cluster, where the resource server cluster includes at least two resource servers, each resource server in the resource server cluster has at least one type of resources of computing resources and storage resources, and at least one resource server in the resource server cluster has computing resources and storage resources; a computing resource management module configured to manage the computing resources in the resource server cluster, so as to provide a virtual computing service; and a storage resource management module configured to manage a shared storage resource pool established using the storage resources in the resource server cluster, so as to provide a virtual storage service, where storage resources included in each storage resource pool are from at least two resource servers in the resource server cluster.

Abstract: A system for providing security mechanisms for secure execution of program code is described. The system may be configured to maintain a plurality of virtual machine instances. The system may be further configured to receive a request to execute a program code and allocate computing resources for executing the program code on one of the virtual machine instances. One mechanism involves executing program code according to a user-specified security policy. Another mechanism involves executing program code that may be configured to communicate or interface with an auxiliary service. Another mechanism involves splitting and executing program code in a plurality of portions, where some portions of the program code are executed in association with a first level of trust and some portions of the program code are executed with different levels of trust.

Abstract: A lightweight network protocol provides mutual authentication and encryption of a communication channel in environments where the amount of computing resources available to the networked devices is constrained. When a new device is added to a network, the device contacts a registration service and provides information that is published via a device directory. The network entity locates the device via information provided by the device directory, and establishes an encrypted network connection with the device. A shared secret is established between the device and the network entity using a key-exchange protocol. Consecutive messages that are sent or received are encrypted or decrypted with a sequence of cryptographic keys generated based at least in part on the shared secret. Key-exchange parameters are added to message exchanges between the device and the network entity to facilitate regenerating the shared secret.

Abstract: Techniques for acknowledging communications from multiple devices are described herein. For example, a device may broadcast a group acknowledgement message indicating that communications from multiple devices have been received by the device. Each acknowledgement in the group acknowledgement message may include a device identifier for a device that sent a communication (e.g., a Medium Access Control (MAC) address of the device, a hash of the MAC address of the device, etc.) and a communication identifier for the communication (e.g., a sequence number of the communication, a Cyclic Redundancy Check (CRC) code for the communication, etc.).

Abstract: A method for enforcing data integrity in an RDMA data storage system includes flushing data write requests to a data storage device before sending an acknowledgment that the data write requests have been executed. An RDMA data storage system includes a node configured to flush data write requests to a data storage device before sending an acknowledgment that a data write request has been executed.

Abstract: There is provided a system and method for diverting established communication sessions, which includes: receiving at least one packet from a communication session; determining the state of the communication session; if the state of the communication session is diverted, bridging the at least one packet to a service chain; if the state of the communication session has been prohibited from being diverted, forwarding the at least one packet to an endpoint; and otherwise, if the state of the communication session is a state prior to the divert decision, saving the at least one packet and determining whether the communication session is a candidate to be diverted to the service chain.

Abstract: Examples include the distribution of master device tasks among bus queues. Some examples include distribution of a plurality of tasks of a master device among a plurality of bus queues, each for a respective one of a plurality of busses of a computing system, selection of an arbitration timeout time for a task at a front of one of the bus queues, and a request for access to one of the busses from a bus arbiter.