Abstract: Controlling asynchronous tasks in a transaction system. A request to start an asynchronous child task is obtained, and a resource status of the system is determined. It is determined whether to suspend a parent task associated with the asynchronous child task or to execute the asynchronous child task based on the determined resource status of the system.

Abstract: In some embodiments, a system is provided, and computer-executable instructions cause the system to: receive, at an edge server of a content delivery network (CDN), a request for a first video and a request for a second video; determine that the first video is not cached and that the second video is cached; request the first video from the origin server and log a cache miss; obtain the first video from the origin server and send responsive to the request; send the second video responsive to the request and log a cache hit; obtain a metric indicative of the volume of cache misses, including for the first and second videos, across edge servers of the CDN; and determine, based on the metric, an amount by which to scale resources implementing the origin.

Abstract: A device may receive, by a kernel of the device and from a loadable kernel module of the device, information that instructs the kernel to invoke a callback function associated with the loadable kernel module based on an execution of a hook of the kernel. The device may receive, by the kernel of the device and from an application of the device, a socket application programming interface (API) call. The socket API call may include control information. The device may execute, by the kernel of the device, the hook based on receiving the socket API call. The device may invoke, by the kernel of the device, the callback function associated with the loadable kernel module based on executing the hook to permit a functionality associated with the callback function to be provided. The kernel may provide the control information, associated with the socket API call, to the callback function as an argument.

Abstract: The disclosed method may include (1) identifying, within a virtual network, a primary virtual network device and a backup virtual network device that is to handle traffic directed to the primary virtual network device following a failure of the primary virtual network device, (2) installing, on the primary virtual network device, a first virtual controller that manages the primary virtual network device, (3) installing, on the backup virtual network device, a second virtual controller that manages the backup virtual network device, (4) directing, by the first virtual controller, the second virtual controller to replicate a state of the primary virtual network device, (5) detecting the failure of the primary virtual network device, and then in response to detecting the failure of the primary virtual network device, (6) directing, by the first virtual controller, the second virtual controller to facilitate handling the traffic directed to the primary virtual network device.

Abstract: The present disclosure relates to a method for estimating a web page download time on a web browser in a user device from a corresponding web server and to a network monitoring device for performing the method.

Abstract: The disclosure belongs to wireless communication technology, and the provided method, device and system of Forward Addressing and Backward Readdressing InterConnect (FABRIC) including, the method of forward addressing and backward readdressing interconnect enables any two devices in the system to establish interconnection channels when data exchange is required, and screens out suitable relay devices among the numerous intermediate devices between the two devices, the transmission of data is controlled within a limited range, and the interconnection channel is not unique, each time of data transmission is likely to pass through different intermediate devices with randomness and redundancy, it can cope with a certain degree of device movements. A plurality of devices can carry out communication between two at the same time without conflict.

Abstract: Systems and techniques are described for applying a set of policy rules to network traffic. During operation, conditions specified in the set of policy rules can be evaluated, wherein each condition is a logical expression defined over a set of variables, and is evaluated by substituting values of the set of variables associated with the network traffic into the logical expression. Next, a subset of policy rules can be selected whose conditions evaluated as true. A highest precedence policy rule from the subset of policy rules can then be identified by applying a set of precedence rules to the subset of policy rules, wherein the set of precedence rules imposes a precedence order on the set of policy rules based on condition categories and condition specificities. Finally, an action that is specified in the highest precedence policy rule can be performed.

Abstract: An embodiment may involve a managed network containing computing devices. The computing devices may be respectively associated with unqualified domain names. One or more server devices may be disposed within a remote network management platform that manages the managed network. These server devices may be configured to: probe the managed network, by way of a proxy server application disposed within the managed network, to obtain information related to applications operating on the computing devices, network connectivity of the computing devices, and representations of the unqualified domain names; obtain a regular expression; determine a subset of the computing devices in the managed network on which a particular application is operating and for which the respectively associated unqualified domain names match the regular expression; and generate a map of the managed network in which the subset of the computing devices is represented as a grouped node instead of individual nodes.

Abstract: A method is performed at a Fibre Channel (FC) switch of an FC switch fabric through which servers connected to the FC switch fabric access logical partitions of a storage array connected to the FC switch fabric. The FC switch receives from the storage array information indicative of port zoning rules and logical partition masking that collectively define which server ports are permitted access to which storage array ports and to which logical partitions of the storage array. The FC switch generates from the information authorization rules for enforcing the port zoning rules and the logical partition masking, and programs the authorization rules into memory. The FC switch receives FC frames from the server ports. The FC frames convey respective input-output (IO) operations destined for the logical partitions. The FC switch authorizes each IO operation based on a lookup of the programmed authorization.

Abstract: Provided is a data loss prevention system comprising an address converting module for converting a private IP address of a received traffic into an IPv6 address; a first communication module for decoding the received traffic; the data loss analyzing module for analyzing the traffic transmitted from the first communication module according to a predetermined policy and examining whether personal information or confidential information is included; and a second communication module for transmitting the traffic transmitted from the data loss analyzing module to the address converting module after the traffic is encoded or not encoded according to the information representing whether the traffic is encoded included in the IPv6 address, wherein the address converting module restores the IPv6 address of the traffic transmitted from the second communication module to the private IP address.

Abstract: An Internet of things (IoT) system, including a distributed system of virtual machines, includes at least one IoT platform system control engine, that includes a platform system control engine secure system space and a IoT platform system control engine user defined space, at least one network node device that includes a network node device secure system space and an IoT network node device user defined space, and at least one edge device that includes an edge device secure system space and an edge device user defined space, where the secure system space of the control engine, the network node device, and the edge device are each configured to be secured to prevent unauthorized access, and the user defined spaces of the platform system control engine, the network node device and the edge device each define a respective virtual machine.

Abstract: Example methods and apparatus for associating media devices with a demographic composition of a geographic area are disclosed. A disclosed example method includes receiving a plurality of Internet Protocol addresses assigned to a media device associated with a panel member, determining a most used Internet Protocol address from the plurality of Internet Protocol addresses, accessing geographic information and determining a geographic location corresponding to the most used Internet Protocol address, accessing demographic information and determining a demographic profile associated with the geographic location, and associating at least one of the geographic location or the demographic profile with the media device.

Abstract: A computer-implemented system for network socket management includes a host having a plurality of sockets and a hash table (data structure) storing data on network connections corresponding to the sockets; a firewall with a plurality of rules for routing incoming packets to the sockets; a socket image file that stores a state of each suspended socket. A network connection corresponding to the suspended socket is maintained open. A filter that monitors incoming packets and restores suspended sockets to active status when a packet for the suspended socket is received. The filter is implemented as part of the firewall, or as a hardware front end. The sockets, the firewall and the socket image file are all maintained in user space.

Abstract: Systems and methods for intercepting WebView traffic are disclosed. In one embodiment, a mobile electronic device comprising at least one computer processor executing a mobile application including a WebView application, a method for intercepting WebView traffic may include: (1) replacing, at startup, a default XMLHTTPRequest object with a custom XMLHTTPRequest object; (2) receiving a request for an organization's REST services that requires a secure connection; and (3) processing the request using the custom XMLHTTPRequest object, comprising: (a) determining that the mobile electronic device has a secure connection to the REST services; (b) executing a secure call to the REST services using a mobile component library; and (c) receiving a response from the REST services.

Abstract: A network translation (NT) computing device generates a routing table for a global network including a plurality of local networks. Each local network is associated with a local network identifier of the routing table and includes at least one network-addressable (NA) computing device. The NT computing device stores the routing table in a routing database and receives a data packet having a recipient address from a first local network. The recipient address includes a local network identifier associated with a second local network and an internet protocol (IP) address for a recipient NA computing device within the second local network. The NT computing device extracts the local network identifier from the recipient address, compares the local network identifier to the routing table, and transmits the data packet with the IP address to the second local network to be transmitted to the recipient NA computing device based on the comparison.

Abstract: A method, an apparatus, and a system for acquiring a configuration file in a data over cable service are provided. The system includes: a convergence device, a cable modem terminal system CMTS assembly, and a cable modem CM, where the convergence device is connected to the CM using the CMTS assembly. The convergence device may be configured to intercept a first DHCP response message sent by a DHCP server to the CM; acquire configuration file information of the CM from the first DHCP response message; send the configuration file information of the CM to the CMTS assembly; replace address information of a Trivial File Transfer Protocol TFTP server in the first DHCP response message with address information of the convergence device, to form a second DHCP response message; and send the second DHCP response message to the CM.

Abstract: In one embodiment, a domain-name based framework implemented in a digital assistant ecosystem uses domain names as unique identifiers for request types, requesting entities, responders, and target entities embedded in a natural language request. Further, the framework enables interpreting natural language requests according to domain ontologies associated with different responders. A domain ontology operates as a keyword dictionary for a given responder and defines the keywords and corresponding allowable values to be used for request types and request parameters. The domain-name based framework thus enables the digital assistant to interact with any responder that supports a domain ontology to generate precise and complete responses to natural language based requests.

Abstract: A customer may request a service endpoint for a service in their virtual network on a provider network. In response, a service endpoint is generated in the customer's virtual network, a local IP address in the IP address range of the customer's virtual network is assigned to the service endpoint, and a DNS name is assigned to the service endpoint. Resources on the customer's virtual network resolve the DNS name of the service endpoint to obtain the local IP address of the service endpoint and send service requests for the service to the local IP address of the service endpoint. The service endpoint adds routing information to the service requests and sends the service requests over the network substrate to be routed to the service.

Abstract: Systems and methods for using parameters with shortened resource locators to access a resource are provided. A short resource locator is associated with a full resource locator template in a resource locator association datastore. Parameters provided with the short resource locator are used to replace one or more parameter identifiers within a full resource locator template to generate a full resource locator. The full resource locator is used to access a resource.

Abstract: The preset application provides an application access method and an application access system. The method includes steps of acquiring, by an external DNS server, an outgoing link address through which a user sends an application access request, based on the application access request sent by the user and received by the external DNS server; determining, by the external DNS server, a network server to which the outgoing link address through which the user sends the application access request belongs; resolving, by the external DNS server, an outgoing link address of an application corresponding to the network server, based on the network server to which the outgoing link address through which the user sends the application access request belongs; and sending, by the external DNS server, the application access request to the application based on the resolved outgoing link address of the application, so that the user accesses the application.

Abstract: A mobile terminal communicable with a service providing apparatus via an access point, comprises: an access unit configured to access a designated access point by wireless connection; a receiving unit configured to switch, if a service search instruction is received, the wireless connection with the designated access point by the access unit to wirelessly connect to another access point, and receive information of a service provided by a service providing apparatus communicable via the other access point; and a display unit configured to display a selection screen for enabling to select, based on the received information, between a service provided by a service providing apparatus communicable via the designated access point and a service provided by a service providing apparatus communicable via the other access point.

Abstract: A memory control device may include a buffer memory in which data is accessed by a unit of a slot; and a buffer interface suitable for controlling an access to the buffer memory. The buffer interface may include a mapping table suitable for storing the mapping between multiple virtual slot identification information (VBIDs) and multiple physical slot identification information (PBIDs); a buffer allocation unit suitable for determining a start VBID of the mapping table and the number of slots (NID) based on a size of data to write in the buffer memory, and allocating PBIDs of a free status to a buffer slot sequence in the mapping table, the buffer slot sequence including slots determined based on the start VBID and the NID; and a buffer access unit suitable for accessing data at positions of the PBIDs of the buffer memory based on the mapping table.

Abstract: The invention presented herein is a system and method for automatically discovering communication capabilities for direct communication between endpoints across one or more unknown networks, the system comprising: a plurality of network enabled endpoints configured with a module in wireless communication with a management database, the module configured to establish a communication path for direct communication between the network-enabled endpoints, independent of a NAT router.

Abstract: A system and method for modifying domain name system (DNS) templates are presented. A DNS template database is configured to store DNS templates. A DNS record database is configured to store a plurality of DNS records for a plurality of domain names. A host computer server is configured to receive an electronic signal encoding a request containing a modification to a DNS template from a user, the DNS template being stored in the DNS template database, access the DNS template database to modify the DNS template according to request containing the modification to create a modified DNS template, identify a plurality of domain names using the DNS template, and, for each domain name in the plurality of domain names, access the DNS record database to at least one of modify and create a DNS record for the domain name using the modified DNS template.

Abstract: A monitoring system comprises an equipment management device, a relay server, and monitoring terminals. The equipment management device is configured to establish with the relay server first communication for notifying the monitoring terminals of the states of equipment items. Furthermore, the equipment management device is configured to establish with the relay server second communication, which is different from the first communication, for monitoring equipment information regarding the equipment items from each of the monitoring terminals. The monitoring terminals establish the first communication and second communication with the relay server. The relay server is configured to relay the first communication and second communication.

Abstract: A method is provided, in one embodiment, which is performed on a client computing device, the method including: connecting a client computing device with a private network, wherein the private network comprises a plurality of name resolving servers, and each name resolving server is configured to resolve name requests for networking devices in a respective segment of a plurality of segments of the private network; receiving a first name request from a first application on the client computing device; in response to receiving the first name request, forwarding the first name request simultaneously to the plurality of name resolving servers; and selecting a name resolution that is first received from the plurality of name resolving servers in response to the first name request.

Abstract: A NAT entry management method and a NAT device are disclosed. The method includes: receiving and storing, by a NAT device, a connection parameter, where the connection parameter includes an address of a controller; receiving a packet sent by a network device, where a source address of the packet is a private address of the network device and a destination address of the packet is the address of the controller; performing NAT on the packet, where an after-NAT source address of the packet is a public address; and when a static entry condition is met, generating a target static NAT entry, where the static entry condition includes that the destination address of the packet is the address of the controller. This can prevent aging of the NAT entry from affecting communication between the network device and the controller.

Abstract: Included are embodiments for ReNAT communications address communications. Some embodiments include a network operations center (NOC) that includes a ReNAT twin NAT that translates between a customer-assigned private IP address and a unique private IP (UPIP) address. The NOC may additionally include a ReNAT VPN component coupled to the ReNAT twin NAT, where the ReNAT VPN provides a source IP address to the ReNat twin NAT. The NOC may include logic that when executed by a processor, causes the processor to facilitate communication between a user workstation on a private network and a remote computing device, wherein facilitating communication includes receiving the data from the user workstation via a traditional VPN portal, wherein address translation has been performed by a ReNAT twin NAT client on the user workstation.

Abstract: Embodiments of the invention provide a method, system and computer program product for social media messaging management for brand integrity. The method includes retrieving content from different Web sites from over a computer communications network into a social media messaging manager executing in memory of a host computing system. The method further includes parsing text of the retrieved content to identify information pertaining to a contemporaneous news event. Thereafter, the parsed text is matched to an advertising message disposed in a table stored in a data store coupled to the host computing system. Consequently, at least a portion of a social media message is generated incorporating the predetermined advertising message and the social media message is displayed in a user interface of the manager. Finally, the social media message is posted onto a social media messaging system by the manager over the computer communications network.

Abstract: The present subject matter relates to management of site-aware cluster of a data storage system. In an example implementation, a workload manager is hosted on a node of a secondary site in the site-aware cluster for managing an application workload of a primary site in the site-aware cluster. When the primary site is subjected to failure, the application workload is shifted from the primary site to the secondary site by the workload manager.

Abstract: A softAP bridge is created to support a mesh network that also works seamlessly with any home Wi-Fi AP routers by using Layer-3 techniques to simulate a Layer-2 bridge. With this softAP bridge, Wi-Fi chipsets with integrated special Wi-Fi MAC Layer-2 mesh network support (e.g., 802.11s), or external gateway hubs, are not required. To accomplish this solution, one of the wireless capable devices may be designated as a relay device for communicating data packets between a home AP router and the remaining wireless capable devices that are designated as client devices.

Abstract: A method for providing a mobile coupon in a mobile electronic device is provided. The method includes collecting information about the mobile coupon including a domain to which the mobile coupon is applicable, from a mobile coupon image including the mobile coupon, determining whether the domain to which the mobile coupon is applicable is identical with a domain of a web site accessed by the mobile electronic device and outputting, when the domain to which the mobile coupon is applicable is identical with a domain of a web site accessed by the mobile electronic device, the information about the mobile coupon.

Abstract: An information handling system includes host processor hardware and service processor hardware. The host processor hardware includes a network interface device that has an external network interface coupled to a domain controller and an internal network interface. The service processor hardware is coupled to the internal network interface, and is configured to receive a login request from a user via the internal network interface, to redirect the login request to the domain controller via the internal network interface, to receive authentication information for the user from the domain controller, and to log the user in to the service processor hardware in response to receiving the authentication information.

Abstract: Domain Name System (DNS) requests can be routed to either a private DNS server or a public DNS server based on a determination made by a DNS classifier. The private DNS server allows customers to use custom DNS names for internal resources without exposing the names or IP addresses to the public Internet.

Abstract: A system that implements multihoming for real-time communications receives a request to establish a tunnel by a tunneling server with a tunneling client of user equipment, where the request includes two or more network addresses for the tunnel. The system establishes the tunnel and sends a list of the allocated two or more network addresses for the tunnel. The system then receives encapsulated media that corresponds to at least two different network addresses over the tunnel.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for correlating information associated with one networking transmission protocol, such as Internet Protocol version 6 (IPv6), to information associated with a different networking transmission protocol, such as Internet Protocol version 6 (IPv4). More specifically, when resolving an Internet Protocol (IP) address associated with a requesting device to a network, the system may base the resolved destination on one or more attributes of a known address to build a network mapping of the received IP address. In one specific example, an IPv6 address is received and associated with a known IPv4 address to map the network.

Abstract: A method for synchronizing management of a plurality of domain names in a Domain Name System (DNS).

Abstract: A method, system, and computer program product for operating a collaborative bookmarking system (CBS). A request is received from a client for a universal resource locator (URL) associated with an identifier, wherein the URL and the identifier make up a bookmark which has been previously shared with a community by a user. An alternative candidate URL for the requested URL is located, wherein the alternative candidate URL has previously been suggested to the CBS by the user as a replacement for an original URL. Client validation, by the client, of the alternative candidate URL is requested and received. The validated alternative candidate URL is associated with the identifier as part of the bookmark in place of the requested URL.

Abstract: An embodiment of the invention may include a method, computer program product and system for optimizing a wide area network caching infrastructure in a file based object storage architecture. The embodiment may include creating, by a parent partition, a heat map. The embodiment may include prioritizing prefetching by multiple dependent partitions based on the heat map. In response to prioritized prefetching by the multiple dependent partitions, the embodiment may include allocating wide area network caching threads. The embodiment may include providing, by the parent partition, objects for prefetching by the multiple dependent partitions utilizing the allocated wide area network caching threads.

Abstract: The present innovation extends the innovations inherent in our prior work on security and privacy enhanced geolocation to address specific problems of determining the proximity of two Internet connected devices. This could be used for applications such as determining proximity of a user's smartphone to an ATM machine they are using. Or to determine the physical proximity of a shopper and a cashier at a check out line. A straightforward application of the prior work will not suffice, as devices may have very different types of connectivity to the Internet. We solve this problem by placing reciprocal slave servers on each of the devices and giving high weight to the time taken for messages to travel from each device to the slave on the other device. The system can be extended to more than two entities by performing the calculation in a pairwise fashion and using further optimizations.

Abstract: In a game apparatus, a game program and a web browser program are stored. In a web browser process, a predetermined web page is displayed, first access destination information is acquired on the basis of a user operation, and the first access destination information is outputted to be usable in the game process. In a game process, a server is accessed on the basis of the first access destination information, a predetermined content corresponding to the first access destination information is acquired, and the game process is executed using the predetermined content.

Abstract: An information-link system is provided that allows an information provider to associate a predetermined link code with information from the provider, and that allows a user to directly access the information. The system includes an information-link device, an information-providing terminal, and a user terminal, each connected to each other via a network, and wherein the information-link device includes a link-code-management part, and a link-information-extraction part, the link-code-management part issues link codes in response to an information provider request, with each of the link codes having a predetermined fixed format, associates each of the link codes with a URL or a file storage location, and manages the associated link code and the URL or the storage location, and the link-information-extraction part extracts the URL or the location of the data file that has been associated with the link code, based on the link code sent from the user terminal.

Abstract: This application discloses a network attack determination method, a secure network data transmission method, and a corresponding apparatus. In this application, a browser client terminal obtains attack rules formulated by a rule configuration server, and after obtaining feedback information that is returned by a network according to a webpage browsing request, determines, according to a comparison result between the attack rules and the feedback information, whether the webpage browsing request encounters a network attack, thereby resolving a problem in the prior art that a network attack cannot be identified. In addition, after determining that a network attack is encountered, the browser client terminal performs network data transmission in a secure manner, which can avoid impact from the network attack, and improve security of network data transmission.

Abstract: This application provides a packet processing method, which helps resolve a problem that a network node between a user terminal and a DHCP server is relatively complex. In the method, a network node of an access network receives a first packet sent by a user terminal, where the first packet is used to request an Internet Protocol IP address from a Dynamic Host Configuration Protocol DHCP server and the network node obtains a second packet, where the second packet includes the first packet, information about a port, and a Media Access Control MAC address of the user terminal, the port is a port through which the network node receives the first packet, and the second packet is a packet except a DHCP packet. Additionally the network node sends the second packet to a controller.

Abstract: A Registry stores data about linkets. A linket has data about users who use it to interact with the linket owner via an app or bot. This linket group lets members interact with each other. To help each other with advice about using the linket. The Registry can host a message board, where users of a linket can communicate with each other. The linket owner gets feedback about her interactions with the users. It is easier for her to shift from using an app in the deep link to an app made by a different firm. The user data is not held by any app firm, allowing this independence.

Abstract: The subject matter described herein relates to protecting in-flight transaction requests, where a client device is connected via at least two application servers to a backend server device that is capable of processing redundant transaction requests originated by the client device. A first instance of a transaction request identified by a transaction identifier is received at the backend server device. The first instance of the transaction request is processed and a transaction response is sent to the client device. The transaction response identified by the transaction identifier is saved in a cache. If a subsequent instance of the transaction request is received, the cached transaction response is sent to the client device.

Abstract: A first device may include one or more processors. The first device may receive a network address request to obtain a network address that is associated with an application. The network address request may include application information that identifies the application. The first device may determine that the application is associated with a rule. The first device may store the application information and information identifying the network address request. The first device may obtain the network address based on the network address request. The first device may determine that the network address is associated with the rule. The first device may provide the network address, the rule, and/or the application information to a second device, to permit the second device to enforce the rule, based on determining that the application is associated with the rule and determining that the network address is associated with the rule.

Abstract: A Domain Name System (“DNS”) package and a method for providing domain name resolution services in a partitioned network are disclosed. The system may include one or more built-in root name servers; one or more built-in top level domain (“TLD”) name servers; and a recursive name server. The recursive name server may be configured to query the one or more built-in root name servers during domain name resolution. Moreover, the one or more built-in root name servers may be configured to provide a network address corresponding to one of the built-in TLD name servers in response to a domain name resolution query sent by the recursive name server.

Abstract: Systems and methods for mapping IP addresses to an entity include receiving at least one domain name associated with the entity. Embodiments may further include determining one or more variations of the at least one domain name based on analysis of domain name data collected from a plurality of domain name data sources that mention a variation of the at least one domain name. Some embodiments may also include identifying one or more IP addresses pointed to by the one or more variations of the entity's domain name based on analysis of IP address data collected from a plurality of IP address data sources. Additional embodiments include assigning weights to each of the identified one or more IP addresses and creating a mapping of IP addresses to associate with the entity based on analysis of the weighted one or more IP addresses.

Abstract: Communication applications may include lists of users with which a user of the application communicates. If two users of a communications application each include the other user on their user lists, an implicit trust may be established between the users. For example, if user A includes user B in her list and user B includes user A in his list, then it may be determined that each user knows and/or trusts the other user. As a result, a connection or communications pathway may be automatically created between the client devices of the users to facilitate communications between the users based on the implicit trust.