Abstract: An electronic interaction device may include: a user interface configured to receive interaction requests by a user; a first data storage medium storing a first operating system; a second data storage medium storing a second operating system; a memory storing instructions; and a control unit including a processor. The control unit may be configured to: load the first operating system in response to the electronic interaction device being powered on; communicate with a remote server via a secure communications channel; transmit a status of the first operating system to the remote server via the secure communications channel; receive a boot instruction from the remote server via the secure communications channel; and in response to the boot instruction, load the second operating system.

Abstract: Disclosed herein are system, method, and computer program product embodiments for verifying the integrity of a boot process without relying on a boot aggregate value. An embodiment operates by cryptographically validating, by a hardware root of trust, a first code module associated with a digital signature. The embodiment determines that the first code module was cryptographically validated and cryptographically measures the first code module thereby generating a first measurement. The embodiment stores a representation of the first measurement in a first platform configuration register (PCR) of a trusted platform module. The embodiment configures a remote attestation agent to instruct a remote attestation server to attest the value stored in the first PCR. The embodiment transmits a TPM attestation quote to the remote attestation server.

Abstract: The present disclosure provides a method, system, and device for file replication. To illustrate, based on target replication information corresponding to a version of a file at a target device, a source device may determine one or more portions of a different version of the file at the source device to be provided to the target device. One or more other aspects of the present disclosure further provide sending, to the target device, the one or more portions and replication information corresponding to the version of the file at the source device. Based on the version of the file at the target device, the one or more portions, and the replication information corresponding to the version of the file at the source device, the target device may assemble and store a file that corresponds to the version of the file at the source device.

Abstract: A method includes deploying a containerized execution environment on a cluster of virtual machines and performing a snapshot on each virtual machine in the cluster of virtual machines to save a first version of the containerized execution environment on the cluster. The method further includes performing a test on the containerized execution environment and reverting each virtual machine of the cluster of virtual machines to the first version of the cluster saved by the snapshot in view of the test.

Abstract: System and methods are described for implementing controlled updates of containers in a distributed application deployment environment. In one implementation, a method comprises: receiving a request to update a target container of a plurality of containers within a deployed computing unit; identifying an updated configuration object to be applied to the target container based on the request; receiving or computing a health indicator representative of performance of the deployed computing unit or other containers to which the updated configuration object has been applied; and assigning the updated configuration object to the target container based on the health indicator.

Abstract: A method of securely deploying a software package comprises storing validity data describing restricted use of a restricted use token; receiving a command including a URL to deploy a software package; testing validity of the URL based on the validity data; and downloading, when the testing is successful, the software package via a secure channel, wherein the method is performed using one or more processors.

Abstract: A unique system for the implementation of different instrumentation type functions using a configurable common base module combined with a family of input/output interface modules is described. More specifically, this invention relates to the usage of a configurable common base module to provide timing/control signals for different input/output interface modules each combining to form a unique instrumentation function or feature. Some examples of instrumentation functions which can be implemented with the invention include: Data Acquisition, Digital Oscilloscope, Logic Analyzer, Arbitrary Waveform Generator, Spectrum Analyzer, Pattern Generator, and Serial Protocol Analyzer.

Abstract: A memory system includes: a storage device for storing data; a system memory in which normal firmware and debugging firmware are stored; a firmware implementer for implementing the normal firmware or the debugging firmware; and a controller for controlling the storage device in a normal mode in which the memory system is driven by the normal firmware. When an error detected in the normal mode is uncorrectable, the controller uploads the debugging firmware stored in the system memory to the firmware implementer to change the normal mode to a debugging mode. The firmware implementer performs a debugging operation on the storage device by implementing the uploaded debugging firmware.

Abstract: A computer program product and computer-implemented method include operations including identifying a software update payload that is available for distribution and identifying compatibility data for the software update payload, wherein the compatibility data identifies configurations of a computing device that are compatible with the software update payload. The operations further include forming an update package that includes the software update payload and the compatibility data, digitally signing the update package, and providing the signed update package to one or more computing devices over a network.

Abstract: A system and method implemented for installing sequential automatic updates partially distributed in a computing environment. The system includes an update server to identify a first group of nodes having applications that require updates. An update task manager sends an update task to an update agent installed at each node of a first group of the nodes. The update agent determines availability of each software component of a software application that requires the update. If the software components are ready, the update is delivered by uninstalling a previous version and installing the updated version at the software components. During the update installation, progress of the update is monitored, and completion of the update is reported to the nodes. Update availability is monitored, and emergency updates are delivered forcefully if available.

Abstract: Disclosed are a code updating method and apparatus, an electronic device, and a Non-Volatile computer-readable storage medium. The method comprises: acquiring a target character string, wherein the target character string is a common code of source codes of at least two products, first line spacings in the source codes of the at least two products are the same; matching the target character string with source codes of a first product, and taking a line where a character string, that matches the target character string, in the first product is located as a first line of first target codes of the first product; generating a patch file for the first target codes of the first product; and respectively applying the patch file to the first target codes of the at least two products.

Abstract: In general, a device comprising a processor and a memory may be configured to perform various aspects of the techniques described in this disclosure. The memory may store source configuration data of a source environment descriptor associated with a source operating environment and target configuration data of a target environment descriptor associated with a target operating environment. The processor may compare the source configuration data to the target configuration data, and generate, based on the comparison, update data including software component versions. The processor may generate, based on the update data, a unified release including a new application release version, the new application release version including release propagation data.

Abstract: Techniques for machine learning prediction using edge devices are described. In some examples a method of use includes receiving a request to load a second model onto an edge device while a first model has already been loaded on the edge device, wherein the second model and the first model share an external handle; loading at least one instance the second model into memory of the edge device; and after the second model has been loaded into memory of the edge device, directing a prediction request to the shared external handle to the second model instead of the first model.

Abstract: A communication system includes a vehicle including a control device configured to store a control program, a terminal configured to give a notification about predetermined information, and a server configured to communicate with the vehicle and the terminal. The server is configured to transmit update data for the control program. The processor is configured to reduce a data amount of information to be transmitted to the terminal about a transmission status of the update data when the server transmits the update data to the vehicle via the terminal, as compared to a data amount of information to be transmitted to the terminal about the transmission status when the server transmits the update data to the vehicle without intermediation of the terminal.

Abstract: Top-of-rack (TOR) switches are connected to a network fabric of a data center. Each TOR switch corresponds to a rack of the data center, and is configured to provide access to the network fabric for computing devices mounted in the rack. In one method, a client device of a user is used to select various network service options. The service options correspond to services that can be provided to computing equipment of the user that is mounted in various racks of the data center. In response to receiving the selection of one or more service options, the network fabric of the data center is configured to connect the computing equipment to the selected services. In one approach, the network fabric is configured by creating and/or configuring one or more virtual networks to provide the connection to the services.

Abstract: During operation, a controller node, in multiple nodes in a cluster, may provide to the multiple nodes a set of operations associated with an update of controller software for a controller, where at least the controller node implements the controller. Moreover, at least a first node in the multiple nodes may perform the set of operations associated with the update of the controller software. Furthermore, at least a second node in the multiple nodes may monitor the performing of the set of operations by at least the first node. When the performing of the set of operations is completed by at least the first node, the first node may terminate the performing of the set of operations by the multiple nodes. Alternatively, when a failure occurs during the update of the controller software, at least the first node or the second node may automatically recover the multiple nodes.

Abstract: The present invention relates to a gateway for use in wireless communication. The gateway according to the present invention is to wireless communicate with nodes and a server. The nodes and the gateway communicating with each other via an improved LoRaWAN protocol for extending further functions for the gateway, such as data processing or the same, result in computing requirements decreased at the server, reducing in time and several communicating procedures among network components, thus enhancing the efficiency for using network resources.

Abstract: A method or system for testing and benchmarking commits made on source code. The system extracts commits from a history of a first code history that records a sequence of commits made thereon. The extracted commits are then combined into a sequence of patches, each of which includes changes made during consecutive commits. The system also establishes a connection with a system under test (SUT) having a second code repository corresponding to a historical version of the first code repository before the extracted commits were made, and sequentially applies the sequence of the patches to the second code repository. Performance of the SUT is monitored during the application of the sequence of the patches to determine whether the SUT performs as expected after the application of each patch.

Abstract: Various embodiments include methods and devices for a secure execution environment in computing devices. Embodiments may include generating a binary executable file for execution in the secure execution environment by generating hashes of instructions of a function, inserting a start hash instruction and a stop hash instruction in object code of the function, and generating a binary executable having the function including the start hash instruction and the stop hash instruction. Embodiments may include implementing the secure execution environment by generating hashes of instructions of a function in parallel with executing the function, comparing the generated hashes of the instructions of the function to stored hashes of instructions of the function, and issuing an exception indicating to a processor that execution of the function is not secure for any difference between the generated hashes of the instructions of the function and the stored hashes of the instructions of the function.

Abstract: A portable device and an operating method of the same are provided. The portable device includes a power line communication module performing power line communication with an external device, a memory module storing firmware data, and a controller controlling the power line communication module and the memory module, wherein the power line communication module sequentially provides an update initiation signal and firmware data to the external device, and provides an update end signal to the external device in response to a response signal transmitted by the external device.

Abstract: A system and method functions to make an app as installed on a smart device usable to access a service, such as a media streaming service. A presence of a counterpart to the app as installed on an appliance within a home network which includes the smart device is detected. A user credential, such as a username and password combination, that is associated with the counterpart to the app is then identified. The user credential is caused to be automatically associated with the app as installed on the smart device.

Abstract: Various embodiments provide for firmware upgrades in a conference room solution during an active communication session. For instance, an agent may track device characteristics, such as used status, unused status, properly functioning status, and malfunctioning status. The agent may then cause firmware upgrades to be performed on unused or malfunctioning devices during the active communication session before causing the firmware upgrades to be performed on used or properly functioning devices.

Abstract: A system is provided for programming one or more of a plurality of appliances of the same type. The appliances are commercial laundry appliances. The system includes a communication device and the plurality of appliances communicatively coupled with the communication device through a wireless connection. The communication device can be configured to acquire appliance information from the appliances. Based on the acquired information, the communication device determines whether one or more of the appliances requires a program update. The communication device of the system receives and stores into a memory the program update, then transmits the program update to the appliances. The communication device uses a broadcast transmission protocol, user datagram protocol (UDP), for programming the respective appliances requiring a program update. A method for programming simultaneously a plurality of commercial laundry appliances includes using the same system.

Abstract: A control device mounted on a vehicle and configured in such a manner that a program incorporated in a first vehicle control unit can be updated by first updating means and a program incorporated in a second vehicle control unit can be updated by second updating means that is different from the first updating means, the control device including a request reception unit causing the first updating means to receive an acquisition request of acquiring version information about a version of the program of the second vehicle control unit; and a transmission control unit causing the first updating means to transmit the version information according to the acquisition request. The first and second updating means are means for acquiring an update program from a device outside the vehicle, and one of the first and second updating means acquires a program from a device outside the vehicle via a communication unit.

Abstract: A computer system for searching for a candidate for an environment in which an object is to be deployed, the computer system is coupled to a plurality of infrastructure systems each of which provides the environment. The computer system receives a search request including an environmental requirement being a condition required for the environment in which the object is to be deployed and a constraint being a condition to be complied with in deployment of the object; executes first environment search processing for searching for the environment that satisfies the constraint and the environmental requirement; changes the environmental requirement in a case where the environment in which the object is deployable does not exist; and executes second environment search processing for searching for the environment that satisfies the constraint and the changed environmental requirement.

Abstract: An apparatus is disclosed. The apparatus comprises one or more processors to receive a request to perform a firmware update at a device, prepare a second trusted compute base (TCB) layer for the firmware update, generate a first compound device identifier (CDI) associated with a first TCB layer to be used by the second TCB layer to attest an operational state of the first TCB layer prior to applying the update and generate a second CDI associated with the first TCB layer to be used by the second TCB layer to attest the operational state of the first layer after the update has been applied and perform the firmware update of the second TCB layer.

Abstract: Disclosed are systems, methods, apparatus and computer program products for facilitating voice-based interaction by a mobile device with an enterprise database. In some implementations, a command and a type of enterprise work record are identified in a first one or more voice signals obtained at the mobile device. One or more fields of the identified record type required by the enterprise database to be populated to carry out the identified command is determined. Field data can be identified in a second one or more voice signals obtained at the mobile device. Structured text data comprising the identified command, the identified record type and the identified field data can be sent to a server.

Abstract: The invention relates to method and system for managing patched Global assembly cache methods for websites running in .NET framework environment. The method includes initiating a second domain when a website hosted on web-server is loaded for first-time; creating a copy of each of the one or more .NET modules for reverse patching; creating a runner method to call the copy of each of the one or more .NET modules; creating a patched method corresponding to each of the one or more .NET modules in the second domain; calling, in run-time, the patched method in second domain upon encountering the corresponding .NET module. Further, calling patched method includes calling the runner method via reflection in run-time. Calling the runner method includes calling the copy of the corresponding .NET module via reverse patching in run-time. The method further includes monitoring, in real-time, behaviour of the patched method in the second domain.

Abstract: A method and a system to perform the method are disclosed, the method includes receiving, by a virtualization server communicatively coupled with a client device, a request to provide a virtual machine (VM) to a client device, accessing a profile associated with the client device, instantiating a VM on the virtualization server, wherein the VM is a linked clone VM of a base VM, wherein the linked clone VM has (1) a read-only access to a shared range of a persistent memory associated with the base VM, wherein the shared range of the persistent memory is determined in view of the profile associated with the client device and stores at least one application installed on the virtualization server, (2) a write access to a private range of the persistent memory, wherein the private range is associated with the VM, and providing the VM to the client device.

Abstract: A system includes a processor configured to receive a plurality of reports identifying file-chunk distribution among reporting vehicles. The processor is also configured to determine reseeding file chunks to improve distribution characteristics, responsive to the reports. The processor is further configured to determine a plurality of candidate delivery vehicles and responsive to determining that a distribution threshold has passed, send the reseeding file chunks to the determined delivery vehicles.

Abstract: A new approach is proposed to support correlating high-level code with low-level instructions of an application running on a hardware. A compiler that compiles a high-level function in the high-level code of the application into a set of low-level instructions to be executed on the hardware is configured to utilize one or more reserved fields of the set of low-level instructions to incorporate one or more IDs and an actionable item. The IDs are mapped to the high-level function, wherein such mapping is programmable by the compiler. Based on the mapped IDs and the actionable item incorporated in the set of the low-level instructions, the runtime performance of the application on the hardware can be monitored and profiled and issues related to the high-level code of the application can be identified for debugging purposes.

Abstract: A management apparatus that manages network devices through a network manages information about network devices registered as management targets and executes a third type task in a case where a new network device satisfying a predetermined condition is found in a search, thereby automatically executing a plurality of tasks for the found network device.

Abstract: Methods and systems for resolving one or more faults in a security camera include installing an Auto-Executable Function (AEF) on the security camera. The AEF causes the controller to backup the set of user defined configuration settings to a memory of the security camera, reset the security camera back to the set of default configuration settings, reboot the security camera, and restore the set of user defined configuration settings. In many cases, this will resolve many unresolved faults within video camera and place the video camera back online. When this does not resolve a fault, the AEF creates a diagnostic report, wirelessly transmits the diagnostic report to a mobile device of a user, the mobile device identifies a software patch for resolving the fault, and the software patch is uploaded and installed on the security camera.

Abstract: A building controller with wiring terminals that has a moveable interactive screen is disclosed. The moveable interactive screen, when closed, covers the housing that holds the wiring terminals. The specific devices attached to specific terminals and the state of the devices can be displayed on the closed moveable interactive screen. Using the moveable interactive screen, a user can set up the expected devices and their protocols that will be attached to specific wiring terminals within the building controller. The controller wiring terminals can be viewed along with an interactive diagram of the devices and the terminals that have been set up for the building controller can be viewed simultaneously when the moveable interactive screen is in the open position.

Abstract: Systems and methods of the present disclosure enable the automated provisioning of security and compliance policies and onboarding to identity governance solutions. The systems and methods include processors to receive a database provisioning request associated with at least one entity and accessing at least one identity data record via an identity management mechanism associated with the at least one entity. The processors automatically access the database via a secured port; automatically cause to generate in the database, at least one privilege account and at least one access credential rule based on the at least one identity data record. The database is configured to utilize the at least one access credential rule to automatically manage access credentials for accessing the database via the at least one privilege account. The processors automatically disconnect from the secured port of the database.

Abstract: Described embodiments provide deployment of updates to multiple clients. A device may provide, to each client of a first plurality of clients, a software update to be executed at the client. The device can transmit, subsequent to providing the software update, to each of the first plurality of clients, a request to check a status of the client. The device can receive from at least one of the first plurality of clients, a response to the request indicative of operational health of the client subsequent to providing the software update to the client. The device determines an operational health statistic of the first plurality of clients subsequent to providing the software update to the first plurality of clients and provides, to each client of a second plurality of clients, the software update to be executed at each client responsive to determining that the operational health statistic satisfies a predetermined threshold.

Abstract: An apparatus of performing a vehicle over-the-air (OTA) update is provided. The apparatus includes a reception device that receives instruction information for determining a reference state of charge (SOC) value of a battery for a vehicle for performing an OTA update of the vehicle, a reference SOC value determination device that determines the reference SOC value, in response to the instruction information being received, and a generation device that generates information related to whether to perform the OTA update based on the determined reference SOC value.

Abstract: In some aspects, the techniques described herein relate to a system including a key management server (KMS) configured to generate a first unique device secret (UDS) based on a server private key stored by the KMS; and a secure device configured to: generate a second UDS based on a device private key stored by the secure device, the second UDS equal to the first UDS; compute a TCB component identifier (TCI) based on a received TCB; generate a first cryptographic key using the TCI and the second UDS; generate a first digital certificate including the first cryptographic key; transmit the first digital certificate to the KMS which validates the first digital certificate based on a second cryptographic key generated using the first UDS; receive a second digital certificate from the KMS which is signed using a second server private key; and store the second digital certificate as a device certificate.

Abstract: A deployment system can include a computing device that is configured to receive a broadcast message from a deployment device in response to the deployment device receiving an approval notification and obtain a plurality of deployment parameters via a distributed communications system. The computing device can also be configured to identify an installation time included in the plurality of deployment parameters and download application data associated with an application identifier included in the plurality of deployment parameters to a local database. The computing device can also be configured to initiate an installation of the application data from the local database at the installation time and transmit a status update to the deployment device in response to the installation being initiated.

Abstract: In one example, a method for prediction future network anomaly events is disclosed. The method includes generating a machine learning model for a computer communication network. Generation of the machine learning model can be by applying a historical set of time series data metrics of the computer communication network to train the machine learning model. The method may determine a data metric threshold that indicates a limit for future data metrics associated with the computer communication network. The method may analyze current data metrics associated with the computer communication network, and predict a future time when the data metrics associated with the computer communication network will meet or exceed the data metric threshold value. The method may flag the prediction of the future time to avoid a network anomaly.

Abstract: A failure symptom detection system includes a first storage to collect and store field data of each of a plurality of Internet of things devices, a feature extractor to acquire feature data of the field data based on a report on a failure in a service as a feeling of a user of a facility, a second storage to accumulate a failure at an occurrence of the failure associated with content of the failure as the feeling of the user, and a failure symptom detector to monitor the field data stored in the first storage, and produce, upon detecting feature data matching the feature data accumulated in the second storage, output indicating detection of a symptom of the failure associated with the feature data.

Abstract: In some examples, a computing device comprises a processing resource and a memory resource storing instructions to cause the processing resource to detect, by a basic input/output system (BIOS) of the computing device, firmware corruption in a firmware component of the computing device, generate a recovery agent based on the detected firmware corruption of the firmware component, determine a location of a back-up image of the firmware component based on the generated recovery agent, determine recovery sequence based on the determination of the location of the back-up image of the firmware component; and recover the firmware of the firmware component by executing the determined recovery sequence.

Abstract: Systems and methods are provided to perform BIOS recovery for a first information handling system that is in a no-boot state, i.e., in which the original equipment manufacturer (OEM) boot block (OBB) on the first information handling system is corrupted or damaged and thus does not properly execute. OBB BIOS recovery may be achieved using logic executing on a second and different information handling system that is wirelessly communicating with initial boot block (IBB) BIOS firmware that is executing on the first information handling system. The logic executing on the second information handling system may select and download (e.g., from a remote server) a correct uncorrupted and undamaged copy of the BIOS recovery firmware version for the first information handling system, and then wirelessly transfer the downloaded new copy of the OBB BIOS firmware version to the first information handling system via an established secure wireless connection.

Abstract: A communication control system includes a memory and a processor coupled to the memory. The processor is configured to according to an instruction from an external device, perform processing related to changing a network setting on a communication device, after the processing has been executed, determine whether or not communication of the communication device matches a specific communication condition, and notify an error to the external device in a case in which determination has been made that the communication of the communication device does not match the specific communication condition.

Abstract: A data processing system implements managing the deployment of updates to a cloud-based service by deploying an update to one or more components of a cloud-based service according to a deployment plan. The deployment plan defines a plurality of stages in which the update is deployed to a subset of the components associated with a different subset of users of a userbase. The system implements receiving signal data that includes information regarding the performance of the update at each stage of the deployment plan; analyzing the signal data to determine whether one or more trigger conditions of halt and recovery rules associated with the update have been satisfied; and automatically halting deployment of the update to the one or more components of the cloud-based service responsive to at least one of the trigger conditions associated with the halt and recovery rules associated with the update having been satisfied.

Abstract: Edge nodes in distributed computing environments can be updated according to some aspects described herein. For example, a first node in the distributed computing environment can receive an update request from a management node. The update request can include an update file for updating a second node. In response to receiving the update request, the first node can generate a first partition and a second partition, containing the update file, within the first node. Additionally, the first node can generate a network tunnel between the first node and the second node. The first node can mount a file system for the second node onto the first partition and a copy of the file system onto the second partition of the first node via the network tunnel. The first node also can update the file system in the second partition using the update file to generate an updated file system.

Abstract: Systems and techniques are provided for testing software changes and determining a repeatability of software tests. An example method can perform software tests at different timepoints, each software test being based on a test scenario comprising a test simulation environment configured to test a software; determine one or more software tests from the software tests having a variation in test scores that exceeds a divergence threshold, the one or more software tests comprising at least one test scenario; rerun a software test a number of times, the software test configured to test changes to a code of the software, the changes to the code being associated with the software test and/or the at least one test scenario; and determine, based on test scores generated by the software test performed the number of times, a repeatability score for the software test on the changes to the code of the software.

Abstract: The present disclosure provides systems, methods, and computer readable storage devices for software distribution across a hierarchical network. A method includes sending, by a first node device, a registration request message to a second node device of a first distribution group of the hierarchical network. The registration request message indicates a request for the first node device to join the hierarchical network. The method further includes receiving, by the first node device, a registration response message from the second node device. The registration response message indicates an assignment of the first node device to a second distribution group corresponding to a tier that is below a tier that includes the first distribution group. The first node device may be authorized to perform peer-to-peer (P2P) communications to receive at least a portion of one or more files from node devices in the second distribution group or the second node device.

Abstract: A method includes generating verification information based on a to-be-configured device, where an association relationship exists between the verification information and service configuration information of the to-be-configured device; sending the verification information to the to-be-configured device; receiving a registration request from the to-be-configured device, where the registration request includes the verification information; and performing verification on the to-be-configured device based on the verification information, and sending the service configuration information of the to-be-configured device to the to-be-configured device.

Abstract: Method, apparatus and computer program product embodiments are provided for distributing and installing content and settings on client devices without receiving any user input at the client devices, which limit usage of the client device a user at the client device to a first set of the usage activities. A device controller may remotely configure and control client devices by providing instructions and content for distribution to the client devices. The instructions may cause the client devices to install the content on the client devices without requiring any user input to initiate the installation or during installation of the content. The client device may be further configured to allow management of the client device by the device controller.