Abstract: A system and method for detecting and managing electronic transactions and providing a domain specific collection of remotely callable functions in a video game environment.

Abstract: The present disclosure provides a distributed computing network system and a method. The distributed computing network may include: a plurality of nodes, where the plurality of nodes is connected through an n-layer network connection. When the distributed computing network receives a data processing task, a node in an ith layer is configured to: receive a data processing task that is corresponding to the ith layer and that is transmitted from a node in a lower layer; complete a data processing task Ti; transmit, to the node in the lower layer, a data processing result; and transmit, to a node in an upper layer, a remaining data processing task, a process of the data processing task meets a preset condition. The overall feedback time of the data processing task is reduced by distributing calculation tasks among multiple layers of nodes. The technology may be applied in both 4G and 5G network.

Abstract: Aspects of the subject disclosure may include, for example, identifying a request to install a guest virtual machine on a physical host; identifying a UUID of the physical host; generating a virtual machine reference value; defining a modified UUID of the guest virtual machine comprising the UUID of the physical host and the virtual machine reference value; and assigning the modified UUID to the guest virtual machine, the physical host being identifiable via the modified UUID of the guest virtual machine. Other embodiments are disclosed.

Abstract: A system and method are provided wherein, in at least one form, artificial intelligence is used to identify objects in a document to be considered for metallic rendering or printing on a substrate. Then, the options for printing, including the considerations for rendering in metallic toner or ink, are, in at least one form, presented to the user for acceptance or rejection before the actual printing is initiated.

Abstract: A kiosk device is shared by many users of an organization in a sequential manner. The kiosk is provisioned so that each of the appropriate users of the organization may use it, and so that each such user may be provided with a federated identity by an external identity provider (IdP) system. The federated identity may be used to automatically provide the user with access to the user's different resources (e.g., the user's accounts on various third-party applications). An authenticator component of the kiosk device communicates with the external IdP system so as to securely and transparently provide the users with a federated identity. In order to provide additional security, the authenticator component and/or the IdP system may take into account organization-specific details when authenticating a user, such as whether a particular user is expected to be on duty with the organization at the current time.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: A dataset is received for ingestion into a data platform, and a correlation identifier is generated responsive to receiving the dataset. Multiple choreographed services emit multiple event messages. The plurality of choreographed services operate independently of each other based on a plurality of events triggered in a data platform. The plurality of events relate to contents of the dataset and comprising the correlation identifier. A message storage is populated with multiple status updates related to the correlation identifier. A status message associated with the correlation identifier is published in response to a status update of the plurality of status updates.

Abstract: The present invention provides a method for achieving high availability of stream control transport protocol (SCTP) connection in a microservice system. The microservice system comprises at least one access network and a core network. The access network includes at least one base station comprising at least one SCTP peer. The core network includes at least one non-SCTP-capable microservice instance acting as a SCTP service client, multiple SCTP-capable microservice instances, a service node manager and a service delegator.

Abstract: The disclosed computer-implemented method includes applying transport protocol heuristics to selective acknowledgement (SACK) messages received at a network adapter from a network node. The transport protocol heuristics identify threshold values for operational functions that are performed when processing the SACK messages. The method further includes determining, by applying the transport protocol heuristics to the SACK messages received from the network node, that the threshold values for the transport protocol heuristics have been reached. In response to determining that the threshold values have been reached, the method includes identifying the network node as a security threat and taking remedial actions to mitigate the security threat. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Systems and methods are disclosed for event-based application control. A system extension is configured to leverage an endpoint security API for monitoring event activity within operating system kernel processes. The system extension registers with the endpoint security API particular event types for which the system extension would like to receive notifications. In response to receiving notifications regarding detected events corresponding to the registered event types, the system extension determines if the event, and its corresponding process, are safe and allowable to execute. In various embodiments, the system leverages whitelists, blacklists, and rules policies for making a safeness determination regarding the event notification. The system extension transmits this determination to the operating system via the endpoint security API.

Abstract: Embodiments of systems and methods for platform framework authentication are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution, cause the IHS to: receive, via an authentication provider registered with a platform framework via an Application Programming Interface (API), an authentication credential; and send the authentication credential to a plurality of applications registered with the platform framework.

Abstract: A terminal device may obtain specific information stored in a memory. The specific information may include at least one of region information indicating a region where the terminal device is used and model information of a printing device used by the terminal device. The printing device may be configured to execute printing by using a plurality of cartridges corresponding to a plurality of colors. The terminal device may determine whether a predetermined condition is satisfied or not by using the specific information, and in a case where it is determined that the condition is satisfied, send a first page request and color information to a server. The color information may indicate a selected color selected from the plurality of colors.

Abstract: A new approach is proposed that supports IP address lookup. An IP address updater creates a bitmap of an IP address space, wherein each bit in the bitmap corresponds to an IP address in the IP address space. The compressed bitmap is then populated and stored permanently on a shared memory storage that is accessible by multiple client applications at the same time. The client applications may each establish and maintain a connection to the shared memory storage through an IP address lookup agent. When a lookup request for an IP address is received, the IP address lookup agent checks the bitmap and associated information of the IP address space on the shared memory storage to determine if the IP address is malicious or not and to inform the client application making the request accordingly, while the bitmap on the shared memory storage is updated with new IP address update.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for generating customized recommendations for environmentally-conscious cloud computing frameworks for replacing computing resources of existing datacenters. One of the methods involves receiving, through a user interface presented on a display of a computing device, data regarding a user's existing datacenter deployment and the user's preferences for the new cloud computing framework, generating one or more recommendations for environmentally-conscious cloud computing frameworks based on the received data, and presenting such recommendations through the user interface for the user's review and consideration.

Abstract: Provided is a media processing method. The method is used for uploading a function provided by a user or a third party and obtaining media processing parameters provided by the user. The method includes the following steps: receiving the description information of the media processing and determining whether a function that fulfills the requirement of the description information exists in a system; in a case where the function that fulfills the requirement of the description information exists, selecting the function that fulfills the requirement of the description information from the system; and in a case where the function that fulfills the requirement of the description information does not exist, selecting the function from the system according to the priority or selecting the function that fulfills the requirement of the description information from outside the system.

Abstract: A method for the protection of files is performed on an integrated-circuit device that comprises a hardware memory protection module, which controls access to regions of the memory depending on region-specific settings. A new file is created in the memory by storing metadata and content data for the new file in a common memory region. An access condition is set for the common memory region in the configuration settings of the hardware memory protection module. A file is retrieved from the memory by searching the memory to identify a file meeting a search criterion. The searching involves comparing the metadata of files from the memory against the search criterion in order to identify a file from the memory that meets the search criterion.

Abstract: Systems and methods for conducting various types of Connection Validation (CV) are provided for reducing the overall CV scan time of regular CV scans. A Reconfigurable Optical Add/Drop Multiplexer (ROADM), according to one implementation includes at least one degree component; at least one add/drop component; a plurality of fibers interconnecting the at least one degree component and/or the at least one add/drop component; and a controller configured to, responsive to any of ongoing operation and connection of one or more fibers of the plurality of fibers, cause a Connection Validation (CV) scan in the ROADM that cycles through the one or more fibers, attain a desired cycle time for the CV scan through one or more techniques, and determine one or more of connectivity and whether fiber loss is within expectations, based on the CV scan.

Abstract: A network node comprises a core processing part to perform a core processing function, an ingress processing part to receive incoming signalling messages, an egress processing part to output signalling messages for transmission from the network node, and a message manipulation function to manipulate signalling messages. In a first configuration, the message manipulation function is comprised in the ingress processing part, and in a second configuration the message manipulation function is comprised in the egress processing part. In the first configuration, an egress characteristic is determined, indicative of how an outgoing signalling message is to be outputted, and an incoming signalling message is manipulated based on the egress characteristic. In the second configuration, an ingress characteristic is determined, indicative of how an incoming signalling message has been received, and an outgoing signalling message is manipulated based on the ingress characteristic.

Abstract: An authenticating system and process for authenticating user devices to a access a service where access to certain portions of the service may be limited according to a access point or other device used by a user device to facilitate interfacing a user with the service. The authentication may be achieved without directly assessing a trustworthiness of the user devices, and optionally, without requiring a user thereof to complete a sign-on operation.

Abstract: This application discloses a communications method and related communications apparatus and system. The method includes recovering, by a first node, when detecting that a first packet is lost, the first packet according to a local recovery mechanism. The first packet is a packet obtained based on a packet sent by at least one first terminal to at least one second terminal, and the first node is a node on a network path between each first terminal and a second terminal communicating with the first terminal. The method further includes adding a first identification information related to local recovery, and sending the first packet. This application can reduce a transmission delay and improve transmission efficiency.

Abstract: A live event polling system is disclosed that provides passive engagement tools and micro-polling services during live events so that live event hosts and developers of virtual spaces can engage their audiences and collect valuable input and data more effectively and promote audience participation for sentiment sharing and data collection in ways that overcome conventional barriers, such as time and user participation, which exist to gaining verbal input during such live events.

Abstract: Aspects of the present disclosure involve a system comprising a computer-readable storage medium storing a program and method for determining zone identification reliability. The program and method provide for receiving plural page samples of a webpage or page group, each page sample of the plural page samples corresponding to a respective pageview of the webpage or page group; determining, for each page sample of the plural page samples, zone identification information for the page sample, the zone identification information indicating targets and zones identified by the targets for the page sample; detecting any identification errors with respect to the zone identification information for the plural page samples; and determining, based on the detecting, a reliability of the zone identification information.

Abstract: Systems and methods to encrypt centralized information associated with users of a customer due diligence platform based on a modified key expansion schedule are disclosed. Exemplary implementations may: obtain user profile information making up user profiles of users of a customer due diligence platform; encrypt the user profile information to generate encrypted user profile information based on a modified key expansion schedule requiring multiple different keys; effectuate storage of the encrypted user profile information in association with the user profiles in non-transitory electronic storage; and/or perform other operations.

Abstract: A method for transmitting digital subscriber connection signals to an interface of an end user via a coaxial cable includes: supplying, by a distribution point unit (DPU), first balanced subscriber connection signals to the coaxial cable by a first transformation; coupling unbalanced subscriber connection signals into the coaxial cable into a lower frequency range of an overall frequency range; attenuating, by means of a filtering device, a reflection of the unbalanced subscriber connection signals in the coaxial cable; a second transformation of the unbalanced subscriber connection signals into second balanced subscriber connection signals by means of a balun device assigned to the interface, wherein the input impedance of the filtering device is adjusted with respect to reflections from the direction of the customer terminal output; and separately making the second balanced subscriber connection signals available at the customer terminal output.

Abstract: Embodiments of the present invention relate to a method, system and computer program product for application programming interface (API) management. According to the method, in response to a first response from an API provider indicating a failure of a first API request initiated by an API requestor, a second API request is generated at least based on the first API request. The second API request is transmitted to the API provider. A second response to the second API request is received from the API provider. A third response is provided to the API requestor based on the second response.

Abstract: In one embodiment, a method of alerting a user of a WCD is described. The method includes receiving an alert from the WCD on a remote device associated with the user and in communication with the WCD and transcribing the alert into a message for the user. The method also includes personalizing the message for the user and delivering the message to the user via the remote device.

Abstract: A computer-implemented method includes storing usage of a resource of said computer system as time-stamped resource usage values, comparing said time-stamped resource usage values with predetermined time-stamped performance goal values, assigning a time-stamped priority value to an application that is running based on at least one of said performance goal values, identifying a future workload demand value by applying a time-series analysis algorithm to at least some of said time-stamped resource usage values and a corresponding at least some of said time-stamped performance goal values for said application resulting in workload demand time frames and related amplitudes of said workload demand time frames, and adjusting a dispatch priority value for said application by setting a minimum dispatch priority for said application based on said future workload demand value.

Abstract: Disclosed herein are methods and systems for access point device recovery and management using mobile devices. The method includes providing, by a mobile device to an access point device via a service provider system, authentication details of the mobile device, establishing a secure wireless connection using the authentication details between the access point device and the mobile device upon receiving, by the mobile device, an indication of failure of a network connection between the service provider system and the access point device, sending, by the mobile device to the access point device over the secure wireless connection, a configuration instruction, receiving, by the mobile device from the access point device over the secure wireless connection, confirmation of the configuration instruction, and disconnecting the secure connection upon successful application of the configuration instruction.

Abstract: Selectively rewriting URLs is disclosed. An indication is received that a message has arrived at a user message box. A determination is made that the message includes a first link to a first resource. The first link is analyzed to determine whether the first link is classified as a non-rewrite link. In response to determining that the first link is not classified as a non-rewrite link, a first replacement link is generated for the first link.

Abstract: In some embodiments, a non-transitory processor-readable medium stores code representing instructions to be executed by a processor. The code includes code to cause the processor to receive a structured file for which a machine learning model has made a malicious content classification. The code further includes code to remove a portion of the structured file to define a modified structured file that follows a format associated with a type of the structured file. The code further includes code to extract a set of features from the modified structured file. The code further includes code to provide the set of features as an input to the machine learning model to produce an output. The code further includes code to identify an impact of the portion of the structured file on the malicious content classification of the structured file based on the output.

Abstract: Improved techniques and systems for delivery and acquisition of digital assets are disclosed. The techniques and systems are especially suitable and useful for delivering digital assets (e.g., media assets) that are available for acquisition and electronic delivery from online stores to electronic devices. In accordance with one aspect, when a digital asset is acquired from an online store via an electronic device associated with a user, the digital asset can be arranged for delivery to a number of other of electronic devices also associated with the user. It will be appreciated that the digital asset can be delivered and acquired without requiring explicit user input or instruction in accordance with another aspect. Other aspects of the techniques and systems include customization of configuration and user interfaces that are provided to facilitate acquisition of digital assets in a more efficient manner.

Abstract: A server may include at least one server processor configured to execute an application. A desktop virtualization system may include at least one desktop virtualization processor. The desktop virtualization processor may be configured to instantiate a virtual desktop; authenticate a user of a client device; in response to authenticating the user of the client device, place the client device in communication with the virtual desktop through at least one network; launch a secure browser in the virtual desktop; and using the secure browser, place the client device in communication with the server through the at least one network. The application may be configured to perform processing in response to at least one command from the client device sent through the secure browser of the virtual desktop.

Abstract: A workflow resource manager receives a request to execute a workflow in a cloud computing environment. The workflow resource manager determines that a first set of cloud computing resource requirements associated with the first set of operations for the workflow is satisfied by available cloud computing resources, and responsive to determining that a second set of cloud computing resource requirements associated with a subsequent set of operations for the workflow is not satisfied by the available cloud computing resources, rejects the request to execute the workflow.

Abstract: The present application relates to embodiments for detecting firewall drift. In some embodiments, a first set of firewall rules of a first firewall for a first instance of a distributed application, a second set of firewall rules of a second firewall for a second instance of the distributed application, and a mapping of IP addresses to identifiers of services from amongst a first set of services of the first instance and a second set of services of the second instance may be obtained. First connectivity data and second connectivity data may be generated indicating, for each of IP address associated with the first and second set of firewall rules, a respective port number over which communications between a respective IP address are transmitted, and generating comparison data indicating whether firewall drift is detected based on a comparison of the first connectivity data and the second connectivity data.

Abstract: A mobile office realization method includes receiving a mobile office access request from a mobile office device, determining a target network of the mobile office access request, sending the mobile office access request to the target network, receiving, from the target network, response data of the mobile office access request obtained by the target network, and sending the response data to the mobile office device.

Abstract: A content delivery method including the operations of receiving a uniform resource locator resolution request at an authoritative name server for a domain where the uniform resource resolution request is received based, at least in part, on a host name of the uniform resource resolution request where the host name is uniquely related to a resource associated with the uniform resource resolution request. The method further including the operation of tracking a popularity of the resource based on the host name uniquely related to the resource and providing a location within a network capable of delivering the resource where the provided location is based on the popularity of the resource.

Abstract: Root certificates generated by root certificate authorities may be bound at the time of generation. In an example, a first root certificate can include an identity of a first root certificate authority, a first key identifier associated with a first key of the first root certificate authority and an identity of a first digital signature algorithm used by the first root certificate authority. The first root certificate can also include at least one extension including a second key identifier of a second key associated with the second root certificate authority and an identity of a second digital signature algorithm used by the second root certificate authority, the second digital signature algorithm being different from the first digital signature algorithm.

Abstract: Some demonstrative embodiments include apparatuses, devices, systems and methods of beamforming. For example, a responder station may process a received Beam Refinement Protocol (BRP) request including a beam tracking request from an initiator station; and select whether or not to transmit a BRP response including beam tracking feedback, in response to the BRP request, based on a comparison between a time period and a BRP tracking time limit, the time period being based on a timing of the BRP request and a timing of the BRP response.

Abstract: Systems and methods are provided for establishing a secure communication link between a first client and a second client. One exemplary computer-implemented method for establishing a secure communication link between a first diem and a second client includes accessing, from a storage, identification information of a user of the first client. The method further includes receiving a Domain Name Service (DNS) request from the first client requesting a secure network address corresponding to a secure domain name associated with the second client. The method further includes authenticating the user based on the user identification information. The method also includes transmitting the secure computer network address in response to the DNS request based on a determination that the user has been authenticated. A secure communication link between the first diem and the second client is established based on the secure computer network address.

Abstract: Techniques for management of traffic in a network. The techniques provide application awareness in a Network Address Translation (NAT) system. In some examples, a first traffic is received at a first switch in a network from a first application hosted behind the first switch. The first switch identifies a first resource tag associated with the application from the first traffic. Further, the first switch identifies a first rule from the first resource tag indicating that the first traffic is to be routed through an intermediate device that performs network address translation. Moreover, the first switch transmits the traffic to an intermediate device, which perform NAT to translate the source IP address of the first traffic to a second IP address. Finally, the intermediate device sends the traffic to a destination device indicated by the first traffic.

Abstract: A system receives a request associated with a first account to delegate, to a second account, authority to send documents on behalf of the first account. The request identifies requirements that must be satisfied before the second account can send documents on behalf of the first account. Responsive to receiving a request to send a first document to a first entity from the second account and on behalf of the second account, the system sends the first document to the first entity. Responsive to receiving a request to send a second document to a second entity from the second account and on behalf of the first account, the system determines whether the request to send the second document satisfies the requirements. Responsive to the request satisfying the requirements, the system sends the second document to the second entity on behalf of the first account.

Abstract: A printing system including: a location registration equipment (11) that performs user authentication of a user who operates a client terminal (14) at a workspace (100); a remote desktop server (12) that enables a desktop screen of an office-installed terminal to be operated through the client terminal (14); and a printing device (13) that outputs printing data in accordance with a printing request, wherein the location registration equipment (11) transmits location information of a user for whom it has performed user authentication to the printing device (13), and the printing device (13) transmits, when it receives a printing request from the remote desktop server (12), printing data to which the location information is added to the location registration equipment (11).

Abstract: To provide a presentation assistance system capable of dynamically changing presentation materials according to terms used in a presentation. A presentation assistance system comprises: a presentation material storage unit 3; a related word storage unit 5 which stores a plurality of related words related to the presentation material; a succeeding information storage unit 7 which stores, for each of the related words, information about a succeeding related word that is one or a plurality of related words that are preferably used next; a related word analysis unit 9 which analyzes which one of the related words corresponds to the word analyzed by a term analysis unit; and a succeeding related word selecting unit 11 which selects a succeeding related word from the succeeding information storage unit, by using information about an analyzed related word which is a related word analyzed by the related word analysis unit.

Abstract: A system and method for early detection of a compromised client device includes a tamper detection service configured to monitor modifications to resource access privileges over time to identify unusual variations in jailbreak status that indicate compromise of the client device. For example, the tamper detection service may monitor the jailbreak status of system files over time to expose attempts to hide the jailbreak status of a protected resource. To validate that malware is attempting to hide the jailbreak status of a protected resources, the tamper detection process may launch multiple different resource accesses, targeting the protected resource, to determine whether different accessibility results are returned, indicating a compromised device.

Abstract: Network traffic through a router, e.g., home router, operating as a firewall is monitored and analyzed the network to identify devices and the type of one or more of the identified devices. In some embodiments, the device type identification is performed using a neural network. The router stores a set of firewall templates. At different times, different templates are applied, e.g. based on mode of operation, user selection, and/or time information. Rules in a firewall template, applicable at a given time to traffic corresponding to identified devices, that are attempting to send or receive via the router, are applied. Different rules may, and sometimes do, apply to different device type classifications.

Abstract: A computer-implemented method for configuring a blockchain network, a computer program product for integrating device identity into a permissioning framework of a blockchain network, and a blockchain network. One embodiment may comprise registering a device at a delineate node of a blockchain network, creating, by a processor of the delineate node based on the registering, a profile for the device; an performing, by the processor of the delineate node, a pass-through service for the device. The registering may include receiving, by a network interface, an immutable device identity from the device.

Abstract: Provided is a welding-type power source, comprising power conversion circuitry configured to convert input power to welding-type power, a user interface comprising a first input device, a second input device, and an output device, and control circuitry. The control circuitry is configured to, in response to a first input via the first input device, control the output device to output an indication that the welding-type power source is in a preconfigured state, set predetermined ones of welding-type parameters to respective predetermined values, set a welding current, when there is an input from the second input device, to a value indicated by the second input device, and set the welding current, when there is not an input from the second input device, to one of: the default value when the default welding current has not been changed, or a welding current that has been changed previously via the second input device.

Abstract: Systems and methods for providing least privilege access to a resource within a secured server are disclosed. The systems and method can include receiving an access request from a client requesting access to the resource, the access request comprising a role or policy associated with the client and one or more actions associated with the resource. A rules engine can be initialized, the engine defining one or more rules usable by the system to determine whether the access request complies with a least privilege policy. The systems and method can analyze the role or policy and the access request with the rules engine to determine whether the access request complies with the least privilege policy. When the access request complies with the rules, access to the resource can be granted; when the access request does not comply with the rules, access to the resource can be denied.

Abstract: An interactive demonstration application can be used to test and experience the use of overlay elements (e.g., application add-ons, such as an interactive chat overlay) on a graphical interface (e.g., of a website or a computer application) before fully integrating the overlay elements into the graphical interface. The interactive demonstration application can also be used to demonstrate and update the live settings of a live overlay element used on a live webpage.

Abstract: A cloud-connected baseboard management controller (BMC) enables remote management of all management layers of edge-based host machines from the cloud without imposition of costs associated with firewalls and private data connections. A remote management agent incorporated into the BMC enables creation of a remote management-enabled bare-metal server paradigm in which remote management from the cloud is supported at the lowest hardware levels which provides for cost-effective utilization of network resources down to even a single isolated node.