Abstract: A method of executing a program segment operating on homomorphically encrypted data, the method comprising: providing a processing and memory circuitry (PMC) configured to execute, responsive to a respective program instruction, at least: i) a move operation, and ii) an operation of comparing two homomorphically encrypted input bits; executing, on the PMC, responsive to instructions of the program segment: i) a first operation of comparing two homomorphically encrypted bits to store a comparison result to a first memory location, and ii) a second operation that is configured to access the first memory location; thereby giving rise to branch-free execution of a program segment in accordance with the comparison result of homomorphically encrypted bits.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may receive information indicating a first slot format, wherein the information indicates one or more symbols associated with a full duplex (FD) format. The UE may perform communication based on a second slot format until a time period after the reception of the information indicating the first slot format, wherein the second slot format is prior to the first slot format. The UE may perform at least one of half duplex (HD) communication or FD communication in accordance with the first slot format after the time period has elapsed. Numerous other aspects are described.

Abstract: A server establishes a secure session with a client device where a private key used in the handshake is stored in a different server. An encrypted connection is established between the first server and the second server. A message is received from the client device that initiates a procedure to establish the secure session between the client device and the first server. As part of this procedure, the first server transmits over the encrypted connection a request to the second server to use the private key. The first server receives, over the encrypted connection, a response to the request that includes a result of the use of the private key. The first server uses the result during the procedure to establish the secure session.

Abstract: A communication device includes a connector inserted into a first device, a communication circuit which performs wireless communication with a second device, and a processing circuit. The processing circuit is programmed to communicate with the first device via the connector to control the communication circuit, wherein the processing circuit is configured to execute generating a first signal representing that the connector is pulled out from the first device when the processing circuit detects that the connector is pulled out from the first device, and transmitting the first signal to the second device by controlling the communication circuit.

Abstract: The present technology provides real-time message moderation that checks messages against a list of trigger checks and determines whether or not the message should be blocked before the message is sent to other members of the community. The real-time message moderation uses a rules system that enables administrators to generate a customized sets of rules, such as custom keyword filter that blocks a message if it contains a word that matches a keyword associated with the custom keyword filter rule, and wherein custom keywords may be added by a moderator of the server. Moderators can report issues with past blocked messages to train a machine-learning model about a bad flag.

Abstract: A software development infrastructure can enable user developers to select remote hardware devices to develop and test their software programs. For some tests and development activity, the user may wish to test media playback on the remote device. The default configuration of network media transmission objects can be modified to use operating system media capture APIs to provide the user developer a media playback from a far-away remote device.

Abstract: The present teaching relates to method and system for evaluating a conversion. The method extracts meta-information including a conversion parameter and a reward. The meta-information corresponds to a conversion associated with an advertisement displayed previously by a plurality of entities. The method receives a plurality of claims for the conversion from one or more entities, and selects a claim corresponding to an entity from the plurality of claims based on the conversion parameter and information included in the plurality of claims. Further, the method transmits information related to the selected claim.

Abstract: Disclosed herein are systems and methods for establishing a metadata exchange channel between a media playback system and a networked microphone system, wherein the networked microphone system comprises a networked microphone device and a networked microphone server. After establishing the metadata exchange channel, the media playback system experiences a metadata exchange triggering event. In response to experiencing the metadata exchange triggering event, the media playback system provides metadata to the networked microphone system via the metadata exchange channel.

Abstract: An apparatus for providing an interface between a first network that operates based on a first protocol and a second network that operates based on a second protocol, includes a receive terminal configured to receive one or more first messages encoded according to the first protocol, the first messages encapsulating a plurality of second messages. The apparatus is configured to extract encapsulated second messages, determine for each of extracted second messages, and based on flow identifying information of each of extracted second messages, a flow to which the extracted second message belongs. The extracted second messages of the flow provide for transmission of the extracted second messages on the second network encoded based on the second protocol with a time spacing there between greater than a predetermined minimum time spacing.

Abstract: A method and a classification configuration module for managing a classification configuration for traffic, related to a service, in a software defined network are disclosed. The classification configuration module receives the classification configuration from a service related module. The classification configuration includes a first indication indicating a traffic treatment for the traffic, and a second indication identifying the traffic to be treated according to the first indication for traffic treatment. The classification configuration module determines, based on the classification configuration, a set of traffic filters for use by a software defined network controlling module to determine a list of service functions implementing the traffic treatment for the traffic. The classification configuration module transmits information relating to the set of traffic filters to the software defined network controlling module.

Abstract: Systems and methods are provided for transferring state between devices. In one implementation, a gestural input is detected, and a state of a source application is transferred from a first device to a second device in response to the gestural input. The second device may then generate an instance of a target application that corresponds to a representation of the state of the source application received from the first device. In an additional implementation, a state of the target application is transferred from the second device to the first device. The first device then updates a state of the source application to correspond to a representation of the state of the target application received from the second device.

Abstract: Disclosed subject matter relates to method and system for securing data of objects in a laboratory environment. An image capturing device configured in a laboratory instrument may capture images of plurality of objects in the laboratory environment. A processor in the laboratory instrument may identify one or more objects from the images matching with predefined target objects. The processor may apply virtual masking object on or around the identified objects to prevent exposure of data associated with the identified objects and thus provides data privacy.

Abstract: A system and method for sharing content data between networked devices in communication with a server processor circuit via a data network is disclosed. The method involves, in response to a request received at the server from a first networked device to upload content data, causing the content data to be written to a storage location at a content storage address. The method also involves causing the server processor circuit to store the content storage address in a database managed by the server. The method further involves causing the server processor circuit to associate an access key with the content storage address in the database and to determine and store an expiry for the access key in the database, the expiry facilitating a determination as to whether the access key remains actively associated with the content data or has expired and is no longer associated with the content data.

Abstract: Systems and methods for detecting application behavior using network traffic are described herein. The systems and methods enable a network to utilize network traffic data to determine various metrics and behavioral patterns associated with applications and their use. The patterns can be used to monitor traffic from a specific user device and across the network. Further, the information may be used to generate a trust score that provides a network and/or a user with information relating to an application.

Abstract: A hands-free apparatus enables a hands-free call by being wirelessly connected to a mobile phone that stores therein history data including incoming call history data and outgoing call history data, and phonebook data. The hands-free apparatus is configured to: perform control of connecting to the mobile phone by a transfer protocol for transferring the history data and the phonebook data; receive the history data and the phonebook data from the mobile phone by the transfer protocol when the mobile phone is present in a wireless connection area; and display an error and display a reconnection screen for receiving an instruction for reconnection by the transfer protocol with the mobile phone from a user, on a display, when connection by the transfer protocol with the mobile phone is disconnected during reception of at least one of the history data and the phonebook data.

Abstract: A method including transforming metrics, related to a computer network environment, into a digital image including pixels that represent the metrics. The computer network environment initially is load balanced by a first load balancing scheme selected from among load balancing schemes. The method also includes generating a classification of the digital image. The method also includes selecting, based on the classification of the digital image, a selected load balancing scheme from among the load balancing schemes. The method also includes changing the first load balancing scheme to the selected load balancing scheme such that the selected load balancing scheme is applied to the computer network environment.

Abstract: A data communication queuing method includes receiving a communication start notification from a first computing device associated with a first user account, accessing a list of a plurality of other user accounts linked to the first user account, sending a communication availability notification to at least a portion of other user accounts, operating a digital communication queue, enabling a live digital communication between the first user account and the at least one user account for a predetermined period, and ending the live digital communication between the first user account and the at least one user account of the multiple other user accounts after the predetermined period. The digital communication queue is operated by receiving a queue-join request from multiple other user accounts, enqueuing the multiple other user accounts in a determined order, and dequeuing at least one user account of the multiple other user accounts.

Abstract: Systems, methods, and computer media for securing software applications are provided herein. Through an enhanced authentication token, an application session request can be deceptively authenticated. When a malicious session request is detected, an enhanced authentication token can be generated that appears to successfully authenticate the session but contains information indicating that the session is malicious. The attacker believes that the session has been authenticated, but the information in the token indicating that the session is malicious causes an application clone session to be established instead of an actual application session. The clone session appears to be an actual application session but protects the valid user's account by including fake data instead of the user's actual data.

Abstract: A system includes a transceiver and a processor. The processor is programmed to receive, using the transceiver, information from a vehicle indicative of vehicle status and from a cloud service indicative of a user schedule, and responsive to occurrence of a predefined trigger event determined according to the information, identify a responsive action to update the user schedule corresponding to the trigger event and notify a user of the action in accordance with a degree of freedom setting.

Abstract: Described is a system (and method) for application-based packing for storing backup data within an object storage. More particularly, the system may efficiently pack backup files into objects having a specialized size by accounting for the source and size of the backup file. For example, the system may determine whether backup files associated with a particular application may be stored within individual objects or packed together within a shared object. Accordingly, by accounting for such criteria the system may perform an intelligent allocation of backup data within a cloud-based object storage. The system may be implemented as part of an incremental backup infrastructure. Accordingly, when allocating the backup files amongst objects, the system may also store specialized metadata to preserve the ability to perform a reconstruction of data (e.g. synthetically) as if a full backup was performed.

Abstract: A communication device includes a first communication interface for a first transmission path, a second communication interface for a second transmission path, a control unit that controls a communication path internal to the communication device of a signal received by the first communication interface, and a processing unit that performs predetermined processing on the received signal, wherein the control unit performs control to output, in a case where the communication device is in a first state, the received signal to the second communication interface via the processing unit, and output, in a case where the communication device is in a second state, the received signal to the second communication interface by bypassing the processing unit.

Abstract: A network configuration method and apparatus are provided. The method includes: a first execution device sends to a management device, a device discovery message which is a layer 2 packet and includes a first port identifier, wherein a port identified by the first port identifier is a port, in an up state, of the first execution device. The first execution device receives from the management device a first configuration message which is a layer 2 packet and includes a configuration parameter which is for a second execution device and includes an internet protocol address of the second execution device that is connected to the port identified by the first port identifier. The first execution device sends the first configuration message through the port. According to the application, large amount of manpower is saved and network configuration efficiency is improved.

Abstract: A proximity-locked connection system may include a server configured to communicate with a plurality of user devices, each user device operable by a user thereof, receive from user devices user device locations, calculate a distance between user devices of a pair of users, determine that a distance therebetween is within a connection threshold, and create a connection between the pair of users at least in part due to the distance being within a connection threshold. In some implementations, a server may maintain connection expiration dates (or connection expiration timers) at least in part based on locations received from user devices, wherein an expiration date (or expiration timer) may be reset for an existing connection given a distance between user devices associated therewith is within a connection refresh threshold. In some implementations, a server may disable (or delete) a connection upon an expiration date (or timer expiration) associated therewith.

Abstract: An inter-transmission device connection registration device 30A includes a storage unit 31 that registers connection information of a case where transponders 12a to 13n and photo couplers 14a to 14n as divided various transmission devices are connected through a port o and a port i, a light emission instruction unit 33 that provides a light emission instruction to the subordinately connected transponders, a transmission/reception detection unit 34 configured to detect a light transmission and a light reception at opposing ports o and i1 between transmission devices, e.g., the transponder 12a and the photo coupler 14 in accordance with the light emission instruction, and a registration control unit 35 that performs a control of registering, in the storage unit 31, connection information W2a of the port o on a light transmission side and the port i1 on a light reception side that are detected.

Abstract: The present disclosure discloses an intelligent mapping method for a cloud tenant virtual network based on a reinforcement learning model, where a mapping algorithm is used to combine a resource abstraction model, Blocking Island, with a deep reinforcement learning algorithm, Actor-Critic, reasonably abstract underlying network resources by means of the Blocking Island model, and efficiently represent resource connectivity information of the entire network with an amount of available resources between nodes as a lower bound. The method specifically includes: (1): completing modeling of virtual network embedding; (2): modeling computing resources and bandwidth resources in a physical network; (3): constructing a neural network; and the like. Compared with the prior art, the present disclosure has better performance in average mapping cost, benefit-cost ratio, total benefit value and mapping success rate, further improves mapping accuracy, reduces the average mapping cost, and has a wide application prospect.

Abstract: A dynamically-managed microservices platform. The microservices platform is configured to selectively accept admission of microservices and to selectively throttle microservices based on a continually-trained machine learning model. The system is configured to implement multiple microservice lifecycle strategies, where individual ones of the multiple microservice lifecycle strategies use a prediction model having long-term and short term demand predictions. One or another of the multiple microservice lifecycle strategies are invoked at different times under different conditions. Under a first set of conditions, a prediction model is used to select a first strategy to admit or throttle a microservice based upon long-term or short-term demand predictions. Under a second set of conditions, the prediction model is used to select a different strategy to admit or throttle a microservice.

Abstract: Methods, apparatus, and computer readable media are described for tailoring instructions for configuring a smart device based on feedback received from the smart device and/or based on feedback received from a device that is separate from the smart device. Some implementations additionally or alternatively relate to utilization of data corresponding to previous installations of similar smart devices to tailor provided instructions in order to mitigate the reoccurrence of past issues during configuration of smart devices. Some implementations additionally or alternatively relate to proactively suggesting and/or providing, to a user, guidance related to a smart device in response to determining the smart device is to be configured by the user and/or in response to determining a complete configuration of the smart device has not occurred.

Abstract: Systems and methods of Exact Data Matching (EDM) include receiving customer specific sensitive data for a customer, wherein the customer specific sensitive data are converted into a plurality of tokens; receiving a configuration for exact data matching of the plurality of tokens; performing inline monitoring of a user associated with the customer; detecting a presence of one or more tokens of the plurality of tokens based on the inline monitoring; and, responsive to the detecting, performing an action based on the configuration.

Abstract: A method, apparatus, and computer program product for offline authentication are provided. An example method includes receiving, by a computing device, a request for authentication from a first user device associated with a first user. The request includes first authentication credentials generated based upon user attributes retrieved by the first user device from a digital identity construct database at a first time. The method includes determining an offline condition of the computing device at a first time. The method also includes obtaining, by the computing device, second authentication credentials associated with the first user that are based upon one or more user attributes retrieved by the computing device from the digital identity construct database at a second time later than the first time. The method incudes determining a discrepancy between the first and second authentication credentials and authenticating the first user based upon a forecast operation of the same.

Abstract: The present invention provides a method, an apparatus, and a system for transmitting and receiving information by using a QR code. The method can receive a first QR code including second terminal identification information from a second terminal, transmit the second terminal identification information to a server, receive, from the server, encryption information of the second terminal on the basis of the second terminal identification information, generate first terminal encryption information by using encryption information of the second terminal to encrypt encryption information of a first terminal, transmit the first terminal encryption information to the second terminal, receive, from the second terminal, a second QR code that is generated on the basis of the first terminal encryption information and that includes information data, and obtain the information data by using decryption information of the first terminal to decrypt the second QR code.

Abstract: There is described a Precision Time Protocol (“PTP”) transparent clock for inter-VLAN forwarding comprising a Layer 2 switch and a PTP module. The switch includes a first port associated with a first VLAN and a second port associated with a second VLAN. The switch detects a PTP frame at the first port and the PTP module receives the PTP frame. The switch forwards the PTP frame to the second port in response to the PTP module determining that the PTP frame is a forwardable frame. For another embodiment, the switch includes a ternary content-addressable memory (“TCAM”), and the PTP module configures the TCAM to include forwarding rules. The Layer 2 switch forwards the PTP frame to the second port in response to identifying a particular forwarding rule associated with forwarding the PTP frame.

Abstract: Methods and apparatus for mediating user access to services over a network are described. Access is provided by a service network host to a plurality of connectors providing access to a plurality of services over the network. The services are provided by entities independent from the service network host. The connectors including a first connector are configured to communicate with a first service using a first format to retrieve or modify data associated with the first service. The first connector is further configured to identify one or more methods or data fields of the first service. The service network host is further configured to provide, to a computer associated with a user over the network, one or more directions for using the first connector to display and/or modify data from the first service over the network.

Abstract: A UE communicates with a network gateway to access a provisioning device via a provisioning network. The provisioning device uses identification data of the UE to authenticate the UE for a primary network, and provides primary network configuration data to the UE. Using the primary network configuration data, the UE communicates with the network gateway to access the primary network. The primary network configuration data can include data to enable the UE to establish communications with one or more private networks accessible via the primary network.

Abstract: Network scheduling in unlicensed spectrums is described. A scheduler can assess, at a first time, first conditions of an unlicensed spectrum, such as Long-Term Evolution unlicensed spectrum. Based at least partly on the first conditions, the scheduler can determine a schedule for transmitting data via the unlicensed spectrum. The scheduler can, for a first period of time, facilitate transmission of data between mobile devices that are communicatively coupled to the communication tower based at least partly on the schedule. At a second time after the first time, the scheduler can assess second conditions of the unlicensed spectrum and update the schedule based at least partly on the second conditions to generate an updated schedule. For a second period of time, the scheduler can facilitate transmission of data between the mobile devices based at least in part on the updated schedule.

Abstract: A system and method for managing network traffic in a distributed environment. the system including: a plurality of logic modules configured to determine policy data related to bandwidth management and at least one split criteria for a basis for shaping network traffic; a control processor associated with each one of the plurality of logic modules, each control processor configured to determine data associated with each of a plurality of traffic flows at the associated logic module and to coordinate traffic actions over the plurality of logic modules; a packet processor associated with each control processor and configured to determine a traffic action based on each traffic flow and received policy data; and at least two shaper objects configured to receive a split of the traffic flows and enforce the determined traffic action on their respective traffic flow.

Abstract: The present disclosure relates to user plane information reporting methods and apparatus. In one example method, a session management network element obtains parameter information, and initiates establishment of a dedicated tunnel between a first communications apparatus and a second communications apparatus, where the parameter information indicates the first communications apparatus to report user plane information when a reporting condition is met. The session management network element sends a first rule to the first communications apparatus, where the first rule indicates the first communications apparatus to send a packet to the second communications apparatus through the dedicated tunnel when the reporting condition is met.

Abstract: Aspects of the present disclosure relate to the sharing of synchronization information corresponding to content among devices in a communication network. An originating device collects synchronization information related to the presentation of content to a user via the originating device. The synchronization information is defined according to reference points related to the presentation of the content to the user via the originating device, including a current state of the presentation of the content and/or additional information obtained during the presentation of the content. Based on detection of a synchronization event, the originating device transmits the collected synchronization information, resulting in the receipt of the synchronization information by one or more receiving devices. Thereafter, the presentation of the content to the user on one of the receiving devices can incorporate the synchronization information collected and transmitted by the originating device.

Abstract: Disclosed are systems and methods for vehicle charging. A charging system can include a component to convey power to a vehicle to charge the vehicle. The charging system can include a module to store a certificate via a cryptographic technique. The charging system can include a data processing system coupled to the module, the data processing system including one or more processors, coupled with memory, to retrieve the certificate from the module, transmit, to a second data processing system, a request to establish a communication connection, the request including the certificate, and establish the communication connection with the second data processing system responsive to a verification of the certificate by the second data processing system. The data processing system can transmit, to the second data processing system, data corresponding to power conveyed by the component to the vehicle subsequent to verification of the certificate.

Abstract: A materialization configuration request is received via a programmatic interface from a client of a journal-based multi-data-store database. The request indicates a partitioning rule to be used to select, for respective writes indicated in committed transaction entries of a journal, the materialization node at which the writes are to be stored. A control plane component of the database verifies that a set of materialization nodes corresponding to the partitioning rule has been established, and initiates the propagation of writes from the journal to the materialization nodes by respective write appliers.

Abstract: A method of operating a network having one or more nodes which are in communication with a server, the server including or being in communication with a high precision time source, to estimate a time delay between the server and each node is provided. The method includes initiating a delay request from the server which is transported over a physical layer to the node, the server receiving a delay response from the node receiving the delay request, wherein a timestamp for the delay request and a timestamp for the delay response are times recorded from the high precision time source, wherein the time delay is estimated from half of a time difference between the timestamps.

Abstract: Some aspects include a schedule development method for a robotic floor-cleaning device that recognizes patterns in user input to automatically devise a work schedule.

Abstract: A message display method includes: caching, by a server, a message display page according to each original URL, extracting a fingerprint feature, and generating an alternative URL, then detecting a display status of each message at a preset time interval and marking the display status, and when receiving a display information obtaining request from a client, sending the fingerprint feature, the original URL, or the alternative URL of each message to the client according to a currently marked display status; and when receiving a message access request of a user, determining, by the client, a type of a corresponding URL, and if the corresponding URL is an alternative URL, displaying the message to the user, or if the corresponding URL is an original URL, determining whether the message is displayed normally, and if yes, displaying the message to the user.

Abstract: A digital conference system can include a digital conference manager that automatically selects a digital conference service based on one or more digital conference parameters. A digital conference agent can request a digital conference configuration from a policy manager 204 that is based on the one or more digital conference parameters. The policy manager 204 can send the selected digital conference configuration to the digital conference agent that sends the selected digital conference configuration or an identifier associated with a digital conference service associated with the digital conference configuration to a digital conference service manager. The digital conference service manager establishes a digital conference connection based on the digital conference service received from the digital conference agent.

Abstract: A method for managing a communication session includes receiving a request to perform a task. The task is divided into one or more steps. One or more user devices are identified that can be used to perform one or more of the steps. One or more communication channels are identified that are available to the one or more user devices. The communication session is permitted to switch from one or more of the user devices and communication channels to complete the one or more steps of the task while maintaining a continuity of the communication session.

Abstract: Zero trust network security is provided without modifying the underlying network infrastructure. Unique intermediate certificates created based on a primary certificate are sent to each of a plurality of entities. Each entity of the plurality of entities is installed on a respective node of a plurality of nodes in a network environment of a cloud provider. An agent is deployed to each of the plurality of nodes, and the agent is configured to enforce at least one network firewall policy based on the intermediate certificate sent to the corresponding entity.

Abstract: A method for locally serving content is described. The method includes receiving, at a gateway device, a first request for a data file via a first user device communicatively coupled to the gateway device. The data file is received at the gateway device from an external server and sent to the first user device. A data record is stored to a storage device indicating that the data file has been sent to the first user device. A second request for the data file is later received at the gateway device from a second user device communicatively coupled to the gateway device. In response to the receiving of the second request, the data record is accessed and causes a computer read of the data record. The first user device is then instructed to transfer the data file to the second user device, via the gateway device, based upon the computer read.

Abstract: A communication device comprising: one or more processors and one or more memories supporting communication, the device comprising a plurality of modes, including at least a normal mode and at least one focused mode, wherein the normal mode is distinct from the focused mode, and wherein, when the device is in the focused mode one or more features of the device are at least partially disabled, and wherein the one or more features of the device that are at least partially disabled in the focused mode include one or more features relating to communication supported by the device, wherein the device is configured to: support a user interface (UI) for setting one or more focused time periods, and wherein the device is further configured to switch to the at least one focused mode during the focused time periods.

Abstract: A first node (110; 210; 212; 310; 1000) for determining an indication of a maximum datagram size supported without fragmentation in communication between the first node (110; 210; 212; 310; 1000) and a second node (111; 211; 210; 220) in an Internet Protocol, IP, network (100; 201; 201-202; 300).

Abstract: Route provisioning techniques for an autonomous driving feature of a vehicle include receiving a user-generated route generated by a user using a second map database that differs from a first map database of the vehicle that stores a road graph specifying nodes and links representative of a map of roads proximate to the vehicle and specifies an array of geo-points between a current geo-location of the vehicle and a final geo-location for the vehicle, determining, using the road graph maintained by the first map database, a set of valid routes from the current geo-location to the final geo-location ordered based on relative likelihood, determining a best route from the set of valid routes based on a weighted comparison between each route of the set of valid routes and the user-generated route, and utilizing the selected route for control of the autonomous driving feature.

Abstract: A network of a new configuration is flexibly constructed while maintaining a stable operation in the network. A management device includes: a detection unit that detects addition of a function unit to a network including one or a plurality of on-vehicle function units; an acquisition unit that acquires function unit information of a new function unit that is the function unit the addition of which has been detected by the detection unit and function unit information of each on-vehicle function unit, each piece of function unit information including information regarding network configuration of a layer lower than an application layer; and a generation unit that, based on the pieces of function unit information acquired by the acquisition unit, generates configuration information of a new network that is the network further including the new function unit.