Granular guard interval tuning may be provided. A delay profile for a plurality of sub-bands in a serving channel may be created. Then delay spread information from at least one calibration helper device for the plurality of sub-bands in the serving channel may be received. Next, a delay spread matrix based on the delay profile, the delay spread information, and a location of the calibration helper devices may be created. The delay spread matrix may then be used to determine optimal Guard Intervals (GIs).
A method for providing a symbiotic network orchestrator utilized to automatically commission edge computing devices on corporate computing networks and edge site computing networks is presented. The method includes receiving an indication of a potential connection of an edge computing device to one or more computing networks associated with the orchestrator. The one or more computing networks includes a corporate computing network and an edge site computing network. The method further includes determining, based on the corporate computing network, the edge site computing network, and a predetermined set of rules, an intent for commissioning the edge computing device, reconfiguring, based on the intent, the corporate computing network and the edge site computing network, and commissioning the edge computing device on one or more of the corporate computing network or the edge site computing network in accordance with the reconfiguring.
H04L 41/0816 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant une adaptation, p. ex. en réponse aux événements dans le réseau
H04L 41/0894 - Gestion de la configuration du réseau basée sur des règles
3.
SEAMLESS ROAMING WITHIN A SEAMLESS MOBILITY DOMAIN
Techniques and apparatus for facilitating seamless roaming within a seamless mobility domain (SMD) are described. An example technique performed by a wireless device includes performing an association to a SMD. The SMD includes multiple access point (AP) multi-link devices (MLDs), and each of the AP MLDs includes a respective one or more APs. The wireless device roams among the AP MLDs within the SMD while maintaining association to the SMD.
A system and associated methods provide solutions for end-to-end privacy and per-hop routing and policy decision in multi-hop and Software-Defined Wide Area Networks (SD-WANs) by leveraging unique SDWAN edge identities of edge devices. The system enables end-to-end encryption between traffic source and destination sites using IPsec ESP tunnel mode, with System IPs as the outer IP addresses. The system further enables per-hop integrity protection using IPsec AH transport mode, with WAN IPs as the outer IP addresses. By having some information encrypted between a source device and a destination device and other information encapsulated between hops (e.g., between source device and an intermediate device), the system enables route and policy lookup based on destination site System-IP, along with integrity protection based on SLA-class in packet metadata for independent path selection at intermediate hops.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
5.
INSTRUMENTATION AND METRICS COMBINING SEARCH ENGINE FOR OPTIMIZED OBSERVABILITY
In one implementation, a device may obtain a query specifying a metric of interest for network infrastructure. The device may search a repository of observability data to identify observability data associated with the metric of interest specified in the query. The device may generate output code providing protocol-specific implementation details for a management protocol associated with selected observability data for the metric of interest specified in the query. The device may provide the output code for export via a user interface.
A device may receive, from an application function, a first machine-to-machine identifier at a first mobile device being served by a base station. A device may add the first machine-to-machine identifier to a user plane protocol stack of the first mobile device. A device may identify a second machine-to-machine identifier of a second mobile device served by the base station. A device may transmit, in connection with traffic from the first mobile device to the second mobile device, the second machine-to-machine identifier to the base station to enable local traffic routing through the base station to the second mobile device. The base station can notify a network node of the local traffic routing for charging purposes.
H04W 40/24 - Gestion d'informations sur la connectabilité, p. ex. exploration de connectabilité ou mise à jour de connectabilité
H04W 8/22 - Traitement ou transfert des données du terminal, p. ex. statut ou capacités physiques
H04W 60/04 - Rattachement à un réseau, p. ex. enregistrementSuppression du rattachement à un réseau, p. ex. annulation de l'enregistrement utilisant des événements déclenchés
Techniques for optimizing routing decisions based on security metrics within a network environment are described herein. In some cases, by using various security metrics, such as encryption indicators, attestation indicators, secureness metrics, and reliability metrics, an exemplary system can assess the security level and reliability of network paths. These metrics may provide valuable insights into the trustworthiness and integrity of participating nodes and links and enable informed decision-making regarding path selection.
Techniques herein facilitate a device address rotation management protocol that may be implemented for a wireless local area network (WLAN), which can be used to influence when wireless client devices or stations may rotate their Media Access Control (MAC) addresses, how to perform such rotations, and/or the like. In one example, a method may include providing, by an access point (AP), a first communication indicating that the AP supports a MAC address rotation management protocol; obtaining, by the AP, a second communication from a wireless station (STA) indicating that the STA intends to perform a MAC address rotation; and transmitting, by the AP, a third communication to influence the MAC address rotation of the STA, the third communication comprising a rotation status indicator and timing information.
The present technology is directed to a system and method for application aware management and recovery of link failures resulting from excessive errors observed on the link. One aspect of the proposed technology is based on identification of link errors associated with application-specific data patterns traversing link. Other aspects involve corrective actions based on relocation or modification of specific application traffic to thereby alleviate the observed excessive link errors and prevent a link failure or shut down. Relocation may involve moving the source application to a different virtual machine/container/physical device or rerouting application traffic by updating relevant routing protocols. Modification may involve harmlessly changing payload data pattern to remove data-pattern dependent signal attenuation. Information corresponding to identified faulty payload data patterns and associated frame data quality parameters maybe stored and utilized to provide analytics evaluation of network wide physical resource issues that maybe affecting application traffic.
H04L 45/28 - Routage ou recherche de routes de paquets dans les réseaux de commutation de données en utilisant la reprise sur incident de routes
H04L 43/0817 - Surveillance ou test en fonction de métriques spécifiques, p. ex. la qualité du service [QoS], la consommation d’énergie ou les paramètres environnementaux en vérifiant la disponibilité en vérifiant le fonctionnement
A power distribution unit (PDU) includes a housing configured to be mounted into or on a rack that has a plurality of shelf positions for a variety of computing equipment, networking equipment or data storage equipment. The PDU includes power inputs. The power inputs are configured to receive one or more of: alternating current (AC) power, high voltage direct current (DC) power, single-phase fault managed power, or multi-phase fault managed power. The PDU further includes at least one fault managed power module configured to be contained in the housing, the at least one fault managed power module including a power transmitter configured to generate single-phase or multi-phase fault managed power from the AC power and/or high voltage DC power. The PDU also includes a plurality of connectors on the housing and configured to provide cable connections to one or more of the plurality of shelf positions of the rack.
Techniques and mechanisms are provided for enabling dynamic prioritization during similarity search processes across vectorized knowledgebases (KB) where the prioritization may depend on specific events and/or time windows between data updates to provide weighting to similar text or data items to raise or lower priority of various text or data items for return in response to queries. More particularly, the techniques and mechanisms described herein provide for bringing proprietary and possibly silo-ed data models/sources and schemas into a common and consistent embedding that allows for dynamic prioritization of such embeddings depending on specific events and/or time windows between updates to the disparate data sources.
The disclosed technology relates identifying causes of an observed outcome. A system is configured to receive an indication of a user experience problem, wherein the user experience problem is associated with observed operations data including an observed outcome. The system generates, based on the observed operations data, a predicted outcome according to a model, determines that the observed outcome is within range of the predicted outcome, and identifies a set of candidate causes of the user experience problem when the observed outcome is within range of the predicted outcome.
H04L 41/16 - Dispositions pour la maintenance, l’administration ou la gestion des réseaux de commutation de données, p. ex. des réseaux de commutation de paquets en utilisant l'apprentissage automatique ou l'intelligence artificielle
13.
PRIORITIZATION OF INDIVIDUAL CHANNELS WITHIN MULTIPLEXED STREAMS FOR ZERO TRUST NETWORK ACCESS (ZTNA)
Techniques for using a secure access gateway to signal compute and/or network prioritization to individual streams within multiplexed sessions for zero-trust network access (ZTNA). A secure access gateway may be configured to identify weighting data and/or prioritization data associated with individual streams within the multiplexed session comprising various protocols (e.g., HTTP/2 and/or HTTP/3) and determine a gateway priority value. That is, the secure access gateway may be configured to prioritize certain types of traffic (user roles, resource types, etc.) over others, regardless of the protocol employed by the individual stream. The secure access gateway may then prioritize the processing (e.g., networking and/or computational resources) of a first stream having a more favorable gateway priority value than a second stream. Additionally, the secure access gateway may be configured to transmit indications of the gateway priority value to a target resource, such that the streams may be prioritized in the reverse direction.
An electro-optical device is disclosed. The device includes a glass substrate having a plurality of through-glass vias. The device also includes a photonic integrated circuit hybrid bonded to the glass substrate by way of a metal-to-metal, oxide-to-oxide hybrid bond. The PIC has a plurality of through-silicon vias that are coupled with the through-glass vias. The device also includes an electronic integrated circuit coupled with the photonic integrated circuit. A method of assembling a device, or a plurality of devices, is also disclosed.
A method to detect anomalies in optical channel is provided. The method includes detecting, at an optical terminal node, optical communication metrics for a plurality of optical channels, clustering optical channels in the plurality of optical channels according to the optical communication metrics to obtain a plurality of optical channel clusters, detecting anomalous behavior of a given optical channel in a given cluster of the plurality of optical channel clusters based on a predetermined deviation of at least one of a derivative of the optical communication metrics and an integral of the derivative of the optical communication metrics, and in response to detecting anomalous behavior, communicating an indication of the anomalous behavior on the given optical channel to a network controller.
H04B 10/079 - Dispositions pour la surveillance ou le test de systèmes de transmissionDispositions pour la mesure des défauts de systèmes de transmission utilisant un signal en service utilisant des mesures du signal de données
16.
GEOLOCATION-BASED AUTOMATIC CONFIGURATION OF NETWORK DEVICES
Systems and methods provide for creating a network device hierarchy among a plurality of nodes. The network device hierarchy may include a plurality of geography-based groups defined by a corresponding number of geolocations. The operations further include associating each of the plurality of geography-based groups with a plurality of different configuration intents, associating each of the plurality of nodes with one of the plurality of geography-based groups, and deploying the plurality of nodes based on their respective one of the geolocations.
In one embodiment, a method includes detecting, by a device, presence of a remote access session to a remote device and determining, by the device, one or more remote access session parameters in use during the remote access session. The method further includes enabling, by the device, creation of automatic remote access probing for the remote device based on the one or more remote access session parameters in use during the remote access session, monitoring, by the device, the remote access session for changes to the one or more remote access session parameters during the remote access session, and pushing, by the device, an updated configuration to the automatic remote access probing for the remote device based on the changes to the one or more remote access session parameters during the remote access session.
A device having a hybrid silicon photonic-on-glass substrate is provided. The device includes a glass substrate having a plurality of through-glass vias (TGVs), an oxide layer, and metal contacts coupled with the TGVs. The device also includes a silicon photonic layer having metal pads and an oxide layer. The metal pads are bonded with the metal contacts and the oxide layer of the silicon photonic layer is bonded with the oxide layer of the glass substrate such that the silicon photonic layer is hybrid bonded to the glass substrate by a metal-to-metal, oxide-to-oxide hybrid bond. Methods of assembly are also provided.
H01L 25/16 - Ensembles consistant en une pluralité de dispositifs à semi-conducteurs ou d'autres dispositifs à l'état solide les dispositifs étant de types couverts par plusieurs des sous-classes , , , , ou , p. ex. circuit hybrides
H01L 21/02 - Fabrication ou traitement des dispositifs à semi-conducteurs ou de leurs parties constitutives
H01L 23/00 - Détails de dispositifs à semi-conducteurs ou d'autres dispositifs à l'état solide
H01L 23/498 - Connexions électriques sur des substrats isolants
19.
TRIGGERING STAGGERED MULTI-USER UPLINK IN AMBIENT POWER DEVICE GROUP
Staggered Multi-User (MU) uplink in an Ambient Power (AMP) Backscatter Device (BKD) group may be provided. A transmitter AP may determine to receive uplink data from an AMP BKD group and then transmit a session initialization message to a receiver AP instructing the receiver AP to receive the uplink data from the AMP BKD group. The transmitter AP may receive an initialization response from the receiver AP indicating the receiver AP will receive the uplink data. The transmitter may transmit an AMP BKD initialization signal to the AMP BKD group indicating to the AMP BKD group to perform scattering without collisions. The transmitter AP may then transmit an excitation transmission for the AMP BKD group to perform scattering.
Devices, systems, methods, and processes for multi-protocol underlay network tracing are described herein. A network device associated with a first network protocol usually fails to detect other network devices that support a second network protocol, during trace routing. This can lead to incomplete and inaccurate path tracing. Thus, an edge device upon receiving an error response packet may determine whether the error response packet conforms to a network protocol supported by a host device. If the error response packet conforms to a different network protocol, the edge device may extract information required for path tracing from the error response packet. The extracted information may be included in a protocol agnostic encoding object and transmitted to the host device. The encoding object can be transmitted as a standalone message or can be appended in an error response packet. Thus, enabling underlay path tracing in end-to-end managed networks.
Systems and methods are provided for a data intake and query system providing a user interface including corresponding content from a system external to the data intake and query system, such as an observability system. On receipt of input from a client device, the data intake and query system may generate a user interface including the corresponding content. To generate the user interface, the data intake and query system may access a unique identifier corresponding to updated data for the external system. The data intake and query system may then determine whether the updated data includes corresponding data. If so, the data intake and query system may include visualizations based on the corresponding data.
Described herein is a framework for providing a cloud-based service that manages resources in one or more host machines (i.e., nodes) included in a customer enterprise deployment. A supervisor is instantiated in each node and communicates with a cloud-based enterprise configuration controller that is included in the cloud-based service. The cloud-based enterprise configuration controller provides a seamless manner to control and manage resources deployed on the one or more host machines included in the customer enterprise deployment.
A device obtains a particular query for input to a language model. The device identifies a plurality of cached query-response pairs whose queries are similar to that of the particular query. The device uses a verification model to assign joint probabilities between the particular query and responses from the plurality of cached query-response pairs. The device, based on the joint probabilities provides a particular response from the plurality of cached query-response pairs, in lieu of using the particular query as input to the language model to generate a new response.
PROVIDING PER-TENANT USER EQUIPMENT ROUTE SELECTION POLICIES IN A MULTI-TENANT ENVIRONMENT INVOLVING SHARED WIRELESS WIDE AREA ACCESS NETWORK EQUIPMENT
Provided herein are techniques to facilitate on-premise wireless wide area access network equipment sharing in a multi-tenant environment. In one example, a method may include obtaining, by a device, a first route selection policy envelope for a first tenant of the plurality of tenants in which the first route selection policy envelope includes a plurality of route selection rules associated with the first tenant. The method may further include upon obtaining a first data packet from a first wireless local area network access point of the first tenant, identifying, based on first data packet, a particular route selection rule of the first route selection policy envelope for the first tenant and establishing a protocol data unit (PDU) session for the first tenant with the mobile core network.
H04W 40/22 - Sélection d'itinéraire ou de voie de communication, p. ex. routage basé sur l'énergie disponible ou le chemin le plus court utilisant la retransmission sélective en vue d'atteindre une station émettrice-réceptrice de base [BTS Base Transceiver Station] ou un point d'accès
H04W 60/04 - Rattachement à un réseau, p. ex. enregistrementSuppression du rattachement à un réseau, p. ex. annulation de l'enregistrement utilisant des événements déclenchés
H04W 84/12 - Réseaux locaux sans fil [WLAN Wireless Local Area Network]
25.
AMBIENT POWER DEVICE CHARGING SYSTEM IN CELLULAR NETWORKS
Dynamic wireless charging coordination and management tailored to scale and constraints of AMP backscatter IoT devices are provided. The method involves obtaining, by a radio access network controller, an energy requirement for one or more ambient Internet of Things (IoT) devices and generating a charging schedule for the one or more ambient IoT devices including a charging window and energy beamforming parameters for charging a respective IoT device based on the energy requirement. The method further involves providing the charging schedule for charging the one or more ambient IoT devices.
H02J 50/20 - Circuits ou systèmes pour l'alimentation ou la distribution sans fil d'énergie électrique utilisant des micro-ondes ou des ondes radio fréquence
H02J 7/00 - Circuits pour la charge ou la dépolarisation des batteries ou pour alimenter des charges par des batteries
H02J 50/40 - Circuits ou systèmes pour l'alimentation ou la distribution sans fil d'énergie électrique utilisant plusieurs dispositifs de transmission ou de réception
H02J 50/80 - Circuits ou systèmes pour l'alimentation ou la distribution sans fil d'énergie électrique mettant en œuvre l’échange de données, concernant l’alimentation ou la distribution d’énergie électrique, entre les dispositifs de transmission et les dispositifs de réception
26.
OPTICAL ENGINE SOCKET WITH INTEGRATED OPTICAL RECEPTACLE
Aspects described herein include an apparatus including a socket. The socket includes an array of conductive connections, a frame at least partly circumscribing the array of conductive connections, and a sidewall having an optical receptacle extending therethrough. The optical receptacle is configured to receive an optical connector. The apparatus further includes an optical engine received in the frame into a seated configuration where a photonic integrated circuit of the optical engine is electrically coupled with the array of conductive connections, and is optically coupled with one or more optical fibers of the optical connector.
Devices, systems, methods, and processes for synchronizing communication ports in a network device using phase-aligned output synchronization signals are described herein. The network device may utilize the communication ports to exchange timestamped messages with other network devices for precise time coordination. Therefore, a timing error in the communication ports (e.g., differences in local times of the communication ports) may affect the precise time coordination accuracy of the network device. Thus, the communication ports are pre-emptively time synchronized using the phase-aligned output synchronization signals to improve the precise time coordination accuracy. The phase-aligned output synchronization signals may be generated by applying individual phase adjustments to an input synchronization signal for each communication port. The application of the individual phase adjustments to the input synchronization signal compensates for delay skews associated with the communication ports. Thus, the communication ports may receive the output synchronization signals in a phase aligned manner.
A method comprises: at a controller of a network, establishing a historical probability of success that an automated response, when executed on the network, will remediate an alarm event: performing a service test on the network to collect first path information from the network; after performing the service test, receiving from the network a report of the alarm event, and deploying the automated response to the network to remediate the alarm event; after the automated response is executed, repeating the service test on the network to collect second path information and a second test result that indicates pass or fail; determining whether a change from the first path information to the second path information represents a network degradation; and adjusting the historical probability of the success based on the second test result and whether the change represents the network degradation.
H04L 41/0604 - Gestion des fautes, des événements, des alarmes ou des notifications en utilisant du filtrage, p. ex. la réduction de l’information en utilisant la priorité, les types d’éléments, la position ou le temps
H04L 41/0654 - Gestion des fautes, des événements, des alarmes ou des notifications en utilisant la reprise sur incident de réseau
The present disclosure provides techniques for dynamic resource management and link adaptation in wireless communication systems. An access point (AP) trains a machine learning (ML) model using a historical dataset. The AP collects real-time input data that indicate characteristics of a link established between the AP and a station (STA) for wireless communication. The AP applies the ML model to the real-time input data to predict one or more network demand values for the link. Based on the one or more predicted network demand values and the real-time input data, the AP determines one or more adjustments to transmission settings of the link. The AP applies the one or more adjustments to the wireless communication with the STA.
In part, the disclosure relates to an electro-optical device that includes a first substrate; a first dielectric layer above the first substrate; a first and second electrode embedded in the first dielectric layer; a dielectric waveguide above the first dielectric layer; a second dielectric layer above the first dielectric layer and the dielectric waveguide, the second dielectric layer defines a cavity above the dielectric waveguide; and a die. The die may include a second substrate, a middle layer, and an electro-optical layer. The middle layer may be sandwiched between the electro-optical layer and the second substrate. The die has a shape defined by a length, a width, and a height. The dielectric waveguide and the electro-optical layer may define or comprise a hybrid electro-optical waveguide, the first electrode and the second electrode are used to change the optical phase of the hybrid optical waveguide in response to signal(s).
G02F 1/225 - Dispositifs ou dispositions pour la commande de l'intensité, de la couleur, de la phase, de la polarisation ou de la direction de la lumière arrivant d'une source lumineuse indépendante, p. ex. commutation, ouverture de porte ou modulationOptique non linéaire pour la commande de l'intensité, de la phase, de la polarisation ou de la couleur par interférence dans une structure de guide d'ondes optique
G02F 1/035 - Dispositifs ou dispositions pour la commande de l'intensité, de la couleur, de la phase, de la polarisation ou de la direction de la lumière arrivant d'une source lumineuse indépendante, p. ex. commutation, ouverture de porte ou modulationOptique non linéaire pour la commande de l'intensité, de la phase, de la polarisation ou de la couleur basés sur des céramiques ou des cristaux électro-optiques, p. ex. produisant un effet Pockels ou un effet Kerr dans une structure de guide d'ondes optique
G02F 1/21 - Dispositifs ou dispositions pour la commande de l'intensité, de la couleur, de la phase, de la polarisation ou de la direction de la lumière arrivant d'une source lumineuse indépendante, p. ex. commutation, ouverture de porte ou modulationOptique non linéaire pour la commande de l'intensité, de la phase, de la polarisation ou de la couleur par interférence
31.
Detection Of Domain Names Generated By A Domain Generation Algorithm Using A Wide And Deep Learning Architecture
A computer-implemented method for detecting malicious content is disclosed that includes operations of receiving a character set as an input, where the character set represents a domain name, generating a deep machine learning output by analyzing the character set with a first plurality of layers arranged in a deep machine learning architecture, generating a wide machine learning output by analyzing the character set with a second plurality of layers arranged in a wide machine learning architecture, and jointly processing the deep machine learning output and the wide machine learning output resulting in a comparison score that is indicative of a probability that the character set was generated by a domain generation algorithm (DGA).
In some aspects, a method for establishing a multicast-only Fast Re-Route (FRR) (MoFRR) path between a source node and a receiving node in a network, the method includes receiving, by a merged receiving node, a plurality of data packets in a data flow comprising an FRR indicator, wherein the merged receiving node is configured to identify an FRR path for data transmission to the source node, extracting, by the merged receiving node, from the FRR indicator, an identification of the source node as a destination of the data transmission, and a first identifier identifying a first data packet as part of a first flow of a MoFRR, and a second identifier identifying a second data packet as part of a second flow of a MoFRR, transmitting, by the receiving node, the first data packet along a primary data path and the second data packet along a secondary data path.
Devices, systems, methods, and processes for determining enforcement readiness in a workload protection solution are described herein. Often, a user may desire to initiate enforcement on a network, but may not know if the various workloads, agents, or other components of the workload protection solution are in a condition to begin enforcement. As a result, embodiments described herein can generate an enforcement validation status or overall enforcement readiness determination by evaluating a plurality of different configurations, attributes, or other settings associated with any desired workloads subject to the policy to be enforced. Upon evaluation, a notification can be generated to the user in the form of a graphical user interface or other similar output device that is configured to show any determined error or issue preventing enforcement readiness. As a result, these can be addressed by a user until enforcement can be activated, easing the overall enforcement process.
H04L 41/0869 - Validation de la configuration au sein d'un élément de réseau
H04L 41/0894 - Gestion de la configuration du réseau basée sur des règles
H04L 41/22 - Dispositions pour la maintenance, l’administration ou la gestion des réseaux de commutation de données, p. ex. des réseaux de commutation de paquets comprenant des interfaces utilisateur graphiques spécialement adaptées [GUI]
Presented herein are techniques through which modular architectures and systems may be implemented for superconducting (SC) quantum processing elements or chips utilizing photonic interconnects. In one instance, an SC processing element is provided that includes a plurality of interconnected qubits, wherein a first qubit of the plurality of interconnected qubits is interconnected with a first microwave-optical transducer. In one instance, a system is provided that includes a first SC processing element comprising a first plurality of interconnected qubits, wherein a first microwave-optical transducer is interconnected with a first qubit of the first plurality of interconnected qubits; a second SC processing element comprising a second plurality of interconnected qubits, wherein a second microwave-optical transducer is interconnected with a first qubit of the second plurality of interconnected qubits; and an optical network interconnecting the first microwave-optical transducer and the second microwave-optical transducer.
G06N 10/20 - Modèles d’informatique quantique, p. ex. circuits quantiques ou ordinateurs quantiques universels
B81B 3/00 - Dispositifs comportant des éléments flexibles ou déformables, p. ex. comportant des membranes ou des lamelles élastiques
G06N 10/40 - Réalisations ou architectures physiques de processeurs ou de composants quantiques pour la manipulation de qubits, p. ex. couplage ou commande de qubit
H04B 10/25 - Dispositions spécifiques à la transmission par fibres
This disclosure describes techniques and mechanisms for intelligently and proactively routing application traffic within a SD-WAN. The techniques may utilize application models to determine bandwidth utilization and usage patterns of application flow(s), determine and predict the impact of potential movement or addition of the application traffic to a pathway and the SLA requirements of the pathway, and intelligently route and/or re-route the packets through the most optimal path, thereby preventing and/or minimizing policy violations. This disclosure describes techniques and mechanisms for intelligently analyze a target network and determine the impact of adding that application on the network based on usage patterns, flow density, bandwidth requirements and volume of traffic, thereby streamlining the process of designing a new network or adding an application to an existing network.
H04L 41/5003 - Gestion des accords de niveau de service [SLA]Interaction entre l'accord de niveau de service et la qualité de service [QoS]
H04L 43/062 - Génération de rapports liés au trafic du réseau
H04L 47/2425 - Trafic caractérisé par des attributs spécifiques, p. ex. la priorité ou QoS pour la prise en charge de spécifications de services, p. ex. SLA
36.
ENHANCED PROTECTION FOR WEB USERS VIA ADDITIONAL CROSS-ORIGIN RESOURCE SHARING VALIDATION
In one embodiment, a method for detecting restricted cross-origin requests by a webpage is provided. The method includes: receiving, by a processor, webpage data associated with the webpage; determining, by the processor, a presence of cross-origin uniform resource locator (URL) data from the webpage data; in response to cross-origin URL data being present, generating, by the processor, an independent request for a resource directly to a server associated with the cross-origin URL; determining, by the processor, whether the resource was restricted by the server; and selectively generating, by the processor, mitigation data to mitigate presentation of the restricted resource associated with the cross-origin URL data.
This technology defines an envelope of a set of constraints to impose a network characteristic. A function is created to form a combined set of envelopes to configure resources for use in the network. A path is discovered from a first state to a second state based on the combined set of envelopes. A set of service descriptors configures the function based on a load demand for the network. A path selection is tested of a set of envelopes against the load demand for the network. The set of constraints of a path selection is determined as to whether the load demand is met demand. In response to a set of envelopes meeting the load demand, a path selection is enabled for a set of constraints defined by the set of envelopes, else if the load demand is not met, then an error message is returned to the network provider.
In an embodiment, a method includes receiving a prompt provided to a large language model (LLM), generating a semantic fingerprint for the prompt based on semantic and syntactic features associated with the prompt, generating a vector representation incorporating the semantic fingerprint for the prompt, calculating semantic distances between the vector representation and multiple vector representations associated with multiple malicious intents, determining an intent associated with the prompt based on the semantic distances, and determining a defense action on the prompt based on the intent and multiple policies to mitigate a security risk associated with the prompt.
G06F 21/52 - Contrôle des utilisateurs, des programmes ou des dispositifs de préservation de l’intégrité des plates-formes, p. ex. des processeurs, des micrologiciels ou des systèmes d’exploitation au stade de l’exécution du programme, p. ex. intégrité de la pile, débordement de tampon ou prévention d'effacement involontaire de données
G06F 21/55 - Détection d’intrusion locale ou mise en œuvre de contre-mesures
39.
ON-PATH DYNAMIC POLICY ENFORCEMENT AND ENDPOINT-AWARE POLICY ENFORCEMENT FOR ENDPOINTS
Systems, methods, and computer-readable media for locally applying endpoint-specific policies to an endpoint in a network environment. A network device local to one or more endpoints in a network environment can receive from a centralized network controller one or more network-wide endpoint policies. A first endpoint of the one or more endpoints can be configured to inject policy metadata into first data traffic. Policy metadata injected into the first traffic data can be received from the first endpoint. The network device can determine one or more first endpoint-specific polices for the first endpoint by evaluation the first policy metadata with respect to the one or more network-wide endpoint policies. As follows, the one or more first endpoint-specific policies can be applied to control data traffic associated with the first endpoint.
Computerized methodologies are disclosed that are directed to detecting a seasonality pattern that corresponds to a time-series data set. Operations of one methodology includes for each candidate seasonality pattern of a set of candidate seasonality patterns, partitioning the time-series data set into a set of subsequences according to a date-time pattern of a selected candidate seasonality pattern, clustering data points of each of the set of subsequences into two or more clusters, and determining a silhouette score for the selected candidate seasonality pattern that represents a measure of a clustering quality of the selected candidate seasonality pattern. The seasonality pattern from the set of candidate seasonality patterns is then detected by selecting the candidate selecting having a highest silhouette score of the candidate seasonality patterns. An additional operation may include obtaining the time-series data set as a result of execution of a search query received via a graphical user interface.
An intelligent forward error correction (iFEC) method and system are automatically triggered and started for providing forward error correction for applications when packet loss is predicted to be more than a threshold packet loss level during a prescribed interval and the actual packet loss is more than a threshold level. Similarly, the intelligent FEC method and system may be automatically disabled when packet loss is predicted to be less than the threshold level during a prescribed interval. If prescribed bandwidth of a transmission uplink through which application data packets will pass will be slowed or choked by use of iFEC, then iFEC may be disabled or stopped to prevent further congestion in the uplink. That is, according to examples, iFEC is started and stopped based on predicted packet loss and uplink/bandwidth health as opposed to simply operating forward error correction in a “always on” or manually provisioned manner.
In order to extract more contextualized metrics associated with a particular service in a microservices-based application, a method of aggregating metrics comprises analyzing tags of spans for each trace and, based on a first predetermined set of rules, extracting one or more tags pre-selected by a user of the monitoring service. A pre-selected tag may appear in one or more spans associated with a particular service in a trace and may be extracted as a numeric metric. The method comprises computing a set of metrics for the particular service using the numeric metric extracted from the one or more spans of the trace. The method also comprises determining a set of aggregated metrics over the selected time duration for the particular service by aggregating the set of metrics over multiple traces.
A data analysis system processes data generated by instrumented software. The data analysis system receives data streams generated by instances of instrumented software executing on systems. The data analysis system also receives metadata describing data streams. The data analysis system receives an expression based on the metadata. The data analysis system receives data of data streams for each time interval and computes the result of the expression based on the received data values. The data analysis system repeats these steps for each time interval. The data analysis system may quantize data values of data streams for each time interval by generating an aggregate value for the time interval based on data received for each data stream for that time interval. The data analysis system evaluates the expression using the quantized data for the time interval.
This disclosure describes techniques and mechanisms for enabling and enforcing user behavior aware policies within an enterprise network. The techniques include receiving flow data and learning network traffic patterns and user behavior patterns of user(s) of the network. The techniques map user(s) to behavior group(s) based on forecast(s) and historical data of network conditions and/or user behavior patterns. The techniques monitor the flow data and dynamically re-map user(s) to new behavior group(s) based on real-time user behavior and/or real-time network conditions. Mapping(s) and/or updated mapping(s) and user behavior aware policies may be sent to edge device(s) for enforcement. The edge device(s) may dynamically prioritize a link, de-prioritize a link, block traffic, drop traffic etc. for user(s). The techniques may extend application aware and user aware routing policies to account for dynamic user behavior and network conditions, provide improved application experience and network utilization.
In an embodiment, a method for dynamic host configuration protocol (DHCP) renewal is performed. A first router intercepts a DHCP renewal request sent by a local device to a remote DHCP server. The first router is one of a plurality of routers positioned between the local device and the remote DHCP server, and the plurality of routers form a mesh network. After the DHCP renewal request is intercepted, a determination is made if a gateway address corresponding to the first router and a DHCP option is present in the DHCP renewal request. If they are not, the gateway address and DHCP option are inserted into the DHCP renewal request by the first router. The DHCP renewal request is forwarded from the first router to the remote DHCP server. The first router then receives an acknowledgment sent by the remote DHCP server and forwards it to the local device.
H04L 61/5053 - Durée du bailAspects de renouvellement
H04L 61/5014 - Adresses de protocole Internet [IP] en utilisant le protocole de configuration dynamique de l'hôte [DHCP] ou le protocole d'amorçage [BOOTP]
46.
INTELLIGENT ROUTE DISTRIBUTION TO AVOID ROUTING ASYMMETRY DURING GRACEFUL RESTART IN SOFTWARE-DEFINED NETWORKS
Techniques for ensuring symmetric forwarding between disparate networks are described herein. In active/standby hub architectures, hub nodes may be configured to convert a preference order (e.g., indicating a preferred hub node), specified by an endpoint on a wide-area network (WAN)-side of a network, into a local-area network (LAN)-side-routing-metric that is distributed to datacenter router(s) on the LAN-side of the network. When an active hub node loses connection to all of the available routing controllers, the active hub may automatically manipulate the LAN-side-routing-metric to make the metric worse than the standby hub to indicate that the routes being advertised by the active hub are “stale,” such that the datacenter routers prefer the standby hub, avoiding traffic asymmetry as a result of the lost connection.
Devices, systems, methods, and processes for establishing peer-to-peer (P2P) networks over Wi-Fi extended spectrum. P2P networks often encounter challenges in meeting their bandwidth requirements, resulting in degraded performance, slower data transfer rates, or even connectivity issues. Therefore, by delegating frequency channels in the Wi-Fi extended spectrum for establishing P2P networks, at least some challenges faced by the P2P networks can be overcome. Access points (APs) in automated frequency coordination (AFC) infrastructure may coordinate with network devices intending to establish P2P connections and may allocate unused or underutilized channels in the Wi-Fi extended spectrum to these network devices for establishing the P2P connections. The APs may set usage conditions on the allocated channels which the network devices and the APs monitor once the P2P connections are established. The APs may further monitor network traffic on the allocated channels and allow concurrent P2P connections on the same channel to improve channel utilization.
Electro-optical assemblies are disclosed. In one aspect, an electro-optical assembly includes a substrate having a first side and a second side opposing the first side. The electro-optical assembly also includes an optical engine (OE) coupled with the first side of the substrate. The electro-optical assembly further includes a serializer/deserializer (SerDes) coupled with the second side of the substrate, as well as an integrated circuit (IC) coupled with the second side of the substrate. The IC is electrically coupled with the SerDes. The OE is electrically coupled with the SerDes by way of a signal channel that traverses through the substrate between the first side and the second side.
A system and method are provided for implementing a network component, such as a software-defined wide area network, a firewall, a router, or a load balancer. The network component can be an embedded network edge device that is implemented, e.g., in software, in circuitry, or using hardware acceleration (e.g., a data processing unit (DPU), a smart network interface card (SmartNIC), etc.). The system can include multiple dataplanes, including a primary dataplane and a shadow dataplane. A packet dispatcher relays received data packets to a primary dataplane and the shadow dataplane. The primary dataplane applies a current version of the network component to data packets, and the secondary dataplane applies a new version of the network component to identical replicas of the data packets. A control plane agent compares performance data gathered from the respective dataplanes to perform verification testing on the new version of the network component.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
H04L 41/0806 - Réglages de configuration pour la configuration initiale ou l’approvisionnement, p. ex. prêt à l’emploi [plug-and-play]
H04L 41/0816 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant une adaptation, p. ex. en réponse aux événements dans le réseau
H04L 41/082 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant des mises à jour ou des mises à niveau des fonctionnalités réseau
H04L 41/0869 - Validation de la configuration au sein d'un élément de réseau
H04L 41/0895 - Configuration de réseaux ou d’éléments virtualisés, p. ex. fonction réseau virtualisée ou des éléments du protocole OpenFlow
Techniques for devices in autonomous systems to utilize a protocol, such as a Border Gateway Protocol (BGP), to signal intent to instantiate services for establishing connections between the devices. For instance, first device(s) in a first autonomous system (AS) may determine to establish a connection with a second AS. The first device(s) may encode a service key into an Internet Protocol (IP) address where the service key indicates a service that is to be provisioned on second device(s) in the second AS. The first device(s) system may then advertise the IP address host-route using BGP, and the second device(s) may receive the BGP advertisement. The second device(s) may decode the service key from the IP address, and provision the service to establish the connection between the autonomous systems. Thus, the devices in may leverage existing protocols to signal intent to instantiate services and establish connections between autonomous systems.
Techniques for auto tuning keepalive packets intervals to an optimal interval are described. A communication session between a client device and a server over a network is established. The client device determines that an optimal keepalive interval associated with sending packets to the server over the network is unknown to the client device. The optimal keepalive interval defines an amount of time that is less than a maximum amount of time between the packets after which an intermediary device in the network will terminate the communication session. In response to determining that the optimal keepalive interval is unknown to the client device, keepalive test probes are transmitted to the server at different time intervals. An optimal keepalive interval is determined based at least in part on response packets received. Finally, keepalive packets are transmitted to the server according to the optimal keepalive interval.
A streaming neural network video codec that leverages temporal redundancy, processing video frames in a rolling window fashion. By encoding video frames using information from multiple frames and only transmitting essential codewords, the system ensures efficient compression with reduced computational overhead. Resiliency to lost codewords is achieved by training with random masks on one or more codewords so that the decoder is robust to packet losses. These techniques achieved improved compression efficiency and significantly reduces the average operations required per frame, allowing for real-time, high-quality video streaming.
H04N 19/65 - Procédés ou dispositions pour le codage, le décodage, la compression ou la décompression de signaux vidéo numériques utilisant la tolérance aux erreurs
H04N 19/169 - Procédés ou dispositions pour le codage, le décodage, la compression ou la décompression de signaux vidéo numériques utilisant le codage adaptatif caractérisés par l’unité de codage, c.-à-d. la partie structurelle ou sémantique du signal vidéo étant l’objet ou le sujet du codage adaptatif
H04N 19/172 - Procédés ou dispositions pour le codage, le décodage, la compression ou la décompression de signaux vidéo numériques utilisant le codage adaptatif caractérisés par l’unité de codage, c.-à-d. la partie structurelle ou sémantique du signal vidéo étant l’objet ou le sujet du codage adaptatif l’unité étant une zone de l'image, p. ex. un objet la zone étant une image, une trame ou un champ
This disclosure describes techniques for determining paths for routing traffic based on underlay attributes, where the paths may avoid and/or include certain underlay attributes. An edge device of an SD-WAN may detect underlay hops included in underlay paths by performing a path trace between the edge device and a remote device, and may send underlay path trace data to an SD-WAN underlay analytic service. The SD-WAN underlay analytic service may determine attributes associated with the underlay hops, such as the geolocation and/or an ISP associated with an underlay hop. The SD-WAN analytic service may also receive network manager policy data indicating undesirable attributes and/or preferred attributes. Accordingly, the SD-WAN may send an underlay-aware policy indicating the undesirable attributes and/or preferred attributes to the edge device, where the edge device may route entity traffic through an underlay path such that the undesirable attributes are avoided and/or the preferred attributes are included.
This disclosure describes techniques for routing application traffic on a network path based on an application-specific Service Level Agreement (SLA) threshold that may be dynamically and/or automatically determined. An edge device of an SD-WAN may send probes over the SD-WAN over multiple paths and may determine network telemetry data representing the network performance associated with the multiple paths. The edge device may then send the network telemetry data to a control plane. The control plane may also receive quality of experience (QoE) data indicating the quality of an application experience for a user. Based on the network telemetry data and the QoE data, an application-specific SLA threshold may be determined for the application. The edge device may then route traffic of the application through a path of the multiple paths based at least in part on the path satisfying the SLA threshold.
A method, computer system, and computer program product are provided for assessing workspaces for privacy and allocating users to workspaces. Audio is obtained from one or more rooms of a building, wherein the audio is obtained via one or more microphones that are positioned outside of each of the one or more rooms. The audio is analyzed to determine a privacy level for each of the one or more rooms. A user is identified who is present in the building, wherein an identity of the user indicates privacy requirements of the user. The user is assigned to a particular room of the one or more rooms based on the privacy requirements of the user and the privacy level of each of the one or more rooms.
G10L 25/48 - Techniques d'analyse de la parole ou de la voix qui ne se limitent pas à un seul des groupes spécialement adaptées pour un usage particulier
G10L 15/26 - Systèmes de synthèse de texte à partir de la parole
G10L 17/00 - Techniques d'identification ou de vérification du locuteur
56.
DYNAMIC SIMILARITY THRESHOLD SELECTION FOR NATURAL LANGUAGE CACHES
A device receives a query for input to a language model. The device then selects a particular similarity threshold based on information associated with the query. The device makes, using the particular similarity threshold, a determination as to whether the query matches a cached query. The device provides, based on the determination, a response associated with the cached query in lieu of inputting the query to the language model.
In one implementation, a device stores a plurality of query-response pairs of queries issued to a language model and their corresponding answers from the language model in a cache. The device determines that the cache should be pruned based on a size of the cache exceeding a threshold size. The device selects a particular query-response pair from amongst the query-response pairs based on that pair having a minimal semantic distance to another query-response pair in the plurality of query-response pairs. The device prunes the particular query-response pair from the cache.
G06F 12/0802 - Adressage d’un niveau de mémoire dans lequel l’accès aux données ou aux blocs de données désirés nécessite des moyens d’adressage associatif, p. ex. mémoires cache
G06F 16/383 - Recherche caractérisée par l’utilisation de métadonnées, p. ex. de métadonnées ne provenant pas du contenu ou de métadonnées générées manuellement utilisant des métadonnées provenant automatiquement du contenu
In one implementation, a device may obtain anomaly detection time series indicative of anomalies detected by a plurality of anomaly detectors for a network. The device may determine a degree of correlation over time between the anomaly detection time series. The device may make, based on the degree of correlation over time between the anomaly detection time series, a performance evaluation for a particular anomaly detector from among the plurality of anomaly detectors. The device may provide the performance evaluation to a user interface for review.
H04L 43/08 - Surveillance ou test en fonction de métriques spécifiques, p. ex. la qualité du service [QoS], la consommation d’énergie ou les paramètres environnementaux
METHOD FOR ANNOUNCING AUTHENTICATION AND KEY MANAGEMENT SUITES (AKMS) SUPPORTED BY BASIC SERVICE SETS (BSSS) AFFILIATED WITH AN EXTENDED SERVICE SET (ESS)
A method to facilitate roaming in an extended service set (ESS) includes receiving data representative of security capabilities of respective basic service sets affiliated with an extended service set of a wireless local area network, supplying the data representative of security capabilities to respective access points in the respective basic service sets via a distribution network that interconnects respective access points of the respective basic service sets, and sending, from the respective access points, a beacon frame that includes an information element comprising the data representative of the security capabilities of the respective basic service sets affiliated with the extended service set.
Devices, systems, methods, and processes for discovery and assignment for unauthenticated or sleeping endpoints to appropriate VLAN. Typically, unauthenticated endpoints or endpoints that transition into sleep state are assigned to default VLAN. Thus, packets sent from a controller does not reach these endpoints. Therefore, the present disclosure provides a solution for automatic VLAN assignment of endpoints. A network device may detect a packet and upon determination that the packet is associated with a host VLAN, floods the packet on the default VLAN. This way the packet may reach all the endpoints in the default VLAN, including the unauthenticated or sleeping endpoint. The network device may receive a response from the endpoint based on successful reception of the packet. The network device may then assign the endpoint to a correct VLAN based on successful authentication of the endpoint or successful transition of the endpoint to an active mode.
SCS negotiation can be used to establish different QoS profiles for a network flow. However, switching between tiers and/or profiles using SCS messages (which are typically management frames) is time consuming. SCS messages are typically processed in the host processor (e.g., a host central processing unit (CPU)) in the AP. Instead, the embodiments herein discuss signaling schemes to quickly switch between quality tiers or QoS profiles using data or control frames.
H04W 28/02 - Gestion du trafic, p. ex. régulation de flux ou d'encombrement
H04W 28/24 - Négociation de l'agrément du niveau de service [SLA Service Level Agreement]Négociation de la qualité de service [QoS Quality of Service]
H04W 74/0816 - Accès non planifié, p. ex. ALOHA utilisant une détection de porteuse, p. ex. accès multiple par détection de porteuse [CSMA] avec évitement de collision
H04W 84/12 - Réseaux locaux sans fil [WLAN Wireless Local Area Network]
62.
MITIGATION OF ACCESS POINT SCALE CONSTRAINTS FOR IN-DEVICE COEXISTENCE OPERATION
The present disclosure provides techniques for in-device coexistence (IDC) management. A first network device transmits an announcement of one or more in-device coexistence (IDC) handling constraints to a second network device. The first network device receives an IDC unavailability report indicating a request for IDC service from the second network device, where the request comprises one or more unavailability windows due to IDC. The first network device transmits an IDC unavailability response to the second network device. The first network device communicates with the second network device in accordance with the IDC service response.
Described herein is a network that uses a high priority enhanced distributed channel access (HiP EDCA) policy. A wireless access point includes one or more memories and one or more processors communicatively coupled to the one or more memories. The one or more processors, individually or collectively, perform an operation that includes broadcasting a message comprising a portion of a HiP EDCA policy of the wireless access point and providing a user device access to a transmission medium using HiP EDCA according to the HiP EDCA policy.
A computerized method for detection of format drift and format anomalies is described. A format representation for each data point of a first data sample is extracted. Transformations of each format representation is conducted, resulting in a first plurality of count values (reference) and a second plurality of count values. Each count value identifies a number of occurrences of a transformed format representation within that data sample. Thereafter, a first probability distribution for the first plurality of count values and a second probability distribution for the second plurality of count values are computed. Analytics using the first and probability distributions are conducted to produce a first metric. A format drift is determined based on an evaluation of the first metric to a second metric operating as a threshold metric. Format anomalies are detected based on analytics of hashed format representation and determination of infrequent usage of a particular format representation.
Methods are provided for decentralized key negotiation. One method includes initiating, by a first Internet Key Exchange (IKE) node from among a plurality of IKE nodes, a rekeying process for an Internet Protocol Security (IPSec) communication session established with a client device and serviced by a second IKE node from among the plurality of IKE nodes, and in which a first encryption key is used to encrypt traffic. The method further includes obtaining, by the first IKE node from a key value store, information about the IPSec communication session and performing, by the first IKE node, at least a part of the rekeying process in which the first encryption key is replaced with a second encryption key for the IPSec communication session.
H04L 9/16 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité utilisant plusieurs clés ou algorithmes qui sont changés pendant l'opération
An apparatus includes a connector for coupling a cable comprising at least one optical fiber and at least one electrical wire to an optical module at a network communications device, the connector comprising an electrical contact plate for engagement with an electrical contact on the optical module, and a ferrule for receiving the at least one optical fiber. The electrical contact plate is configured for electrically coupling the at least one electrical wire to the electrical contact on the optical module for delivery of power through the optical module.
H04B 10/80 - Aspects optiques concernant l’utilisation de la transmission optique pour des applications spécifiques non prévues dans les groupes , p. ex. alimentation par faisceau optique ou transmission optique dans l’eau
G01J 3/02 - SpectrométrieSpectrophotométrieMonochromateursMesure de la couleur Parties constitutives
G02B 6/38 - Moyens de couplage mécaniques ayant des moyens d'assemblage fibre à fibre
G02B 6/42 - Couplage de guides de lumière avec des éléments opto-électroniques
H02J 50/30 - Circuits ou systèmes pour l'alimentation ou la distribution sans fil d'énergie électrique utilisant de la lumière, p. ex. des lasers
H02J 50/80 - Circuits ou systèmes pour l'alimentation ou la distribution sans fil d'énergie électrique mettant en œuvre l’échange de données, concernant l’alimentation ou la distribution d’énergie électrique, entre les dispositifs de transmission et les dispositifs de réception
H02S 40/38 - Moyens de stockage de l’énergie, p. ex. batteries, structurellement associés aux modules PV
Techniques for routing Internet Protocol security (IPsec) data packets. An index is assigned to a Security Parameter Index (SPI) header of the IPsec data packet. The index includes information for routing the data packet to a particular Encapsulating Security Payload (ESP) processor. The data packet can be routed using techniques that are analogous to conventional routing protocols such as IPv4 routing protocol. This allows the data packet to be routed using less expensive routing protocols rather than relying solely on more expensive load balancing techniques to route the data packet. This also advantageously allows the data packet to be routed employing routing techniques developed over decades of routing protocol development.
This disclosure describes techniques for identifying an application (e.g., accessing application) that is attempting to access a resource. In some examples, access may be managed by an authentication service. When an access request is received at the authentication service from an application on a client device, the authentication service may ask the application to communicate with an identification agent on the client device. The identification agent may perform one or more tests to discover the identity of the application. In some cases, the identification agent may send the identity of the application to the authentication service. The authentication service may then allow or deny access by the accessing application to the resource based at least in part on the discovered identity.
H04L 101/663 - Adresses de couche transport, p. ex. aspects des ports du protocole de contrôle de transmission [TCP] ou des ports du protocole de datagramme utilisateur [UDP]
Queries may be resolved against large quantities of collected data (such as traces) by dividing collected data into multiple time intervals and incrementally assigning multiple workers the query and the collected data over the multiple time intervals. For each time interval, these workers may conditionally update one or more summary data structures within the worker based on the query and the portion of collected data assigned to the worker. The summary data structures for each time interval may then be incrementally returned and merged with results from earlier time intervals to create a final merged query result.
In one embodiment, a method for granular administrator approval of user commands and actions in remote access sessions includes providing, by a device, a remote access session to a remote device for both a user device and an overseeing device. The overseeing device may display user device actions on the remote access session. In addition, such methods can further include determining, by the device, a set of permitted actions and a set of restricted actions that the user device is allowed to perform on the remote device in the remote access session, allowing, by the device, user device actions when permitted, and requesting by the device, real-time permission from the overseeing device when user device action is restricted.
Techniques for protecting source IPs in a network fabric are described. A binding database may receive an indication of an overlay address-to-underlay address binding for a client device connected to the network fabric. The indication is received in a secure message from a fabric edge node through which the client device is connected. The overlay address-to-underlay address binding indicates a first overlay address and an underlay address associated with the fabric edge node. One or more additional overlay addresses are allocated and associated with the overlay address-to-underlay address binding. Each of the one or more additional overlay addresses is mapped to the first overlay address, A second overlay address is assigned, from the one or more additional overlay addresses, to the client device for an IP flow. The fabric edge node intercepts packet of the IP flow and translates a source IP from the first to the second overlay address.
Systems, methods, and computer-readable media are provided for detecting grey failures on a network. An example method can include receiving, by a network controller, event data for a network node, generating, by the network controller, a first metric and a second metric based on the event data, determining, by the network controller, a first pattern of growth of the first metric and a second pattern of growth of the second metric over a sliding window, determining, by the network controller, a correlation across the first metric and the second metric based on the first pattern and the second pattern, and determining, by the network controller, a grey failure of the network node based on the correlation.
H04L 43/062 - Génération de rapports liés au trafic du réseau
H04L 43/0817 - Surveillance ou test en fonction de métriques spécifiques, p. ex. la qualité du service [QoS], la consommation d’énergie ou les paramètres environnementaux en vérifiant la disponibilité en vérifiant le fonctionnement
73.
SOLUTION FOR ROUTING IN A PARTITIONED SUBNET BASED ON DYNAMIC LIVENESS MONITORING
Routing of packets in a partitioned subnet is realized in a data center (DC) by using a first type of address prefix (e.g., /24 prefixes) to advertise respective hosts to its peers (i.e., external traffic). For routing traffic within the DC (i.e., internal traffic), a second type of address prefix (e.g., /32 prefixes) that is longer than the first type. Switches/routers within the DC perform liveness probes detecting which hosts are connected thereto and updating a table (e.g., an ARP/ND table) to include the connected hosts (e.g., removing hosts that fail to respond). For changes to the table, a gate protocol (e.g., BGP or IGP) is triggered such that the switch/router advertises within the DC fabric the second type of address prefix for the host routes of the connected host. The switch/router also configures Liveness sessions for the connected hosts.
In some aspects, the techniques described herein relate to a method including: providing, from a first endpoint, an unentangled photon containing image information to an intermediate server via a first multimode fiber; generating, at a second endpoint, an entangled photon pair including a first entangled photon and a second entangled photon; providing, from the second endpoint, the first entangled photon to the intermediate server via a second multimode fiber; Bell state measuring the unentangled photon and the first entangled photon at the intermediate server to swap entanglement of the first entangled photon such that the unentangled photon becomes entangled with the second entangled photon; providing, from the intermediate server to the second endpoint, results of the Bell state measuring; and generating an image corresponding to the image information at the second endpoint using the second entangled photon and the results of the Bell state measuring.
B82Y 15/00 - Nanotechnologie pour l’interaction, la détection ou l'actionnement, p. ex. points quantiques comme marqueurs en dosages protéiques ou moteurs moléculaires
This disclosure describes techniques and mechanisms for intelligently and proactively routing application traffic within a SD-WAN. The techniques may utilize application models to determine bandwidth utilization and usage patterns of application flow(s), determine and predict the impact of potential movement or addition of the application traffic to a pathway and the SLA requirements of the pathway, and intelligently route and/or re-route the packets through the most optimal path, thereby preventing and/or minimizing policy violations. This disclosure describes techniques and mechanisms for intelligently analyze a target network and determine the impact of adding that application on the network based on usage patterns, flow density, bandwidth requirements and volume of traffic, thereby streamlining the process of designing a new network or adding an application to an existing network.
H04L 45/302 - Détermination de la route basée sur la qualité de service [QoS] demandée
H04L 47/2425 - Trafic caractérisé par des attributs spécifiques, p. ex. la priorité ou QoS pour la prise en charge de spécifications de services, p. ex. SLA
A method is disclosed for performing testing of network deployment by an SD-WAN controller. The method includes receiving, by an SD-WAN controller, a request to configure a test package comprising a set of test instructions for transmitting test traffic between a first and second edge network device. The method includes configuring the test package at the first and the second edge network device, wherein the test package instructs the first edge network device and the second edge network device to conduct a test based on the set of test instructions in the test package and the test traffic. The set of test instructions includes instructions for scheduling the test to initiate at a specified time period; and monitoring the test traffic between the first edge network device and the second edge network device, wherein monitoring includes collecting one or more metrics related to the test traffic transmitted.
The present disclosure provides techniques for downshifting in 100BASE-T1L Ethernet. A device sends a first capability data frame to a connected peer device via a 100BASE-T1L interface. The device receives a second capability data frame from the connected peer device via the 100BASE-T1L interface. The device determines a first highest common denominator (HCD) for network speed based on the first and second capability data frames. The device establishes a network link with the connected peer device via the 100BASE-T1L interface using the first HCD for network speed. The device monitors a quality of the network link. Upon determining that the quality of the network link falls below a defined threshold, the device sends a third capability data frame to the connected peer device that excludes the first HCD for network speed.
In one implementation, a device may identify a type of task and its context indicated by a prompt sent by a user for input to a language model. The device may authorize the prompt for input to the language model based on the type of task and its context. The device may make a determination as to whether a response of the language model to the prompt is authorized to be returned to the user based on the response, the type of task, and its context. The device may prevent the response from being returned to the user when the determination indicates that the response is not authorized to be returned.
In one implementation, a device identifies an intended action that a user wishes to perform with respect to a service. The device makes a first determination as to whether the user is authorized to access the service. The device causes a chat session with the user to obtain information indicative of a data set, an intended use of the data set, and a data processor to perform the intended action. The device makes, based on the information from the chat session, a second determination as to whether the intended action would violate an access control policy. The device prevents performance of the intended action based on the first determination and on the second determination.
H04L 41/16 - Dispositions pour la maintenance, l’administration ou la gestion des réseaux de commutation de données, p. ex. des réseaux de commutation de paquets en utilisant l'apprentissage automatique ou l'intelligence artificielle
80.
RETURN ON INVESTMENT ESTIMATIONS USING PROMPT PROCESSING UNITS
In one implementation, a device may determine a classification of a task requested by a prompt for input to a language model. The device may compute, based on the classification of the task, an estimated resource utilization associated with the language model performing the task. The device may calculate a resource utilization differential between the estimated resource utilization and a resource utilization associated with another entity performing the task instead of the language model. The device may provide an indication of the resource utilization differential via a user interface.
In one implementation, a device may identify a task requested by a prompt for input to a language model. The device may compute, based on the task, two or more estimated performance metrics for each of a plurality of candidate language models associated with that model performing the task. The device may select a particular language model from among the plurality of candidate language models to optimize the two or more estimated performance metrics. The device may cause the prompt to be sent to the particular language model for performance of the task.
In one aspect, a method for data loss prevention (DLP) scanning in a network environment includes receiving a request from a proxy in the network environment. This request seeks permission from the server to send content for DLP scanning. The method involves performing a policy evaluation at the DLP scanner using the information extracted from the HTTP headers to determine if the content matches a DLP policy and should undergo scanning. If the content requires scanning, an HTTP response “100 continue” is sent from the DLP scanner to the proxy. Upon receiving this response, the content is sent from the proxy for scanning. The DLP scanner processes the content to identify policy violations, and if the scan is successful and the content is not in violation, it is forwarded to the intended destination within the network environment when the content is not in violation of the DLP policy.
Devices, networks, systems, methods, and processes for recommending one or more links to a station (STA) multi-link device (MLD) are provided herein. The STA MLD may be a part of a wireless network that includes a set of Access Points (AP) MLDs. An AP MLD of the set of AP MLDs may receive a connection management request of the STA MLD for one or more first links. Further, the AP MLD may determine that the first links are unavailable or partially available. Upon determining that the first links are unavailable or partially available, the AP MLD may transmit a connection management response including an indication that recommends a set of second links of the set of AP MLDs to the STA MLD. The transmission of the indication recommending the set of second links may enable the AP MLD to suppress connection failure(s) for the STA MLD.
H04W 76/15 - Établissement de connexions à liens multiples sans fil
H04W 60/04 - Rattachement à un réseau, p. ex. enregistrementSuppression du rattachement à un réseau, p. ex. annulation de l'enregistrement utilisant des événements déclenchés
The embodiments herein describe a modified TDECQ that can measure correlated noise (i.e., non-random noise). Instead of generating a single histogram for a TDECQ test pattern (e.g., which can include thousands of symbols), the embodiments herein generate a respective histogram for each of the symbols of the test pattern (e.g., thousands of histograms). These individual histograms can be processed to determine an error probability for each symbol, which can provide valuable insight into correlated errors.
H04B 10/077 - Dispositions pour la surveillance ou le test de systèmes de transmissionDispositions pour la mesure des défauts de systèmes de transmission utilisant un signal en service utilisant un signal de surveillance ou un signal supplémentaire
H04B 10/073 - Dispositions pour la surveillance ou le test de systèmes de transmissionDispositions pour la mesure des défauts de systèmes de transmission utilisant un signal hors service
Devices and methods provide Media Access Control (MAC) address randomization support for multi-link devices. A multi-link client device transmits an Identifiable Random Media Access Control (IRM) address of the multi-link client device to a network device. The multi-link client device generates one or more wireless frames indicating the IRM address as a physical address. The IRM address in each wireless frame identifies at least one station of the multi-link client device. The multi-link client device transmits the wireless frame(s) to the network device. The network device receives and stores a first IRM address of the multi-link client device. The network device receives at least one wireless frame indicating a second IRM address as a physical address. The network device recognizes at least one station of the multi-link client device based on a match of the second IRM address with the first IRM address.
A heat pipe provides effective heat transfer. In one example, a heat pipe includes an evaporator section, a condenser section, and a fluid transport section. The evaporator section includes a first wick having a first porosity. The condenser section includes a second wick having a second porosity. The fluid transport section is configured to transport a fluid between the evaporator section and the condenser section.
F28D 15/04 - Appareils échangeurs de chaleur dans lesquels l'agent intermédiaire de transfert de chaleur en tubes fermés passe dans ou à travers les parois des canalisations dans lesquels l'agent se condense et s'évapore, p. ex. tubes caloporteurs avec des tubes ayant une structure capillaire
F28D 21/00 - Appareils échangeurs de chaleur non couverts par l'un des groupes
F28F 1/06 - Éléments tubulaires de section transversale non circulaire gaufrés ou ondulés transversalement
H01L 23/427 - Refroidissement par changement d'état, p. ex. caloducs
87.
GENERATING PLAYBOOK RUN STATISTICS FOR PLAYBOOKS EXECUTED BY AN INFORMATION TECHNOLOGY AND SECURITY OPERATIONS APPLICATION
Techniques provide users of an IT and security operations application with the ability to enable the collection and display of playbook run statistics. Users can selectively enable the generation of playbook run statistics for individual playbooks. Once enabled for a playbook, the IT and security operations application automatically adds source code to the playbook or otherwise enables the collection of function block-level statistics during playbook executions. Users can view the statistics collected for a playbook to compare the performance of individual blocks against one another, to compare the performance of individual playbook runs against other playbook runs or against an average of all playbook runs, and so forth. The ability to obtain playbook run statistics enables users to learn how their playbooks are performing and to troubleshoot potential issues, thereby improving the performance of playbooks and the security and operation of the IT environments in which playbooks are deployed.
This disclosure describes techniques and mechanisms for determine a change window of least impact based on the type of activity, urgency, and preference, and highlighting risk(s) of choosing a change window. The techniques streamline and automate change window technology and provide customized and personalized change window option(s) to an administrator of a network.
H04L 41/082 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant des mises à jour ou des mises à niveau des fonctionnalités réseau
H04L 41/0823 - Réglages de configuration caractérisés par les objectifs d’un changement de paramètres, p. ex. l’optimisation de la configuration pour améliorer la fiabilité
The present technology provides for altering an authentication technique in response to a detection of a possible attack to which the authentication technique is vulnerable. An authentication provider can receive an authentication request to authenticate to a first resource, where the authentication to the first resource is permitted using a particular authentication technique, includes contextual information associated with the first access device and information identifying the first resource. Based on the contextual information, the authentication provider can determine that the authentication request is subject to an ongoing attack, and determine, an alternative authentication technique that is less vulnerable to the ongoing attack than the particular authentication technique. The authentication provider can require the first user account to authenticate with the first resource using the alternative authentication technique that is less vulnerable to the ongoing attack than the particular authentication technique.
Embodiments herein describe techniques for performing dynamic channel assignment for MLD stations using MLD distributions associated with access points (APs). The embodiments herein include techniques for considering inter-frequency isolation (also referred to as inter-spectrum isolation) as well as intra-frequency contention when assigning channels to MLDs.
H04W 72/541 - Critères d’affectation ou de planification des ressources sans fil sur la base de critères de qualité en utilisant le niveau d’interférence
91.
REAL-TIME CONFERENCE MONITORING AND ALERTING FOR SENSITIVE INFORMATION
A transcript of a communication session is transmitted to a large language model (LLM) while the communication session is occurring. An indication of a security level associated with a current topic of the communication session is received from the LLM based on the transcript. It is determined whether a participant of the communication session is authorized to receive information associated with the current topic based on the security level associated with the current topic. One or more actions are performed when the participant is not authorized to receive the information associated with the current topic.
A method for operating an optical protection switching module to protect wave division multiplexed (WDM) optical signals. The method includes receiving a first WDM optical signal at a first receive port of the optical protection switching module, receiving a second WDM optical signal at a second receive port of the optical protection switching module, tapping off a portion of the first WDM optical signal to obtain a tapped portion of the first WDM optical signal, optically filtering the tapped portion of the first WDM optical signal to obtain a predetermined channel of the tapped portion of the first WDM optical signal, detecting a power level of the predetermined channel, and in response to the power level being below a predetermined threshold, causing a switch to enable the second WDM optical signal to pass through the optical protection switching module.
This disclosure describes techniques for emulating the operations of a computer network. In some cases, a method includes receiving first configuration data associated with a first device and second configuration data associated with a second device in a network; determining a first device representation associated with the first device based on the first configuration data and a second device representation associated with the second device based on the second configuration data; determining, based on the first and the second device representations, a first device cluster, wherein the first device cluster comprises a plurality of clustered devices comprising the first device and the second device; determining a first device model associated with the first device cluster, wherein the first device model represents a first device behavior that is common across the plurality of clustered devices; and generating, based on the first device model, an emulation environment associated with the network.
Disclosed are methods, controllers, and computer-readable media that explicitly label data packets and interfaces as trusted or untrusted. The data packet labeling can occur at a centralized security hub or at the enforcement site itself, i.e., at the interface to the trusted or untrusted region. The packet can be labeled with metadata associated with the packet, and that label can be carried through the transport of the packet to avoid overbroad or unnecessary security procedures. Further, a network administrator can designate certain links as trusted or untrusted so that packets designated as trusted can be sent down trusted links, and untrusted traffic can be sent down untrusted links. Network resources are saved while traffic is better separated and allocated down links with trustworthiness that is congruent with that of the packet.
In one implementation, a device may maintain access permissions that control whether a user is allowed to access a particular document. The device may match a plurality of document chunks from a retrieval augmented generation system to a prompt issued by the user for input to a language model. The device may form, based on the access permissions, a modified set of document chunks by excluding a particular document chunk from the plurality of document chunks based on the particular document chunk having a data lineage from the particular document. The device may augment the prompt using the modified set of document chunks prior to input to the language model.
Devices, networks, systems, methods, and processes for providing roaming assistance to wireless devices are provided herein. To provide roaming assistance to a wireless device, a network device may establish a communication link with the wireless device. The network device may then obtain at least one of motion data or location data of the wireless device. The network device may obtain the motion data or the location data based on at least one of a set of movement characteristics of the wireless device, a set of location characteristics of the wireless device, or one or more RF parameters of the wireless device relative to at least one neighboring network device. The network device may then generate a list of one or more neighboring network devices based on the obtained motion data or the location data, and transmit the list of one or more neighboring network devices to the wireless device.
The present disclosure provides techniques for in-device coexistence (IDC) management. A first network device transmits an IDC policy announcement to a second network device, where the IDC policy announcement is received by a second network device, and the IDC policy announcement comprises one or more IDC policies supported by the first network device. The first network device monitors one or more characteristics of reported unavailability windows to determine whether the second network device violates the one or more IDC policies. In response to detecting a violation of the one or more IDC policies, the first network device transmits an IDC policy enforcement message to the second network device, the IDC policy enforcement message comprising a teardown frame to cancel the one or more IDC policies confirmed by the first network device.
Described herein are techniques for concurrently visualizing real user's session data with a playback of a user's experience during a session. The disclosed techniques can correlate session data collected in response to interactions with an application during a user's session with session recreation data generated by the application and recorded during the user's session. The correlations between the session data and the recreation data can be used to render and control a recreation of the user's experience during the session concurrently with a visualization of the session data.
Techniques for moving buffers between ports, or virtual lanes of a port, of a networking device of a credited network while maintaining the ports in an active state without dropping any frames. The techniques may include determining that a number of buffers are to be reallocated from a first port of a networking device to a second port of the networking device. The techniques may also include causing a peer port connected to the first port to decrement, by the number, a transmit credit counter associated with the peer port. Based at least in part on determining that the peer port decremented the transmit credit counter, the first port may release the number of the buffers from a buffer pool associated with the first port, and the number of the buffers may be reallocated to the second port.
A system generates a user interface that enables a user to generate a chart from one or more statements of a data processing package. Via one or more user interactions with the user interface, the system may receive one or more chart parameters for a chart. Using a statement from the data processing package and the one or more chart parameters, the system may generate an additional statement and append the generated statement to the data processing package to form an enriched data processing package. The system may communicate the enriched data processing package to a search service for execution. The system may display the results in an interactive chart.
brevets
