Digital Commons Network^™

Identifying Duplicate Apps Across Platforms, Trevor Lu, Maggie Cai, Krystal Rose Higgins, Dominick Ng

Defensive Publications Series

App developers release versions of their apps designed for different platforms or operating systems. While there may be variations between the different app versions across platforms, they are fundamentally equivalent. However, there is currently no way of easily knowing whether an app is equivalent to another. This disclosure describes app deduplication techniques that identify apps that are duplicates. Identification of duplicate apps is performed based on app metadata using rules or machine learning models. App deduplication can improve user experience in a variety of ways, e.g., making recommendations to users discovering apps; suppressing duplicate notifications; helping users identify the right …

Using Existing Vehicle Proximity Sensors For Remote Mapping Of Empty Parking Spaces, D. Shin

Defensive Publications Series

A vehicle (e.g., automobile, motorcycle, a bus, a recreational vehicle (RV), a semi-trailer truck, a tractor or other type of farm equipment, a train, a plane, a helicopter, etc.) often has proximity sensors to detect adjacent objects. A head unit of the vehicle may use sensor data such as proximity sensor data to detect an empty parking space. The head unit may then report the detected empty parking space to a cloud computing system, such as a mapping service. Data from multiple vehicles may be used to crowd source a relatively detailed understanding of the amount of empty parking spaces …

Mechanism To Distinguish Between Sr-Te And Non-Te S-Bfd Return Paths At Sr Head Node, Anonymous

Defensive Publications Series

Segment Routing is an emerging technology in Multiprotocol Label Switching (MPLS) network, Seamless Bidirectional Forwarding Detection (BFD) over these networks is used as Operations, Administration, and Maintenance (OAM) mechanisms to provide fast switchovers and thus meet customer Service Level Agreement (SLA). BFD running over Label-switch Paths (LSP’s) can have MPLS/IP encapsulation in forward and backward directions. In case of Seamless BFD (S-BFD) running over Segment Routing-Traffic Engineered (SR-TE) networks, it may happen that BFD switches to a different MPLS/IP path instead of user configured MPLS path thus compromising the guaranteed SLA.

Encrypted Memory Access By Peripheral Devices Of A Confidential Virtual Machine, Marc S. Orr, Rachit Mathur, Erdem Aktas, Andrew Honig

Defensive Publications Series

A confidential virtual machine (CVM) uses a hardware-rooted key to encrypt customer data written to memory. For enhanced security, the CVM makes the plaintext-to-ciphertext map depend on the physical address (PA) of the memory location. Peripheral devices operate not in PA space but in input-output address space. Currently, peripherals can only perform memory accesses without encryption, or need to use a two-pass, high-latency, power-intensive encryption procedure involving a transport key distinct from the hardware-rooted key.

This disclosure describes techniques to enable a peripheral device of a confidential virtual machine to access encrypted memory using a single encryption pass. The techniques …

A Personal And Group Video Conferencing System And Method For Fitness Advisory And Detection Thereof

Defensive Publications Series

The invention detects using computer vision algorithms, for the video conferencing system user, whether in call or outside call, the user has been sitting or standing at one location for the set duration of time and need to stand-up or take a walk. This experience is currently available through wearable technology where if user is wearing smart watch embedded with appropriate sensors, then the watch can detect such scenarios and then users can stand-up and take a walk. The computer vision-based detection methodology can run from any compute resources, be in the camera compute (CPU, GPU, DSP, specialized AI compute) …

Context-Aware Dynamic Creation Of Low-Code Workflows For Troubleshooting Use Cases Involving A Network Controller, Rajesh I V, Divya Puranam, Aditya Kesarwani, Annu Gogayan, Rohit Anand Bhardwaj

Defensive Publications Series

Hyperautomation refers to the combination of available advanced technologies to, as much as possible, strategically automate business processes. The two major technologies that are flourishing in the hyperautomation space are low-code/no-code based applications and robotic process automation (RPA). The networking industry has many automation use cases involving network controllers, especially for troubleshooting, where the technologies that were described above could be widely adopted. However, low-code technologies are currently used for building static applications without any state. Techniques are presented herein that support the dynamic creation of low-code workflows by processing the underlying context and state of networking events for different …

Removing Potential Disturbances From Audio Based On Context, Ramprasad Sedouram, Puneetha Pai B P

Defensive Publications Series

A computing device (e.g., a smartphone, a laptop computer, a tablet computer, a smartwatch, etc.) may monitor a media presentation and adjust the media presentation based on a detected real-life context. The computing device may use microphones and/or other sensors (e.g., position sensor, accelerometer sensor, pressure sensor, temperature sensor, force sensor, vibration sensor, piezo sensor, humidity sensor, etc.) to detect the context. The computing device may evaluate the media presentation and identify media elements. Based on the identified media elements and the context, the computing device may mute or censor potentially distracting, dangerous, or undesirable sounds or images for the …

Vehicular Daylight-Saving Time Changes Watch Dog

Defensive Publications Series

No abstract provided.

Obtaining Visibility Into A Secure Access Services Edge (Sase) Network, Indermeet Gandhi, Robert Barton, Jerome Henry

Defensive Publications Series

Techniques are presented herein that provide visibility into Secure Access Services Edge (SASE) components for real user traffic as well as for synthetic traffic. Aspects of the presented techniques support the stacking of labels as a packet travels through a service chain and then the review of same for audit purposes, thus providing audit and assurance capabilities for a customer. Those capabilities may be used to reassure the customer that they are actually receiving the correct combination of SASE services. Aspect of the presented techniques may be used to reveal violations or exceptions in a service level agreement (SLA) where, …

Network-Embedded Zero Trust Agent For Automation And Control Systems, Maik Seewald, Laurent Hausermann, Andre Guerard

Defensive Publications Series

Techniques are presented herein that support a zero trust architecture for (e.g., legacy) devices in an operational technology (OT) and industrial internet of things (IIoT) environment. The presented techniques support granular segmentation and access control to critical assets based on a network equipment vendor’s ability to host applications (in this instance a proxy) on network components such as switches. Aspects of the presented techniques comprise three key components or artifacts. A first artifact encompasses a proxy component that is hosted as part of a control system. A second artifact encompasses a proxy component – i.e., a zero trust agent (ZTA) …

A Language For Specifying Rate Limits, Joel Trunick

Defensive Publications Series

The present disclosure relates to a method and system for developing a language, which is specific for ‘rate limiting’ in digital transactions. The present disclosure uses a specific language to encode ‘rate limiting’ rules and conditions, such that the encoded language is in a readily understandable format and covers many different use cases for ‘rate limiting’. As a result, the present disclosure eliminates requirement of specific version of server and makes it possible to pass rules from one service to another in electronic format. Further, the users may be able to generate automated reports which is in an understandable format.

A Method To Convey And Enforce Part Requirements For Automatic Nesting Of 3d Parts Into A Build, Hp Inc

Defensive Publications Series

In batch additive manufacturing processes such as MJF and MetalJet, parts are produced in batches as opposed to printed individually. A pre-requisite is that parts are grouped and oriented into what is called a build. This process is sometimes called ‘nesting’ or ‘packing’ and is performed by professionals sometimes referred to as DFM Engineer or simply DFM (Design for Manufacturing). As a costly process, solutions have been developed to automate it. Specific build preparation guidelines are developed to specify things like minimal distance between parts, between part and the walls of the build volume, part orientation (flat vs tilted) and …

Automated Detection And Organization Of Objects Of Interest In Human Conversations, Jaime Guajardo, Gabi Lanning, Dmitrii Boiarshinov

Defensive Publications Series

Human conversations often involve discussion of various objects of interest, e.g., recommended restaurants or movies, items to buy, books to read, etc. However, to remember objects mentioned in a conversation, the participants need to write them down immediately. This disclosure describes the use of a virtual assistant to help users memorize objects of interest mentioned in a conversation. A participant can activate a virtual assistant and instruct it to identify and store objects of interest mentioned in a conversation. Upon receipt of the user command and permission to activate a microphone to listen to the conversation, the virtual assistant utilizes …

Aievi - Audi Intelligent Electric Vision Interieur, Axel Unger

Defensive Publications Series

No abstract provided.

Low-Cost Image Capture System Fir Industrial Printers, Hp Inc

Defensive Publications Series

A low-cost image capture system automatically detects image quality defects during unattended operation of industrial printers.

Dynamic Data And Policy Relationship Technologies For Data Privacy Compliance In Ecosystem, Hp Inc

Defensive Publications Series

A cloud system controls data collection from clients and devices in compliance with privacy requirements without the need for software and/or firmware changes to the clients or devices.

Access Control Policy Enforcement Through Route-Based Micro-Segmentation And Contract Tags, Victor Moreno, Sanjay Hooda, Steve Wood

Defensive Publications Series

Large networks service a significant number of endpoints, each of which access a sizable number of applications. This results in the definition of access control policies that are extremely lengthy and therefore difficult to render in common network elements, such as routers and switches, due to the limited amount of memory (such as ternary content-addressable memory (TCAM)) that is included in such platforms for the enforcement of policies. To address the type of challenge that was described above, various solutions are provided herein through several techniques. A first technique supports, among other things, the scaling of the access control entries …

Determination Of Traffic Utilization For Dwdm Networks And Enhanced Traffic Engineering Applications, Navdeep Sood, Praveen Kumar

Defensive Publications Series

Generalized Multi-Protocol Label Switching (GMPLS) User-Network Interface (UNI) client (UNI-C) to UNI network (UNI-N) environments created overlay models which broke the isolation barriers between the dense wavelength-division multiplexing (DWDM) world and Internet Protocol (IP) router world. Techniques are presented herein that support the bridging of a gap in an IP over DWDM environment. By applying aspects of the presented techniques, a DWDM interface becomes capable of knowing the actual data rate of a given IP interface. Such information is highly useful in traffic engineering (TE) decisions and vendor network optimizations.

Content-Based Display Color Enhancement Using Dynamic Memory Color Protection, Farnaz Agahian, Daniel Solomon

Defensive Publications Series

A computing device (e.g., a smartphone, a laptop computer, a tablet computer, a smartwatch, etc.) may apply color enhancement (e.g., by modifying digital values of red, green, and blue additive primaries to increase color saturation of colors originally in the sRGB color space) to content (e.g., an image, a video, etc.) without causing objects within the content to appear unrealistic to a user. For example, the computing device may apply a machine learning model to label objects (e.g., based on image features) within the content. Based on the labels, the computing device may determine whether color enhancement should be applied …

Policy-Defined Data Access Model For Data Access Limits And Restrictions Enforcement, Eugenio Marchiori, Wei Huang, Nikita Dubrovsky, Sergey Volnov

Defensive Publications Series

This publication describes systems and techniques for providing a policy-defined data access model for enforcing data access limits in place of a permission-protected data access model. An operating system of a computing device may implement the policy-defined data access model to enforce data access limits for applications and processes that decouple permissions from policies. That is, even when an application is permitted by the operating system to access certain data, the operating system may apply and enforce policies that restrict the application’s access to the data in certain ways based on factors such as an application’s purpose for accessing certain …

Packaging And Propagation Of Molecular Documentation Responses, Vishal Palliyathu, Anu Kothari, Manju Joseph, Swetha K.S

Defensive Publications Series

Techniques are presented herein that support the tokenizing of semantically enriched information sets (such as the Darwin Information Typing Architecture (DITA)) to associate ontological relationships between the various entities and intents in a product information library and rendering them as API responses. The method uses an Inverted Disclosure Plot and a weighted algorithm to determine the order of kinship based on the varied relationships that occur between the extracted entities and various intents. Subsequently, a domain ontology may be generated as a Resource Description Framework (RDF) and, the RDF may be translated into a series of application programming interface (API) …

Suggesting Chat With A Professional In Response To Queries About Emotional Well-Being, N/A

Defensive Publications Series

Users may issue queries to a virtual assistant, search engine, or other technological interface to seek help when experiencing acute emotional distress. Current approaches of surfacing relevant information are unsuitable due to lack of trustworthy local resources that provide support, lack of supportive information content in the user’s language, etc. This disclosure describes techniques to present users with the option to chat with a professional from an accredited global or multi-regional entity that offers free online emotional support.

Estimating Product Field Life Under Multi-Stress Environments In Halt And Hass, Ouyang Simon Chase

Defensive Publications Series

The estimated field life of a product is determined by subjecting the product to accelerated testing at various stages, including the engineering, development, and production stages. Accelerated testing involves subjecting a large base of sample products to thermal shock, humidity, dust, or other tests to accelerate aging. After accelerated testing, at the time of mass production, the product is subjected to HALT/HASS as a form of ongoing reliability testing. HALT and HASS apply multiple stressors at different intensity combinations but cannot produce field-life estimates. This disclosure leverages HALT-HASS by using Arrhenius and modified-Eyring modeling to estimate acceleration factor and field …

Automatic Adjustment Of Wireless Access Point Settings Based On Client-Side Rf Measurements, N/A

Defensive Publications Series

In settings where multiple access points (APs) provide WiFi coverage, the radio frequency (RF) environment experienced by a client device is non-stationary due to various factors such as the emergence and disappearance of hotspots; spectrally uncoordinated APs; the number of clients; the sensitivity of client devices to noise; the mutual distances between clients, RF noise sources, and metallic structures; etc. Since the RF environment experienced by a client device is materially different from that experienced by an AP, attempting to optimize network parameters based on measurements at the AP frequently fails or further degrades WiFi service. This disclosure describes techniques …

Responsive User Interface Updates For Remote Computation, Xu Cao

Defensive Publications Series

Remote display protocols send local user inputs such as keystrokes and mouse clicks received at a client device to a remote server and update the local display based on responses received from the remote server. This can sometimes result in unacceptable latency between user commands and display actions, e.g., when performing computation heavy operations such as computer-aided design, version control for large software repositories, etc. This disclosure describes techniques to generate a low-latency response to user inputs by providing a display module and a compute module within client software that executes locally. The display module locally processes display-related user commands …

Lawful Intercept In Multi-Provider 5g Deployments Using Holochain, Niranjan M M, Nagaraj Kenchaiah

Defensive Publications Series

Since Third Generation Partnership Project (3GPP) fifth generation (5G) wireless technology enables the potential for billions of connected network devices, a secure and scalable lawful intercept (LI) capability is needed across the mobile core. Although LI for third generation (3G) and fourth generation (4G) networks is a well-known concept, new challenges are posed with respect to the implementation of an LI capability in a 5G network, particularly when such a network employs a Control and User Plane Separation (CUPS) architecture. Also, in a 4G network and in a Long-Term Evolution (LTE) environment a user plane and a control plane are …

System And Method For Providing Validation Services To A Customer, Andrew Chen, Junjun Yu, Danielle Cole, Aravind Srivatsa

Defensive Publications Series

The present disclosure provides a method and validation system for providing validation services to a customer during purchase of NFT. The method includes receiving request from the customer for validating the seller of the NFT. The NFT is created for a digital good. The method includes obtaining information of the seller and creator of the digital good from a contract and validates the seller and the creator. The method includes utilizing transaction history of the seller and creator information which is stored in a registry for validating. Upon validation, the method includes providing seller score for the seller. Also, the …

Stretch Mode Bev, Axel Unger

Defensive Publications Series

No abstract provided.

Agentless Quarantine Of Network Endpoints, Rajesh Tarakkad Venkateswaran, Veena Ramamoorthy, Saravanan Radhakrishnan

Defensive Publications Series

Techniques are presented herein that enhance a user defined network (UDN) micro-segmentation approach to enable communication between only a select set of endpoints. Aspects of the presented techniques can also restrict the set of endpoints that can initiate communication, thereby enabling specific use cases such as quarantine and remediation workflows, without the need for installing software agents on endpoints. Among other things, aspects of the presented techniques support the dynamic creation of UDN rooms and groups of rooms, do not require configuration changes on intermediate devices, allow administrators to belong to multiple rooms or groups of rooms, and support an …

System And Method For Providing Automated Refunds For Real-Time Payements, Som Madhab Bhattacharya

Defensive Publications Series

The present disclosure provides a method and refund system for providing automated refunds for RTP. The method includes receiving refund request from a customer and sends the request to payee bank for validation. The method includes receiving a confirmation from payee bank indicating that amount is being deducted from merchant account. Further, a request is transmitted to payor bank for crediting the amount in the customer account. The method includes receiving a confirmation from the payor bank for crediting the amount. Upon receiving the confirmation, the method includes sending a notification to customer device to inform the customer that the …