Digital Commons Network^™

Default Selective Multicast Route To Handle Heterogeneous Network Design, Mankamana Mishra, Swadesh Agrawal, Ali Sajassi, Samir Thoria

Defensive Publications Series

Techniques are described for a solution to traffic loss caused by heterogeneous network design with Ethernet Virtual Private Network (EVPN) multicast deployments. The techniques include detecting the presence of a multicast router behind a Bridge Domain and creating a default route to receive traffic from a remote source based on the detection.

Conversational Engine For Building Customized Workflows, Hp Inc

Defensive Publications Series

Customers who utilize a device for interacting with a printer may do so for different needs and situations and primary use

cases for a device may vary from user to user. Based on the context, a user may want to perform multiple tasks using the

same document source.

Most of the solutions on market require users to perform tasks separately, without allowing continuation of the workflow.

Other solutions require users to build a workflow recipe before the workflow is performed. Preferences in individual tasks are

usually not stored in the workflow because doing so would require a lot of details …

Visual User Interface (Ui) Interaction Prediction, Victor Carbune, Daniel Keysers, Thomas Deselaers

Defensive Publications Series

This publication describes an operating system (OS) level framework functionality, which can predict a user’s future interaction with first-party and third-party application software. This provides the user with an enhanced user experience (UX) by enabling first-party and third-party software to dynamically change the display in the user interface (UI) to aid the user to more-easily carry out the task at hand. The framework functionality at the OS level predicts the user’s future interactions using machine learning (ML). With this prediction, the supported application software can dynamically change the UI by presenting the user with relevant application software functions in a …

Enhanced Dying Gasp In Network Nodes For Intuitive Monitoring Of Complex Networks, Karthik Babu Harichandra Babu, Manigandan B, Ananthakrishnan Rajamani

Defensive Publications Series

Techniques are provided herein for fixing existing Operations, Administration, and Maintenance (OAM) Dying Gasp (DG) mechanisms and providing guaranteed delivery of the DG packet to the remote/peer node.

Integrated Security-Tagging For Deterministic Ethernet, Maik Seewald, Robert Barton

Defensive Publications Series

Techniques are described herein for enhancing Time-Sensitive Networking (TSN) in network fabrics by dynamically assigning Secure Group Tags (SGTs) based on the stream configuration in a TSN controller. The TSN controller communicates stream details to a policy engine which creates a policy and assigns an SGT for the stream. The TSN controller pushes regular stream scheduling to the network switches, but also pushes a function that maps the stream identification based on the multicast Media Access Control (MAC) to a specific SGT. The TSN stream is now protected by the correct SGTs end-to-end.

Deterministic Process Networks Based On Adaptive Traffic Policing And Filtering, Maik Seewald, Robert Barton

Defensive Publications Series

Techniques are described herein to facilitate deterministic networking based on Time-Sensitive Networking (TSN) for Substation Automation Networks (SANs). The use of adaptive configuration of filtering and policing for TSN-streams allows the implementation and operation of a secure converged process bus architecture and supports the approach of a fully digital substation.

Intelligent Regression Testing For Internet Of Things Wireless Device Using Mixed Machine Learning Methods, Lele Zhang, Mingyu Xie, Chuanwei Li, Xiang Fang

Defensive Publications Series

Techniques are described herein for a mixed Machine Learning (ML) method which contains both the Ant Colony Optimization (ACO) algorithm and Bayesian method. The regression test is very common for a Quality Assurance (QA) team in its daily work, but usually has too many cases for a very little-changed patch. The techniques described herein may pick up as few desired test cases as possible but still guarantee the same testing performance as before. This may improve the efficiency of the QA team, shorten its work time, and reduce the requirement for testing devices as well.

Prediction Of Peer-To-Peer Routing Request Based On Low-Power And Lossy Networks Behavior Analytics, Xiaopu Zhang, Caijun Jiang, Dapeng Zhu, Zaochun Zhang

Defensive Publications Series

Techniques are provided to predict Peer-to-Peer (P2P) routing requests in Low-Power and Lossy Networks (LLNs). With this prediction, a P2P routing path may be prepared on demand and in advance.

An Adoptive And Resilient Segment Routing Version 6 Policy To Address Tight Service Level Agreement Requirements In 5g Networks, Clarence Filsfils, Pablo Camarillo, Francois Clad, Zafar Ali

Defensive Publications Series

There is ongoing work positioning Segment Routing version 6 (SRv6) as a replacement to General Packet Radio Service (GPRS) Tunneling Protocol User Plane (GTP-U). The main benefits of using SRv6 include coupling of the mobility overlay with the underlay (transport Traffic Engineering (TE)) and service chaining (GiLAN) and reusing high performance routers with SRv6 capabilities as User Plane Functions (UPFs). Techniques are described herein for enabling the creation of specific network slices where in the underlay a high resiliency is achieved with zero packet loss for tight Service Level Agreement (SLA) enterprise premium traffic. This same mechanism may be reused …

Behavioral Random Number Generator In Cryptography, David Maluf, Raghuram Sudhaakar, Pradeep Kathail

Defensive Publications Series

Techniques are described herein for using vehicle data for the creation of a seed number for cryptography generation in-car as a potential replacement for private keys. In this approach, each vehicle generates its keys by itself and is also able to rekey independently without the need for a central key generation system. Unlike vehicle keys today, which are generated centrally (mostly at manufacture time) and thus are exposed to a single source of failure if the key generator is compromised, the impact of a key compromise as described herein is isolated to one vehicle. Thus, whereas a threat today would …

Click-To-Call Conversion Measurement Based On Transcribing Conversation, Alex Jacobson

Defensive Publications Series

The conversion metric, which is the ratio of sales (or other predefined result) to advertisement impressions or clicks, is a key measure for advertisers to assess the value derived from digital advertising. In click-to-call ads, which show a link for mobile users to initiate a call to an advertiser, conversions, if any, occur over the phone after the user clicks the ad. Conversions that occur over the phone are difficult to document, in turn making it difficult to accurately measure the conversion metric. This disclosure describes use of machine learning techniques to transcribe, with user and advertiser permission, the call …

In-Page Search Over Text And Images In A Web Page, Matthew Sharifi

Defensive Publications Series

Browser applications provide users with the ability to search within a webpage. Such searches are limited to textual content of the page and do not take into account content depicted as images within the webpage. This disclosure describes techniques to enable search to be performed over the entire webpage, including image content. With user permission, images on a webpage are analyzed to determine presence of text within the image. If text is detected, OCR techniques are applied to recognize characters in the text. When the user enters a search query for searching within the page, the text content of the …

User Authentication Via Lip Reading, Horacio Hernan Moraldo

Defensive Publications Series

This disclosure describes techniques to prevent unauthorized access to information via a facial recognition interface. With user permission, a live video of the user attempting to access the information is obtained via a camera to perform facial recognition and determine the presence of the user. The user is instructed to dictate a randomly generated passphrase while facing the camera. Lip reading techniques are applied to validate the dictation of the randomly generated passphrase. Access to the information is granted only upon successful validation.

Auto-Recovery Of Micro-Services In A Large Distributed Appliance Model, Kshitij Tanay, Raghu Rajendra Arur, Taj Uddin

Defensive Publications Series

In large distributed application-based systems, an ensemble of co-existing micro-services perform individual functions and communicate with other micro-services. As these interactions and individual behaviors can be complex, it may be necessary to monitor micro-services for any abnormalities. Manual monitoring of all such micro-services, or establishing individual rule-based alerts for micro-services can be time-consuming. In addition to maintaining functionality of micro-services, it is important to prevent micro-services from becoming a performance bottleneck for other micro-services. In such situations, an alert may not suffice. For example, if a micro-service serves as a data store for all other services, a bottleneck at that …

Virtualized Intelligent Honeypot Agent, Plamen Nedeltchev, Mani Kesavan, Hugo Latapie, Enzo Fenoglio

Defensive Publications Series

A honeypot system is described that can expand to any attack surface as it learns and grows with the changing device landscape. The system also takes into account the human elements that originated the attack. By using adversarial training mechanisms, the system may be quickly trained to become a doppelganger and attract attacks. Moreover, a unique quantum cognitive framework provides a robust adaptivity to ever-changing attacker strategies. Virtualized intelligent honeypot agents may be introduced into the network, device, or server, to connect and share knowledge to facilitate federated learning for similar type of agents. The agents may also be operated …

Better Unpacking Binary Files Using Contextual Information, Armijn Hemel

Defensive Publications Series

To unpack firmware files, disk images, raw flash dumps, file systems or other archives various tools are available, that examine the contents of the file, find offsets of archives, compressed files, media files and so on, carve these from a larger file, decompress the carved files, and make the unpacked data available for recursive unpacking. Currently available tools treat all found files of a certain type the same (all PNG files are treated the same, all ZIP files are treated the same and so on), without taking the context in which they were found into account, which actually could matter …

Zero-Touch Bootstrap Of A Network Connected Device, Owen Friel, Eliot Lear, Jerome Henry, Stephen Orr

Defensive Publications Series

Techniques are presented herein that allow devices to automatically discover the correct enterprise wireless network to connect to, and securely onboard against that network, without manual provisioning of network information or credentials on the devices. This enables secure deployment of devices at scale on enterprise wireless networks. Minor enhancements to Institute of Electrical and Electronics Engineers (IEEE) 802.11 are described to enable this flow. Unlike Wi-Fi Alliance® Device Provisioning Protocol (DPP), the techniques presented herein are lightweight and do not include additional messaging overhead between the client device (STA) and Access Point (AP).

Software For Guided Chassis Adjustment, Verena Schwaiger

Defensive Publications Series

No abstract provided.

Method And System For Compensating Yaw Rate Change By Load Change Before Or During Cornering, Verena Schwaiger

Defensive Publications Series

No abstract provided.

A Virtual Call Assistant, Anonymous

Defensive Publications Series

A system for adding a virtual assistant as a user to a call is disclosed. The virtual assistant (implemented as a web Real Time Communication (webRTC) client) can be added by a manual selection on a Graphical User Interface (GUI) of a calling application (app) when a call is in progress between users. The virtual assistant responds to queries of the users. The users may ask queries from the virtual assistant using a trigger phrase, such as “Hi assistant!”. The virtual assistant implements speech recognition algorithms and searches for requisite information in a knowledge graph over the Internet and answers …

Identifying Network Faults In Data Centers Using A Covariance Matrix, Raghu Rajendra Arur, Nicholas Basker, Hasmit Grover

Defensive Publications Series

It may be difficult to identify root causes of protocol failures or degradations in application traffic performance due to errors. Embodiments presented herein identify the exact diagnostics needed to perform a root cause analysis. In particular, a covariance clustering methodology is used to generate correlated errors, which, when passed through a partial order set-based rule engine, are used to determine the root cause of a network fault due to protocol errors.

Using Build Identifiers To Fingerprint Elf Binaries And Link To Build Information Without Having Access To Source Code, Armijn Hemel

Defensive Publications Series

Finding out where a software program or library comes from and how it was built without having direct access to the source code is not a trivial problem to solve. While versions of programs can be fairly accurately guessed this is a lot more difficult for build configuration. By comparing build identifiers from binaries of which nothing is known with build identifiers extracted from binaries for which source code and build information is available it is in certain cases possible to find out what source code and build information was used for a binary.

Security Event Timeline

Defensive Publications Series

This publication describes a security solution that incorporates security events in a single place and presents them in an easy-to-understand timeline. The intrinsic dynamic essence of the timeline enables the user to see what affects the overall security and offers guidance for the user to take steps to achieve a desired security state. The security solution shows the most-relevant security events at the highest level, but it also allows the user to see all of the security event details, if the user chooses to do so. The user can easily determine the time at which overall security became compromised and …

Process Of Improving Software Engineering Predictability With Business Benefits, Ravi Saxena, Atul Deshpande

Defensive Publications Series

A refined process to make software engineering predictable by associating bidding concept. This process helps in delivering software engineering products and solutions to customers with increased business values viz. customer satisfaction, better control over operating cost, profit margins and time to market.

This process greatly enriches decision making to enhance time to delivery, profit margin, knowledge sharing and keeping healthy collaboration among various geographically distributed teams within an organization.

Internet Of Things Construction Monitors, Thomas A. Stern

Defensive Publications Series

The present disclosure relates to a monitoring system and related method for determining the state of a structure, determining when a structural failure is apt to occur, and sending notifications associated with the state of a structure to external computing devices. The monitoring system can include a computing system that receives state data including information associated with the state of a structure. The state data can be used to determine when the structure is apt to fail. Further, alert notifications can be generated and sent to external computing devices and services when such failures are determined to be likely.

Item Recommendations For Cache And Synchronization Of Application Stores, Wei Chai, Zhiwei Gu, Sundeep Sancheti, Yilan Liu

Defensive Publications Series

To reduce the latency of rendering the page of an app in an application store (e.g., that provides access to downloads of apps to a mobile device), the application store app periodically synchronizes with its backend and caches on the user mobile device app pages that a user is likely to visit.

This disclosure uses deep learning models to predict the next N apps that a user is likely to visit based on permitted user activity signals, e.g., demographic information, historical visits to deep links associated with the app, etc.

A Novel Encoding & Alignment Of Histograms Of Referential Integrity Columns For Scalable Data Generation, Suresh Soundararajan

Defensive Publications Series

Testing the performance of database management systems is often accomplished using synthetic data and workload generators such as TPCH and TPCC. However most synthetic benchmarks don’t fully match customer database configurations. Customer database configuration data-sets are typically hard to obtain due to their sensitive nature and prohibitively very large sizes. As a result, oftentimes the data management systems are not thoroughly tested, and performance related bugs are commonly discovered after deployment, where the cost of fixing is very high. We propose a scalable data generator called XGen, an approach to generating data-sets out of customer metadata information, including integrity …

Real-Time Network Event Correlation Based On Dependency Graph For Network Issue Root Causing, Alok Kumar Sinha, Zach Cherian, Kaushik Dam

Defensive Publications Series

Techniques are described for a graph based approach to co-relate events in a network. The root cause of any network failure may be determined in real time.

Non-Orthogonal Multiple Access For Collision Avoidance In Low-Power And Lossy Networks, Ling Wei, Huimin She, Chuanwei Li, Lele Zhang

Defensive Publications Series

Techniques are described herein for a Non-Orthogonal Multiple Access (NOMA) mechanism to improve network throughput due to multiplexing gain in the power domain. Several received Signal-to-Noise Ratio (SNR) levels may be set to achieve multiple access of nodes depending on different network requirements. In particular, these techniques may prevent hidden node collision by assigning different received SNR levels between the upward link and the downward link.

Heuristic Algorithm For Spanning Tree Protocol Root Bridge Determination, Michael Michaelides, Arabinda Samantaray

Defensive Publications Series

Techniques are presented to avoid requiring network administrators to have Spanning Tree Protocol (STP) domain specific knowledge while still achieving a stable and high performing Layer 2 (L2) topology in their Virtual Local Area Networks (VLANs). Configuring the STP is easily ignored since it is operable initially, but networks might run at a suboptimal efficiency as a result.