Digital Commons Network^™

Layer 4 Through Layer 7 Service Chaining For Virtual Network Functions In Cloud Environment, Balaji Sundararajan, Samar Sharma, Yegappan Lakshmanan

Defensive Publications Series

Methods are described to perform service chaining on a physical switch for virtual services. First, the switch observes and classifies Local Area Network (LAN) traffic, and determines that it needs to apply a service chaining rule based on classification results. Second, the switch forwards the traffic to the first Virtual LAN (VLAN) in the input chain. When the frame is processed by the container / Virtual Machine (VM), it forwards the traffic on the egress VLAN, which is used as an input to the next element in the chain.

Techniques For Visualization Of Device Internal Packet Processing And Network Events, Jay Johnston, Magnus Mortensen, David White, Michael Robertson

Defensive Publications Series

The techniques presented herein provide an easy to understand animation representing how traffic is entering, being processed, and exiting a device. In certain examples, events are represented by flying icons that enter an interface of a device. As they are processed by different features their "tails" get longer and gain segments that represent what feature acted on them. Any packet drops may be shown, for example, by the icons falling down from the device onto a "floor" that represents the drop reason and piling up to show the scale of the drops.

Progressive Delivery Of Interactive Content, Jared M. Zimmerman

Defensive Publications Series

Interactive elements in online content often lead to substantially increased total payload size to be delivered to a client device, e.g., to render a page. Delivering such content may introduce latency, thus degrading user experience. The techniques of this disclosure address this issue by delivering a compressed static image that mimics the visual feel of interactive elements of content. The image can be delivered faster because its size is significantly smaller than that of the interactive content. Subsequently, the image is replaced with the corresponding interactive content. With user consent, the replacement of the image with the corresponding content may …

Policy Based Authentication Service With Mobile Connect, Bo Wang

Defensive Publications Series

Secure Identity Broker (SIB) solution provides authentication, authorization and identity services based on GSMA mobile connect standard and enables identity-focused services to carriers and Service Providers. We invent policy based identity services in SIB product to support variant customer requirements such as Delegation, Time Period control, Joint authentication, geographical location based authentication etc. Then differentiate our solution with vendors and maximize the customer value.

Tracking Package Repository Release Using Blockchain, Alfred Pang

Defensive Publications Series

A system and a method are disclosed for tracking package repositories using blockchain. The method includes publishing a transaction on a blockchain when a package maintainer wants to put out a new release of software packages or libraries. The blockchain provides a mechanism for agreement between package maintainers to provide a snapshot of all the versions of the software packages in time. The disclosed system is configured for tracking package repositories thereby giving the users build reproducibility and agreement on canonical versions of libraries. Further, a token mechanism may be provided to reward the package maintainers for using the blockchain. …

Detecting Evasive Malicious Url Using Graph Algorithm, Mu Lin, Sanjay D'Abreu Noronha, Kan Yan, Zhifeng Cai, Kevin Hayes

Defensive Publications Series

The present disclosure describes systems and methods to enable inspecting of byte streams using a bipartite match algorithm to detect use of evasive techniques to defeat Uniform Resource (URL) filtering. According to an aspect of the present disclosure, a two stage dynamic programming algorithm is provided that matches signatures once and only once just like DFA in the first stage, and uses polynomial runtime to select a matching pattern in the second stage. According to an example implementation of the present disclosure, the patterns are compiled into an n*m binary matrix plus one additional column to describe the modifiers, where …

Strategies For Loop Prevention Forwarding Logic In Hybrid Information Centric Networking, Scott Wainner, Luca Muscariello, Giovanna Carofiglio

Defensive Publications Series

Techniques are described herein that provide a forwarding strategy applicable to Information Centric Networking (ICN) networks and hybrid ICN (hICN) networks. In such networks, Interest requests are likely to be hair-pinned back to a Forwarder that is serving a dynamic cache system. When the dynamic cache system has no representation of the named data object, the Forwarder must recycle the Interest request back into the network. However, the Forwarding logic must avoid hair-pinning the Interest back to the same unpopulated cache.

Using Variable Font Width To Adjust Flow Of Text Within Text Boxes, Sascha Brawer

Defensive Publications Series

In many applications, such as presentations, graphics design, etc., text content is placed and manipulated within container elements, such as text boxes. In many instances, resizing an element that contains text content leads to situations in which the size of text font is too large for the text content to fit completely within the resized container. In such cases, the text content flows outside the container boundaries. The techniques of this disclosure use variable font technology to adjust font width corresponding to adjustments to the size of a text container.

Enabling Determinism In A Best Effort Hopping Sequence Time Slotted Channel Hopping Mesh, Pascal Thubert, Huimin She, Charlie Chen

Defensive Publications Series

Techniques are described for sharing a network between flows that follow a deterministic hopping sequence (same sequence for all) and flows that follows a best effort hopping sequence (which depends on the receiver Media Access Control (MAC) address for unicast). This is accomplished by moving the best effort channel in case of a collision in a manner that can be predicted by the sender and that maintains the pseudo-randomness of the selection.

Seamless Transfer Of Ambient Media From Environment To Mobile Device, Dominik Roblek, Matthew Sharifi

Defensive Publications Series

Some mobile devices are capable of performing always-running, on-device music recognition. This feature enables users to obtain information about music or other audio playing in their environment. Typically, the detected ambient music is transient, e.g., once the song ends or the user leaves the current environment, the results disappear. However, a user may want to continue listening to the ambient music after leaving a location where it is being played. This disclosure enables seamless playback of identified ambient media on a user mobile device such that a user can continue listening or viewing such content after leaving the current environment.

Reliability Scoring Approach For Content Sources, Richard Farnsworth

Defensive Publications Series

Disclosed herein is an improved mechanism for providing a reliability scoring approach of content sources that publish publications (e.g., articles, videos, and/or any other suitable type of publication). The mechanism can assign attributes to different publications, such as a name of a content source that published a publication, a subject of a publication, facts in a publication, etc. The mechanism can also assign an initial reliability score for each content source. The mechanism can randomly select two publications, and can identify the publication published by the content source with the lower reliability score. The system can then compare facts of …

Wake Up Radio Protection From Denial Of Service Attack Based On Baseband Monitoring, Matt Silverman, Santosh Pandey

Defensive Publications Series

A malicious attacker can drain the batteries of Internet of Things (IoT) devices by sending many wake up radio (WUR) transmissions. Accordingly, techniques are provided herein to enable an Access Point (AP) to detect any malicious WUR requests. The AP may intelligently mitigate the attack with the help of the stations (STAs).

New Standoff For Countersunk Hole And Stacking Process, Justin Chen, Phoebus Lin

Defensive Publications Series

Sometimes we are requested to leverage an existing cage from current project but need to add standoff in the location of countersunk hole. Traditional standoff couldn’t stack well on the countersunk hole. The torque out force will be low and not complying with our requirement. This is why we disclosure this technology.

Traffic Redirection With Distributed Denial Of Service Segment Identifiers, Robert Barton, Jerome Henry, Siva Sivabalan

Defensive Publications Series

Distributed Denial of Service (DDoS) information is extended to a network Path Computation Element (PCE). The PCE uses a network function Segment Identifier (SID), referred to herein as a DDoS SID, imposed on the edge routers by the PCE, to identify potentially suspicious DDoS traffic. The DDoS SID is used in Segment Routing (SR) routers to direct suspicious traffic to nearby or specially optimized DDoS scrubbing engines so that traffic may be cleaned. Other traffic flows proceed unchanged through the network.

Dynamic Wireless Local Area Network Access Control List Provisioning, Chethan Channappa, Mahesh Satyanarayana

Defensive Publications Series

Techniques are described herein for optimizing Ternary Content-Addressable Memory (TCAM) space through a digital network architecture controller by preventing Access Control List (ACL) rules from being downloaded to TCAM until a client is associated with that Service Set Identifier (SSID). The space on the TCAM is freed once the last client on that particular SSID has disassociated.

Automatic Measurements And Analytics In Cloud Based Media Applications, Alessandro Duminuco, Peter Bosch, Andre Surcouf, Jeffrey Napper

Defensive Publications Series

Techniques are provided to measure and analyze the “health” of a cloud-based professional media application. In particular, described are (1) a (media) probing infrastructure, based on a mix of virtual and physical measurement probes or collectors; and (2) a set of techniques that allow an orchestration system to control the probing infrastructure, to deploy and/or configure measurement probes, and/or to divert or mirror traffic to be “measured” through such probes. This approach not only uses virtual or physical probes, but also the automatic and policy-driven orchestration of such probing infrastructure and leverages Internet Protocol (IP) probing and measurement mechanisms for …

Dynamically Generated Device-Specific Application Executables, John Ayres, Anthony Morris, Milena Nikolic, Yaakov Gluck, Pierre Lecesne, Idries Hamadi

Defensive Publications Series

An application management system is described that dynamically generates and disseminates application executables based on device information of a computing device requesting installation of the application. Using application bundles that include the resources required to execute the application on all of the supported devices, the application management system determines the portion of the resources included in the application bundle that are required to execute the application at the particular device that is requesting the application and dynamically generates the application executable using only the required resources. In some examples, each application may be broken into a number of modules that …

Interaction With Smart Assistants Using Alternative And Augmentative Communication, Lorenzo Caggioni, Paolo Pigozzo, Davide Ferraro, Egil Hogholt, Teresa Pato, Thomas Riga

Defensive Publications Series

Smart assistants utilize speech recognition, sensing, artificial intelligence, and networking technologies to enable improved human-machine interaction. However, there remain use cases where smart assistants are not easily usable by humans. For example, voice-activated assistants are not accessible to those that are hearing or speech impaired. Touchscreen based assistants are not usable by those who lack fine motor skills and/or reading ability.

This disclosure adds to the modalities by which humans can control and communicate with smart assistants by enabling use of physical objects, facial expressions, gross motor skills, body movements, etc. to provide commands. Collectively, these techniques of control and …

Adapting The Formality Level Of The Language In User Interface Localization, Steffen Meschkat

Defensive Publications Series

Different languages utilize different levels of formality when the language is used to address another person. When software applications are customized to a specific country or region, e.g., by localizing the user interfaces to use the language(s) of that country or region, static translation can result in use of formal linguistic features different from that expected by the users. This disclosure describes incorporation of local languages in the application user interfaces with contextually appropriate levels of formality.

Usb-C To 3.5mm Adapter With Pcb In Audio Jack, Changzhan Gu, Jae-Won Hwang

Defensive Publications Series

Traditional USB-C to 3.5mm adapters are provided for use with smartphones and other devices that do not include a 3.5mm audio jack. Such adapters have several problems that can impact user experience. Examples of the problems in current adapters include vulnerability to RF radiation interferences, desensitization of the cellular receiver in the phone, co-existence, antenna detune effect, etc.

This disclosure describes an improved design of a USB-C to 3.5mm adapter. In the design, the USB-C PCB is moved away from the device end to make it less vulnerable to the radiations from the device. The techniques further include propose use …

Creating Available Bandwidth Heatmap For User Assist To Relocate Based On Bandwidth Needs, Karthik Ganesan, Shravan Yampaty

Defensive Publications Series

A solution is presented herein for which an end-user of a wireless network does not know the channel utilization/interference conditions at a given location and also which location to go to meet their bandwidth needs. This solution provides a way to calculate the available bandwidth heatmap for a given floor map and a way for the user to visualize it using a mobile app. This solution also gives options to the user and provides a wayfinding solution to physically move to an area of better available bandwidth.

Portable Network Namespaces: Traffic Coloring For Portability, Ian Wells, Rajiv Asati

Defensive Publications Series

Techniques are described herein to add a “color” marker as a namespace to packets per service/microservice/container. This causes the namespace to be used within or between the cloud(s) for additional treatments.

Security Solution For Kubernetes Using Cloud-Native Virtual Network Functions, Jan Medved

Defensive Publications Series

A cloud security solution is described herein for Kubernetes-orchestrated clusters using a security cloud-native Virtual Network Function (VNF) deployed on the cluster. One advantage to this solution is that it is built into Kubernetes networking, and is therefore easier to manage/orchestrate. Moreover, it is modular (e.g., can be combined with other solutions via Service Function Chaining (SFC)), and is easier to extend/modify than in other security solutions, which may require changes to the kernel.

Digital Campaign Tracking With Respect To Application Infrastructure, Piyush Mathur, Bhupinder Singh, Siddhartha Dutta, Arpita Agarwal

Defensive Publications Series

Digital campaigns are often derailed from their goals due to amiss or often miscalculated aspects of the impact of the campaign on application infrastructure. To mitigate this problem, an approach is described herein which unifies these otherwise disjoint domains of digital marketing and application monitoring analytics. A solution is provided whereby a user may perform capacity planning for upcoming campaigns and perform real time correlation on campaign and infrastructure Key Performance Indicators (KPIs), thus maximizing revenue and optimizing infrastructure cost. Through machine learning algorithms which are running on top of correlated data from both the domains, a plethora of actionable …

Side-Effect Free Program State Evaluation, Erik Luo, Aleksei Koziatinskii, Yang Guo

Defensive Publications Series

The ability to inspect the state of program execution at a specified stage by the evaluation of a specific expression is crucial for operations such as debugging. Executing the expression of interest may itself result in changing the program state that the evaluation of the expression is supposed to inspect. Such side effects of evaluating the expression on the program state reduce the effectiveness and reliability of debugging by evaluating the expression to inspect program state. The techniques of this disclosure enable evaluation of an expression for inspecting program state that is free from side effects.

Dnac Based Anonymous Dfs (A-Dfs) Service, Gautam Bhanage, Manoj Gupta

Defensive Publications Series

A service is provided to “anonymized” Dynamic Frequency Selection (DFS) data to provide an “A-DFS” Service. From every deployment that signs up for this service, DFS data is collected, e.g. channel information, dwell time, number of radars seen per unit time. This information is used to build a per channel radar statistics graph for different geographies (lat, long) ranges.

Harmonious Multicast Retransmission For Low-Power And Lossy Networks Firmware Upgrading, Charlie Chen, Li Yang, Chuanwei Li, Feiliang Wang

Defensive Publications Series

Techniques are described herein for composing multicast retransmissions harmoniously by prioritizing transmission of new messages and regulating retransmission of old messages. Only the same multicast messages are forwarded simultaneously such that loss due to collision can be significantly reduced. By measuring the intervals of new messages and counting the duplicates, retransmissions are reasonably curbed with awareness of input rate and medium usage. This prevents the “domino effect” on a crowded channel when loss occurs. Moreover, self-silence mechanisms allow regular nodes to release channel resources for critical forwarders. Multicast retransmission is provided with guaranteed delivery rate, which is imperative for firmware …

Patient Health Monitoring Prioritization, Abhishek Dhammawat, Mansi Jain

Defensive Publications Series

Techniques are presented herein that provide a health care application (e.g., “Patient Inspection Prioritization” application) which utilizes existing wireless infrastructure to identify health instrument clients based on a provisioned group identifier (ID) field (e.g., a vendor element field) in an association request. A Wireless Local Area Network (LAN) Controller (WLC) may perform traffic handling to route this client-mapped traffic to the “Patient Inspection Prioritization” application. The application may perform operations associated with the implemented logic or analytics, thereby providing useful information to doctors before patient inspection/treatment. The group ID may be the same for the devices in same room and …

Image Enhancement Suggestions Based On Machine Learning, Karolina Pyszkiewicz, Vahid Kazemi, Hao Xu, Xuefeng Song, Shinko Cheng, Jingyu Cui, Shengyang Dai, Kechun Mao, Mugdha Kulkarni, Shalini Sah, Marc Cannon, Yun Liu, Aleksei Timofeev, Megan Gebhard, Nan Wang, Jaishanker Pillai

Defensive Publications Series

Images in image libraries are sometimes oriented incorrectly. For example, a photograph taken with a camera held vertically may be displayed horizontally, or vice-versa. Further, users often capture images of documents; however, the resultant image can include distortions due to camera angle, poor lighting, etc. The captured image of a document often also includes objects outside the document boundary, e.g., a surface on which the document is placed. For some photos, automatic enhancements can enhance the quality of the image.

This disclosure applies machine learning techniques to detect if an image is that of a document, if the image is …

Optimized Driver Presence Detection, Daniel Hoppe

Defensive Publications Series

Optimized driver presence detection