674 results about "Cloud networking" patented technology

Provided herein are techniques to facilitate dynamic policy enforcement for cloud-based applications in an enterprise environment. In one example, a method may include obtaining, from a cloud network of a cloud-based application, an authentication request associated with an enterprise user that is seeking to utilize the cloud-based application, wherein the authentication request comprises an application identifier and a vulnerability index associated with the cloud-based application; identifying one or more vulnerabilities of the cloud-based application based on the application identifier and the vulnerability index; determining an access level for which the cloud-based application is allowed to access the enterprise network based, at least in part, on one or more vulnerabilities of the cloud-based application and one or more access rules associated with the cloud-based application; and sending a response to the cloud network indicating the access level for which the cloud-based application is allowed to access the enterprise network.

Techniques for updating certificate bundles may include receiving, at an entity associated with a virtual cloud network, a certificate bundle that includes an updated set of certificate authority (CA) certificates. The techniques may include applying a validation process to an entity certificate based on the certificate bundle, with the entity certificate having been issued to the entity prior to the entity receiving the certificate bundle. The validation process may include validating, by the entity, a certificate chain that includes the entity certificate and a CA certificate included in the updated set of CA certificates. The techniques may include, responsive to validating the certificate chain, installing the certificate bundle in a storage medium associated with the entity, and utilizing, by the entity, the certificate bundle to authenticate at least one additional entity associated with the virtual cloud network.

Systems and methods disclosed herein perform privacy-preserving evaluations of artificial intelligence (AI) agents. A first AI agent associated with a first entity obtains a machine-readable data structure defining one or more operative boundaries for a second AI agent associated with a second entity. The system generates a unique fixed reference value representing the machine-readable data structure by applying a first transformation operation set, and transmits the unique fixed reference value to a multi-agent storage to store the value. The system receives, via the multi-agent storage, a verification artifact from the second AI agent that indicates an observed value based on internal operational data of the second AI agent corresponding to the operative boundaries. The first AI agent determines a verification status of the verification artifact by comparing the unique fixed reference value with the observed value, and autonomously generates a verification record including a representation of the verification status.

The invention relates to an intelligent equipment access system and access method based on an AI large model, and relates to the field of artificial intelligence and Internet of Things. According to the technical scheme, a dynamically adaptive universal object model access framework is constructed, functional attributes, control instructions and data formats of intelligent devices of different brands and protocols are mapped into a standardized logic model, meanwhile, a multi-mode AI large model engine is combined, high-precision voice recognition, voiceprint feature detection and multi-level semantic intention analysis capabilities are integrated, and the intelligent devices of different brands and protocols can be obtained. And an intelligent interaction closed loop of end-cloud collaboration is formed. Semantic analysis adopts a mixed strategy, a natural language instruction is converted through function mapping, a local knowledge base is utilized to match user scene requirements, and external data is queried by means of cloud networking to optimize instruction logic. According to the scheme, the multi-device access and operation and maintenance cost is remarkably reduced, the semantic understanding accuracy and scene adaptability are improved, and the method is widely applied to the fields of smart home, smart medical treatment and industrial Internet of Things.

A multi-cloud overlay network for supporting communications between a first public cloud network and a second public cloud network. The overlay network features a management virtual private network, which includes a network load balancing (NLB) component and a controller registered as a target on a port of the NLB component. The overlay network further includes one or more spoke or transit gateways and a multi-cloud access virtual private cloud (VPC) operating within the first public cloud network, and a remote cloud load balancer component operating the second public cloud network. The remote cloud load balancer component is communicatively coupled between the multi-cloud access VPC and one or more remote spoke or transit gateways. The multi-cloud access VPC includes a VPC endpoint that is assigned a private IP address and communicatively coupled to the NLB component and a virtual private network (VPN) gateway communicatively coupled to a private transport.

Systems and methods for managing resources across a global and / or cloud network. In particular, systems and methods for mitigating issues related to providing services while resources are offline (or may potentially go offline). For example, the systems and methods may mitigate issues related to providing services while resources are offline (or may potentially go offline) by monitoring network services at an aggregate level.

Techniques for leveraging the MASQUE protocol to provide remote clients with full application access to private enterprise resources are described herein. One or more network nodes may be configured to execute a MASQUE proxy service to provide a remote client device with full access to an enterprise / private application resource executing on an application node and hosted in an enterprise / application network, behind the MASQUE proxy service. In some examples, the MASQUE proxy service may execute on a single proxy node hosted at an edge of a cloud network or at an edge of an enterprise network. Additionally, or alternatively, a first instance of the MASQUE proxy service may execute on a first proxy node hosted at an edge of a cloud network (e.g., an ingress proxy node) and a second instance of the MASQUE proxy service may execute on a second proxy node hosted at an edge of the enterprise network.

Systems and methods for managing resources across a global and / or cloud network. In particular, systems and methods for mitigating issues related to providing services while resources are offline (or may potentially go offline). For example, the systems and methods may mitigate issues related to providing services while resources are offline (or may potentially go offline) by monitoring network services at an aggregate level.

The present disclosure includes systems and methods for multi-cloud network analysis and threat intelligence correlation. In various embodiments, systems are adapted to perform steps of retrieving network flow logs associated with one or more Virtual Private Cloud (VPC) networks; processing the network flow logs to identify new files and enriching critical fields from the network flow logs; transforming and aggregating the network flow logs for further processing; and identifying threats associated with the one or more VPC networks.

Techniques for provisioning a cloud resource instance associated with a virtual cloud network may include detecting a certificate bundle-retrieval trigger during a provisioning process for the cloud resource instance, and responsive to detecting the certificate bundle-retrieval trigger, sending, to an agent executing on a network interface linked to the cloud resource instance, a request for a certificate bundle for the cloud resource instance. Techniques may further include receiving the certificate bundle from the network interface. The certificate bundle may include a set of certificate authority (CA) certificates. Techniques may further include installing the certificate bundle in a storage medium associated with the cloud resource instance. Installing the certificate bundle may represent an operation of the provisioning process.

Disclosed are systems, apparatuses, methods, and computer-readable media for inventory monitoring in a multi-cloud network environment. A method includes receiving user input via a controller's interface, wherein the input includes first account information granting access to a first virtual private cloud and a second virtual private cloud, both hosted by a cloud service provider (CSP). The controller queries the first and second virtual private clouds using the respective account information and the CSP's APIs to identify resources, gathering them into an inventory, and maintains a mapping of tags to the resources, associating each tag with a specific security policy. The controller forwards a first subset of tag-resource mappings to a first security gateway in the first virtual private cloud, enabling automatic application of corresponding security policies upon instantiation of tagged resources.

The technology disclosed teaches systems and methods for self-service installation of monitoring operations in an area of real space, the method including scanning the area of real space to generate a 3D representation of the area of real space, placing a camera at an initial location and orientation for monitoring a zone within the area of real space, configuring a computing device to be connected to a cloud network hosting an image processing service and couplable to the camera, coupling the camera to the computing device via a local connection using a unique identifier associated with the camera, and finetuning the camera placement to a calibrated location and orientation, wherein the finetuning is assisted by information received from a cloud-based application associated with the image processing service.

Operations of a digital signature manager may include detecting, in a certificate repository on a first virtual cloud network, set of one or more new certificate authority (CA) certificates; transmitting, to a key management service hosted on a second virtual cloud network, a CA dataset that includes the set of one or more new CA certificates; receiving, from the key management service, a digital signature of the CA dataset generated based at least on a global private key stored on the second virtual cloud network in a private key repository associated with the key management service; and storing the digital signature in the certificate repository in a data structure that associates the digital signature with the CA dataset.

Techniques for facilitating connectivity to vPLCs created in a CSP-provided infrastructure in a region. Within the CSP-provided infrastructure in a region, when the destination of a packet is determined to be an endpoint associated with a particular vPLC, the packet is tagged with information related to the particular vPLC. The vPLC-related information for the particular vPLC can include, for example, a vPLC identifier identifying the particular vPLC, an identifier identifying a customer associated with the endpoint, a virtual cloud network identifier identifying a virtual cloud network (VCN) belonging to the particular vPLC and where the endpoint is part of the VCN, and other vPLC-related information. The packet is then routed or communicated within the CSP-provided infrastructure in a region along with the tagged vPLC-related information. The vPLC-related information is used as part of the connectivity and for routing of packets within the CSP-provided infrastructure in a region.

The invention provides a reliability-aware dependent task unloading method based on topology reconstruction in industrial internet edge computing, which comprises the following steps of: constructing a system model covering an edge cloud network platform, an industrial cloud platform and internet of things equipment, and establishing a transmission delay model and a reliability model; constructing a task unloading mathematical model with the maximum reliability level; the method comprises the following steps: modeling a micro-service dependency relationship into a weighted directed acyclic graph based on a network flow theory, and carrying out topology reconstruction on micro-services applied to the Internet of Things through a Ford-Fulkerson approximation algorithm to obtain a micro-service grouping structure formed by minimum cut division; the micro-service grouping structure serves as priori knowledge to be input into the deep Q network, the deep Q network is used for solving a task unloading mathematical model, a task unloading strategy is dynamically adjusted, resource allocation is optimized, and an optimal calculation unloading scheme in the industrial internet edge calculation environment is obtained. The micro-service deployment is optimized, the communication overhead is reduced, and the system reliability and the resource utilization rate are improved through real-time network state dynamic decision making.

Systems and methods are disclosed for implementing cloud network service management. In certain embodiments, a method may comprise operating a cloud native application (CnApp) custom operator in a containerized software environment to dynamically manage cloud native network service on a target application pod via a persistent network interface to an external network. The method may include obtaining a first resource definition data, for a first custom resource, to define attributes for a bundle of resources used to implement the cloud native network service, and creating the first custom resource based on the first resource definition data, including initializing the target application pod. The method may include generating a second resource definition data, derived from the first resource definition data, to define attributes for a virtual network interface to associate with the target application pod, and applying the second resource definition data to initialize creation of a second custom resource.

The invention provides an asynchronous service deployment method and device for an edge cloud network, and the method comprises the steps: checking whether a current time slot meets a layer cache updating condition or not in response to a deployment request for a target micro service received in the current time slot; if not, for any deployable node, scheduling the scheduling information of any required mirror image layer and the data access rate between the nodes from any other node according to the mirror image layer required by the target micro-service, the memory space of the corresponding mirror image layer and the micro-service deployment information under the current time slot; and constructing a total layer loading time function that the target micro-service is deployed on the node and changes along with the time slot, so as to construct a service utility function that corresponds to the node and changes along with the time slot in combination with profit information and starting cost of the node, thereby determining a deployment strategy of the target micro-service, and starting the target micro-service based on a mirror image layer required by the target micro-service. The method effectively balances the service performance and the resource utilization rate.

Systems and methods for managing resources across a global and / or cloud network. In particular, systems and methods for mitigating issues related to providing services while resources are off-line (or may potentially go off-line). For example, the systems and methods may mitigate issues related to providing services while resources are off-line (or may potentially go off-line) by monitoring network services at an aggregate level.

A portable worksite monitoring and communication device, including a weatherproof sealed container, further comprising, a container portion having an internal cavity, a removable cover arranged to lockably seal the internal cavity, and a heat sink opening, a heat sink apparatus sealably secured within the heat sink opening, a plurality of electronic connectors, a computing device in communication with a cellular modem, the cellular modem in communication with a cloud network, the computing device in communication with the plurality of electronic connectors, a display in communication with the computing device, and, a plurality of communication configurations in communication with the computing device, wherein the heat sink apparatus is arranged to programmably activate or automatically activate.

The embodiment of the invention provides an inspection report generation method and device for a cloud network networking scene, a medium and a product, and relates to the technical field of computers, and the method comprises the steps: retrieving a document related to the semantics of abnormal item information from a predetermined knowledge base based on the abnormal item information, and taking the document as the context information of the abnormal item information; the abnormal item information is used for indicating an abnormal detection result of any inspection item of a detection object, and the detection object is one or more products used for cloud network networking; based on the context information and the exception item information, performing exception summary on the inspection items by using a predetermined large language model to obtain an exception item summary text; and generating an inspection report by using the abnormal item summary text. In the scheme, the context information can enhance the semantic understanding of the large language model for the abnormal item information, the abnormal item summary text generated by the large language model can more accurately describe the abnormal item information, the accuracy and readability of the inspection report are improved, and the interpretation difficulty of the inspection report is reduced.

The described embodiments set forth techniques for transferring cellular wireless service from a source wireless device to a target wireless device with multi-factor authentication and consent of a mobile network operator (MNO) account owner of a multi-user MNO account that includes one or more MNO account members. Terms and conditions for transfer of the cellular wireless service can be presented via a native operating system user interface of a wireless device of the MNO account owner. When the target wireless device belongs to an MNO account member, the MNO account owner wireless device facilitates transfer of the cellular wireless service by allowing the MNO account owner to review terms and conditions and provide one-time passcode authentication to the target wireless device. An original equipment manufacturer (OEM) cloud network service can be used for transfer of terms and conditions information and / or the one-time passcode.

Techniques for providing explicit proxy solutions for 5G Service Access Service Edge (SASE) with service provider network attach are disclosed. In some embodiments, a system, a process, and / or a computer program product for providing explicit proxy solutions for 5G SASE with service provider network attach includes receiving data plane traffic associated with a User Equipment (UE) from a mobile core network at a Secure Access Service Edge (SASE) cloud network via a service provider network attach using an interconnect between the mobile core network and the SASE cloud network; enforcing a security policy on data plane traffic associated with the UE based on contextual information associated with the UE to provide secured data plane traffic using the security policy configured per user group and / or per user; and forwarding the secured data plane traffic from the SASE cloud network to its original destination if allowed by the security policy, and blocking or dropping the data plane traffic from the SASE cloud network if not allowed by the security policy.

Systems and methods for managing resources across a global and / or cloud network. In particular, systems and methods for mitigating issues related to providing services while resources are offline (or may potentially go offline). For example, the systems and methods may mitigate issues related to providing services while resources are offline (or may potentially go offline) by monitoring network services at an aggregate level.

This technology provides designs and methods for the vehicle on-board unit (OBU), which facilitates vehicle operations and control for connected automated vehicle highway (CAVH) systems. OBU systems provide vehicles with individually customized information and real-time control instructions for vehicle to fulfill the driving tasks such as car following, lane changing, route guidance. OBU systems also realize transportation operations and management services for both freeways and urban arterials. The OBU composed of the following devices: 1) a vehicle motion state parameter and environment parameter collection unit; 2) a multi-mode communication unit; 3) a location unit; 4) an intelligent gateway unit, and 5) a vehicle motion control unit. The OBU systems realize one or more of the following function categories: sensing, transportation behavior prediction and management, planning and decision making, and vehicle control. OBU is supported by real-time wired and / or wireless communication, the power supply networks, the cloud, cyber safety, security services, and the human machine interface.

A method for performance testing connections between a public cloud and a cellular node includes selecting a test node and a peer node for testing from candidate nodes, wherein the candidate nodes include nodes of a public network and nodes of a cellular network; establishing a connection between a testing agent on the test node and a peer testing agent on the peer node; and collecting Key Performance Indicators (KPIs) for a network path between the testing agent and the peer testing agent, wherein the network path between the test node and the peer node traverses a cloud network. This method enables efficient and accurate performance testing of connections between a public cloud and a cellular node, facilitating the optimization of network performance and reliability.

The invention relates to a dial testing method and device for a cloud computing network, computer equipment, a readable storage medium and a program product. The method comprises the following steps: analyzing planning data of a tested project through a target analysis tool to obtain a plurality of network planes; and matching based on the planning data and each network plane in various cloud computing architectures contained in the architecture sensing model to obtain a field cloud computing architecture of the tested project. And generating data required by dial testing based on the planning data and the field cloud computing architecture. And testing based on the data required by the dial test to obtain a link test result. By the adoption of the method, automatic and accurate sensing of the cloud computing architecture of the tested project can be achieved, the number of links needing to be tested and specific addresses of the cloud computing architecture of the tested project can be recognized, automatic testing of all the links needing to be tested in the cloud computing architecture is achieved, and the dial testing efficiency in a cloud network scene is improved.

The invention relates to the technical field of computer vision, and discloses a jade defect intelligent detection method and system based on machine vision and deep learning, and the method comprises the following steps: S1, based on a high-resolution industrial camera and a laser three-dimensional scanner, adopting a multi-mode synchronous collection strategy, and rotating a jade sample through a precise motion control system, a jade surface high-resolution two-dimensional color image and high-precision three-dimensional point cloud data are respectively obtained, and a jade multi-mode original data set is generated. A high-resolution two-dimensional color image and high-precision three-dimensional point cloud data are integrated through a multi-modal synchronous acquisition strategy, and multi-dimensional feature expression under unified coordinates is constructed, so that the limitation of a single data source is effectively overcome; an image registration algorithm and a feature pyramid network are combined with a point cloud network to perform multi-modal feature fusion, complementarity of color texture and geometric morphology information is enhanced, and image quality is optimized based on adaptive histogram equalization and non-local mean filtering.

Systems and methods disclosed herein perform privacy-preserving evaluations of artificial intelligence (AI) agents. A first AI agent associated with a first entity obtains a machine-readable data structure defining one or more operative boundaries for a second AI agent associated with a second entity. The system generates a unique fixed reference value representing the machine-readable data structure by applying a first transformation operation set, and transmits the unique fixed reference value to a multi-agent storage to store the value. The system receives, via the multi-agent storage, a verification artifact from the second AI agent that indicates an observed value based on internal operational data of the second AI agent corresponding to the operative boundaries. The first AI agent determines a verification status of the verification artifact by comparing the unique fixed reference value with the observed value, and autonomously generates a verification record including a representation of the verification status.

Techniques are described for routing traffic through an interconnect cloud gateway based on cloud traffic routing indicators. The interconnect cloud gateway can advertise the cloud traffic routing indicators, which can include cloud indicators and transport gateway indicators. The cloud indicators can include cloud tags utilized to route cloud traffic. The transport gateway indicators can include transport gateway flags utilized to identify private networks utilized to route the cloud traffic. The cloud traffic can routed during normal private network operation through private networks, which can be dynamically replaced by public networks due to occurrences of failures preventing the data traffic from being routed through the private networks and to cloud networks.

Techniques for a container orchestration system are disclosed. A virtual agent may be executed in a first service tenancy of a cloud network manager. The virtual agent may be executed on a virtual node of a container orchestration system. A container orchestration API server may be executed in a second service tenancy of the cloud network manager. A request from the container orchestration API server to the virtual agent may be routed through a customer tenancy of a customer of the cloud network manager.