1906 results about "Internet Protocol" patented technology

Systems and methods for dynamic distributed name resolution. In various embodiments, steps include receiving a request from a user to access a destination service; resolving an Internet Protocol (IP) address for the destination service based on one or more characteristics of the request; enforcing one or more controls on the request based on a configuration provided by an owner of the destination service; and providing access to the destination service to the user based on the one or more controls.

Serverless containerization of a collaboration application improves deployment and security of the collaboration application. A system may generate a container within a private cloud. The container may execute the collaboration application. The container is assigned an Internet Protocol (IP) address and is associated with a security group that controls network traffic to and from the container. The system may include a network load balancer configured with the IP address assigned to the container that allocates computational resources for executing the collaboration application. The system may include serverless resources such as a database and filesystem that is accessible to the container within the private cloud. The system may include a private cloud (PC) endpoint configured to establish a private connection with an end user interface, wherein the private connection provides secure network traffic between the PC endpoint the end user interface within a private network of the PC endpoint.

Examples described herein relate to a switch, when operational, that is configured to receive in a packet an indicator of number of remaining bytes in a flow and to selectively send a congestion message based on a fullness level of a buffer and indication of remainder of the flow. In some examples, the indicator is received in an Internet Protocol version 4 consistent Options header field or Internet Protocol version 6 consistent Flow label field. In some examples, the congestion message comprises one or more of: an Explicit Congestion Control Notification (ECN), priority-based flow control (PFC), and / or in-band telemetry (INT). In some examples, to selectively send a congestion message to a transmitter based on a fullness level of a buffer that stored the packet and the number of remaining bytes in flow, the switch is to determine whether the buffer is large enough to store the remaining bytes in the flow.

A system and method for implementing a non-interactive and automatic way of facilitating user authentication with a proxy server is disclosed. At least, the technique disclosed includes determining a request to access a web server by a Hypertext Transfer Protocol (HTTP) agent on a client device, retrieving a proxy configuration file from a Uniform Resource Locator (URL) assigned to the client device, determining, using the proxy configuration file, a host name and a port number of a proxy server corresponding to the request, and routing, from the HTTP agent to the proxy server, the request using the host name and the port number of the proxy server, the proxy server configured to look up a user mapping table using a set of proxy connection information and uniquely identify a user of the client device based on the look up, the set of proxy connection information including a combination of a public Internet Protocol (IP) address of the client device, the host name of the proxy server, and the port number of the proxy server.

Systems and techniques are provided for path tracing. For example, a process can include establishing a path tracing session associated with path tracing (PT) probe packets from a PT source node of an IPv6 network fabric. A PT probe packet can be received with a first IPv6 Destination Options Header with Path Tracing Option (DOH-PT) header that encodes path tracing information of the PT source node and indicates respective path tracing information for each PT midpoint node along a path from the PT source node to a PT sink node of the IPv6 network fabric. The received PT probe packet can be updated to include a second DOH-PT header that encodes path tracing information of the PT sink node. An updated PT probe packet includes the first and second DOH-PT headers and can be encapsulated with an additional IPv6 header corresponding to forwarding information of a collector node.

Systems and methods for facilitating traffic steering via an SRv6 network by SD-WAN CE nodes without requiring the SD-WAN CE nodes to have SRv6 routing capabilities is provided. According to one embodiment, an end-to-end SRv6 tunnel is established through the SRv6 network between a source SD-WAN CE node associated with a first LAN and a destination SD-WAN CE node associated with a second LAN. LAN-side traffic originated by the first LAN and destined for the second LAN is received by the source SD-WAN CE node. Based on the LAN-side traffic, the source SD-WAN CE node, may encapsulate the LAN-side traffic as payload of an IPv6 packet, including incorporating path information within an IPv6 SRH to instruct PE / P nodes of the SRv6 network how to steer the IPv6 packet through the SRv6 network. Forwarding the encapsulated LAN-side traffic by the SD-WAN CE node through the SRv6 network via the SRv6 tunnel.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

A system and a method for providing cybersecurity services in dual-stack traffic processing within one or more communication networks are disclosed. The system comprises one or more carrier edge nodes to transmit traffic data packets between one or more communication devices and one or more network services within the one or more communication networks by translating Internet Protocol version 6 (IPv6) addresses to Internet Protocol version 4 (IPv4) addresses. The one or more carrier edge nodes configured to assign one or more virtual local area network (VLAN) tags to at least one of: outbound communication device-originated data, and inbound communication device-originated data for identifying the traffic data packets. The one or more carrier edge nodes segments at least one of: the outbound and the inbound communication device-originated data into one or more categories for dynamically enforcing one or more security policies to provide the cybersecurity services.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a first network node may obtain a data channel establishment request comprising session description protocol (SDP) information corresponding to a multimedia call session between a first user equipment (UE) and a second UE, the SDP information including a data channel application identifier corresponding to a data channel application. The first network node may provide, to a second network node, a data channel service request that indicates the data channel application identifier. The first network node may obtain, from the second network node, a service response comprising a data channel control policy associated with the data channel application identifier and may allocate, based at least in part on the data channel control policy, media resources corresponding to at least one application data channel. Numerous other aspects are described.

The invention provides an EDA (Electronic Design Automation) software collaborative optimization method based on a memory compiler entity IP (Internet Protocol), which relates to the technical field of memorizers and comprises the following steps: acquiring IP layout information, and establishing a time sequence netlist model containing path time sequence and power consumption distribution; by adjusting the intensity of a data driver and a hierarchical structure of a decoder, setting multiple stages of buffers to realize time sequence convergence; determining a hot spot area based on power consumption distribution, and inserting a low-power-consumption unit capable of dynamically adjusting voltage frequency to realize local power consumption dynamic balance; the layout is updated, wiring is optimized, the optimized memory compiler IP layout is generated, and the circuit performance and reliability are improved.

A network assessment system for generating subjective quality ratings for Internet protocol multimedia subsystem (IMS) data sessions in real-time. The system measures real-time telecommunications network data during an IMS data session, processes the data using a trained model, and receives a subjective quality rating usable to modify the performance of a node in instances where the node does not typically have an associated subjective quality rating or in instances where the node is not associated with a standardized subjective quality rating.

A network device (ND) receives a first media access control (MAC) / Internet Protocol (IP) route for a customer ND. The ND installs the first MAC / IP route in a MAC / IP routing table and transmits the first MAC / IP route to a first subset of NDs causing the NDs to install the first route. The ND receives a second MAC / IP route for the customer ND and a sequence number indicative of an order of advertisement of the second MAC / IP route. The ND determines, based on the sequence number, that the second MAC / IP route is a best route for the customer ND. The ND installs the second MAC / IP route as the best route for the customer ND; and transmits the second MAC / IP route to a second subset of NDs including a first ND from which the first MAC / IP route originated, causing the first ND to request withdrawal of the first MAC / IP route.

The present specification provides a system and method for determining that an endpoint device has connected to an untrusted external internet protocol (IP) network; and establishing a secure DNS connection from the endpoint device to a trusted DNS server via a proxy, wherein the proxy authenticates the trusted DNS server via a client identity certificate and a server certificate.

The invention discloses an IPSec (Internet Protocol Security) VPN (Virtual Private Network) security gateway communication method fused with a post quantum cryptography technology, which comprises the following steps of: S1, in a first-stage main mode of IKE (Internet Key Exchange) key agreement, replacing a traditional single SM2 algorithm and a digital certificate based on an SM2 cryptographic algorithm with an SM2 and PQC mixed algorithm and a mixed PQC digital certificate; s2, the initiator and the responder respectively use the PQC encryption key pair and the PQC signature key pair to carry out key exchange and data signature, and simultaneously use the SM2 encryption key pair and the SM2 signature key pair to carry out key exchange and data signature; s3, in the message 1, the initiator sends a security alliance load containing the attribute of the fused SM2 and PQC algorithm to the responder; s4, in the message 2, the responder feeds back a PQC series hybrid certificate and an SA proposal; and S5, in the message 3 and the message 4, the initiator and the responder complete key exchange and verification. According to the invention, the security of the IPSec VPN security gateway can be improved, and quantum computing attacks can be resisted.

Techniques are provided for managing the provisioning of voice services to a user equipment (UE) in a fifth generation (5G) network by a base station (BS). For example, the BS receives an initial registration request message that includes 5G mobility management (5GMM) capabilities of the UE that are indicative of whether the UE supports voice over internet protocol multimedia subsystem (IMS), and compares the 5GMM capabilities of the UE and the capabilities of the BS. Based on the comparison, the BS can transmit a registration accept message including an indication of whether voice over IMS is approved.

A communications system for providing secure access to a digital resource of a group of digital resources accessible via the internet, the system comprising: a data processing hub accessible via an IP (internet protocol) address; and a plurality of user equipment (UEs) useable to communicate via the internet, each configured to have a cyber secure isolated environment (CISE) isolated from ambient software in the UE, and comprising a secure web browser (SWB); wherein the hub and CISE are configured so that digital resources in motion and at rest in CISE are visible to the hub.

A system and method for enabling fine-grained access to enterprise applications in an enterprise network. The method includes receiving, via a discovery application running on a computing device, user input from a user, where the user input identifies at least one of an application name, a server name, or an Internet Protocol (IP) address associated with a computing resource for accessing an enterprise application; comparing, via the discovery application, the user input to application information stored in a database accessible by the discovery application; sending, via the discovery application, a message to the user in response to determining a match between the user input and the application information, where the message identifies a membership group containing the computing resource for accessing the enterprise application; and enabling the user to access the membership group using the computing resource when the user is a member of the membership group.

The invention discloses a method for deploying a flame detection spiking neural network on an FPGA (Field Programmable Gate Array). According to the method, codes of the flame detection spiking neural network are written by using a Viis HLS tool, an IP (Internet Protocol) core file is generated and burnt on the FPGA, a related digital circuit is generated, the processing speed of the flame detection spiking neural network is accelerated, and the operation power consumption is reduced. And in the design process, the technical means such as ATAN arc tangent activation function calculation and short-circuit logic calculation strategies are realized by utilizing a lookup table, so that unnecessary calculation and power consumption can be reduced, the use amount of a DSP (Digital Signal Processor) is remarkably reduced, the hardware calculation operation process is simplified, and the pulse neural network can run on an FPGA (Field Programmable Gate Array) with relatively low power consumption. Therefore, the method provided by the invention provides a set of solution for implementing effective deployment on the low-power-consumption edge equipment based on the FPGA for a flame detection application scene.

The invention relates to the technical field of data transmission, and discloses a secure data transmission system based on cloud computing, which comprises a cloud computing platform, the cloud computing platform is connected with a data encryption module, an access control module, a transmission channel module, a log module, a security audit and log analysis module, a security vulnerability management and repair module and a data transmission module. The method comprises the following steps: detecting, verifying and recording information of a user terminal, an IP (Internet Protocol) and the like, pre-auditing transmission data, performing data transmission work again after a security reply is obtained, adjusting the speed in a transmission process according to the grade of a user, and performing key authentication on the user terminal in the transmission process at regular time, so as to ensure the safety of the user. And after error information is obtained, data transmission is stopped in time, the obtained data is limited, and the data security is protected.

An embodiment includes detecting by a system a request, responsive to the detecting of the request, computing by a Compute component of the system a plurality of internet protocol addresses in a subnet. The embodiment includes computing by an Analysis component of the system a threat metric for each of the plurality of internet protocol addresses. The embodiment includes determining by the Reputation component of the system a threat score for the subnet where the threat score is based on the threat metric. The embodiment also includes sending by the system the threat score representative of a vulnerability of the subnet as a source of a malicious attack.

The invention belongs to the field of Internet of Vehicles, and discloses an IVCPS vehicle-mounted terminal concurrent simulation test method, which comprises the following steps: S1, carrying out simulation construction on a traffic environment by using software, and constructing a vehicle end module, a cloud end module, a roadside facility module and a vehicle end information processing module according to an IVCPS scene; s2, based on a TCP / IP (Transmission Control Protocol / Internet Protocol) or UDP / IP (User Delivery Protocol / Internet Protocol) communication protocol, constructing communication modules between vehicles and roads, vehicle cloud and vehicles, and finishing information transmission and interaction between the vehicle and road cloud modules in a real local area network environment; s3, building a vehicle end performance monitoring module; and S4, establishing a vehicle end communication performance monitoring module. According to the method, the simulation environment can be flexibly adjusted, efficient interaction of information is realized, and the method can be used for monitoring the performance bottleneck in a concurrent scene.

A method includes receiving, by a user equipment (UE), a first message from an apparatus, the first message including a first identifier of the UE and a second identifier that identifies an address of a first component in a network. The UE transmits a second message to the apparatus, the second message including a request for an address of a second component of the network. The UE receives a third message from the network apparatus, the third message including a third identifier of the address of the second component of the network, and the UE transmits a fourth message to the second component of the network, the fourth message including the identifier of the address of the second component of the network.

Procedures, methods, architectures, apparatuses, systems, devices, and computer program products for enabling computing aware traffic steering (CATS) using internet protocol (IP) address anchoring are described. One method may include receiving a request for a service that is offered by two or more nodes in a network domain associated with a network element. The request comprises information indicating an identifier associated with the service and CATS requirements to assist the network element to determine which one of the nodes to select to instantiate the service. The method may include determining, based on an ability of the nodes to provide the service under the CATS requirements, which one of the nodes to select to instantiate the service, and sending information indicating an allocated internet protocol (IP) prefix associated with the selected one of the nodes that is instantiating the service.

Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may receive an internet protocol (IP) packet. The UE may identify a quality of service (QoS) flow associated with the IP packet. The UE may detect an uplink explicit congestion notification (ECN) status associated with the QoS flow based at least in part on header information associated with the IP packet. The UE may transmit an indication of the uplink ECN status to a core network entity. The UE may perform one of: marking the IP packet with uplink ECN information based at least in part on uplink ECN criteria, or transmitting, to a radio access network (RAN) network entity, an indication that at least one of the uplink ECN criteria is met or that none of the uplink ECN criteria is met. Numerous other aspects are described.

The invention relates to the technical field of communication systems, and discloses an AC / AP (Access Point) centralized management system and method based on an MQTT protocol, and the system comprises a DHCP (Dynamic Host Configuration Protocol) server which is responsible for distributing an IP (Internet Protocol) address for a plurality of AP access points, and sending an MQTT server address of an AC access module to the AP access points according to a configured option field. And after acquiring the MQTT server address, the AP access point establishes connection with the MQTT proxy based on the MQTT protocol, and sends registration information to the AC access module to complete access registration. In addition, the AP access point further sends operation data to the AC access module according to a preset frequency. And the AC access module issues configuration and management instructions to the plurality of AP access points by using the MQTT proxy, and performs evaluation according to the operation data sent by the AP access points. And according to the evaluation result, the AC access module determines whether to adjust the access state of the AP access point. According to the invention, the automatic configuration and management of the AP access point are realized through the DHCP server and the MQTT protocol, so that the efficient performance and the real-time performance of the network are effectively ensured.

Systems and methods for dynamic distributed name resolution. In various embodiments, steps include receiving a request from a user to access a destination service; resolving an Internet Protocol (IP) address for the destination service based on one or more characteristics of the request; enforcing one or more controls on the request based on a configuration provided by an owner of the destination service; and providing access to the destination service to the user based on the one or more controls.

The invention provides a terminal self-discovery method, forwarding equipment and a readable storage medium. The method comprises the steps that a first message sent by a first terminal is received, the first terminal is located in a first local area network, the first message comprises an identifier of the first local area network and an internet protocol IP address of the first terminal, and the first terminal needs to be self-discovered in a second local area network; multicast is carried out on a second message in the second local area network, and the second message comprises the identification of the second local area network and the IP address of the first terminal; a response message sent by a second terminal is received, the second terminal is located in the second local area network, and the destination IP address of the response message is the IP address of the first terminal. According to the method, terminal self-discovery can be realized across local area networks, that is, the first terminal in the first local area network can discover the second terminal in the second local area network through a self-discovery technology.

The invention provides an IP (Internet Protocol) sealing control method and system based on website data. The method comprises the following steps: acquiring user access track data; monitoring the IP address of each access website according to the user access track data; inputting the IP address of each access website into a supervised learning model to obtain an abnormal IP address; adding the abnormal IP address into a sealing control IP list; determining access authority limits of different degrees according to the sealing control times of the abnormal IP address; by identifying the abnormal IP address, the access authority of the abnormal IP address is limited, so that malicious data acquisition is prevented, and the data security and integrity of a website are protected.

The present disclosure provides a wireless transmit receive unit (WTRU) and a method implemented thereby, the WTRU being configured to act as a relay between a first WTRU and a second WTRU, the WTRU comprising: a processor configured to: receive a link identifier update request from the first WTRU, wherein the link identifier update request indicates a request for a new Internet Protocol (IP) address, and the link identifier update request further comprises a request for updating the second WTRU with respect to the new IP address of the first WTRU; in response to the received link identifier updating request, determining the new IP address of the first WTRU; sending a relay update request to the second WTRU, wherein the relay update request indicates the new IP address determined for the first WTRU; and sending a link identifier update response to the first WTRU, wherein the link identifier update response indicates the new IP address determined for the first WTRU.