61 results about "Network service provider" patented technology

Computer-implemented methods and systems for facilitating single sign-on (SSO) and passwordless sign-on to a web service provider are provided. A client device authorized for SSO or passwordless sign-on generates and stores a device-specific key that it uses to encrypt a credential bundle containing key(s) necessary to access a cryptographically protected resource provided by the web service provider. The encrypted credential bundle is stored by the web service provider and provided to the authorized client device upon a successful authentication via SSO or passwordless sign-on. The authorized device uses the locally stored device-specific key to decrypt the encrypted credential bundle received from the web service provider to obtain the key(s) necessary to access the cryptographically protected resource.

Systems and methods for guaranteeing end-to-end QoS for wireless connections over a cable network are disclosed. Provisioning of on-demand guaranteed bandwidth connection over a cable network uses mechanisms from DOCSIS domain and Wi-Fi domain. A multi-domain orchestrator is implemented to control both domains. A bandwidth request is received from a client device connecting to a network service provider access point. The bandwidth request is updated for both domains with results of speed test of the wireless link if the speed test results are lower than the bandwidth request. The orchestrator and client device negotiate the bandwidth request using a three-way handshake over PacketCable Multimedia (PCMM) protocol. If the available bandwidth on either the DOCSIS or wireless link is less than the bandwidth request, the orchestrator generates a new bandwidth offer. If the client device accepts the offer, the orchestrator configures the DOCSIS and wireless links using their respective domain protocols to provision the connection with guaranteed end-to-end bandwidth.

The invention discloses a webpage content security processing method based on a knowledge graph, and relates to the technical field of webpage content security. The webpage content security processing method based on the knowledge graph comprises the following specific steps: data collection: collecting webpage related internet content data covering texts, images and videos from an internal network of a network service provider, an enterprise or an organization and a website server. According to the method, comprehensive monitoring and analysis of webpage content security are realized, potential security threats, abnormal modes or association relationships in webpage content can be deeply mined by utilizing the reasoning capability of the knowledge graph, including representation learning, association analysis, event tracing, behavior prediction and the like, so that the security threat identification accuracy is improved, and the security threat identification efficiency is improved. And a visual and easy-to-understand visual interface is provided for safety personnel, so that the safety personnel can respond quickly and take corresponding safety measures.

A network interface device (NID) is provided to accommodate the receipt and transmission of optical signals according to multiple standards in a single customer premises device. This permits the network service provider, among other things, to deliver one NID to any customer premises, whether or not the particular customer premises is currently being served by an optical line terminal (OLT) providing first protocol service or second protocol service. As a network is upgraded (e.g., from first protocol service to second protocol service), the network service provider can connect the customer premises to an OLT providing the upgraded second protocol service and then programmatically alter the NID to transceive signals according to the upgraded standard without requiring a new NID to be delivered or installed at the customer premises.

Disclosed are an SRv6 message processing method and apparatus, a communication device, and a storage medium. The method comprises: a user side equipment setting a source address in an outer layer message header in a first SRv6 message as a first segment identifier (SID) on the basis of a pre-obtained first SID used for representing an address, and generating a second SRv6 message, where the first SID is pre-planned by a network service provider; and sending the second SRv6 message to a network device.

Ethical data tracker systems and methods are disclosed. A payment network computer receives a token request from an application running on a client device. The token request includes user contact information and a merchant identifier. A token server computer generates a token associated with the merchant identifier. The payment network computer maps the token to the user contact information and the merchant identifier, stores the token, the user contact information, and the merchant identifier in a database, and determines a validation of a mapping in the database of a token and a merchant identifier received from a network service provider. The payment network computer authorizes or prohibits the network service provider to communicate with the account holder via the user contact information based on the determining of the validation of the mapping in the database of the token and the merchant identifier received from the network service provider.

The invention discloses a network service access control method and system, the method is applied to a network service provider, an auxiliary server, a target server and a firewall are deployed on the network service provider, a target service runs on the target server, and the method comprises the following steps: the auxiliary server receives a request of a user; the request is adapted to a predetermined message format of the auxiliary server, the content comprises combined information and a check code, and the combined information comprises an access identifier and a firewall setting command; the auxiliary server searches an associated target server according to the access identifier, and forwards the combined information and the check code to the target server; the target server verifies the combined information and the check code; and if the verification result is successful, the target server notifies the firewall to adjust the firewall setting related to the access of the user to the target service based on the setting command. According to the method, the security and universality of network service can be improved, and the access experience of a user is improved. The method can be widely applied to the technical field of network services.

The invention discloses a network information security protection method based on big data, and relates to the technical field of network information security, and the protection method comprises the following specific steps: S100, data collection: through a web crawler technology and a data interface, carrying out data collection; network data of texts, user behaviors and network traffic are collected in real time from a social media platform, a network service provider and a user terminal, and accurate recognition and early warning of network information security threats are achieved through social media emotion mining and user behavior emotion association analysis. By applying a natural language processing technology and constructing an exclusive emotion dictionary, potential threat speech which contains negative emotions and is related to network security can be accurately recognized, meanwhile, user behavior data are combined, a user behavior emotion association model is established, user behaviors are monitored in real time, the threat recognition accuracy is improved, and the threat recognition efficiency is improved. And powerful support is provided for taking safety protection measures in time.

A network service incorporating service groups to increase fault tolerance and data isolation for integrated network services and client data is provided. The network service provider can process network requests utilizing individual service groups that correspond to a set of integrated services and client data (e.g., cells). The service groups can be associated according to customer identifier. Computing resources within a service group are isolated from computing resources utilized in other service groups and resources that host / provide the service or the integrated data can be independently scaled by the service provider.

Embodiments of a system and method enable secure connectivity between the computer systems of a financial institution and software for Brand On Banking. Embodiments of the system include an Identity Platform, Know Your Customer (KYC) processes including ID card verification, face verification, document verification such as utility bills as proof of address, and biometric verification, and bank servicing features such as checking, savings, debit, payments, loans, and bill-pay. The secure connectivity is established in various embodiments through private or public Application Programming Interfaces (APIs) over a network service provider, thus eliminating third-party risk for the financial institution. Additionally, the system allows for displaying alternate brands and identifying customers associated with a specific product brand other than the financial institution. The mobile interface is user-friendly and consolidates all financial accounts in one location, reducing customer friction.

This application discloses an access control method and system for network services. The method is applied to a network service provider, which deploys an auxiliary server, a target server, and a firewall. The target server runs a target service. The method includes: the auxiliary server receiving a user request; the request being adapted to a predetermined message format of the auxiliary server, the content including combined information and a checksum; the combined information including an access identifier and firewall configuration commands; the auxiliary server locating the associated target server based on the access identifier and forwarding the combined information and checksum to the target server; the target server verifying the combined information and checksum; if the verification result is successful, the target server, based on the configuration commands, notifying the firewall to adjust firewall settings regarding user access to the target service. This method can improve the security and universality of network services and enhance the user's access experience. This application can be widely applied in the field of network service technology.

A video streaming user platform identification process for processing data packets of ISP level network traffic to automatically identify in real-time user platforms and content providers of video streams of the network traffic, the process being for execution at the ISP level by at least one processor of a video streaming user platform identification apparatus of a network service provider, the process including the steps of: receiving data packets of general network traffic of a plurality of network users of the network service provider; processing the received data packets to detect TCP / QUIC and TLS handshake packets of video streams of corresponding ones of the network users; processing the detected TCP / QUIC and TLS handshake packets of video streams to generate, for each of the video streams, a corresponding plurality of values of respective predetermined attributes; for each of the video streams, processing the corresponding attributes values with a trained classifier to classify the video stream into a corresponding one of a plurality of predetermined classes, each of the predetermined classes representing a corresponding combination of a corresponding content provider of the video stream, and a corresponding user platform being used by a corresponding one of the network users to stream the video stream from the corresponding content provider; and generating statistical data representing a statistical distribution of the classes of video streams being streamed via the network service provider; wherein the user platform includes at least one of: (i) the user's operating system; and (ii) the user's software application being used to stream the video stream.

Novel tools and techniques are provided for implementing programmatical public switched telephone network (“PSTN”) trunking for cloud hosted applications. In various embodiments, a computing system may determine one or more first network interconnection characteristics associated with a first entity service provider within a call service network operated by a call network service provider. Based on the determined one or more first network interconnection characteristics associated with the first entity service provider, the computing system may cause a network provisioning application layer to establish one or more network interconnections between a first network associated with the first entity service provider and the call service network, in some cases, by establishing shared peering connections between the first network and the call service network. The shared peering connections may enable a plurality of customers of the first entity service provider to establish call service connections that are shared over the shared peering connections.

Systems and methods for service response analysis via out-of-band signaling is provided. A system may obtain, via a first network channel, a network data packet from a network service provider. The system may determine the network data packet comprises a response code indicating a status of the request. The system may extract the response code from the network data packet. The system may generate an out-of-band response message comprising the response code. The system may send, to an external device via a second network channel, the out-of-band response message comprising the response code.

The present invention discloses a multi-user quantum key distribution full-connection network system based on a multi-functional integrated optical quantum chip, including: a multi-degree-of-freedom integrated high-dimensional entangled photon pair source module at the network service provider side, a mode configuration module based on mode division multiplexing technology, a mode demultiplexing module, an encoding / decoding module, and a photon detection module at the user side. The present invention can further improve the key rate and also facilitate the construction of a quantum communication network based on the existing optical fiber communication network.

The invention discloses a public network domain name shunting method and a communication system. Comprising the steps that an uplink classifier user plane function network element receives a DNS analysis request message initiated by user equipment, the message comprises a public network domain name to be analyzed, and a target IP address of the message is a first IP address; whether the public network domain name meets a DNS redirection rule is judged, if yes, the request message is sent to an intranet DNS server corresponding to the public network domain name, and a DNS analysis response message fed back by the intranet DNS server is received; and converting the analysis result from the second IP address to a virtual IP address according to a target IP address conversion rule, and sending a DNS analysis response message of which the analysis result is the virtual IP address to the user equipment. According to the method and the device, the technical problem that the common public network service cannot be normally accessed due to the fact that the same IP address is returned to two DNS analysis requests of the public network service shunted by the internal network and the common public network service by a content distribution network service provider is solved.

A key master service capable of operating on a service provider in a network enables is disclosed. The key master enables authorized parties to securely exchange client information without compromising client security. One feature of the key master service is the generation of a unique key for each client. All parties in an authorized universe access, exchange and modify client information by referencing the universal key, rather than using known client identifiers. Client information is further secured by advantageously applying an obfuscation function to the data. Obfuscated client information is stored together with the universal key as keyed client data at the client and / or server, where it may be directly accessed by the service provider or third parties. Because client information is stored and exchanged without the ability to discern either the client identity or the nature of the information, such information is secured against malicious third-party interception.

Systems, apparatuses, and methods are described for generating tokens for user devices to request content items from one or more content delivery networks via networks provided by a network service provider. The tokens may be generated based on rules provided by the network service provider and may indicate whether the content delivery networks have permission to send targeted content items to the user device. Tokens provided to a user device may prevent repeated delivery of the same content item to the user device.

The present disclosure related to the configuration and management of accessibility of vehicle data communications provided to a service technician or other third party. The service technician requests access to the vehicle data with authentication information. The network service provider can facilitate an initial authentication for access to vehicle data, provide access to the vehicle data for authenticated and authorized users, and manage revocation of vehicle data access rights via a common interface provided through the vehicle without requiring customized software, applications or external computing devices.

Systems and methods for controlling data access through the interaction of a short-range transceiver, such as a contactless card, with a client device are presented. An exemplary system and method may include establishing a database storing identifiers and keys for users and service providers, receiving from a client device of the service provider, via a network, a service provider token and a request for a data access key, the request generated in response to a tap action between a contactless card associated with a user and the client device, verifying the service provider is authorized to receive access to personal user data encrypted and stored on the contactless card, generating a data access key based on a user key, and transmitting to the service provider client device, via the network, the data access key, such that the client device may decrypt the personal user data obtained from the contactless card.

Systems and methods are provided to provision a customer-specific identifier in cloud-based communications systems so that when a communication arrives at the network services provider, it is identified as being associated with the customer, even when the customer information would otherwise not be available. In examples, when a customer orders communication services from the network services provider (or associates the communication services with a third-party Internet telephony service), the network services provider provides the customer a unique identifier that is provisioned into that customer's instance of the third-party Internet telephony service. When the customer makes a call using the third-party Internet telephony service, the identifier is inserted into the communication (e.g., in a SIP header). The identifier is extracted when the communication is received at the network services provider and used to identify the customer so that appropriate services, service levels, etc. can be applied to the call.

The invention provides a user reverse management network method for a multi-source heterogeneous network. In a multi-source heterogeneous network, different types of networks (such as a ground wired network, a wireless network, a satellite network and the like) are mutually interwoven, and the network environment is complex and changeable. Network service providers are responsible for managing and maintaining various network resources and expect to meet diversified requirements of users and maximize the resource utilization efficiency of the network service providers; however, the user hopes to obtain the network quality of service (QoS) meeting the self task requirement at the minimum cost when renting the network resources, and in order to more effectively realize the fine-grained on-demand distribution of a single small task in the multi-source heterogeneous network, the user equipment can interact the use experience of different network links, so that the user experience is improved, and the user experience is improved. And taking the result as a reference basis for network resource lease decision making. Through the interaction, the user can more comprehensively know the actual performance of the network link, so that a more reasonable routing decision is made.

An apparatus configured to process raw data received from a network service provider monitoring system to determine one or more pieces of information included in the raw data are relevant to performance monitoring of a communication network based on a matching with one or more recognized data categories for classifying pieces of information that are relevant to performance monitoring of the communication network, and to determine whether any pieces of the information included in the raw data are irrelevant to performance monitoring based on a failure to match any of the recognized data categories. The apparatus is also configured to extract the one or more pieces of information included in the raw data determined to be relevant to performance monitoring of the communication network from the raw data, and store the one or more pieces of information relevant to performance monitoring of the communication network in a central data repository.

A system and method for efficiently distributing available bandwidth of a satellite beam among network service providers (NSPs) and virtual network operators (VNOs) associated with the NSPs. The method involves defining bandwidth allocations for each NSP and VNO, receiving demands, dividing the available bandwidth among NSPs and sub-dividing it among VNOs based on respective demands, Minimum Information Rates (MIN), Committed Information Rates (CIR), and Maximum Information Rates (MAX). The method supports multiple traffic priorities, prevents bandwidth starvation, and rebalances bandwidth allocation using a throttle factor during heavy traffic. By sorting demands in ascending order and smoothing beam utilization, the method ensures fairness and efficiency in satellite beam usage.

The application discloses a kind of knowledge graph-based webpage content security processing method, it is related to webpage content security technical field, the method includes the following specific steps: data acquisition: from network service provider, enterprise or organization internal network and website server collect the internet content data related to webpage of text, image and video form, the present application realizes the comprehensive monitoring and analysis to webpage content security by constructing knowledge graph-based webpage content security processing system, by using the inference ability of knowledge graph, including representation learning, correlation analysis, event traceability, behavior prediction etc., potential security threats, abnormal patterns or associated relationships in webpage content can be deeply mined, not only improve the accuracy of security threat identification, but also provide intuitive, easy-to-understand visual interface for security personnel, so that they can quickly respond and take appropriate security measures.

Systems and methods for guaranteeing end-to-end QoS for wireless connections over a cable network are disclosed. Provisioning of on-demand guaranteed bandwidth connection over a cable network uses mechanisms from DOCSIS domain and Wi-Fi domain. A multi-domain orchestrator is implemented to control both domains. A bandwidth request is received from a client device connecting to a network service provider access point. The bandwidth request is updated for both domains with results of speed test of the wireless link if the speed test results are lower than the bandwidth request. The orchestrator and client device negotiate the bandwidth request using a three-way handshake over PacketCable Multimedia (PCMM) protocol. If the available bandwidth on either the DOCSIS or wireless link is less than the bandwidth request, the orchestrator generates a new bandwidth offer. If the client device accepts the offer, the orchestrator configures the DOCSIS and wireless links using their respective domain protocols to provision the connection with guaranteed end-to-end bandwidth.

Aspects of the subject disclosure may include, for example, a method that includes creating an outage plan to manage provision of network services for devices at a premises, and implementing the outage plan responsive to occurrence of an outage in the network services; if a residential gateway (RG) and a smartphone are available, network connectivity can be facilitated for at least a portion of the devices using the RG and the smartphone as a mobile hotspot; if a smartphone is not available, network connectivity can be facilitated using the RG and another device as a mobile hotspot, where the other device is provided by a provider of the network services; if an RG for the premises is not available, network connectivity can be facilitated by transferring an authentication token to a predetermined device to serve as a backup gateway for the premises. Other embodiments are disclosed.

The present disclosure provides a system (110) and method (400) for network service provider (NSP)-policy control function (PCF) provisioning. The system (110) enables a network service provider (NSP) operator (102) to create, modify, or delete slice-related information in an access and mobility management function (AMF), session management function (SMF), unified data management (UDM), network slicing selection function (NSSF), and policy control function (PCF) from a centralized point using a NSP portal (104). Further, the NSP operator (102) may provision a first and a second set of rules for data network name (DNN) and policy and charging control (PCC). The NSP operator (102) may create policies at the PCF based on the first and second set of rules to enable a communication network to readily configure new slices without any manual intervention on PCF instances.

Methods and apparatus for processing and reconciling data traffic utilization information from a variety of sources including client devices and service provider networks are described. The methods take into consideration that wireless devices tracking usage data may not accurately reflect the amount of usage measured by network devices. This may be because of overhead the client devices are not aware of or because different measurement techniques or accounting metrics are used by the service provider network. The methods and apparatus may and sometimes do take into consideration that while some client devices, e.g., android devices, may trach and report usage aid / or location information through the use of an application which provides such information to the network service provider, such information may not be readily available from other devices such Apple iOS devices. The described data tracking and location assignment methods are used in some embodiments to determine base station placement.

The present invention enables a network operator to select a gateway that provides desirable operational parameters to access a network node function in a network node requested by a client. A network service provider detects what service a client device is requesting or using and selects a gateway (e.g. PDN-GW) to deliver the service. The client device is signaled to make a new connection to the network using the selected gateway, e.g. by connecting to the APN associated with the PDN-GW that delivers the service.