43 results about "Network service provider" patented technology

Computer-implemented methods and systems for facilitating single sign-on (SSO) and passwordless sign-on to a web service provider are provided. A client device authorized for SSO or passwordless sign-on generates and stores a device-specific key that it uses to encrypt a credential bundle containing key(s) necessary to access a cryptographically protected resource provided by the web service provider. The encrypted credential bundle is stored by the web service provider and provided to the authorized client device upon a successful authentication via SSO or passwordless sign-on. The authorized device uses the locally stored device-specific key to decrypt the encrypted credential bundle received from the web service provider to obtain the key(s) necessary to access the cryptographically protected resource.

Ethical data tracker systems and methods are disclosed. A payment network computer receives a token request from an application running on a client device. The token request includes user contact information and a merchant identifier. A token server computer generates a token associated with the merchant identifier. The payment network computer maps the token to the user contact information and the merchant identifier, stores the token, the user contact information, and the merchant identifier in a database, and determines a validation of a mapping in the database of a token and a merchant identifier received from a network service provider. The payment network computer authorizes or prohibits the network service provider to communicate with the account holder via the user contact information based on the determining of the validation of the mapping in the database of the token and the merchant identifier received from the network service provider.

The invention discloses a network information security protection method based on big data, and relates to the technical field of network information security, and the protection method comprises the following specific steps: S100, data collection: through a web crawler technology and a data interface, carrying out data collection; network data of texts, user behaviors and network traffic are collected in real time from a social media platform, a network service provider and a user terminal, and accurate recognition and early warning of network information security threats are achieved through social media emotion mining and user behavior emotion association analysis. By applying a natural language processing technology and constructing an exclusive emotion dictionary, potential threat speech which contains negative emotions and is related to network security can be accurately recognized, meanwhile, user behavior data are combined, a user behavior emotion association model is established, user behaviors are monitored in real time, the threat recognition accuracy is improved, and the threat recognition efficiency is improved. And powerful support is provided for taking safety protection measures in time.

A network service incorporating service groups to increase fault tolerance and data isolation for integrated network services and client data is provided. The network service provider can process network requests utilizing individual service groups that correspond to a set of integrated services and client data (e.g., cells). The service groups can be associated according to customer identifier. Computing resources within a service group are isolated from computing resources utilized in other service groups and resources that host / provide the service or the integrated data can be independently scaled by the service provider.

Embodiments of a system and method enable secure connectivity between the computer systems of a financial institution and software for Brand On Banking. Embodiments of the system include an Identity Platform, Know Your Customer (KYC) processes including ID card verification, face verification, document verification such as utility bills as proof of address, and biometric verification, and bank servicing features such as checking, savings, debit, payments, loans, and bill-pay. The secure connectivity is established in various embodiments through private or public Application Programming Interfaces (APIs) over a network service provider, thus eliminating third-party risk for the financial institution. Additionally, the system allows for displaying alternate brands and identifying customers associated with a specific product brand other than the financial institution. The mobile interface is user-friendly and consolidates all financial accounts in one location, reducing customer friction.

This application discloses an access control method and system for network services. The method is applied to a network service provider, which deploys an auxiliary server, a target server, and a firewall. The target server runs a target service. The method includes: the auxiliary server receiving a user request; the request being adapted to a predetermined message format of the auxiliary server, the content including combined information and a checksum; the combined information including an access identifier and firewall configuration commands; the auxiliary server locating the associated target server based on the access identifier and forwarding the combined information and checksum to the target server; the target server verifying the combined information and checksum; if the verification result is successful, the target server, based on the configuration commands, notifying the firewall to adjust firewall settings regarding user access to the target service. This method can improve the security and universality of network services and enhance the user's access experience. This application can be widely applied in the field of network service technology.

A video streaming user platform identification process for processing data packets of ISP level network traffic to automatically identify in real-time user platforms and content providers of video streams of the network traffic, the process being for execution at the ISP level by at least one processor of a video streaming user platform identification apparatus of a network service provider, the process including the steps of: receiving data packets of general network traffic of a plurality of network users of the network service provider; processing the received data packets to detect TCP / QUIC and TLS handshake packets of video streams of corresponding ones of the network users; processing the detected TCP / QUIC and TLS handshake packets of video streams to generate, for each of the video streams, a corresponding plurality of values of respective predetermined attributes; for each of the video streams, processing the corresponding attributes values with a trained classifier to classify the video stream into a corresponding one of a plurality of predetermined classes, each of the predetermined classes representing a corresponding combination of a corresponding content provider of the video stream, and a corresponding user platform being used by a corresponding one of the network users to stream the video stream from the corresponding content provider; and generating statistical data representing a statistical distribution of the classes of video streams being streamed via the network service provider; wherein the user platform includes at least one of: (i) the user's operating system; and (ii) the user's software application being used to stream the video stream.

Systems and methods for service response analysis via out-of-band signaling is provided. A system may obtain, via a first network channel, a network data packet from a network service provider. The system may determine the network data packet comprises a response code indicating a status of the request. The system may extract the response code from the network data packet. The system may generate an out-of-band response message comprising the response code. The system may send, to an external device via a second network channel, the out-of-band response message comprising the response code.

The present invention discloses a multi-user quantum key distribution full-connection network system based on a multi-functional integrated optical quantum chip, including: a multi-degree-of-freedom integrated high-dimensional entangled photon pair source module at the network service provider side, a mode configuration module based on mode division multiplexing technology, a mode demultiplexing module, an encoding / decoding module, and a photon detection module at the user side. The present invention can further improve the key rate and also facilitate the construction of a quantum communication network based on the existing optical fiber communication network.

The invention discloses a public network domain name shunting method and a communication system. Comprising the steps that an uplink classifier user plane function network element receives a DNS analysis request message initiated by user equipment, the message comprises a public network domain name to be analyzed, and a target IP address of the message is a first IP address; whether the public network domain name meets a DNS redirection rule is judged, if yes, the request message is sent to an intranet DNS server corresponding to the public network domain name, and a DNS analysis response message fed back by the intranet DNS server is received; and converting the analysis result from the second IP address to a virtual IP address according to a target IP address conversion rule, and sending a DNS analysis response message of which the analysis result is the virtual IP address to the user equipment. According to the method and the device, the technical problem that the common public network service cannot be normally accessed due to the fact that the same IP address is returned to two DNS analysis requests of the public network service shunted by the internal network and the common public network service by a content distribution network service provider is solved.

A key master service capable of operating on a service provider in a network enables is disclosed. The key master enables authorized parties to securely exchange client information without compromising client security. One feature of the key master service is the generation of a unique key for each client. All parties in an authorized universe access, exchange and modify client information by referencing the universal key, rather than using known client identifiers. Client information is further secured by advantageously applying an obfuscation function to the data. Obfuscated client information is stored together with the universal key as keyed client data at the client and / or server, where it may be directly accessed by the service provider or third parties. Because client information is stored and exchanged without the ability to discern either the client identity or the nature of the information, such information is secured against malicious third-party interception.

Systems, apparatuses, and methods are described for generating tokens for user devices to request content items from one or more content delivery networks via networks provided by a network service provider. The tokens may be generated based on rules provided by the network service provider and may indicate whether the content delivery networks have permission to send targeted content items to the user device. Tokens provided to a user device may prevent repeated delivery of the same content item to the user device.

The present disclosure related to the configuration and management of accessibility of vehicle data communications provided to a service technician or other third party. The service technician requests access to the vehicle data with authentication information. The network service provider can facilitate an initial authentication for access to vehicle data, provide access to the vehicle data for authenticated and authorized users, and manage revocation of vehicle data access rights via a common interface provided through the vehicle without requiring customized software, applications or external computing devices.

Systems and methods are provided to provision a customer-specific identifier in cloud-based communications systems so that when a communication arrives at the network services provider, it is identified as being associated with the customer, even when the customer information would otherwise not be available. In examples, when a customer orders communication services from the network services provider (or associates the communication services with a third-party Internet telephony service), the network services provider provides the customer a unique identifier that is provisioned into that customer's instance of the third-party Internet telephony service. When the customer makes a call using the third-party Internet telephony service, the identifier is inserted into the communication (e.g., in a SIP header). The identifier is extracted when the communication is received at the network services provider and used to identify the customer so that appropriate services, service levels, etc. can be applied to the call.

The invention provides a user reverse management network method for a multi-source heterogeneous network. In a multi-source heterogeneous network, different types of networks (such as a ground wired network, a wireless network, a satellite network and the like) are mutually interwoven, and the network environment is complex and changeable. Network service providers are responsible for managing and maintaining various network resources and expect to meet diversified requirements of users and maximize the resource utilization efficiency of the network service providers; however, the user hopes to obtain the network quality of service (QoS) meeting the self task requirement at the minimum cost when renting the network resources, and in order to more effectively realize the fine-grained on-demand distribution of a single small task in the multi-source heterogeneous network, the user equipment can interact the use experience of different network links, so that the user experience is improved, and the user experience is improved. And taking the result as a reference basis for network resource lease decision making. Through the interaction, the user can more comprehensively know the actual performance of the network link, so that a more reasonable routing decision is made.

An apparatus configured to process raw data received from a network service provider monitoring system to determine one or more pieces of information included in the raw data are relevant to performance monitoring of a communication network based on a matching with one or more recognized data categories for classifying pieces of information that are relevant to performance monitoring of the communication network, and to determine whether any pieces of the information included in the raw data are irrelevant to performance monitoring based on a failure to match any of the recognized data categories. The apparatus is also configured to extract the one or more pieces of information included in the raw data determined to be relevant to performance monitoring of the communication network from the raw data, and store the one or more pieces of information relevant to performance monitoring of the communication network in a central data repository.

A system and method for efficiently distributing available bandwidth of a satellite beam among network service providers (NSPs) and virtual network operators (VNOs) associated with the NSPs. The method involves defining bandwidth allocations for each NSP and VNO, receiving demands, dividing the available bandwidth among NSPs and sub-dividing it among VNOs based on respective demands, Minimum Information Rates (MIN), Committed Information Rates (CIR), and Maximum Information Rates (MAX). The method supports multiple traffic priorities, prevents bandwidth starvation, and rebalances bandwidth allocation using a throttle factor during heavy traffic. By sorting demands in ascending order and smoothing beam utilization, the method ensures fairness and efficiency in satellite beam usage.

The application discloses a kind of knowledge graph-based webpage content security processing method, it is related to webpage content security technical field, the method includes the following specific steps: data acquisition: from network service provider, enterprise or organization internal network and website server collect the internet content data related to webpage of text, image and video form, the present application realizes the comprehensive monitoring and analysis to webpage content security by constructing knowledge graph-based webpage content security processing system, by using the inference ability of knowledge graph, including representation learning, correlation analysis, event traceability, behavior prediction etc., potential security threats, abnormal patterns or associated relationships in webpage content can be deeply mined, not only improve the accuracy of security threat identification, but also provide intuitive, easy-to-understand visual interface for security personnel, so that they can quickly respond and take appropriate security measures.

Aspects of the subject disclosure may include, for example, a method that includes creating an outage plan to manage provision of network services for devices at a premises, and implementing the outage plan responsive to occurrence of an outage in the network services; if a residential gateway (RG) and a smartphone are available, network connectivity can be facilitated for at least a portion of the devices using the RG and the smartphone as a mobile hotspot; if a smartphone is not available, network connectivity can be facilitated using the RG and another device as a mobile hotspot, where the other device is provided by a provider of the network services; if an RG for the premises is not available, network connectivity can be facilitated by transferring an authentication token to a predetermined device to serve as a backup gateway for the premises. Other embodiments are disclosed.

Systems and methods for controlling data access through the interaction of a short-range transceiver, such as a contactless card, with a client device are presented. An exemplary system and method may include establishing a database storing identifiers and keys for users and service providers, receiving from a client device of the service provider, via a network, a service provider token and a request for a data access key, the request generated in response to a tap action between a contactless card associated with a user and the client device, verifying the service provider is authorized to receive access to personal user data encrypted and stored on the contactless card, generating a data access key based on a user key, and transmitting to the service provider client device, via the network, the data access key, such that the client device may decrypt the personal user data obtained from the contactless card.

Systems and methods for transparent service response analysis is provided. A system may obtain a network data packet from a network service provider. The system may determine the network data packet includes a response code indicating a status of the request. The system may extract the response code from the network data packet. The system may modify an IP header of the network data packet based on the response code. The system may encapsulate the network data packet based on the response code. The system may send the network data packet with the modified IP header. The system may send the encapsulated network data packet.

The invention discloses an IPv6 (Internet Protocol Version 6) network dynamic access control method and device for preventing identity counterfeiting. The method comprises the following steps of: deploying a DNS (Domain Name Server) analyzer in an authorized area of a network service provider for processing a DNS query request, and comprising the following steps of: 11) analyzing a source IP (Internet Protocol) address C-IP and a target domain name T of a client C from the DNS query request, and acquiring an IPv6 (Internet Protocol Version 6) prefix P; 12) acquiring a current timestamp S; 13) calculating a dynamic interface identifier by using the key K; 14) taking the IPv6 prefix P and the generated complete dynamic address as an AAAA record and returning the AAAA record to the client C; a service access gateway is deployed at a network service front end of a service provider and is used for receiving flow and executing verification, and the method comprises the following steps of: receiving a data packet from a client C, extracting an interface identifier in a destination address, performing hash verification according to a timestamp S ', C-IP and T pairs, and determining that the data packet is legal if the verification is successful. According to the invention, identity counterfeiting can be effectively prevented.

Systems and methods for guaranteeing end-to-end QoS for wireless connections over a cable network are disclosed. Provisioning of on-demand guaranteed bandwidth connection over a cable network uses mechanisms from DOCSIS domain and Wi-Fi domain. A multi-domain orchestrator is implemented to control both domains. A bandwidth request is received from a client device connecting to a network service provider access point. The bandwidth request is updated for both domains with results of speed test of the wireless link if the speed test results are lower than the bandwidth request. The orchestrator and client device negotiate the bandwidth request using a three-way handshake over PacketCable Multimedia (PCMM) protocol. If the available bandwidth on either the DOCSIS or wireless link is less than the bandwidth request, the orchestrator generates a new bandwidth offer. If the client device accepts the offer, the orchestrator configures the DOCSIS and wireless links using their respective domain protocols to provision the connection with guaranteed end-to-end bandwidth.

The present application discloses a network service access control method and system. The method is applied to a network service provider; a secondary server, a target server, and a firewall are deployed on the network service provider; and a target service runs on the target server. The method comprises: the secondary server receives a request of a user, wherein the request is adapted to a predetermined packet format of the secondary server, the content comprises combined information and a check code, and the combined information comprises an access identifier and a firewall setting command; the secondary server searches for an associated target server on the basis of the access identifier, and forwards the combined information and the check code to the target server; the target server verifies the combined information and the check code; and if the verification is successful, on the basis of the setting command, the target server notifies the firewall to adjust firewall settings regarding access of the user to the target service.

The invention provides a network exception processing method, device, equipment, system, medium and product, and relates to the technical field of computers, in particular to the field of cloud computing such as cloud services, cloud mobile phones and intelligent cloud. The method is applied to a server side of a cloud mobile phone, and comprises the following steps: in response to network state abnormity of a machine room of the cloud mobile phone, determining a first domain name of the server side of the cloud mobile phone at a first network service provider with a network fault; switching a first domain name in the cloud mobile phone control information containing the first domain name to a second domain name, the second domain name being the domain name of a second network service provider of the server of the cloud mobile phone in which no network fault occurs; and in response to a received cloud mobile phone control information request sent by the client of the cloud mobile phone, sending the cloud mobile phone control information containing the second domain name to the client of the cloud mobile phone. The service continuity of the cloud mobile phone can be ensured, and the user experience is improved.

Systems and methods are provided for management of prefix allocation for a user network through distribution of prefixes to one or more virtual interfaces (VIFs) used to support communication of data between the user network and the network service provider. Management resource(s), which may be implemented by components of a network provider or routing resource(s), may be configured to receive the specified intended allocation of prefixes and verify that the intended allocation of prefixes meets at least one operational criterion based on utilization tracking data for prefix availability with respect to the user network. After verification, routing resources may advertise prefixes to a network service provider in accordance with the specified intended allocation of prefixes. The management resources may also update the utilization tracking data in the first data store to reflect allocation of the prefixes.

The embodiment of the invention provides a data transmission path determination method and device, equipment, a storage medium and a product. The method comprises the following steps: a detection server can receive a packaging message sent by a first internal router and obtain an interface identifier of a target transmission interface from the packaging message; the detection server sends the target public network address and the interface identifier of the target transmission interface to the management equipment; and the management equipment determines a target network service provider according to the interface identifier of the target transmission interface and the interface identifier mapping information, and determines a data transmission path from the test equipment to the target data center according to the target network service provider and the target public network address. Through adoption of the embodiment of the invention, the data transmission path between the specified public network address and the data center can be determined in a targeted manner, the transmission path determination efficiency is effectively improved, the processing cost is reduced, flow scheduling can be realized according to the data transmission path, and the use experience is improved.

A wireless communication system includes a plurality of master Wireless Access Point (WAP) devices, where each master WAP device is associated with an isolated network slice of one of a plurality of different network service providers. A plurality of hybrid analog-digital repeater devices are interconnected in a mesh topology via point-to-point wireless backhaul links in the wireless backhaul mesh network, where a first analog-digital repeater device receives first data stream in a first intermediate frequency from the first master WAP device and the second data stream in a second intermediate frequency from the second master WAP device. The first analog-digital repeater device then relays the first data stream and the second data stream over the plurality of hybrid analog-digital repeater devices via the point-to-point wireless backhaul links to reach to one or more service WAP devices that serves a plurality of UEs over WLAN signals.

Disclosed are devices, methods, apparatuses, and computer-readable media for autonomous networks. An example apparatus for an autonomous network service provider may include at least one processor and at least one memory. The at least one memory may store instructions that, when executed by the at least one processor, may cause the apparatus at least to: receive a first request for a first application; retrieve by metadata retrieval function, first metadata for the first application; and retrieve by module retrieval function, one or more first modules of input, one or more first modules of function and at least one first module of task according to the retrieved first metadata.

Disclosed in some examples are methods, systems, devices, and machine-readable mediums which monitor for file system element transfers to and from both the endpoint and authorized accounts on network-based service providers (e.g., cloud-based storage). The system uses the capabilities of monitoring both the network-based service and the client computing device to filter out legitimate uploads to authorized network-based services and legitimate downloads to authorized computing devices. By matching events, it filters out events that are likely legitimate, the system may provide more accurate information, notifications, awareness, and unmatched event indications.