Hewlett Packard Enterprise Development LP

Huawei Technologies Co., Limited

Chunfeng Wang

Yafeng Jiang

Zhijun Ren

Jiabao Jin

Hao Lu

Wei Peng Huang

Qiang Zhou

Rajesh Kumar Ganapathy Achari

Stephane Laroche

Jikui Pei

Hsiu-Wei Liu

Yi Hou

Wei Li

Ke Xu

Mohd Shahnawaz Siraj

Yang Wang

Jianpo Han

Berend Dunsbergen

Daniel N Harkins

Wei Huang

Amogh Guruprasad Deshmukh

Jian Dong

Huimeng Huang

Guangning Qin

Jishi Wang

Ji-kui Pei

Zhiyuan Yao

Liya Yi

In a projection reverse control method a first electronic device sends a projection picture to a second electronic device. The second electronic device is connected to a peripheral device. The first electronic device establishes a connection to the peripheral device. The first electronic device receives a first instruction from the peripheral device. The first instruction is generated by the peripheral device based on a user operation. The first electronic device performs a corresponding operation according to the first instruction. The first electronic device sends, to the second electronic device, a projection picture after the corresponding operation is performed.

Projection reverse control method and device

A first switch port receives a first control packet, a header having a source media access control (MAC) address of a first MAC of a first interface of a sending device and a payload containing a second MAC of a second interface of the same sending device. The first and second interfaces form a bonded interface for failover purposes on the sending device. A second switch port receives a second control packet, a header having the second MAC as its source MAC and a payload containing the first MAC. The switch associates the first and second MAC addresses as related MAC addresses associated with the bonded interface. The switch facilitates failover between the secure interfaces via multiple uplinks while maintaining the port security on the switch by allowing transmission of data from either the first or second MAC address, associated as related MAC addresses, without triggering a port security violation.

Method to support multiple uplinks failover between switch interfaces with port security

Embodiments of the present disclosure relate to transmission of network access information for wireless devices. A method comprises transmitting an authorization request for the wireless device to a server upon receiving a presence announcement message from a wireless device. The method further comprises receiving an authorization response from the server including network access information and bootstrapping information of the wireless device. The method further comprise performing authentication with the wireless device based on the bootstrapping information. The method also comprises transmitting the network access information to the wireless device. The network access information includes a service set identifier (SSID) for a wireless local area network (WLAN) and credential information for the mobile device to access the WLAN. By automatically distributing network access information to the wireless device without requiring any user input, the efficiency of device provisioning and the security of WLAN can be improved.

Transmission of network access information for wireless device

One aspect provides a system and method for selecting a path for a data flow in a network. During operation, a first node receiving the data flow can determine flow information that specifies a destination node. The system estimates a Quality of Experience (QoE) value of each node based on the flow information and current operating status of each node. A management service generates a QoE topology of the network based on connectivity among the nodes and the QoE value associated with each node; determines a plurality of potential paths between the first node and the destination node, with each potential path comprising a plurality of intermediate nodes; and selects a path that provides best QoE performance based on the QoE topology. Selecting the path comprises computing a cumulative QoE value of each potential path based on QoE values of the intermediate nodes included in the potential path.

Quality sensing network management

Systems are methods are provided for implementing load balancing of IPsec security associations (SAs) SAs between different heterogeneous cores, for example in a multiple controller systems. The balancing of IPsec SAs are performed using software implementations of IPsec offloading and/or hardware implementations of IPsec offloading. By balancing the processing functions related to orchestration of IPsec SAs between hardware (e.g., IPsec hardware accelerator) and software (e.g., IPsec software accelerator), the methods realize increased optimization, improved user experience, and enhanced product performance in networks using IPsec. For example, an IPsec session is initiated, and it is determined whether a resource limitation for a hardware-based IPsec accelerator has been reached. If the limitation for the hardware-based IPsec accelerator has been reached, processing for the IPsec SA for the initiated IPsec session is offloaded to a software-based IPsec accelerator.

Internet protocol security (IPsec) security associations (SA) balance between heterogeneous cores in multiple controller system

Example implementations relate to connecting an IoT device to a wireless network using Device Provisioning Protocol (DPP). An authentication server receives a DPP network access authorization request including a connector identifier from an Access Point (AP) in communication with the IoT device. The connector identifier is a hash of the public network access key of the IoT device. If the connector identifier is valid, the authentication server determines a configurable policy from a set of configurable policies that is applicable to the IoT device. The authentication server transmits network permissions defined in the configurable policy to the AP. The IoT device is connected to the wireless network by the AP based on the network permissions.

Connecting internet of thing (IoT) devices to a wireless network

Examples described herein relate to a selection of a network device in a network installation for a forwarder operation. Selection may include computing a performance score based on a set of performance parameters. Broadcasting the computed performance score to other network devices. Receiving performance scores from the other network devices. Comparing the received performance scores with the computed performance score. Continuing in the forwarder mode based on a determination that the received performance scores are less than its computed performance score. Receiving multicast Domain Name Service (mDNS) packets from one or more client devices. Sending the received mDNS packets to a central service.

Selecting forwarder in a network installation

Example implementations relate to managing a resource of a network device. A resource of a network device may be assigned from a first tenant to a second tenant of the network device. Resources of the network device may include an assignment right, an access right, and a configuration right, By assigning the resource to the second tenant, the second tenant may be granted an access right to the assigned resource. Responsive to the assignment of the resource, an access right to the assigned resource may be removed from the first tenant such that the first tenant is isolated from the resource.

Multitenant network device management

An example access point may comprise a processing resource; and a memory resource storing machine-readable instructions to cause the processing resource to: perform a management system search using a dynamic host configuration protocol (DHCP); determine, in view of the management system search, whether a management system discovered is a controller; and select one of a first role within a centralized local area network and a second role within a distributed local area network based on determining whether the management system is the controller, wherein the first role within the centralized local area network is selected when the management system is the controller.

Selecting a role for an access point

In embodiments of the present disclosure, there is provided an approach for connecting an access point (AP) to a wireless multi-hop network. An electronic device obtains device information of the AP in a wireless manner, and the electronic device and the AP can establish a wireless trusted connection based on the device information. Then, the electronic device transmits a configuration to the AP over the wireless trusted connection, wherein the configuration at least indicates an identifier of a wireless multi-hop network and a network role of the AP in the wireless multi-hop network. The AP then connects to the wireless multi-hop network according to the configuration. Embodiments of the present disclosure provide a wireless trusted way to provision an AP, which requires little manual intervention and technical expertise, while ensuring the safety of the provisioning.

Connecting access point to wireless multi-hop network based on a network role of the access point

In embodiments of the present disclosure, there is provided a solution for managing a USB connection between a USB device and a host device. According to embodiments of the present disclosure, a USB management server receives, from a USB management client at a host device, USB ID information for identifying a USB device that is plugged into the host device. Whether the USB ID information is valid is determined based on an authentication policy for authenticating the USB device. If the USB ID information is valid, the USB management client is instructed to permit a connection between the USB device and the host device. Accordingly, the connection may be managed by the USB management server. Embodiments of the present disclosure present an effective way for managing USB connections in a centralized way, which provides various flexible authentication policies and requires less manual operations.

USB connection management

Systems and methods are provided for implementing a centralized configurator server/service in the cloud that can take the place of conventional mobile devices used for provisioning IoT devices or WiFi clients in a network. In order to provision the IoT devices or WiFi clients, a mobile device or access point (AP) may be used to relay Device Provisioning Protocol (DPP) messages and/or information between the centralized configurator server/service and the IoT devices or WiFi clients.

Centralized configurator server for DPP provisioning of enrollees in a network

The invention includes, in part, storing a seed image having instructions to communicate with devices of a predetermined device type, but not instructions to provision a network device to be fully operational in a network. A processor boots a network device in the network for a first time, detects if another network device exists in the network, and downloads a full version of a product image from the other network device. The full version of the product image uniquely corresponds to network devices deployed in the network that include at least one device of the predetermined device type, replaces the seed image with the full version of the product image, and provisions the network device to a particular device type of the network.

Convert a device to a corresponding device according to seed image

Systems and methods are provided for implementing a coexistence coordinator in an access point (AP) operating in a Internet of Things (IoT) network. The coexistence coordinator coordinates transmission of both IoT-related data from an IoT radio and WiFi data from a WiFi radio, the IoT radio and the WiFi radio coexisting in the AP. The coexistence coordinator synchronizes time between the WiFi radio and the IoT radio so that times during which IoT-related data is to be sent from the IoT radio (in accordance with Time-Division Multiple Access (TDMA) channel access method) can be determined. Operation of the WiFi radio is suspended during those times when the IoT-related data is transmitted from the IoT radio.

Growing community of inventors

Beijing, China

Chunfeng Wang