Charter Communications Operating, LLC

Ethan J Wright

Matthew James Wright

Micah W Labbee

Wystan Schmidt

Omar Alami

Tyson Vinson

Jason Page

Christopher Aubut

Routing network traffic using router-terminated virtual private network (VPN) client sessions is disclosed herein. In one embodiment, a router computing device receives an indication of an association between a client computing device and VPN configuration data for a VPN, the indication comprising an identifier of the client computing device and the VPN configuration data. The router computing device binds a VPN client session instantiated by the router computing device to a network interface and implements a firewall rule to route network traffic to and from the client computing device via the network interface. The router computing device establishes a connection with the VPN using the VPN client session and the VPN configuration data. Finally, the router computing device receives network traffic for the client computing device and routes the network traffic via the network interface.

Routing network traffic using router-terminated virtual private network (VPN) client sessions

A method for operating an automated testing platform includes providing a testing cloud application running on the automated testing platform; providing a test facility; receiving, by the testing cloud application, a job file of a test; connecting the test facility to the testing cloud application; publishing job data prescribed in the job file of the test to the test facility, wherein the job data configures the test facility to perform at least one test of a device or service under test and synchronizes a plurality of elements of the test; receiving, by the testing cloud application, result data from the test facility, which has performed at least one of the plurality of elements of the test; and generating a report of the result data.

Multi-client orchestrated automated testing platform

A request, from an end user device associated with a user, for supplemental media is received. Based on the request, metadata and a broadcast time associated with a primary media stream transmitted to the end user device is determined. Based on the metadata and the broadcast time, supplemental media from an account of the user on a platform is retrieved. A supplemental media stream, that includes the supplemental media, is sent in synchronization with the primary media stream.

Coordinated primary media stream with supplemental media stream

Automatic network device identification and presentation of network information via augmented reality is disclosed. Real time imagery of a scene within a field of view of a camera is received. It is determined that the imagery depicts a first object. It is determined that the first object comprises a first network-attached device attached to a network. Information that corresponds to the first network-attached device is obtained, and the information is presented in conjunction with a real time view of the scene.

Automatic network device identification and presentation of network information via augmented reality

Various embodiments include network computing devices and methods for managing Domain Name Service (DNS) over Hypertext Transfer Protocol Secure (DoH). A processor of a network computing device may receive from a client computing device a DoH request comprising a public certificate associated with a client identifier. The processor may generate a fingerprint of the public certificate. The processor may obtain a client-specific DoH policy based on an association between the fingerprint of the public certificate and the client-specific DoH policy. The processor may apply the DoH policy to the DoH request to formulate a response to the DoH request.

Managing client-oriented domain name service over Hypertext Transfer Protocol Secure

Disclosed herein are methods and systems for access point device recovery and management using mobile devices. The method includes providing, by a mobile device to an access point device via a service provider system, authentication details of the mobile device, establishing a secure wireless connection using the authentication details between the access point device and the mobile device upon receiving, by the mobile device, an indication of failure of a network connection between the service provider system and the access point device, sending, by the mobile device to the access point device over the secure wireless connection, a configuration instruction, receiving, by the mobile device from the access point device over the secure wireless connection, confirmation of the configuration instruction, and disconnecting the secure connection upon successful application of the configuration instruction.

Systems and methods for access point device recovery using mobile devices

Various embodiments describe methods, systems, and devices for deploying an application associated with a user-selected container on a home-network router. Exemplary implementations may include receiving, at the home-network router from a remote server, container acquisition data including configuration information and rules for downloading the user-selected container. Also, initiating, by the home-network router, operation of application logic of the user-selected container in response to downloading the user-selected container from a remote container registry. Further, updating, by the home-network router, a reverse proxy maintained in the home-network router through application logic, wherein the reverse proxy is configured to forward requests from operation of the user-selected container to one or more remote servers; transmitting, from the home-network router to a remote computing device, a notification that the application associated with the user-selected container is deployed.

Deploying applications on home-network router

Implementing network constraint exceptions on a per device basis is disclosed. A network manager determines that a subscriber device associated with a subscriber network is to be granted an exception to a network constraint of the subscriber network. An aggregation device that is coupled to a set of subscriber networks including the subscriber network is sent aggregation device instructions to grant the exception to packets associated with the subscriber device that flow through the aggregation device. A network gateway device that serves as a network gateway for the subscriber network is sent gateway device instructions to associate packets associated with the subscriber device with information for identifying the packets as being associated with the subscriber device.

Implementing network constraint exceptions on a per device basis

Various embodiments describe methods, systems and devices for distributing trigger-based function execution in a mesh network. Various embodiments include detecting a trigger and determining whether the detected trigger matches one of a plurality of network events included in a trigger list accessible to the detecting node. In addition, whether a node associated with the detected trigger is available may be determined in response to determining the detected trigger matches one of the plurality of network events included in the trigger list. The node associated with the detected trigger may be configured to execute application logic for initiating at least one action from the mesh network in response to the detected trigger being detected. A trigger detection indicator associated with the detected trigger may be transmitted in response to determining the node associated with the detected trigger is a node other than the detecting node that is available.

Distributed trigger-based function execution in a mesh network

Providing a coordinated primary media stream with an aggregate supplemental media stream is disclosed. A request is received from an end user device associated with a user for supplemental media. Metadata and a broadcast time associated with a primary media stream transmitted to the end user device are determined. Based on the metadata and the broadcast time, first supplemental media from a first account of the user on a first platform and second supplemental media from a second account of the user on a second platform are determined. The first supplemental media and the second supplemental media are merged into an aggregate supplemental media stream. The aggregate supplemental media stream is streamed in synchronization with the primary media stream.

Coordinated primary media stream with aggregate supplemental media stream

Various embodiments describe methods, systems, and devices for client-driven dynamic server-side configuration validation. Exemplary implementations may include validating client device configuration data, updating a client device shadow with the validated client device configuration data, in which the client device shadow includes a schema in a client device-agnostic language, and translating client device configuration data of the client device shadow from the client device-agnostic language to a client device-specific language. Also, receiving the client device configuration data from a computing device over a communication network, and sending the client device configuration data of the client device shadow in the client device-specific language to a client device via a communication network. Further, translating a client device schema from the client device-specific language to the client device-agnostic language, identifying differences in the client device schema from the schema of the client device shadow, and updating the client device shadow with the differences.

Client-driven dynamic server-side configuration validation

A first router obtains a first network address of a first local area network (LAN) implemented by a second router and a first subnet mask associated with the first LAN. The first router causes the establishment of a secure communications channel with the second router. The first router determines that a computing device seeks to join the first LAN. The first router obtains an internet protocol (IP) address that has a same network address as the first network address and sends, to the computing device, the IP address and the first subnet mask for use by the computing device.

Extending a local area network securely

Obtaining location metadata for network devices using augmented reality (AR) is disclosed herein. In one embodiment, an AR computing device receives first user inputs indicating boundary points of a device region, and determines first spatial coordinates for each boundary point. The AR computing device next receives a second user input that indicates a network device within the device region, and determines second spatial coordinates for the network device. The AR computing device may also correlate the network device with a known connected network device. The AR computing device then transmits, to a server computing device, first metadata that includes the first spatial coordinates and an identifier of the device region, and second metadata that includes the second spatial coordinates and an identifier of the indicated network device. In some embodiments, the metadata may be employed, e.g., to generate a floorplan visualization and/or a signal strength map of the device region.

Obtaining location metadata for network devices using augmented reality

Event-driven Internet of Things (IoT) abstraction using rules is disclosed herein. In one embodiment, a network computing device that provides an IoT management (IoTM) service is communicatively coupled to an IoT device. The IoTM service receives multiple rules, each of which comprises an event identifier that identifies an event that the IoT device is capable of emitting, and an action identifier that identifies an action to be performed by the IoTM service (e.g., a command to be issued to the IoT device or an operation to be performed by the IoTM service). Upon receiving a first event emitted by the IoT device, the IoTM service identifies a first rule of the plurality of rules based on a first event identifier of the first rule that matches the first event. The IoTM service then executes a first action, wherein a first action identifier of the first rule identifies the first action.

Growing community of inventors

Denver, CO, United States of America

Ethan J Wright