Hewlett Packard Enterprise Development LP

Hewlett-packard Development Company, L.p.

Aruba Networks, Inc.

Jianpo Han

Guangzhi Ran

Qiang Zhou

Kuanyue Li

Xuefu Wang

Andre Beaudin

Liao Xu

Xuguang Jia

Yuying Chen

Yafeng Jiang

Zhenlei Wang

Huimeng Huang

Zhen Zhong

Sachin Ganu

Wei Peng Huang

Mohd Shahnawaz Siraj

Hao Lu

Chunfeng Wang

Chao Guo

Shahnawaz Siraj

Jiaqi Li

Zhijun Ren

Hongli Zhang

Jiguang Zheng

Yinzhi Dong

Qiwei Chang

Guojun Zhang

In implementations of the present disclosure, there is provided an approach for scheduling uplink traffic of a station. A method comprises determining a type of uplink traffic from a station (STA), wherein the type of uplink traffic is associated with a traffic size and an urgency. The method further comprises determining uplink scheduling information for the STA based on the traffic size and the urgency, wherein the uplink scheduling information indicates at least one of: a UL-OFDMA scheduling manner or a UL-MU-MIMO scheduling manner. The method further comprises sending the uplink scheduling information to the STA, and receiving uplink traffic from the STA using the uplink scheduling information. Implementations of the present disclosure can help AP to schedule the STA(s) more intelligent, effective and accurate, and thus the user experience can be enhanced and the transmission performance can be improved.

Scheduling uplink traffic of station

Implementations of the present disclosure relate to communication simulation between an access point and an electronic device. A method comprises obtaining a MAC protocol data unit (MPDU) for simulating a communication between an access point and an electronic device, and configuring a receiver address and a transmitter address of the MPDU. The method further comprises updating a header of the MPDU based on the configured receiver address and the configured transmitter address, and transmitting the MPDU according to the updated header. With these implementations, communications between the AP and the electronic device can be simulated by the AP.

Communication simulation between an access point and an electronic device

A packet that includes a header and a payload can be acquired. A first portion of the payload can be selected such that the first portion that is smaller than the payload. The header and the first portion of the payload can be encrypted based on an encryption algorithm to generate an encrypted packet. The encrypted packet can be transmitted to a node on a network.

Performance improvement for encrypted traffic over IPSEC

Systems are methods are provided for implementing load balancing of IPsec security associations (SAs) SAs between different heterogeneous cores, for example in a multiple controller systems. The balancing of IPsec SAs are performed using software implementations of IPsec offloading and/or hardware implementations of IPsec offloading. By balancing the processing functions related to orchestration of IPsec SAs between hardware (e.g., IPsec hardware accelerator) and software (e.g., IPsec software accelerator), the methods realize increased optimization, improved user experience, and enhanced product performance in networks using IPsec. For example, an IPsec session is initiated, and it is determined whether a resource limitation for a hardware-based IPsec accelerator has been reached. If the limitation for the hardware-based IPsec accelerator has been reached, processing for the IPsec SA for the initiated IPsec session is offloaded to a software-based IPsec accelerator.

Internet protocol security (IPsec) security associations (SA) balance between heterogeneous cores in multiple controller system

In embodiments of the present disclosure, a method is provided for managing an AP position for an access point. In the method, a magnetic distribution map is obtained for an indoor area, the magnetic distribution map representing a plurality of reference magnetic values that are collected at a plurality of reference positions in the indoor area. A plurality of magnetic measurements are received, here the plurality of magnetic measurements are respectively collected at a plurality of access point (AP) positions at which a plurality of APs are deployed within the indoor area, and the plurality of AP positions are unknown. The plurality of AP positions are mapped to a portion of the plurality of reference positions based on the plurality of magnetic measurements and the plurality of reference magnetic values. The plurality of AP positions are determined based on the portion of the plurality of reference positions. Therefore, AP positions may be determined accurately and effectively in an indoor environment.

Indoor access point position management

Examples disclosed herein include accessing, by a host device, device information corresponding to an intermediate communication device communicatively coupled to the host device. Identifying, by the host device, a unique identifier corresponding to the intermediate communication device from the accessed device information. Query, by the host device, a public key from a remote resource, based on the identified unique identifier. Receiving, by the host device, the public key from the remote resource. Authenticating, by the host device, the intermediate communication device based on the received public key and a private key stored in the intermediate communication device.

Authenticating an intermediate communication device

Examples include scanning for cellular channels from various cellular service providers. Identifying cellular channels corresponding to cellular service providers. Recording a set of operating parameters for the cellular channels. Evaluating the cellular channels based on the set of operating parameters. Sorting the cellular service providers based on the evaluation of the cellular channels.

Evaluating cellular channels

Implementations of the present disclosure relate to resource allocation for clients of multiple co-hosted virtual access points (VAPs). A method comprises determining, by an access point (AP), a plurality of trigger frames for a plurality of clients connected to a plurality of VAPs of the AP based at least in part on respective workload levels of the plurality of clients. A trigger frame indicates a resource unit of one of the plurality of VAPs available for at least one corresponding client to access to the VAP. The method also comprises transmitting, by the AP, the plurality of trigger frames in parallel to the plurality of clients. By transmitting separate trigger frames for different clients in parallel, the efficiency of trigger frames can be improved and higher quality of service and lower collision will be provided.

Resource allocation for clients of multiple co-hosted VAPs

Examples described herein relate to deferred authentication in secure boot systems. An untrusted component is identified in a boot sequence in a trusted execution environment. A secure boot authentication of the untrusted component is deferred for a predetermined period and access to hardware resources is restricted. An image digest and privilege rights including access to hardware resources associated with the untrusted component is obtained in an untrusted execution environment. A request including the image digest and the privilege rights is sent to a central node over a secure connection. A response including a signature based on image digest and approved privileges is received from the central node. The untrusted component is authenticated in the trusted execution environment using the signature before expiry of the predetermined period. Access to the hardware resources is provided to the untrusted component in the trusted execution environment based on the approved privileges.

Deferred authentication in a secure boot system

Systems and methods are provided for detecting the presence of a hidden camera on a network. When video is encoded and transmitted over/across a network, the data packet carrying the video tend to exhibit certain characteristics or features specific to video traffic from a hidden camera. A machine learning model for detecting the presence of a hidden camera can be trained based on these characteristics and features. Once trained, the machine learning model can be operationalized on an access point that can analyze real-time network traffic to determine whether a hidden camera(s) is operating on the network.

Systems and methods for wireless camera detection

Examples described herein provide multi-band channel scanning. Examples may include transmitting, by a first radio of a first network device operating at a first frequency band below the millimeter-wave (mmWave), a beacon frame indicating a particular scanning channel of a second frequency band within the mmWave, receiving, by a second radio of the first network device operating the second frequency band, a probe request from a second network device via the particular scanning channel, wherein the probe request is in response to the beacon frame received by the second network device, and in response to the probe request, transmitting, by the second radio of the first network device, a probe response in each of one or more sector transmitting directions via the particular scanning channel.

Multi-band channel scanning

Implementations of the present disclosure relate to resource unit (RU) assignment to combat frequency selective fading. A method comprises determining, at an access point (AP), a plurality of channel qualities of a plurality of resource units (RUs) for a client. The plurality of RUs are configured to be available for communications with a plurality of clients comprising the client. The method further comprises determining, from the plurality of RUs, a target RU for the client based at least in part on the plurality of channel qualities. The target RU is to be used by the client for a following transmission with the AP. A target RU with good channel quality will be assigned to the client, thus the transmission and overall system performance will be enhanced.

Resource unit assignment for selective fading

Examples of techniques for optimizing Neighbour Report (NR) are disclosed. In an example, a first virtual access point (VAP) operating in a 2.4 Giga Hertz (GHz) or 5 GHz band may determine a first Service Set Identifier (SSID) of the first VAP operating in a 2.4 GHz or 5 GHz band. The first VAP may identify a set of co-located VAPs operating in a 6 GHz band. The first VAP may filter the set of co-located VAPs to obtain a neighbour list comprising a second VAP, from the set, having a second SSID identical to the first SSID. Using the neighbour list, the first VAP may generate a Neighbour Report.

Optimizing neighbour report for access points

Examples described herein provide multi-band directional scanning. Examples may include receiving, by a first radio of a first network device operating at a first frequency band below the millimeter-wave (mmWave), a probe request from a second network device indicating a protocol and a particular sector receiving direction of the second network device, and in response to the protocol indicated by the probe request, transmitting, by a second radio of the first network device operating at a second frequency band within the mmWave, a probe response in each of one or more sector transmitting directions, wherein the second network device receives one or more probe responses in the particular sector receiving direction.

Multi-band directional scanning

Systems and methods for improving the performance and stability of bonding radios are provided. One method includes receiving a packet from a client device. Next, the method includes determining whether the received packet is an expected next packet and transmitting the received packet to a next destination if the received packet is the expected next packet. In an event the received packet is not the expected next packet, transmitting the received packet to a queue, setting a timer to wait for the expected next packet, and transmitting a message to the sender of the received packet requesting that the expected next packet be sent.

Growing community of inventors

Beijing, China

Jianpo Han