Intel Corporation

Novell, Inc.

Emc Corporation

Mcafee, Inc.

Kshitij Arun Doshi

Francesc Guim Bernat

Ned M Smith

Mark A Schmisseur

Kapil Sood

Rajesh Poornachandran

Elmoustapha Ould-Ahmed-Vall

Christian Maciocco

Satish Chandra Jha

Karthik Kumar

John Joseph Browne

Vincent J Zimmer

Andrew J Herdrich

Nageen Himayat

Christopher J Hughes

Srikathyayani Srikanteswara

Bret L Toll

Ravi L Sahita

Glen J Anderson

Hong Wang

Ravishankar Iyer

Michael Lemay

Per H Hammarlund

Gad Shlomo Sheaffer

Raj K Ramanujan

David M Durham

Ren Wang

Ali-Reza Adl-Tabatabai

Sanjeev N Trika

Thomas Willhalm

Rahul Khanna

Vinodh Gopal

Jill MacDonald Boyce

Mohan J Kumar

Rita H Wouhaybi

Suraj Prabhakaran

Vadim Sukhomlinov

Timothy Verrall

Daniel Rivas Barragan

Alexander Bachmutsky

S M Iftekharul Alam

Vesh Raj Sharma Banjade

Tarun Viswanathan

Suleyman Sair

Marcos Emanuel Carranza

Raghu R Kondapalli

Dario Sabella

Katalin Klara Bartfai-Walcott

Miltiadis Filippou

Quinn Able Jacobson

Susanne M Balle

Mats Gustav Agerstam

Lokpraveen B Mosur

Mona Vij

Liuyang L Yang

Matthew C Merten

Deborah T Marr

John P Shen

Kuilin Clark Chen

Yi Zhang

Alex Nayshtut

Ignacio Javier Alvarez

Hassnaa Moustafa

Bratin Saha

Gautham N Chinya

Mark D Yarvis

Sanjay Bakshi

Evan Custodio

Eve M Schooler

Patrick G Kutch

Edwin Verplanke

Manoj R Sastry

Tsung-Yuan Charles Tai

Shilpa Talwar

Robert G Blankenship

Baiju V Patel

Igor G Muttik

Sujoy Sen

Giuseppe Beppe Raffa

Yang-Seok Choi

Sara S Baghsorkhi

Debra Bernstein

Marcio Rogerio Juliato

Jr-Shian Tsai

Omesh Tickoo

Utkarsh Y Kakaiya

Javier Felip Leon

Carolyn Bennion McClain

Mingqiu Sun

Maruti Gupta Hyde

Stephen T Palermo

Ian M Steiner

Ilango S Ganga

David Gomez Gutierrez

Narayan Ranganathan

Rameshkumar G Illikkal

Kenneth D Shoemaker

Ravikumar Balakrishnan

Andrey Chilikin

Jeffrey D Chamberlain

A system is disclosed for quarantining and recovery of a network after an outage or in advance of a potential outage. Unaffected network slices are isolated and recovery is initiated by quarantine physical and virtual network functions. An AI model is trained based on recent events detected by sensors disposed throughout the network to determine whether to quarantine network slices, move services to unaffected network slices, or initiate recovery. Once the network is stabilized, resources that are specifically allocated for recovery and services are released and the traffic moved back to the recovered network slices.

Quarantine control network in a 5G RAN for coordinated multi-layer resiliency of network slice resources

Various systems and methods for enabling derivation and distribution of an attestation manifest for a software update image are described. In an example, these systems and methods include orchestration functions and communications, providing functionality and components for a software update process which also provides verification and attestation among multiple devices and operators.

Attestation manifest derivation and distribution using software update image

An apparatus of an edge gateway disclosed herein includes an access evaluator to determine whether a data access attempt, if permitted, will cause data specified in the data access attempt to cross a data boundary, the data boundary associated with at least one condition to be met before the data specified in the data access attempt will be permitted to cross the boundary. The apparatus further includes an operations determiner to determine an operation to be applied to the data for which access is being attempted, in response to determining the data access attempt will cause the data to cross the data boundary, and an operation applier to apply the operation to the data. The application of the operation to the data causes the condition to be met, so that the data access occurs in conformance with the condition.

Methods, apparatus and systems to enforce data boundaries through the use of boundary labels

Various systems and methods for providing secure and resilient configuration upgrades are described herein. A system, includes a processor; and memory to store instructions, which when executed by the processor, cause the system to: receive at a resilient security island (RSI) partition of a first network node, an update from a source, the first network node hosting the RSI partition and a host partition, the RSI comprising reserved hardware resources of the first network node; verify, by the RSI, provenance of the update; apply, by the RSI, the update to modify a configuration of the RSI or the host partition; test, by the RSI, the modified configuration of the RSI or the host partition; and provide a cryptographic proof that the test was completed and an update status to an update coordinator.

Mechanism for secure and resilient configuration upgrades

Methods, apparatus, systems, and articles of manufacture are disclosed to improve mobile edge platform resiliency. An example apparatus includes memory, instructions, and processor circuitry to execute the instructions to initiate a search for one of an access point or a cluster head at a first time, in response to detection of the cluster head, initiate an intra-cluster mobile edge platform (MEP) mutual authentication associated with the cluster head, cause transmission of historical activity data to at least one MEP associated with the cluster head, and cause storage of an authentication metric in a secure storage, the authentication metric based on historical connectivity data.

Methods, systems, articles of manufacture and apparatus to improve mobile edge platform resiliency

Examples include techniques for artificial intelligence (AI) capabilities at a network switch. These examples include receiving a request to register a neural network for loading to an inference resource located at the network switch and loading the neural network based on information included in the request to support an AI service to be provided by users requesting the AI service.

Techniques for artificial intelligence capabilities at a network device

Various systems and methods for implementing computational storage are described herein. An orchestrator system is configured to: receive, at the orchestrator system, a registration package, the registration package including function code, a logical location of input data for the function code, and an event trigger for the function code, the event trigger set to trigger in response to when the input data is modified; interface with a storage service, the storage service to monitor the logical location of the input data and notify a location service when the input data is modified; interface with the location service to obtain a physical location of the input data, the location service to resolve the physical location from the logical location of the input data; and configure the function code to execute near the input data.

Computational storage in a function-as-a-service architecture

Systems and techniques for storage-class memory device including a network interface are described herein. A write for a network communication is received by the host interface of the memory device. Here, the network communication includes a header. The header is written to a non-volatile storage array managed by a memory controller. A network command is detected by the memory device. Here, the network command includes a pointer to the header in the non-volatile storage array. The header is retrieved from the non-volatile storage array and a packet based on the header is transmitted via a network interface of the memory controller.

Storage class memory device including a network

Methods, apparatus, systems, and articles of manufacture are disclosed for data resiliency in an edge network environment. An example apparatus includes at least one memory, instructions in the apparatus, and processor circuitry to at least one of execute and/or instantiate the instructions to generate spectrum metadata based on spectrum data, determine a resiliency operation based on one or more resiliency requirements, generate a resiliency policy based on at least one of the resiliency operation or the one or more resiliency requirements, generate a resiliency operation map based on at least one of the resiliency policy or first identifiers of respective workloads associated with the network environment, the first identifiers including a second identifier, and, in response to identifying a FAFO event associated with the second identifier, execute the resiliency operation based on mapping the second identifier to the resiliency operation in the resiliency operation map.

Systems, apparatus, and methods for data resiliency in an edge network environment

A digital twin model is generated for physical nodes of an edge network. The digital twin model includes a digital twin for a physical node of the physical nodes. An error is identified of the physical node or the digital twin for the physical node. The digital twin model is updated to halt communication with the physical node or the digital twin of the physical node. A path is created to another physical node or a digital twin of the another physical node in the digital twin model.

Digital twin framework for next generation networks

Examples described herein relate to an Infrastructure Processing Unit (IPU) that comprises: interface circuitry to provide a communicative coupling with a platform; network interface circuitry to provide a communicative coupling with a network medium; and circuitry to expose infrastructure services to be accessed by microservices for function composition and to selectively provide a barrier to halt operation of at least one microservice based on event data from a composite node that performs the at least one microservice.

Infrastructure processing unit

Methods, apparatus, systems, and articles of manufacture are disclosed to increase resiliency in self-healing mechanisms. At least one non-transitory machine-readable medium comprises instructions that, when executed, cause at least one processor to at least partition computational resources of a first host into a primary partition and a shadow partition, the primary partition to communicate with a second host, apply a fix for the primary partition, determine if the primary partition can communicate with the second host during the application of the fix, cause, in response to the determination that the primary partition cannot communicate with the second host during the application of the fix, the shadow partition to communicate with the second host; and transfer communication with the second host from the shadow partition to the primary partition, the transfer in response to a determination that the application of the fix is complete.

Methods and apparatus to increase resiliency in self-healing mechanisms

Various aspects of methods, systems, and use cases include security-based orchestration. A method may include evaluating, within a secure environment of an untrusted device, a preamble to determine a set of security requirements. The method may include, providing, to an attestation server, an indication of security parameters for services of the untrusted device corresponding to security requirements of the set of security requirements, and in response to receiving a confirmation from the attestation server, providing a request to the untrusted device outside the secure environment to generate a trusted domain including the services.

Network supported low latency security-based orchestration

Various approaches for implementing multi-tenant data protection are described. In an edge computing system deployment, a system includes memory and processing circuitry coupled to the memory. The processing circuitry is configured to obtain a workflow execution plan that includes workload metadata defining a plurality of workloads associated with a plurality of edge service instances executing respectively on one or more edge computing devices. The workload metadata is translated to obtain workload configuration information for the plurality of workloads. The workload configuration information identifies a plurality of memory access configurations and service authorizations identifying at least one edge service instance authorized to access one or more of the memory access configurations. The memory is partitioned into a plurality of shared memory regions using the memory access configurations. A memory access request for accessing one of the shared memory regions is processed based on the service authorizations.

Multi-tenant data protection in edge computing environments

A computing device includes a direct memory access (DMA) engine coupled to a memory, a network interface, and processing circuitry. The processing circuitry is to perform a secure exchange with a second computing device to negotiate a shared encryption key, based on a request for data received via the network interface from the second computing device. The DMA engine is to retrieve the data from a storage location based on an encryption command. The encryption command indicates the storage location. The DMA engine is to encrypt the data based on the shared encryption key to generate encrypted data, and store the encrypted data in the memory.

Cryptographic data processing using a DMA engine

Growing community of inventors

Tempe, AZ, United States of America

Kshitij Arun Doshi