British Telecommunications Public Limited Company

British Telecommunications Corporation

Khalifa University

Emirates Telecommunications Corporation

Kokusai Denshin Denwa Co., Ltd.

Mark A Shackleton

Fabrice Saffre

Fadi El-Moussa

William John Welsh

Richard MacKenzie

Anvar Tukmanov

Fabrice T P Saffre

David J T Heatley

Sébastien Matthieu René Nicolas

Hanno Hildmann

Peter Healey

Atsushi Koike

Simon Giles Thompson

Yoshinori Hatori

Masahide Kaneko

Edmund S R Sikora

Jane E Tateson

Cefn R Hoile

Christopher M Roadknight

Fabio Giubilo

A computer implemented method to determine a security configuration for a target virtual machine (VM) in a virtualized computing environment, the method including training a machine learning algorithm to determine a vector of security vulnerabilities for the target VM based on a vector of configuration characteristics for the target VM, the machine learning algorithm being trained using training examples each including a configuration for a training VM and an associated vulnerability vector based on an observed security occurrence at the training VM, wherein each training example further includes an identification of one of set of security configurations for the training VM; selecting at least a subset of the set of security configurations and, for each security configuration in the subset, executing the machine learning algorithm with the vector of configuration characteristics for the target VM and an identification of the security configuration, so as to generate a set of vulnerability vectors including a vulnerability vector for each security configuration in the selected subset; and selecting a security configuration for the target VM based on the set of vulnerability vectors.

Security configuration determination

A computer implemented method to generate training data for a machine learning algorithm for determining security vulnerabilities of a virtual machine (VM) in a virtualized computing environment is disclosed. The machine learning algorithm determines the vulnerabilities based on a vector of configuration characteristics for the VM.

Dynamic security policy

A computer implemented method of sharing a data message containing multiple data fields between a provider computer system and a consumer computer system, wherein the provider and consumer computer systems have mutual mistrust, is disclosed.

Data message sharing

In a wireless network formed of short range femtocells, each femtocell provides wireless connectivity to user equipment devices and the user equipment can move around the topographical range covered by the network by handing over to a neighboring femtocell. Due to the limited range of a femtocell, there will be coverage gaps. If the device moves to a location not covered by a femtocell, it will try to connect to a macrocell of a different wide area cellular network until it is within range of another femtocell network. To minimize handovers from the femtocell network to the macrocell network, each femtocell is arranged to analyze historic log data to detect coverage gaps experienced by the user equipment as it moves along a user equipment route and try to close the gaps by increasing the coverage range of femtocells on either side of the coverage gap to close the gap.

Wireless network configuration

This disclosure provides a method of allocating a resource in a network of small cells, and a device for implementing the method, the method comprising: a first small cell detecting that its resource demand exceeds its resource allocation; the first small cell selecting a new resource that is being used by a second small cell; and the first small cell allocating the new resource to either the first or second small cell, wherein the probability the new resource is allocated to the first small cell is based on the first small cell's resource demand.

Small cell resource allocation

This invention relates to methods and systems for limiting consumption, particularly power consumption, more particularly by appliances in a building, and is generally suitable for integration with building management systems. Embodiments of the invention provide arrangements in which the aggregated power load of a plurality of appliances is capped to a selected value (which may be arbitrary, or may be dictated by conditions) while seeking to minimize the deviation from target environmental conditions within the building through a combination of distributed decision making by the appliances themselves and centralized orchestration, which may be informed by real-time sensor readings and/or known properties of the building. The distributed decision-making by individual devices may be based on projected deviation from the target conditions after a period of activity or inactivity but with a central controller which determines which devices should be switched on.

Method and system for limiting consumption

This invention relates to methods and systems for controlling consumption, particularly power consumption, more particularly by appliances in a building, and is generally suitable for integration with building management systems. Embodiments of the invention provide methods and systems which probabilistically limit the aggregated power load of a plurality of climate control appliances in a building to a selected value, while seeking to minimize the deviation from target environmental conditions within the building. The embodiments of the invention propose distributed decision-making by individual devices based on projected deviation from the target conditions after a period of activity or inactivity.

Method and system for controlling consumption

A method of automatically distributing data messages to members of a user community involves selecting, from a list of distribution rules, a rule which meets certain criteria in terms of message distribution characteristics. The selected rule determines which members of the user community will receive the message and when. For example, in a first round, a first subset of the user community receive the message and each is prompted to provide feedback data in relation to the message, for example to say that the message is offensive, already answered or if there is someone else who can deal with the message. This feedback data is applied to the selected distribution rule to determine to whom the message is sent in the next round. The process continues over a number of rounds until a termination criterion is met.

Distributing data messages to successive different subsets of group members based on distribution rules automatically selected using feedback from a prior selected subset

Methods and systems for allocating a network resource such as bandwidth between a plurality of network applications, comprising steps of obtaining, for each of said plurality of network applications, parameters defining a quality function indicative of quality of service obtainable as a function of the amount of said network resource available to that network application; and dividing a total available amount of said network resource into respective individual allocations to allocate to each respective network application such as to maximise a combined quality measure derived from a weighted sum of said quality functions.

Allocation of network resources

A virtual network has a plurality of nodes. Each node has the capability to provide a service to another node. Each node maintains a list for storing entries each representing a link to another node; each entry contains the address of the other node and a label identifying a service that that other node may provide. Each node also has a store for storing messages received from other nodes, these messages serving to propose a link and containing the identity of the node originating the message, a label identifying a service that that other node may provide and a label identifying a service that that other node requires. When a node needs a service that it is not itself able to provide, it searches the link list for a link having a label that matches the service needed, and in the event that such a link is found it transmits to the node identified by the link a message requesting the service. If, however, no such link is found, it searches the message store for a message identifying another node where the label identifying a service that that other node may provide matches the service needed and the label identifying a service that that other node requires matches the service that the node needing the service has the capability to provide. In the event that such a message is found it initiates the creation of a corresponding entry in the link list. If no such message is found, the node needing the service generates a message serving to propose a link and containing its own identity, a label identifying a service that it has the capability to provide and a label identifying the service that it needs.

Virtual networks

The location or identification of a waveguide is determined, in particular where a disturbance is applied to the optical waveguide. This is achieved by: (a) monitoring the waveguide at a first location to sense a disturbance along the waveguide; (b) causing a disturbance to the waveguide at a second location; (c) transmitting a sensor signal to the second location; and (d) inferring, from the sensor signal, the presence or identity of the waveguide at the second location.

Identifying or locating waveguides

The present invention relates to a sensing system, in particular to sensing system for sensing undersea seismic events. A vibration sensor is provided for sensing seismic vibrations on the sea bed is provided. The vibration sensor is electrically coupled to a transmitter unit, the transmitter unit being arranged to transmit, in use, an acoustic wave from which the presence of a seismic vibration can be inferred. The acoustic wave modulates light travelling along a nearby optical cable, the modulation being recovered at a distant monitoring station. A flotation arrangement is provide for retaining the transmitter unit in a raised position relative to the sea bed to facilitate the coupling of the acoustic wave to the optical cable.

Sensing system

An information processing system includes: a first data pool containing information in the form of data items; a plurality of processing elements disposed within the first data pool for processing data items; and a system controller arranged to control the processing elements to take selectively at least one data item from a plurality of data items in the first data pool of the processing elements is arranged to perform, autonomously and asynchronously, a respective operation on its selected at least one data item and produce a resultant data item, and to place the resultant data item into the first data pool. In a preferred embodiment, a second data pool is separated from the first data pool by a boundary and a transfer mechanism governs transfer of data items between the data pools. Input information is put into the second data pool by a user, and after the system has completed processing, output data is available in the second data pool, having been transferred from the first data pool under control of the transfer mechanism.

Growing community of inventors

Suffolk, United Kingdom

Mark A Shackleton