Samsung Electronics Co., Ltd.

Future Wei Technologies, Inc.

Hireteammate, Inc.

Huawei Technologies Co., Limited

Xinwen Zhang

Onur Aciicmez

Jean-Pierre Seifert

Ravishankar Ravindran

Guo-Qiang Wang

Simon J Gibbs

Sangoh Jeong

Anugeetha Kunjithapatham

Guoqiang Wang

Afshin Latifi

Asit Chakraborti

Qingwei Ma

Doreen Cheng

Guo Qiang Wang

Haiqing Jiang

Guangyu Shi

Sau Man Lo

Victoria S Coleman

Varun Shimoga Prakash

Liang Xie

Jinlin Xu

Renuka Srinivasan

Xin Ru Wang

Xiao Hu Liu

Changwook Lee

Peng Ning

Haiyong Xie

Qingji Zheng

Xiao Zhang

Antontius Kalker

Jun Wei

Suyong Yang

Shuo Wang

Bin Zhao

Xingze He

Pavan Kumar Emani

Ravi Ravindran

John Waclawsky

Zhengyi Le

Arun Venkatesan

Jiwei Wei

Huijun Xiong

Junho Ha

Wookhee Min

Alice Lee Chu

Joshua Schiffman

Sungwhan Moon

Wenjuan Xu

Kukjin Bae

Masoom Alam

Rongdan Liu

Dingbang Xu

Trisha Biswas

Jiwel Wei

Xiao Liu

A data object can be represented based on multiple 'tags' (e.g., multiple signatures provided as a cluster of signatures based on multiple tags of a data model). Essentially, the representation of the data object need not necessarily reflect the entire data object but it can provide a useful indication (or a signal) (e.g., 's40={computer vision, image analysis, tracking, detection, 3d}'), In addition, a data representation provided (e.g., signature or cluster of signatures) can represent multiple data objects. However, a data object can be represented by multiple tags (e.g., signatures) as well. Also, multiple tags can be used to collectively represent a data object. The tags can provide information in an organized and logically structured manner. For example, a cluster signature can be provided with strings of one or more words (e.g., keywords) concatenated with logical operators (e.g., AND, OR, NOT).

Generating and using multiple representations of data objects in computing systems and environments

A networking system comprising a virtual group controller in an information centric network configured to enable mobility and security for a plurality of users groups of the information centric network, a plurality of user groups coupled to the virtual group controller and associated with the users, a plurality of agents that are each associated with one of the user groups, and a database for trusted service profile coupled to the virtual group controller, wherein the virtual group controller is configured to interact with the agents to enable mobility for the user groups using a server-less domain-based naming scheme.

Mapping scheme employed in an information centric network to manage domain-based security and mobility

An apparatus and method for generating an application container are provided. The method includes selecting a target application from among a plurality of applications included in an electronic device, acquiring a policy file corresponding to the target application, determining whether the policy file includes a category of the target application, and executing the application container which includes the target application.

Method and apparatus to sandbox run-time android applications with lightweight container

A system and method are presented for providing generic single sign-on in an electronic device. Information is received that identifies one or more applications and associated identity authenticators and a whitelist of the identified applications and authenticators is created. A request for an access token is received from a requesting application. If the requesting application is listed in the whitelist, an authenticator associated with the requesting application is determined and a request for an access token is sent to the associated authenticator. In response to the request, an access token is received from the authenticator and the access token is sent to the requesting application. If the requesting application is not listed in the whitelist, a predefined response message is sent to the requesting application.

System and method for a generic single sign-on function

An apparatus and method to authorize Application Programming Interface (API) or method level access in system and application services are provided. The method includes receiving a request for access to a service from another service or an application via an interface accessible by the other service or the application, and determining whether to authorize the request based at least in part on a specified policy.

Service authorization methods and apparatuses

An embodiment discloses an electronic device capable of performing an upgrade to an Operating System (OS) having enhanced security without deleting any user data in an electronic device having an OS and a method of operating the same. An embodiment discloses a method of upgrading an OS of an electronic device. The method includes detecting operating system upgrade initiation. The method also includes generating labeling information on each piece of user data; and relabeling the user data based on the labeling information.

Method and apparatus for upgrading operating system of electronic device

A network node, comprising a receiver configured to receive a request for a service, wherein the request comprises a hierarchically structured name comprising a root and a suffix, a data storage component comprising a network synchronized policy rule associated with a service name root, wherein the network synchronized policy rule is applied to any request for a service whose name comprises a root matching the service name root, and a processor coupled to the receiver and to the data storage component, wherein the processor is configured to apply the network synchronized policy rule to the request, wherein the processor is configured to synchronize service definitions and service policies with other nodes in a network based on the name of the service, and wherein the network synchronized policy rule is synchronized with the other nodes in the network using name-based routing.

Method and apparatus for policy based routing in information centric networking based home networks

Various disclosed embodiments include methods, systems, and computer-readable media for named data network (NDN) inter/intra-domain mobility. A complete de-coupling of identity and addressing space is established. This provides separation of control and forwarding allowing rich policy based routing, using SDN principles, as well as policy based global resolution. In one embodiment, the de-coupling of identity from location is achieved by a changeable forwarding label field in a header that can have nodal/domain/global scope. This disclosure provides content routing/mobility to be handled with a high degree of flexibility. This disclosure also provides mobility as a service for a component of a name space.

Method and apparatus for scalable content routing and mobility in named data networks

A method implemented by an edge node in an optical network, the method comprising receiving one or more information centric networking (ICN) service flows, each of which is identifiable by a service label, determining at least one optical resource to be provisioned to the one or more service flows based on the one or more service labels, converting the one or more ICN service flows to one or more optical flows, and transmitting the one or more optical flows using the at least one optical resource.

Mapping information centric networking flows to optical flows

Techniques for allocating individually executable portions of executable code for execution in an Elastic computing environment are disclosed. In an Elastic computing environment, scalable and dynamic external computing resources can be used in order to effectively extend the computing capabilities beyond that which can be provided by internal computing resources of a computing system or environment. Machine learning can be used to automatically determine whether to allocate each individual portion of executable code (e.g., a Weblet) for execution to either internal computing resources of a computing system (e.g., a computing device) or external resources of an dynamically scalable computing resource (e.g., a Cloud). By way of example, status and preference data can be used to train a supervised learning mechanism to allow a computing device to automatically allocate executable code to internal and external computing resources of an Elastic computing environment.

Execution allocation cost assessment for computing systems and environments including elastic computing systems and environments

A content router, comprising a plurality of physical links to other nodes in an information centric network, a receiver coupled to the plurality of physical links configured to receive messages, a transmitter coupled to the plurality of physical links configured to transmit messages, and a service publishing and discovery (SPD) module comprising a processor and memory device coupled to the receiver and to the transmitter, wherein the SPD is configured to store status updates of the physical links, wherein the SPD is configured to determine a next hop and a number of hops to forward a received message based on a prefix in a name-based service discovery protocol name of a received message.

Name-based neighbor discovery and multi-hop service discovery in information-centric networks

A network component comprising a receiver configured to receive an advertisement for a content name for content associated with a list of secured router identifiers (SRIDs) that indicates a plurality of content routers authorized for routing and caching the content, a processor configured to determine whether to flood the advertisement to a plurality of neighboring nodes if a locally assigned SRID is included in the list of SRIDs received in the advertisement or to drop the advertisement otherwise, a transmitter configured to flood the advertisement on a plurality of ports coupled to the neighboring nodes, and a storage configured to cache received content if the received content is associated with the locally assigned SRID.

Selective content routing and storage protocol for information-centric network

Various disclosed embodiments include methods, devices and systems establishing secure discovery and secure communication in an ad hoc information-centric network (ICN). An application in a consumer device sends a discovery interest including an associated service name or prefix encrypted by an encryption key using the ICN. A producer device publishing and discovery protocol (SPDP) on an ICN stack of the producer device receives the discovery interest and verifies the consumer device using the encryption key. The producer device SPDP returns a data protocol data unit (PDU) to the consumer device configured to enable the consumer device to access the published service, and the consumer device establishes routing with the producer device and receives the local published service.

Method and apparatus for secure ad hoc group device-to-device communication in information-centric network

Control plane to manage domain-based security and mobility in an information centric network

Growing community of inventors

San Jose, CA, United States of America

Xinwen Zhang