Comcast Cable Communications, LLC

Yiu Leung Lee

Charles Allen Helfinstine

Chris Wendt

Franklyn Athias

Alain D Durand

Ivan Ong

Nagesh Nandiraju

Thomas Modayil Jacob

Agustin Schapira

Bin Wen

Joseph Crowe

Methods and apparatus are disclosed that enable information about devices connected behind a gateway, such as a home gateway, to be made available to and used by other entities, such as servers and routers, on a communications network.

Managing network packet flows based on device information

Described herein are methods and systems for improved domain name resolution/routing. Routing data associated with domain names (e.g., websites) may be cached by a Domain Name System (DNS) based on historical domain name queries. The historical domain name queries may be analyzed to determine a ranking (e.g., popularity) for the domain names at multiple time intervals throughout a day, week, etc. Routing data for the highest ranked domain names during one or more time intervals may be cached for a period(s) of time corresponding to the one or more time intervals (e.g., times during which those domain names are most popular).

Systems, methods, and apparatuses for improved domain name resolution

A computing device may request service from a service provider, and authorization to receive the service may be based, at least in part, on a network access device that is providing the computing device with network access. The service provider may request a value from the computing device, and the value may be based on address information of the computing device and the network access device.

Embedded authentication in a service provider network

An encrypted message comprising a DNS request may be received from a client device. The DNS request may be decrypted to determine an IP address and a port associated with the client device. A security token may be determined based on the IP address and the port. A message comprising an indication of the DNS request and the security token may be sent to a DNS server. A reply comprising a payload and the security token may be received from the DNS server. Based on the security token, an indication of the payload of the reply may be sent to the client device.

Systems and methods for secure communication

A network device (e.g., a server, a domain name system (DNS) server, a DNS over Hypertext Transfer Protocol Secure (HTTPS) server (DoH server), a network management device, etc.) may determine a time duration, such as a time duration, based on a request for a communication session from a device. In response, the network device may determine a modified time duration for the communication session based on a type of the device, type of user associated with the device, and/or type of an application requesting the communication session.

Methods and systems for communication session management

Aspects of the disclosure include determining a data rate and a latency of one or more packets associated with a buffer, and adapting a size of the buffer based on the data rate or latency. The size of the buffer may also be adjusted differently based on its current size. For example, the size of the buffer may be increased by a greater amount if its current size is relatively small, or it may be decreased by a greater amount if its current size is relatively large. To determine how to adjust the buffer, the data rate may be compared to a data rate threshold and the latency may be compared to a latency threshold.

Adaptive buffer control

A computing device may receive, based on a scan of a bar code associated with a device, information associated with the bar code. The information may be used to retrieve a dedicated activation service set identifier (SSID), which may be sent to one or more gateways. A first gateway may indicate that it is connected to the device using the dedicated activation SSID, and the device may be connected to the first gateway using a specific SSID that is different from the dedicated activation SSID.

Device provisioning

Systems and methods for provisioning and managing resources are disclosed. Methods can comprise determining whether a first condition is met based upon a first characteristic relating to one or more of a user device and a first network device. Association between the user device and the first network device can be granted if the first condition is met; association can be denied otherwise. Service can be provided to the user device via the first network device if the first network device is configured to meet a second condition. The second condition can be based upon a second characteristic relating to one or more of the user device and the first network device. The user device can be caused to associate with a second network device if the first network device is not configured to meet the second condition.

Provisioning and managing resources

A firewall service for a cloud computing environment is described that uses an application identifier-based ruleset to process data packets. An application identifier-based rule may provide an action to be taken on a received packet based on the source application identifier, the destination application identifier, and/or an identification token associated with the source application. A firewall controller may verify applications of the computing environment, provide unique application identifiers, and manage the application identifier rules for one or more firewalls of the computing environments.

Firewall system with application identifier based rules

Systems and methods are described herein for managing peering relationships and applying peering policy between service providers and content distribution networks. Aspects discussed herein relate to establishing secure peering connections between service providers to exchange application and/or network information. In some embodiments, an application peering manager may apply peering policy based on token information or other suitable information configured to uniquely identify an application and/or subscriber. In other embodiments, policy enforcement points or other elements residing within a network may be configured to accept and/or apply peering policy to application sessions.

Application peering

Systems and methods for providing services are disclosed. One aspect comprises determining a plurality of services to be provided over a first communication path to a destination, determining a select service of the plurality of services to be provided over a failover path to the destination, detecting a failure of the first communication path, and routing the select service over the failover path in response to the failure of the first communication path.

Intelligent network

An apparatus, method, system and computer-readable medium are provided for converting traffic of a first communication type to traffic of one or more additional communication types. Multicast communications may be supported. One or more communication paths may be established to support transmitting data to one or more client devices in the multicast group.

Growing community of inventors

Philadelphia, PA, United States of America

Yiu Leung Lee