Securing micro-services
    32.
    发明授权

    公开(公告)号:US10581873B2

    公开(公告)日:2020-03-03

    申请号:US15646389

    申请日:2017-07-11

    Abstract: A computing device running a local enforcement agent is configured to instantiate at least one application container at the computing device, where the at least one application container is part of a containerized application. The computing device is also configured to associate the local enforcement agent with the least one application container so that the local enforcement agent operates as an intra-application communication proxy for the least one application container. The local enforcement agent receives an intra-application Application Programming Interface (API) call that is sent to the at least one application container from a second application container that is part of the containerized application. The local enforcement agent is configured to analyze the intra-application API call for compliance with one or more security policies associated with the at least one container.

    RESILIENT SEGMENT ROUTING SERVICE HUNTING WITH TCP SESSION STICKINESS

    公开(公告)号:US20200067835A1

    公开(公告)日:2020-02-27

    申请号:US16673508

    申请日:2019-11-04

    Abstract: According to one aspect, a method includes obtaining a segment routing (SR) packet from an endpoint via a first router at a first server along a path, the SR packet including an SR list and a last address, the last address being an address of a requested service. The method also includes determining, at the first server, whether the requested service is available from the first server, wherein determining whether the requested service is available from the first server includes opening the SR packet, parsing an SR header of the SR packet, and performing a lookup in a service table. Finally, the method includes modifying the SR packet at the first server when it is determined that the requested service is not available from the first server; and forwarding the SR packet along the path.

    Distributed object storage
    34.
    发明授权

    公开(公告)号:US10545914B2

    公开(公告)日:2020-01-28

    申请号:US15408129

    申请日:2017-01-17

    Abstract: The disclosure provides a system, method and computer-readable storage device embodiments. Some embodiments can include an IPv6-centric distributed storage system. An example method includes receiving, at a computing device, a request to create metadata associated with an object from a client, creating the metadata based on the request and transmitting the metadata and an acknowledgment to the client, wherein the metadata contains an address in a storage system for each replica of the object and wherein the metadata can be used to write data to the storage system and read the data from the storage system. There is no file system layer between an application layer and a storage system layer.

    Unmanned aerial vehicle collision avoidance system

    公开(公告)号:US10464669B2

    公开(公告)日:2019-11-05

    申请号:US15192896

    申请日:2016-06-24

    Abstract: A system for collision avoidance includes memory storing instructions which, when executed, cause one or more processors to perform determining a direction of flight of a first drone, causing broadcasting, in the direction of flight based, a beamformed signal of beacon frames, determining a new flight direction of the same first drone, in response to the new flight direction, causing broadcasting of the beacon frames in the new flight direction, detecting second beacon frames from a second drone associated with a direction from which the second beacon frames are arriving; in response, causing the first drone to perform, without input from a pilot, one or more of a change in elevation, heading, speed, or type of operation, directed toward causing the first drone to follow a flight path that is separated from the second drone.

    Content distribution system cache management

    公开(公告)号:US10462055B2

    公开(公告)日:2019-10-29

    申请号:US14803162

    申请日:2015-07-20

    Abstract: Content distribution system cache management may be provided. First, a sync packet may be received by a cache server from a first server. The sync packet may include a list indicating a cache server where a chunk is to be stored and the address for the chunk. Next, an address for the chunk may be obtained by the cache server by parsing the sync packet. The cache server may then determine that the chunk is not stored on the cache server by using the address for the chunk. Next, in response to determining that the chunk is not stored on the cache server, a connection may be opened between the first server and the cache server. The cache server may then receive the chunk over the connection and cache the chunk on the cache server.

    Virtualized and automated real time video production system

    公开(公告)号:US10432987B2

    公开(公告)日:2019-10-01

    申请号:US15969397

    申请日:2018-05-02

    Abstract: Real-time metadata about a plurality of video streams, and information associated with a directed stream, is received. The information includes a plurality of time segments, where time segments correspond to a respective video stream selected by a director for display in the directed stream during the time segment. Additionally, it is determined, based on the information, that the directed stream will display a first video stream during a first time segment. Further, a subsidiary stream is generated for a first group of users. This involves determining to substitute a second video stream for the first video stream during the first time segment, based on real-time metadata and further based on a first set of rules associated with the first group of users. When the first time segment begins, the second video stream is outputted for display in the subsidiary stream.

    Information-centric networking (ICN) techniques for facilitating the shared transport of passengers or items

    公开(公告)号:US10158973B1

    公开(公告)日:2018-12-18

    申请号:US15662082

    申请日:2017-07-27

    Abstract: Techniques in an information-centric network (ICN) for facilitating the transport of passengers or items are described. In one illustrative example, a first mobile device is configured to operate as a mobile transportation-offering ICN endpoint device. The first mobile device may connect to one of a plurality of fixed-location ICN nodes in the ICN network. The first mobile device may communicate in the ICN network one or more interest packet messages indicating an interest in a passenger or item to transport. The interest in a passenger or item to transport may be indicated in, for example, a Named Data Object (NDO). The one or more interest packet messages may include current transportation route information indicating a current anticipated route of transportation for a current passenger or item. In response, the first mobile device may receive, from a second mobile device configured to operate as a mobile transportation-accepting ICN node, one or more response messages indicating an acceptance of the transport.

Patent Agency Ranking