公开(公告)号：US20210314365A1

公开(公告)日：2021-10-07

申请号：US17351004

申请日：2021-06-17

申请人： Ned M. Smith ,  Jose Benchimol ,  Andrew Draper

发明人： Ned M. Smith ,  Jose Benchimol ,  Andrew Draper

IPC分类号： H04L29/06 ,  G06F11/34

摘要： Various examples of device and system implementations and methods for performing end-to-end attestation operations for multi-layer hardware devices are disclosed. In an example, attestation operations are performed by a verifier, including: obtaining layered attestation evidence regarding a state of a compute device, with the layered attestation evidence including attesting evidence provided from a second hardware layer of the compute device, such that the attesting evidence provided from the second hardware layer is generated from attesting evidence provided from a first hardware layer of the compute device to the second hardware layer of the compute device; obtaining endorsement information relating to the layered attestation evidence for the state of the compute device; determining an appraisal policy for performing attestation of the compute device from the layered attestation evidence; and applying the appraisal policy and the endorsement information to the layered attestation evidence, to perform attestation of the compute device.

公开(公告)号：US20220224776A1

公开(公告)日：2022-07-14

申请号：US17711742

申请日：2022-04-01

申请人： Kshitij Arun Doshi ,  Francesc Guim Bernat ,  Ned M. Smith

发明人： Kshitij Arun Doshi ,  Francesc Guim Bernat ,  Ned M. Smith

IPC分类号： H04L67/5681 ,  H04L43/0852 ,  G06F12/0897 ,  G06F12/0891

摘要： The present disclosure is related to managing a caching system based on object fetch costs, where the fetch cost are based on the access latency, cache misses, and time to reuse of individual objects. The caching system may be a multi-tiered caching system that includes multiple storage tiers, where an object management system determines whether to retain or evict an object from a cache of a particular storage tier based on the object's fetch cost. Additionally, eviction can include moving objects from a current storage tier to another storage tier based on the current storage tier and fetch costs.

公开(公告)号：US20220222359A1

公开(公告)日：2022-07-14

申请号：US17711542

申请日：2022-04-01

申请人： Kshitij Arun Doshi ,  Francesc Guim Bernart ,  Ned M. Smith

发明人： Kshitij Arun Doshi ,  Francesc Guim Bernart ,  Ned M. Smith

IPC分类号： G06F21/60

摘要： System and techniques for fault tolerant telemetry of distributed devices are described herein. A node includes a hardware component that receives telemetry from an entity resident on the node. The hardware component signs the telemetry with a cryptographic key to create signed telemetry and stores the signed telemetry in memory of the hardware component. Then, upon request from a remote entity, the hardware component provides the signed telemetry.

公开(公告)号：US20220114055A1

公开(公告)日：2022-04-14

申请号：US17559877

申请日：2021-12-22

申请人： Kshitij Arun Doshi ,  Francesc Guim Bernat ,  Christian Maciocco ,  Ned M. Smith ,  S M Iftekharul Alam ,  Satish Chandra Jha ,  Vesh Raj Sharma Banjade ,  Alexander Bachmutsky

发明人： Kshitij Arun Doshi ,  Francesc Guim Bernat ,  Christian Maciocco ,  Ned M. Smith ,  S M Iftekharul Alam ,  Satish Chandra Jha ,  Vesh Raj Sharma Banjade ,  Alexander Bachmutsky

IPC分类号： G06F11/14 ,  G06F9/50 ,  G06F9/455

摘要： Systems and techniques for transparent dynamic reassembly of computing resource compositions are described herein. An indication may be obtained of an error state of a component of a computing system. An offload command may be transmitted to component management software of the computing system. An indication may be received that workloads to be executed using the component have been suspended. An administrative mode command may be transmitted to the component. The administrative mode command may place the component in partial shutdown to prevent the component from receiving non-administrative workloads. Data of the component may be synchronized with a backup component. Workloads from the component may be transferred to the backup component. An offload release command may be transmitted to the software of the computing system.

公开(公告)号：US20220014466A1

公开(公告)日：2022-01-13

申请号：US17484125

申请日：2021-09-24

申请人： Kshitij Arun Doshi ,  Srikathyayani Srikanteswara ,  Francesc Guim Bernat ,  Ned M. Smith

发明人： Kshitij Arun Doshi ,  Srikathyayani Srikanteswara ,  Francesc Guim Bernat ,  Ned M. Smith

IPC分类号： H04L12/747 ,  H04L29/08 ,  H04L29/06

摘要： System and techniques for information centric network tunneling are described herein. At an ICN router, a data handle for data—that includes an indication of security metadata—is received. The security metadata is obtained based on the data handle and the data is cached based on the security metadata. An ICN node at an interface of the ICN router is tested for compatibility with the security metadata and a version of the data is transmitted to the ICN node based on the compatibility of the ICN node with the security metadata.

公开(公告)号：US20210328783A1

公开(公告)日：2021-10-21

申请号：US17358474

申请日：2021-06-25

申请人： Kshitij Arun Doshi ,  Francesc Guim Bernat ,  Srikathyayani Srikanteswara ,  Ned M. Smith

发明人： Kshitij Arun Doshi ,  Francesc Guim Bernat ,  Srikathyayani Srikanteswara ,  Ned M. Smith

IPC分类号： H04L9/08

摘要： System and techniques for decentralized key generation and management are described herein. An information centric network (ICN) node receives a first ICN interest packet for public encryption parameters of an identity based encryption (IBE) key generation center (KGC). Public encryption parameters for the KGC are received in a first ICN data packet in response to the first ICN interest packet. The public encryption parameters are cached and used to respond a second ICN interest packet for the public parameters. A third ICN data packet may be received from the KGC in response to a key generation request. Here, the third data packet includes an indication that the third ICN data packet is part of a one-time session. Then, the third ICN data packet is transmitted without caching the third ICN data packet content based on the indication.

公开(公告)号：US20210011765A1

公开(公告)日：2021-01-14

申请号：US17028809

申请日：2020-09-22

申请人： Kshitij Arun Doshi ,  Francesc Guim Bernat ,  Ned M. Smith ,  Christian Maciocco

发明人： Kshitij Arun Doshi ,  Francesc Guim Bernat ,  Ned M. Smith ,  Christian Maciocco

IPC分类号： G06F9/50 ,  G06F9/48

摘要： Systems and techniques for adaptive limited-duration edge resource management are described herein. Available capacity may be calculated for a resource for a node of the edge computing network based on workloads executing on the node. Available set-aside resources may be determined based on the available capacity. A service request may be received from an application executing on the edge computing node. A priority category may be determined for the service request. Set-aside resources from the available set-aside resources may be assigned to a workload associated with the service request based on the priority category.

公开(公告)号：US20190325737A1

公开(公告)日：2019-10-24

申请号：US16456716

申请日：2019-06-28

申请人： Hassnaa Moustafa ,  Eve M. Schooler ,  Maruti Gupta Hyde ,  Jeffrey Christopher Sedayao ,  Ned M. Smith ,  S. M. Iftekharul Alam ,  Satish Chandra Jha

发明人： Hassnaa Moustafa ,  Eve M. Schooler ,  Maruti Gupta Hyde ,  Jeffrey Christopher Sedayao ,  Ned M. Smith ,  S. M. Iftekharul Alam ,  Satish Chandra Jha

IPC分类号： G08G1/01 ,  H04L29/08 ,  H04W4/46 ,  H04W4/44 ,  G08G1/0967 ,  H04W4/38

摘要： Systems and techniques for information centric network (ICN) high definition (HD) map distribution are described herein. For example, a vehicle may detect a map tile event (e.g., moving into an area for which the vehicle does not have an up-to-date map tile). The vehicle may transmit an interest packet a name for the map tile via an ICN and receiving the map tile in a data packet sent in response to the interest packet.

公开(公告)号：US20190158300A1

公开(公告)日：2019-05-23

申请号：US16235894

申请日：2018-12-28

申请人： Dario Sabella ,  Ned M. Smith ,  Neal Oliver ,  Kshitij Arun Doshi ,  Suraj Prabhakaran ,  Miltiadis Filippou ,  Francesc Guim Bernat

发明人： Dario Sabella ,  Ned M. Smith ,  Neal Oliver ,  Kshitij Arun Doshi ,  Suraj Prabhakaran ,  Miltiadis Filippou ,  Francesc Guim Bernat

IPC分类号： H04L12/14 ,  H04M15/00 ,  H04L29/08

摘要： An architecture to allow Multi-Access Edge Computing (MEC) billing and charge tracking, is disclosed. In an example, a tracking process, such as is performed by an edge computing apparatus, includes: receiving a computational processing request for a service operated with computing resources of the edge computing apparatus from a connected edge device within the first access network, wherein the computational processing request includes an identification of the connected edge device; identifying a processing device, within the first access network, for performing the computational processing request; and storing the identification of the connected edge device, a processing device identification, and data describing the computational processes completed by the processing device in association with the computational processing request.

公开(公告)号：US20190141610A1

公开(公告)日：2019-05-09

申请号：US16235685

申请日：2018-12-28

申请人： Dario Sabella ,  Ned M. Smith ,  Neal Oliver ,  Kshitij Arun Doshi ,  Suraj Prabhakaran ,  Francesc Guim Bernat ,  Miltiadis Filippou

发明人： Dario Sabella ,  Ned M. Smith ,  Neal Oliver ,  Kshitij Arun Doshi ,  Suraj Prabhakaran ,  Francesc Guim Bernat ,  Miltiadis Filippou

IPC分类号： H04W48/08 ,  H04L29/06 ,  H04L29/08 ,  H04W4/44 ,  H04W88/16

摘要： Various systems and methods for enhancing a distributed computing environment with multiple edge hosts and user devices, including in multi-access edge computing (MEC) network platforms and settings, are described herein. A device of a lifecycle management (LCM) proxy apparatus obtains a request, from a device application, for an application multiple context of an application. The application multiple context for the application is determined. The request from the device application for the application multiple context for the application is authorized. A device application identifier based on the request is added to the application multiple context. A created response for the device application based on the authorization of the request is transmitted to the device application. The response includes an identifier of the application multiple context.