Enforcing data sovereignty policies in a cloud environment

    公开(公告)号:US11706229B2

    公开(公告)日:2023-07-18

    申请号:US17362735

    申请日:2021-06-29

    CPC classification number: H04L63/107 H04L63/0823 H04L63/20 H04L67/1097

    Abstract: Systems, methods, and computer-readable media for enforcing data sovereignty policies in a cloud environment are provided. An example method can include sending, by a cloud provider, to a government entity associated with a geographic area, a request for device certificates for nodes located within the geographic area; receiving device certificates for the nodes; creating a data sovereignty policy specifying that data associated with the government entity must be stored on nodes located within the geographic area; based on the device certificates, verifying those of the nodes that comply with the data sovereignty policy; and storing the data associated with the government entity on those of the nodes verified to comply with the data sovereignty policy.

    Location accuracy augmentation method with ultra wideband

    公开(公告)号:US11644525B2

    公开(公告)日:2023-05-09

    申请号:US17089119

    申请日:2020-11-04

    CPC classification number: G01S5/0249 G01S5/0036 G01S5/0244 H04B17/318 H04W4/80

    Abstract: A location server collects from access points at known locations in a venue, which is represented by grid locations defined by parameters accessible to the location server, (i) ultra wideband (UWB) location measurements for a UWB location technology based on UWB transmissions from mobile devices in the venue, and (ii) non-UWB location measurements for non-UWB location technologies based on non-UWB transmissions from the mobile devices. The location server associates the non-UWB location measurements for the non-UWB location technologies with the grid locations, using the UWB location measurements as reference measurements. The location server populates location calibration records for the grid locations of the venue with the non-UWB location measurements associated with the grid locations. The location server calibrates the non-UWB location technologies at the grid locations based on the non-UWB location measurements in the location calibration records associated with the grid locations.

    CLOUD-DELIVERED FIREWALL RULES FOR CONTROLLING COMMANDS SENT TO DEVICES BASED ON OPERATIONAL TOLERANCE LIMITS

    公开(公告)号:US20230042610A1

    公开(公告)日:2023-02-09

    申请号:US17397230

    申请日:2021-08-09

    Abstract: Techniques for a network controller associated with a firewall service to determine a network policy based on operational tolerances associated with a device, and cause the network policy to be provisioned at the firewall service where control commands, such as, for example, supervisory control and data acquisition (SCADA) commands, may be allowed or denied transmission to the device based on the operational tolerance(s) associated with the device. In some examples, the network controller may be configured as a manufacturer usage description (MUD) controller configured to transmit a MUD uniform resource identifier (URI), emitted by the device, to a MUD file server associated with the manufacturer of the device. The MUD file may be enhanced to include the operational tolerances associated with the device and transmitted back to the MUD controller where it may be parsed to determine a corresponding network policy.

    END-TO-END PATH SELECTION USING DYNAMIC SOFTWARE-DEFINED CLOUD INTERCONNECT (SDCI) TUNNELS

    公开(公告)号:US20230028646A1

    公开(公告)日:2023-01-26

    申请号:US17856593

    申请日:2022-07-01

    Abstract: Techniques for utilizing a cloud service to compute an end-to-end SLA-aware path using dynamic software-defined cloud interconnect (SDCI) tunnels between a user device and an access point-of-presence (POP) node and inter-POP tunnels of the SDCI. The cloud service may include a performance aware path instantiation (PAPI) component including a POP database for storing performance metrics associated with the POPs of the SDCI, an enterprise policy database for storing user specific policies, and/or a path computation component. The path computation component may compute the path, based on the user specific policies, performance metrics associated with the POP nodes, and/or real-time contextual data associated with the user device and/or destination device. The path may include a first tunnel between the user device and the most optimal access POP node of the SDCI and a second tunnel between the access POP node, through the internal POP nodes, and to the destination device.

    Prioritized scheduling for UWB ranging

    公开(公告)号:US11564057B2

    公开(公告)日:2023-01-24

    申请号:US17146838

    申请日:2021-01-12

    Abstract: Presented herein are techniques for scheduling Ultra-Wideband (UWB) anchors and mobile devices for client ranging. A control device can determine respective ranging priorities for a plurality of mobile devices, which are each assigned to at least one UWB anchor. The control device can obtain at least one collision mapping identifying, for a respective pair of the mobile devices, a collision probability that a UWB signal associated with a ranging procedure involving a first mobile device of the respective pair will collide with a UWB signal associated with a ranging procedure involving a second mobile device of the respective pair. The control device can establish a ranging schedule for the mobile devices and UWB anchors based on the respective UWB ranging priorities and the collision mapping(s). The control device can send at least one command to cause UWB ranging procedures to be performed according to the ranging schedule.

    MAPPING METHOD TO COMPENSATE FOR UWB COVERAGE GAPS

    公开(公告)号:US20220191814A1

    公开(公告)日:2022-06-16

    申请号:US17124020

    申请日:2020-12-16

    Abstract: A computer-implemented method includes first collecting, from wireless devices at known locations in a venue, first ultra wideband (UWB) location measurements obtained using a first location technique based on first UWB transmissions made by a mobile device at a first rate. The method also includes second collecting, from the wireless devices, second UWB location measurements obtained using a second location technique based on second UWB transmissions made by the mobile device at a second rate. The method further includes detecting that the mobile device is in a first UWB coverage hole for the venue with respect to the first UWB location measurements based on a first UWB coverage hole criterion. The method also includes, based on detecting, increasing the second rate relative to the first rate to obtain additional second UWB location measurements using the second location technique to compensate for the first UWB coverage hole.

    LOCATION ACCURACY AUGMENTATION METHOD WITH ULTRA WIDEBAND

    公开(公告)号:US20220137176A1

    公开(公告)日:2022-05-05

    申请号:US17089119

    申请日:2020-11-04

    Abstract: A location server collects from access points at known locations in a venue, which is represented by grid locations defined by parameters accessible to the location server, (i) ultra wideband (UWB) location measurements for a UWB location technology based on UWB transmissions from mobile devices in the venue, and (ii) non-UWB location measurements for non-UWB location technologies based on non-UWB transmissions from the mobile devices. The location server associates the non-UWB location measurements for the non-UWB location technologies with the grid locations, using the UWB location measurements as reference measurements. The location server populates location calibration records for the grid locations of the venue with the non-UWB location measurements associated with the grid locations. The location server calibrates the non-UWB location technologies at the grid locations based on the non-UWB location measurements in the location calibration records associated with the grid locations.

Patent Agency Ranking