Providing a virtual machine includes receiving a first request from a first client device, the request comprising information related to accessing one of a plurality of virtual machines, wherein the first client device is associated with a user; and also receiving a first location of the first client device. The method also includes stopping an existing virtual machine, from among the plurality of virtual machines, that is currently executing that is associated with the user; and based on the first location of the first client device, providing a first virtual machine, from among the plurality of virtual machines, to the first client device. At any given time instant there will be only one virtual machine running for a user in hypervisor memory and that one virtual machine is based on a current location of that user.

A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The tunnel device is selected based on an attribute, such as IP Geolocation. A tunnel bank server stores a list of available tunnels that may be used, associated with values of various attribute types. The tunnel devices initiate communication with the tunnel bank server, and stays connected to it, for allowing a communication session initiated by the tunnel bank server. Upon receiving a request from a client to a content and for specific attribute types and values, a tunnel is selected by the tunnel bank server, and is used as a tunnel for retrieving the required content from the web server, using standard protocol such as SOCKS, WebSocket or HTTP Proxy. The client only communicates with a super proxy server that manages the content fetching scheme.

In one example in accordance with the present disclosure, a system for smart location determination includes a session information accessor to access session information that details a session of a user system as it connects to a web technology server. The system includes a knowledge base that includes known common session information of multiple geographic locations. The system includes a session information comparator to compare the accessed session information to the knowledge base, and based on the comparison, determine a geographic location of the user system or verify an alleged geographic location.

Methods related to determining and utilizing one or more attributes to associate with an IP addresses. Attributes are determined based on request data provided with requests from an IP address and one or more available secondary information sources. Attributes may include physical locations and/or category designations for the IP address. One or more attributes may be assigned a likelihood value indicative of likelihood that the attribute is associated with the IP address. Some implementations are directed to utilizing the attributes and likelihood values to identify likely fraudulent information provided with requests. Some implementations are directed to utilizing the attributes and likelihood values to provide advertisements in response to requests from IP addresses.

A smart tag and methods of interacting with and authenticating interactions with the same are provided. The smart tag (308) is enabled to generate a Tag Authentication Cryptogram (TAC) and include the TAC in a data signature transmitted (S305) to a reading device (304). The data signature can be forwarded by the reading device (304) to an authentication service (340) that will issue a valid signature certificate (S309) if the TAC is determined to be unique and correct. Upon receiving the valid signature certificate, the reading device (304) can validate other data read from the smart tag (308) based on the increased trust relationship between the smart tag (308) and reading device (304).

Techniques for providing access control in environments that may become disconnected, as a whole, from other networks (e.g., on-board a vehicle) may include locally storing access control information within the dis-connectable environment, and locally providing discovery and authentication/authorization services. Local services and/or applications may be registered and authenticated and client applications may be authenticated and/or authorized to one or more locally provided services and/or applications even when the environment is in a disconnected state. Local access control information may be synchronized with source access control information stored externally to the environment (e.g., on the ground). These techniques may easily support different dis-connectable environments that are provided by an environment service provider, as well as support different sets of locally provided public and/or private services and/or applications and different sets of client applications across the different environments.

According to one embodiment of the invention, a method comprises an operation of determining, by a first digital device, a location of a second digital device providing a network service. Thereafter, information is provided to a digital device requesting the network service based on the determined location of the second digital device.

The present disclosure relates to a method and system for guaranteeing website resource utilization rate using a content delivery network. The method includes following steps: receiving a domain name resolution request sent by a local domain name server; monitoring a resource load of a website source site corresponding to the domain name resolution request; utilizing monitoring data and according to a predetermined strategy to determine whether a result of the domain name resolution request is an address of the website source site or a content delivery network system; and sending a domain name resolution result to the local domain name server.

A network device configured to perform scalable, in-network computations is described. The network device is configured to process pull requests and/or push requests from a plurality of endpoints connected to the network. A collective communication primitive from a particular endpoint can be received at a network device. The collective communication primitive is associated with a multicast region of a shared global address space and is mapped to a plurality of participating endpoints. The network device is configured to perform an in-network computation based on information received from the participating endpoints before forwarding a response to the collective communication primitive back to one or more of the participating endpoints. An injection policy comprising the issuing of credits enables each endpoint to limit the amount of collective communication primitives injected into the network simultaneously to reduce network congestion caused by increased network traffic due to the multicast capability of the network devices.

Methods, devices, and systems for generating a plurality of network addresses for a plurality of communication devices communicating over a network. One method includes receiving, with an electronic processor included in a server, geographical coordinates of the network, generating, with the electronic processor, a first set of bits based on the geographical coordinates, generating, with the electronic processor, a second set of bits based on a random number, and generating, with the electronic processor, a baseline address including the first set of bits and the second set of bits. The method also includes generating the plurality of network addresses, wherein each of the plurality of network addresses includes the baseline address and a unique offset. In addition, the method includes assigning one of the plurality of network addresses to one of the plurality of communication devices.