Abstract: Techniques are disclosed for configuring network device resources and determining locality of virtual machines in a virtual network of a cloud computing environment. Usage data for computing resources in the computing network is collected. Based on the collected usage data, a time-based usage profile for the computing resources in the computing network is determined. A periodic component in the time-based usage profile is determined. Based on the periodic component, distribution of VMs is determined or the buffer size of network devices is configured.

Abstract: The present subject matter discloses a system and method for optimizing data communication of Internet of Things (IoT) devices. The system comprises a collection of IoT devices, an IoT server, a management console, third party IoT gateways and user devices. The IoT device is connected to a sensor or an actuator. The IoT device identifies attributes of the sensor or the actuator. Further, the IoT device receives raw data generated by the sensor or the actuator. Subsequently, the IoT device defines data types for the raw data based on the attributes and define bit stream storage for the data types. The IoT device may optimize data-transmission size of the data types and bit stream storage using a communication protocol and transmit the raw data to the IoT server. The IoT server may transcode the raw data into a desired format and relay transcoded data to a management console.

Abstract: Memory with efficient storage of event log data is disclosed herein. In one embodiment, a memory device includes a non-volatile memory subsystem storing a persistent event log file, and a volatile memory subsystem including a working buffer. The memory device is configured to write newly generated event log data of the memory device to the working buffer. The memory device is further configured to write the newly generated first event log data to a first subregion of the persistent event log file. The first subregion can be one of a plurality of subregions of the persistent event log file, and can correspond to an end of event log data stored to the persistent event log file. The volatile memory subsystem can be positioned inside or outside a controller operably connected to the non-volatile memory subsystem.

Abstract: A method of detecting the onset of a ransomware attack is presented. In an example embodiment, file backup metadata for each of a plurality of computing devices is accessed and analyzed to detect anomalous file backup activity of individual ones of the computing devices. A determination is made as to whether the detected anomalous file backup activity of at least some of the computing devices is correlated in time. File description metadata for each of the computing devices is also accessed and analyzed to identify files in the computing devices that are anomalous to other files in the computing devices. A determination whether a ransomware attack has begun is based on a determination that the detected anomalous file backup activity of at least some of the computing devices is correlated in time, as well as on the identified anomalous files.

Abstract: Disclosed embodiments include systems and computer-implemented methods to provide media content from a media server associated with a vehicle servicing system to a media presentation device associated with a vehicle via a local network. In an illustrative embodiment, a system includes a media presentation device including: a processor; and computer-readable media configured to store computer-executable instructions configured to cause the processor to: responsive to detecting that the media presentation device is communicatively couplable to a vehicle servicing system, communicatively couple the media presentation device to a media server associated with the vehicle servicing system via a local network; provide the media presentation device with access to media content available via the media server; and retrieve the media content via the media server and the local network.

Abstract: Techniques and architecture are described grouping various sources of traffic within a network into grouping fields and assigning each combination of grouping field values an aggregate identification (ID). A first hop edge router may receive a packet and search a mapping table for a corresponding aggregate ID for the combination of grouping field values within the mapping table. If not found, the first hop edge router may assign a corresponding aggregate ID for the combination of grouping field values and store the new aggregate ID for the combination of grouping field values in the mapping table. The first hop edge router may forward the packet on through the network with the aggregate ID embedded in metadata. Routers within the network may measure and aggregate flow metrics of the packet within the network based on the aggregate ID and provide the measurements to the network controller.

Abstract: A method for implementing information sharing includes receiving shared information of another user equipment and location information corresponding to the shared information, where the location information indicates a location for the shared information to be displayed on a desktop of another user equipment; and displaying the shared information according to the location information. Information or a desktop can be shared in real time between two or more user equipments, so that a user of a user equipment is capable of tracing the status of a user of another user equipment and acquiring information on the shared desktop in real time.

Abstract: A method for trusted node election. The method includes: identifying a database cluster implemented on a node subset of a plurality of nodes forming a data center; receiving node state from each node in the node subset; and electing, for the database cluster and from the node subset, a trusted node based on the node state from each node in the node subset and a database cluster type of the database cluster.

Abstract: Example implementations relate to consensus protocols in a stretched network. According to an example, a distributed system includes continuously monitoring network performance and/or network latency among a cluster of a plurality of nodes in a distributed computer system. Leadership priority for each node is set based at least in part on the monitored network performance or network latency. Each node has a vote weight based at least in part on the leadership priority of the node. Each node's vote is biased by the node's vote weight. The node having a number of biased votes higher than a maximum possible number of votes biased by respective vote weights received by any other node in the cluster is selected as a leader node.

Abstract: A method and system for providing textual insights on objects deployed in a cloud environment are provided. The method includes collecting object data on objects deployed in the cloud environment, wherein objects are deployed and operable at different layers of the cloud environment; identifying objects deployed in the cloud environment; constructing a visual representation of the cloud environment, including the identified objects and their relationships; and generating textual insights on the identified objects and their relationships using natural language processing.

Abstract: A sensor arrangement comprises a communication device and a sensor element. The sensor element is configured to record a property and provide a sensor signal that represents the property. The sensor arrangement comprises a security element configured to provide a secret. The sensor arrangement is configured to link the sensor signal to the secret to obtain a linked sensor signal, transmit the linked sensor signal to a communication partner using the communication device, obtain a test signal from the communication partner using the communication device, and perform a check to determine whether the test signal comprises the secret.

Abstract: A wireless supernetwork (WiSNET), or a superintegrated network, allows multiple network technologies to plug and play into one open wired and wireless network, particularly serving dense user environments. WiSNET allows the redirection of independently deployed technologies and provides improved network efficiency, affordability, and user convenience. In embodiments, WiSNET integrates input data from two or more disparate service providers. The WiSNET includes a service delivery system, a data aggregation system that provides aggregated input data, and a local delivery system that transmit the aggregated input data to multiple categories of user via a superintegrated access platform. A superintegrated management system enables assignment of a network slice and/or a service slice to each of a plurality of user profiles.

Abstract: Systems and methods for capturing and correlating multiple sources of debugging information relating to a network resource and a client device via a browser extension are provided. A browser extension integrated within a browser running on a client device, receives a request to initiate capturing of debugging information relating to a potential bug associated with a network resource with which an end user is interacting via the browser, and in response to the first request, starts capturing the debugging information from multiple sources and correlates the multiple sources to facilitate time-synchronized playback. On receipt of a second request, the browser extension stop capturing debugging information, and creates a single compressed file containing the debugging information collected from the multiple sources. The single compressed file may then be shared with a second device, which can playback the correlated debugging information.

Abstract: A method on a device in a content delivery (CD) network (CDN) that distributes content on behalf of one or more subscribers. In response to receiving configuration information from a subscriber, the configuration information relating to at least one property of the subscriber, generating subscriber-specific platform configuration information for the at least one property. Storing the subscriber-specific platform configuration information in platform configuration storage. Invalidating prior platform configuration information associated with the particular subscriber. Responsive to a request from a CDN component for platform configuration information associated with the particular subscriber: obtaining the subscriber-specific platform configuration information from the platform configuration storage; and providing the subscriber-specific platform configuration information to the CDN component.

Abstract: Systems and methods for a mixed deployment architecture are provided. A data center system may include a core compute grid system and a plurality of distributed compute grid systems. The core compute grid system may provide one or more non-distributable services for a payment service provider, such as a database service, and may include one or more isolated environment zones. Each distributed compute grid system provides one or more distributable services for the payment service provider, and each distributed compute grid system provides an identical set of distributable services. The data center system also includes a network coupling the core compute grid system and plurality of distributed compute grid systems. The plurality of distributed compute grid systems transmit queued writes generated by the distributable services to the database service provided by the core compute grid system.

Abstract: A network-accessible toolbox permits collaborative annotation, facilitating interaction and communication among users. In an implementation, content on a Web page, or other page or document accessible through a network or the Internet, can be annotated. A user can view the page and with the toolbox, select content on the page and make an annotation or suggestion. Multiple users can view and make annotations to the same page at the same time. After annotations are made, users can view the page with annotations made by other users. The author or owner of the page can accept or reject the annotations or suggestions made to the page. If the owner accepts a particular suggestion, the selected content is replaced with the suggestion.

Abstract: A control apparatus is communicably connected to a first apparatus to perform a control on the first apparatus. The control apparatus includes a data collecting unit, a collection interval determining unit, and a storing unit. The data collecting unit collects, by polling and from the first apparatus, data in order to perform the control. The collection interval determining unit determines, based on a setting content of the control, a collection interval of the data collected by the data collecting unit. The control apparatus performs a plurality of the controls on one first apparatus. The storing unit stores, for each of the controls, one data item or a plurality of data items constituting the data. The storing unit further stores, for each of the data items, the collection interval.

Abstract: A content selection server including a processor configured to receive personal preference information from a plurality of personal media devices, select content based on the personal preference information, and provide playback of the content.

Abstract: Time randomizing information protocol language encryption, provides systems, methods, computer programs and algorithms for encrypting communications. Provided by software in devices or firmware in networking hardware cooperates between at least two systems. Ciphers are randomly timed and replaced after a random period rendering eavesdropper decryption efforts ineffective and/or uneconomic. Ciphers may be based on common seed data sets, or on pointers to an array containing seed data. These seed data values, or pointers to them may be used in communications in shared transient languages. Languages may include number bases from binary on upwards, and characters used in human or machine languages. One implementation may convert human speech to text, then encrypt and transmit it, for decryption and conversion to synthetic speech in secure battlefield communications, or secure identity protected communications as may suit intelligence agencies.

Abstract: A method for execution by one or more computing devices of a storage network includes identifying a storage unit of a set of storage units for testing, where a data segment of data is error encoded into a set of encoded data slices that is stored in the set of storage units. The method further includes determining whether a threshold number of favorably performing other storage units of the set of storage units will be available during the testing. When the threshold number of favorably performing other storage units will be available, the method further includes initiating the testing of the storage unit and setting a status of the storage unit to unavailable. When the testing has been completed, the method further includes updating the status of the storage unit to available. The method further includes generating a testing report regarding the testing of the storage unit.

Abstract: Network services are deployed in a networked environment in association with a user account. Dependencies of a network service, such as other network services, may be identified based on an online analysis and an offline analysis of the network service. Further, anomalies associated with the dependencies may be identified in some situations. A call graph may include nodes corresponding to the network services and its dependencies, and may include an identifier corresponding to a part of the call path that has the anomaly. An inspection of the call graph allows software developers to readily recognize that their service depends on a potentially flawed software that may cause a service failure or outage.

Abstract: A three dimensional neural network accelerator that includes a first neural network accelerator tile that includes a first transmission coil, and a second neural network accelerator tile that includes a second transmission coil, wherein the first neural network accelerator tile is adjacent to and aligned vertically with the second neural network accelerator tile, and wherein the first transmission coil is configured to wirelessly communicate with the second transmission coil via inductive coupling.

Abstract: The migration method includes dividing each service system in a first cloud system into a plurality of modules; determining the relation between a module to be migrated among the plurality of modules and other modules; copying said module among the plurality of modules to a second cloud system, the type of the first cloud system being different from that of the second cloud system; and establishing a relation in the second cloud system to complete the migration of the first cloud system. The nature and gist of the present disclosure is that the migration of a module to be migrated in the first cloud system is completed by establishing the association relation of the module to be migrated in the second cloud system.

Abstract: Systems and methods of managing a Bluetooth SigMesh network involve a supervisor configured to monitor one or more network parameters of the SigMesh network, such as topology, message identity, transmit count, transmit interval, relay retransmit count, or relay retransmit interval. The supervisor determines whether one or more of the network parameters are to be adjusted for improving transmission efficiency, reducing traffic congestion, avoiding flooding of packets on the mesh network, or ensuring injection of packets in the SigMesh network. The supervisor provides feedback to one or more nodes with the adjusted network parameters to improve transmission efficiency and reduce traffic in the SigMesh network.

Abstract: A vehicular communication controller includes a microcontroller (MCU) located within a vehicle to generate, by a software component, a find service request to discover an offered service from one or more systems on a chip (SoC). The MCU may generate a service message packet that includes the find service request inserted into a payload of the find service message packet where the payload is bound to an automotive/embedded communication protocol. Using unicast or multicast, the find service message packet may be sent to one or more SoC receiving devices. The SoC receiving devices may deserialize the header and payload of the find service message packet to retrieve the find service request and generate a service directory message based on service metadata and publish a cloud event including a solicited response that is sent back to the software component.

Abstract: Aspects of the disclosure relate to data loss prevention. A computing platform may detect input of a first target recipient domain into a first email message. The computing platform may identify, in real time and prior to sending the first email message, that the first target recipient domain is an unintended recipient domain instead of an intended recipient domain. The computing platform may identify, in real time and prior to sending the first email message, that the first email message violates one or more data loss prevention rules. Based on identifying the violation, the computing platform may send a notification that the first target recipient domain is flagged as an unintended recipient domain and one or more commands directing a user device of the message sender to display the notification.

Abstract: Case management systems and techniques are disclosed. In various embodiments, a case model definition defining a case model is received. The case model comprises a hierarchical permissions model comprising a plurality of hierarchical permission nodes, the plurality of hierarchical permission nodes including a first hierarchical permission node associated with a parent case node and having an associated first case role and a first permission for the first role, and a second hierarchical permission node associated with a child case node. At run time, the first permission with respect to a case instance instantiated using the case model definition is enforced. Enforcing the first permission comprises applying the first permission to a request to perform a first action on an instance of the child case node based on the first case role and first permission.

Abstract: The described technology is generally directed towards network slice pre-configuration for cellular communication systems, including 5G and subsequent generation cellular communication systems. Network equipment can be preconfigured to identify whether a network slice identifier included in a network communication belongs to a group of network slice identifiers. If so, the network equipment can process the network communication either according to a network slice rule that corresponds specifically to the network slice identifier, or according to a default group network slice rule for the group to which the network slice identifier belongs. Different groups of network slice identifiers can be associated with different sets of group network slice rules which can be arranged to reduce the work of setting up network slice identifiers in various network slicing scenarios.

Abstract: A method of transporting equipment modules to an incident scene with an comprises: determining an initial location of the incident scene; dispatching an ambulance loaded with the autonomous mobile response unit and a plurality of equipment modules to the initial location; determining a refined location of the incident scene; selecting a first equipment module; dispensing the first equipment module from the ambulance onto the autonomous mobile response unit; deploying the autonomous mobile response unit from the ambulance at the initial location; communicating the refined location of the incident scene to the autonomous mobile response unit; generating, with the navigation system, a drive path from the initial location to the refined location; and driving, with the drive system, the autonomous mobile response unit loaded with the first equipment module based on the drive path such that the autonomous mobile response unit travels from the initial location to the refined location.

Abstract: A method for managing network service response times by a client device is provided. The client device determines whether a network service of a service provider is reachable or active and determines a service response time of the service provider. The client device communicates to the service provider a request to establish a conditional connection based on an average accept service time of a connection and a maximum service response time.

Abstract: A distributed transaction system for enabling users to conduct transactions using services from third party service providers includes a central processing center with one or more communications interfaces to facilitate transactions initiated by users at a plurality of kiosks wherein each of the kiosks includes a user interface enabling a user to access a user selected service and a data store for storing configurations associated with services provided by the third party service providers, whereby a user interfaces with one or more of physical system resources of the kiosk to open a user identity session such that the kiosk is operative to facilitate at least one first user action with the physical resources to initiate a financial transaction and the central processing center is operative to execute at least a second action to facilitate the transaction and to communicate with a financial institution.

Abstract: Embodiments as disclosed provide systems and methods that use a local authenticator within a domain to provide a credential to access a resource of the domain to a non-local requestor. When a request is received from a non-local requestor at the domain the non-local requestor can be authenticated based on the request. The local authenticator can then be accessed to obtain a credential. This credential may be the same type of credential provided to members of the domain when they authenticate using the local authenticator. The credential is provided to the non-local requestor so the non-local requestor can access the resource of the domain using the credential and authentication of the non-local requestor with respect to these accesses can be accomplished using the local domain authenticator and the credential.

Abstract: In one embodiment, a method comprises: generating and maintaining, by a replicator device in a secure peer-to-peer data network, a secure private key and secure public key; establishing a two-way trusted relationship with a second replicator device for a pairwise topology of two-way trusted replicator devices; establishing a two-way trusted relationship with a first endpoint device based on validating a secure attachment request using the secure private key, and obtaining a second secure public key of the first endpoint device; validating, using the second secure public key, a secure data packet from the first endpoint device and destined for the second endpoint device, and obtaining information for reaching the second endpoint device via the second replicator device; and securely signing the secure data packet, received from the first endpoint device and destined for the second endpoint device, into a secure forwarded packet for secure transmission to the second replicator device.

Abstract: Systems and methods for providing a container network interface (CNI) specification that has been modified with a set of annotations, a set of operations, and a set of policies to provide network configuration reuse, network configuration replication, and database management (garbage collection) functionality are described. In response to receiving a request to initiate a function, whether the function is to be reused or replicated may be determined. In response to determining that the function is to be reused, calling a container network interface (CNI) plugin with a first operation that decouples database functions from network functions, so that the database can cache and reuse a network configuration generated for the function. In response to determining that the function is to be replicated, calling the CNI plugin with a second operation to create the network configuration and generate and store a template of the network configuration in the database.

Abstract: An Internet of Things (IoT) network includes an orchestrator to issue service management requests, a service coordinator to identify components to participate in the service, and a component to perform a network service element. An IoT network includes an IoT device with service enumerator, contract enumerator, and join contract function. An IoT network apparatus includes permissions guide drafter for discovered peers, and permissions guide action executor. An IoT network apparatus includes floating service permissions guide drafter for discovered hosts, host hardware selector, floating service permissions guide executor, and service wallet value transferor. An IoT network apparatus includes permissions guide drafter for first and second discovered peers, parameter weight calculator, permissions guide term generator, and permissions guide action executor.

Abstract: Systems, methods, and non-transitory computer readable media are provided for providing a redundancy tool for performing transactions. A transaction to be performed on a data stored in a database may be received. A timestamp may be assigned to the transaction. A lock may be assigned on the timestamp. The transaction may be performed on the data. The lock may be refreshed while performing the transaction on the data. A validity of the lock may be checked at after performing the transaction on the data. Responsive to the lock being valid, a result of performing the transaction on the data may be committed.

Abstract: A method for managing operation of a mobile application, the application being operable in different modes, comprises obtaining a current value of a performance indicator of a network to which a mobile computing device is attached; map, based on a rule set, the value of the performance indicator to an optimal operating mode of the application and/or to at least one action; and cause the application to switch to the optimal operating mode, initiate the action, or prompt a user to switch the application to the optimal operating mode or initiate the action.

Abstract: Provided is a computer-implemented method for performing analysis of transaction data. The method may include receiving streaming data, wherein the streaming data comprises a plurality of data identifiers and transaction data associated with each transaction of a plurality of transactions, wherein each data identifier is associated with transaction data associated with a transaction so that the transaction data associated with each transaction is separated by a data identifier, filtering the streaming data using at least one predetermined data identifier value to provide filtered transaction data, determining whether the filtered transaction data corresponds to at least one predetermined transaction parameter, and asynchronously storing the filtered transaction data associated with the at least one transaction in at least one data structure. A system and computer program product are also disclosed.

Abstract: Systems and methods for a shared virtual environment are provided. The systems and methods include a unique architecture where domains known as “islands” are replicated across various local machines. These islands include objects that publish events. These events include messages that are provided from the island's controller, to a reflector for the addition of a timestamp. The timestamp ensures computational synchronization between all mirrored islands. The timestamped messages are provided from the reflector back to the controllers of the various islands. The controllers incorporate these messages into the existing message queue based upon the message timing. The local machines then execute the messages in time order, until the external message indicates. These timestamp “heartbeats” thus dictate the execution activity across all islands and ensure synchronization of all islands.

Abstract: Systems and methods are provided for managing multiple software applications. A browser-based application interface portal provides users a single, unified portal for accessing software applications running on different operating systems, hosted servers, and third party servers, as well as web applications. The executed applications may then be integrated into the portal. The data retrieved from external web applications may be filtered, reformatted, and restyled to provide only the information of interest to the user and to provide a more consistent interface for the information.

Abstract: Disclosed in embodiments of the present invention are an interaction method and apparatus, and an electronic device. A specific embodiment of the method comprises: in response to a creation instruction, presenting a display area for a new file indicated by the creation instruction, wherein the display area is used for displaying file content of the new file for a multi-media conference, and the file content is edited by a target having editing permissions; and updating, on the basis of an editing operation of the target having the editing permissions, the file content presented in the display area. Therefore, a new interaction mode for a multi-media conference is provided.

Abstract: A method for fetching a content from a web server to a client device is disclosed, using tunnel devices serving as intermediate devices. The client device accesses an acceleration server to receive a list of available tunnel devices. The requested content is partitioned into slices, and the client device sends a request for the slices to the available tunnel devices. The tunnel devices in turn fetch the slices from the data server, and send the slices to the client device, where the content is reconstructed from the received slices. A client device may also serve as a tunnel device, serving as an intermediate device to other client devices. Similarly, a tunnel device may also serve as a client device for fetching content from a data server. The selection of tunnel devices to be used by a client device may be in the acceleration server, in the client device, or in both.

Abstract: In a cloud computing environment, a unified application messaging service of an enterprise computing platform enables application developers to rapidly develop and deploy application software using existing message broker services across heterogeneous user systems/devices communicating using different connection/communication protocols. The unified application messaging service includes a connection protocol registrar/tracker logic and a device list maintained with the most current polling status and connection protocol that a user system/device is currently using.

Abstract: Implementations set forth herein relate to rendering, at a message application, certain messages with a particular sorting scheme (e.g., a classification-based sorting scheme) based on the certain messages having transfer times that satisfy a transfer time threshold and, optionally, based on the certain messages being unread. Other messages rendered by the message application can be rendered with an alternative sorting scheme, such as chronologically. Utilization of the particular sorting scheme for the certain messages enables a user, viewing the messages, to review (e.g., reply-to, delete, and/or view) the certain messages with reduced latency, thereby allowing the certain messages to be more quickly reviewed and actioned when received.

Abstract: Techniques for providing recommendations of actions for a user to perform to improve efficiency in user interactions with a user interface of a user computing device. An intelligent monitoring (IM) computing system may receive data from a user computing device and may determine user interactions associated with the user interface. The user interactions may include selections, an order associated with the selections, times associated with the selections, and/or other data corresponding to user interaction with a user interface. The IM computing device may be configured to determine a fault (e.g., inefficiency) associated with the user interactions and determine an action for the user to perform to correct the fault. The IM computing device may cause a notification including the action to surface on a display of the user computing device, such as to inform the user of a means by which they can improve efficiency of the user interactions.

Abstract: A method for saving an email to an electronic storage location is disclosed. A topic identifier located in the email is used to locate a storage location on the electronic storage device for saving the email message. Emails relating to the same topics of interest may be stored in the same storage location.

Abstract: A method may include receiving an indication of an available updated container. The method may also involve identifying one or more compute surfaces comprising a first container and a second container that correspond to the available container, such that the first container may control one or more operations of an operational technology (OT) device. The method may also include scheduling a deployment of the updated container to replace the second container, receiving expected output data associated with a digital model associated with the OT device, and scheduling a switchover of control of the one or more operations to the second container based on the expected output data.

Abstract: Job report objects (Java objects) are created by task executors in connection with implementation of a job on a storage system. The Java objects are passed to a job report service that converts the Java objects into XML objects using an XML encoder/decoder. The XML objects are persisted by the job report service as text in a database. If a job report is requested, the job report service retrieves a job record for the corresponding report from the database, creates Java objects, and passes the Java objects to a storage system management client. The client creates an internal model of the report containing a corresponding set of strongly typed TypeScript objects. The TypeScript objects are passed to a pdf data exporter that converts the internal TypeScript objects into untyped JavaScript objects. The untyped JavaScript objects are input to a .pdf generator which generates the requested report as a .pdf document.

Abstract: Described is hard link handling when a directory snapshot exists that includes the hard link's connected file object. A hard link is created by allocating a virtual inode number for the hard link, with the virtual inode number mapped to a real inode number that identifies a real inode of the file object; the hard link is assigned weight. A total weight associated with the real inode is increased by the hard link weight, and a hard link data store is updated with an entry for the hard link. Upon receiving data write request to the hard link, weight data determines that the file object is shared as a result of the snapshot; the hard link is disassociated from the real inode file, and associated with a new real inode number and new real inode of a new file object. The data is written based on the new real inode.

Abstract: A method involves receiving authentication module configuration data at a user device from a remote management platform. User credentials are received at the authentication module of the user device using a graphical user interface. The user credentials are transmitted to a remote identity provider service. Upon receiving a response indicating that the user credentials are authenticated by the remote identity provider service, the user credentials are transmitted to an operating system authentication module at the user device. Upon receiving a response indicating that the user credentials are not authenticated by the operating system authentication module, previously-stored user credentials are retrieved from an encrypted credential database at the user device. The user credentials are stored at an operating system credential database using the previously-stored user credentials. The user credentials are retransmitted to the operating system authentication module to authenticate the user at the user device.