Abstract: An efficient data storage system is described. An agent software application on computing devices in a first tier processes snapshot backups and pushes them to an appliance software application on a server in a second tier. The appliance software application processes archive backups and pushes them to cloud storage in a third tier. A cloud application on a management server receives storage policy specifications from customers and promulgates the policies to the agent software application and the appliance software application. The policy specifications include a snapshot specification including a snapshot time period for backups in the second tier and an archive specification including an archive time period for backups in the third tier. The backups are created efficiently such that if a file has not changed, a reference to a file is included in a storage set rather than the data file itself. This reduces the size of storage sets.

Abstract: A file is transferred between client and server. The client determines file transfer resources and good time slots available at the client, and communicates a file transfer plan to upload the file to the server; the file transfer plan specifies the file resources available at the client and time slots. The server acknowledges the file transfer plan, possibly with adjustments to the available time slots, and the server communicates a postbox indicating the location where the file is to be uploaded. The client executes a file transfer process specified in the file transfer plan, based on the file transfer resources available at the server and client, to upload the file to a respective location specified by the postbox. There may be plural uploads of parts of the file, at different available time slots, and/or different combinations of file transfer resources specified in the acknowledged file transfer plan.

Abstract: The present invention relates to a system for monitoring the integrity of a component delivered to a client system by a server system and processable and/or executable on the client system, having an integration system and having a sensor, wherein the integration system integrates the sensor into the component delivered by the server system to the client system, and wherein the sensor is configured such that it is executed on the processing and/or execution of the component and recognizes modifications of the component.

Abstract: An electronic resource tracking and storage computer system communicates with computing systems operated by different participants. Computing systems store copies of a blockchain and have associated computing devices with sensors. A programmed rule set includes conditions to be met when cooperating to complete, in connection with a resource tracked via the blockchain, a modeled process including modeled tasks. A transceiver receives, from the computing devices, signed electronic data messages including identifiers and values from their respective sensors. Blockchain transactions including identifiers and value(s) in the respective messages are generated. Generated blockchain transactions are published for inclusion in blockchain's copies. Value(s) in the respective electronic data messages are validated against the set of programmed rules. Based on the validations' results, events are emitted to an event bus monitored by a management system.

Abstract: A face recognition neural network generates small dimensional facial feature vectors for faces in received images. A multi-task learning classifier network receives generated vectors and outputs classifications for the corresponding images. The classifications are built by respective sub-networks each comprising classification layers arranged in levels. The layers in at least some levels receive as input intermediate outputs from an immediately upstream classification layer in the same sub-network and in each other sub-network. After training, a resultant facial feature vector corresponding to an input image is received from the neural network. Resultant classifiers for the input image are received from the classifier network. A database is searched for a subset of reference facial feature vectors having associated classification features matching the resultant classifiers.

Abstract: Management and configuration of a tiered data storage system are described. An agent software application on computing devices in a first tier processes snapshot backups and pushes them to an appliance software application on a server in a second tier. The agent software application may optionally store checkpoint backups in the first tier. The appliance software application processes archive backups and pushes them to cloud storage in a third tier. A cloud application on a management server receives storage policy specifications from customers and promulgates the policies to the agent software application and the appliance software application. The policy specifications include an optional checkpoint specification including a checkpoint time period for backups in the first tier, a snapshot specification including a snapshot time period for backups in the second tier, and an archive specification including an archive time period for backups in the third tier.

Abstract: Certain example embodiments relate to techniques for addressing resource utilization issues in network components (e.g., file transfer servers running out of memory, for example) by identifying and predicting scenarios that are likely to cause problems, and handling them gracefully, without having to deny service completely. Based on current runtime status information and a prediction of how a given request will impact the server and/or the network, a determination is made regarding whether that request is to be accepted by the server. If the total resource usage of the server exceeds or is likely to exceed a threshold: the speed at which requests being processed are being handled is controlled, such that (a) speeds of all but some of the requests are throttled, (b) throttled requests are neither terminated nor allowed to timeout, (c) as non-throttled requests are completed, requests that are throttled have their speeds increased in a predetermined manner.

Abstract: A cloud computing system includes computing nodes that execute a shared application and/or service accessible by client computing devices over a network. A resilience multiplexer is configured to: receive signals (e.g., from a cloud controller, registry service, error handler, and/or failover service) indicative of potential problems with components of the system and/or network; identify a rule to be executed to determine how to respond to the potential problem, based on attributes of the received signal including which component generated it and what information is included in/otherwise associated with it, and other network-related data; execute the identified rule to determine whether a failover is or might be needed; if a failover is needed, selectively trigger a failover sequence; and if a failover only might be needed, initiate a resilience mode. In resilience mode, information regarding the potential problem is communicated to other components, without immediately initiating a failover sequence.

Abstract: Certain example embodiments described herein relate to defining relevant data for analysis and reporting for modeled processes and process-related data. In certain example embodiments, a normal (and potentially-non-expert) user can define a model, object, or a relation as “source” and “target” of interest. The user also may be able to make a question more concrete, e.g., by specifying stopovers, a number of steps that might be between the source and the target, etc. A net of different paths from the source to the target may be retrieved as result, representing all possible relations, including those that are implicit. Such information also can be selectively excluded from the net, e.g., if the user does not want to evaluate same. However, the user can be reasonably sure that all relevant data for analysis has been returned, even though the definition was made without consulting an expert.

Abstract: Embodiments provide systems, methods, and computer program products for enabling user authorization to perform a file level recovery from an image level backup of a virtual machine without the need for access control by an administrator. Specifically, embodiments enable an access control mechanism for controlling access to stored image level backups of a virtual machine. In an embodiment, the virtual machine includes a backup application user interface that can be used to send a restoration request to a backup server. The restoration request can include a machine identifier and a user identifier of the user logged onto the virtual machine. The backup server includes a backup application that determines whether or not the machine identifier contained in the restoration request can be matched to a machine identifier of a virtual machine present in one of the virtual machine backups stored on the backup server.

Abstract: Techniques for mapping from one or more source information sets to one or more target information sets are provided. Mapping ontologies associate a first declarative expression with a first information set from which to read first information, and a second declarative expression with a second information set to which second information determined based upon the read first information is written. A mapping graph having a nodes arranged according to an execution flow for obtaining the one or more target information sets is generated, at least some of these nodes representing respective ones of the mapping ontologies. The one or more target information sets are generated, each including information determined from the one or more source information sets, by traversing the mapping graph according to the execution flow. Each of the first and second declarative expressions may be associated with a mapping resolver for accessing one or more information sets.

Abstract: Certain example embodiments relate to techniques for creating computerized models usable with enterprise modeling platforms implementing formalized modeling languages. Audio input of an orally-described model having semantic concepts associable with the formalized language but following a natural language pattern rather than an input pattern expected by the formalized language is received. At least some of the semantic concepts are recognizable from a domain-specific grammar that includes possible semantic concepts that are arranged hierarchically and associated with a domain to which the computerized model being created belongs. At least some others are recognizable from a general grammar that includes other possible semantic concepts that are relevant to the computerized model and that are arranged hierarchically but that are domain-independent.

Abstract: Scanning a virtual disk image for malware without fully extracting the virtual disk image is described herein. An embodiment operates by receiving a selection of a virtual disk image. Virtual storage is initialized based on the virtual disk image. An appliance is launched, and the appliance is configured to access the virtual disk image via the virtual storage. The virtual disk image is scanned for malware using an anti-virus program such that the virtual disk image does not have to be fully extracted. During scanning, on-the-fly decompression, de-deduplication, decryption, and other operations are performed to translate read requests for content on the virtual disk image into raw disk data for the antivirus program.

Abstract: Certain example embodiments described herein relate to techniques for processing XML documents of potentially very large sizes. For instance, certain example embodiments parse a potentially large XML document, store the parsed data and some associated metadata in multiple independent blocks or partitions, and instantiate only the particular object model object requested by a program. By including logical references rather than physical memory addresses in such pre-parsed partitions, certain example embodiments make it possible to move the partitions through a caching storage hierarchy without necessarily having to adjust or encode memory references, thereby advantageously enabling dynamic usage of the created partitions and making it possible to cache an arbitrarily large document while consuming a limited amount of program memory.

Abstract: The present technology concerns a system for ad-hoc modification of a process running in a workflow management system (WFMS). The system includes an ad-hoc modification component adapted for extracting the process definition from the running process, modifying the process definition, and redeploying the modified process definition, so that the process runs based on the modified process definition.

Abstract: Certain example embodiments relate to data transfer techniques. A server receives from a client, using a standard communication protocol, a file operation command that relates to a data transfer and indicates data to be transferred and/or a preference for how to transfer data. If the server and client do not have implemented thereon complementary plugins configured to facilitate the data transfer in accordance with the file operation command, the data transfer takes place between the server and client using the standard communication protocol. If the server and client have implemented thereon complementary plugins configured to facilitate the data transfer in accordance with the file operation command, the data transfer takes place using (a) a common communication protocol that is implemented by the complementary plugins but different from the standard communication protocol, and/or (b) data selected and/or transformed by the server-side plugin and understandable by the client-side plugin.

Abstract: A system for distributed business process tracking includes a client adapted to receive a first notification and a second notification, a first provider adapted to perform a distributed business process using a first process, generate a first notification based on the first process, and send the first notification to the client, a second provider adapted to perform a distributed business process using a second process, generate a second notification based on the second process, and send the second notification to the client, and wherein the first provider sends the first notification to the client independently of the second provider or the first provider sends the first notification to the client using the second provider.