Abstract: A system and method to support identity theft protection and, in particular, to a system and method for supporting identity theft protection as part of a distributed service oriented ecosystem in Internet protocol (IP) multimedia subsystem (IMS) and non-IMS networks. The system includes an identity session initiation protocol (SIP) application server configured to act as a security assertion markup language (SAML) bridge, which allows an SIP enabled device or a non-SIP enabled device to attach to a telecommunications service provider network. A user may accept or reject an authorization request using the SIP enabled device or non-SIP enabled device.

Abstract: A system for accessing data includes and interface and a processor. The interface is configured to receive a request to move stored data to a new location and requestor information. The stored data comprises sensitive data. The processor is configured to determine whether read access, storage access, and deletion access are allowed based at least in part on the requestor information; in the event that read access, storage access, and deletion access are allowed: read the sensitive data at an original location using an original token, store the sensitive data to the new location and receive a new token associated with the new location, and delete the original token and the sensitive data at the original location.

Abstract: A system for ledger data includes a block repository, a metadata database, and a processor. The block repository stores verified secure ledger data in one or more blocks that are cryptographically linked. The metadata database stores metadata information for the one or more blocks in the block repository. The processor is configured to receive a request to create a block content and to determine the block content for a block to be stored in the block repository and metadata content to be stored in the metadata database associated with the block to be stored in the block repository. The metadata content includes one or more flags and source information.

Abstract: A processor-implemented system and method for enabling a relying party device associated with a relying party to verify an identity of a user. The method includes the steps of (i) generating, using a cryptographic processor on a user device associated with the user, a first set of credentials including a public-private key pair associated with the user, (ii) receiving at least one cryptographic challenge from the relying party device associated with the relying party, (iii) verifying at least one of a biometric or a PIN code, (iv) responding to the at least one cryptographic challenge by performing the at least one cryptographic operation on the cryptographic challenge using the user private key to form a result of the at least one cryptographic operation and (v) transmitting the result of the at least one cryptographic operation as a cryptographic challenge response to the relying party device.

Abstract: A system for data space limitation includes and interface and a processor. The interface is configured to receive a structured data set. The processor is configured to determine a whole data space for the structured data set; remove duplicate pairs from the whole data space to generate a duplicate pair limited data space; remove hierarchical redundant pairs from the duplicate pair limited data space to generate a redundant pair limited data space; remove user settable combinations from the redundant pair limited data space to generate a user settable combinations limited data space; remove privacy preserving combinations from the user settable combination limited data space to generate a privacy preserving combinations limited data space; remove access prohibited combinations from the privacy preserving combinations limited data space to generate an access prohibited combination limited data space; and provide the access prohibited combination limited data space for combination calculation.

Abstract: A system for discovering services includes a storage device and a processor. The storage device is configured to store a catalog of software installed packages. A processor is configured to scan a file system to identify configuration files associated with one or more packages found in the catalog of software installed packages; identify a subset of configuration files associated with executing processes by finding references to a configuration file in active processor memory and placing the configuration file in the subset of configuration files; and verify that a network port associated with an executing process corresponds to a designated network port as indicated in the configuration file associated with the executing process.

Abstract: A system for element tracking in documents includes a memory device, a database, and a processor. The memory device is configured to store a mapping in a memory between a linked element within a document and a database object. The database is configured to store the database object. The processor is configured to in response to an update of the database object: a) cause storage in the database of an update event associated with the linked element; and b) provide an update indication that the update associated with the linked element has occurred.

Abstract: A system for document parsing includes an interface and a processor. The interface is configured to receive an image. The processor is configured to determine text boxes. Determining text boxes uses multiple zoom levels of the image. The processor is further configured to determine labels from the strings and provide the labels.

Abstract: A method, software, and system for a Digital Identity Management (DIM) system is discussed. The system facilitates the creation of a Public Key/Private Key pair based user credentials using the Trusted Execution Environment in mobile phones, and is protected by DIM app with the user's biometrics and/or a PIN code. Identity tokens representing identity attributes of the user are issued by Issuing Parties using Hardware Security Modules and stored in the DIM app on the mobile device.

Abstract: The system for providing an application includes an interface and a processor. The interface is configured to receive a providing indication to provide the application to a device. The processor is configured to provide the application to the device. The application is configured to receive login information associated with a user; receive an adding indication to add a credential; provide an available indication of credentials available to the user; create a credential request; provide the credential request to a server system; receive the credential; and store the credential.

Abstract: A system for providing an application includes an interface and a processor. The interface is configured to receive an indication to provide an application to a device. The processor is configured to provide the application to the device. The application is configured to receive a request for credentialed information associated with a user from a requesting server; determine whether a stored credential satisfies the request for the credentialed information; and in response to a determination that the stored credential satisfies the request for the credentialed information: determine a response credential for responding to the request; determine that the user approves sharing the credentialed information indicated by the response credential; and provide the response credential to the requesting server.

Abstract: A system for a distributed real time partitioned map reduce includes a plurality of nodes, a service node, and a plurality of partitions. The service node is selected by a client application system to manage execution of a task. One or more partitions of the plurality of partitions are stored on a first node of the plurality of nodes. A partition stored on the first node is configured to receive a request for a partition result from the service node; determine the partition result by querying a set of predetermined partition results stored by the partition; and provide the partition result to the service node.

Abstract: Systems and methods for optimizing memory in an interest-driven business intelligence system in accordance with embodiments of the invention are illustrated. A dictionary for storing values of a dataset may be partitioned in accordance with some embodiments. The partitions of the dictionary may be generated by mapping and reducer processes. The mapping processes receive a value, determine the dimension of the data to which the value belongs, and provides the value to a reducer process that handles the determined dimension. Each reducer process generates partitions of the dictionary for each dimension. The number of values in each partition is determined and compared to a threshold value. Partitions that have a number of values greater than the threshold are stored in a common memory. Partitions smaller than the threshold value can be combined with other partitions such that the cardinality of the combined partition exceeds the threshold value.

Abstract: A system for restoring purged data includes an input interface and a processor. The input interface to receive an indication of purged data to restore. The processor is to reinstate the purged data using a stored copy and rebuild one or more relations to the purged data using an effective change stack.

Abstract: A system for determining a calculation utilizing differential privacy including an interface and a processor. The interface is configured to receive a request to determine a result of a calculation using multitenanted data. The processor is configured to determine result data by performing the calculation on the multitenanted data; determine a deterministic modification in the event that the deterministic modification is needed to ensure privacy; modify the result data using the deterministic modification to determine modified result data; and provide the modified result data.

Abstract: A secure tenant activity data system for a deployment service includes an interface and a processor. The interface is configured to receive a set of encrypted monitoring data collected and encrypted from a monitoring instrument from a tenant system. The processor is configured to decrypt the data for stream processing; encrypt and store the stream processed data; and provide the encrypted data with a tenant identifier to a deployment service. Steam processing is one or more of data cleaning, data rounding, data filtering, data smoothing, algorithmic processing, improving ranking of results, improved navigation, generating recommendations, generating metrics, or computation of features for a machine learning system.

Abstract: A system for automated process performance determination includes an interface and a processor. The interface is configured to receive log data associated with a plurality of tenants. The log data comprises one or more log data types. The processor is configured to aggregate the log data into an aggregated set of log data; and determine a set of metrics based at least in part on the aggregated set of log data. A metric of the set of metrics is associated with a tenant of the plurality of tenants and one of the one or more log data types. The processor is further configured to determine a composite metric for the tenant by combining metrics of the set of metrics associated with the tenant; determine a response based at least in part on the composite metric; and, in the event the response indicates an automated action, perform the automated action.

Abstract: A system for application integration into a unified code system includes an interface and a processor. The interface is configured to receive a source code bundle. The processor is configured to create an application bundle based at least in part on the source code bundle and integrate the application bundle into the unified code system. The system for application integration executes the unified code system. The unified code system includes a plurality of application bundles. Only one version of each application bundle is available for execution as part of the unified code system.

Abstract: A system for performing a computation includes an interface and a processor. The interface is configured to receive an indication of the computation. The processor is configured to determine whether the computation is with respect to a computation version number. In response to a determination that the computation is with respect to a computation version number: 1) determine whether the system has been updated to at least the computation version number; and 2) in response to a determination that the system has been updated to at least the computation version number: a) determine a set of data values for the computation associated with the computation version number; b) perform a partition reduce operation on the set of data values to determine a partition result; and c) provide the partition result.

Abstract: Systems and methods for interest-driven business intelligence systems including geo-spatial data in accordance with embodiments of the invention are illustrated.