Abstract: Described are platforms, systems, and methods to automatically discover, extract, map, merge, and enrich data found in on-premises in automated industrial and commercial environments and cloud systems for purposes of providing developers access to normalized, merged, and enriched data through an API. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; retrieve data from at least one of the identified data sources; apply a first algorithm to map the retrieved data to a predetermined ontology; merge the mapped data into a data store comprising timeseries of the mapped data; apply a second algorithm to identify patterns in the merged data and enriching the data based on one or more identified patterns; and provide one or more APIs or one or more real-time streams to provide access to the enriched data.

Abstract: Described are platforms, systems, and methods to discover relationships among equipment in automated industrial or commercial environments by looking for synchrony in state changes among the equipment. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; detect one or more events or one or more state changes in the data sources; store the detected events or state changes; detect synchrony in the detected events or state changes by performing operations comprising: identifying combinatorial pairs of data sources having an event or state change within a predetermined time window; and conducting pairwise testing for each identified combinatorial pair of data sources by applying an algorithm to the stored detected events or state changes; and determine one or more relationships for at least one identified combinatorial pair of data sources.

Abstract: Described are platforms, systems, and methods to discover relationships among equipment in automated industrial or commercial environments by cycling each individual piece of equipment while observing sensors in all other equipment in order to measure how each part reacts to each other part. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; issue one or more commands to cycle a current data source in the a plurality of data sources; monitor the automation environment for events or state changes in the data sources; detect one or more events or one or more state changes in one or more other data sources in the a plurality of data sources; and determine one or more relationships between the current data source and the one or more other data sources.

Abstract: Described are platforms, systems, and methods to discover subtended devices through introspection of executive or supervisory controllers. The platforms, systems, and methods maintain a plurality of introspection directives, each introspection directive comprising a sequence of instructions specific to a communications protocol, the sequence of instructions comprising instructions to send at least one command to at least one controller associated with an automation environment in accordance with the communications protocol, instructions to receive a response to the at least one command, and instructions to parse the response; identify an appropriate introspection directive for the at least one controller; and execute the sequence of instructions with respect to the at least one controller to perform operations comprising: sending at least one command to at least one controller; receiving a response; and parsing the response.

Abstract: Described are platforms, systems, and methods for mapping data found in connected equipment from a manufacturer's selected schema, format, and protocol to a normalized data model. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; retrieve data from at least one of the identified data sources; generate a plurality of data source mapping profiles, each data source mapping profile specific to a particular data source configuration; maintain a data store comprising the plurality of data source mapping profiles; select a data source mapping profile specific to the at least one identified data source configuration; and apply an algorithm to map the retrieved data to a predetermined ontology based on the selected data source mapping profile for the at least one identified data source.

Abstract: Described are platforms, systems, and methods for real-time enrichment of vertices, edges, and related data within a graph database. The platforms, systems, and methods maintain a graph database comprising a representation of a current state of an automation environment comprising a plurality of data sources, wherein the data sources are represented as vertices in the graph database and relationships between the individual data sources are represented as edges in the graph database; operate a plurality of software agents, each software agent configured to perform operations comprising: applying an algorithm to identify patterns in the graph database; and generating a specific data enrichment based on one or more identified patterns; and contribute the generated data enrichment back to the graph database.

Abstract: Described are platforms, systems, and methods to automatically discover, extract, map, merge, and enrich data found in on-premises in automated industrial and commercial environments and cloud systems for purposes of providing developers access to normalized, merged, and enriched data through an API. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; retrieve data from at least one of the identified data sources; apply a first algorithm to map the retrieved data to a predetermined ontology; merge the mapped data into a data store comprising timeseries of the mapped data; apply a second algorithm to identify patterns in the merged data and enriching the data based on one or more identified patterns; and provide one or more APIs or one or more real-time streams to provide access to the enriched data.

Abstract: Described are platforms, systems, and methods to discover relationships among equipment in automated industrial or commercial environments by looking for synchrony in state changes among the equipment. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; detect one or more events or one or more state changes in the data sources; store the detected events or state changes; detect synchrony in the detected events or state changes by performing operations comprising: identifying combinatorial pairs of data sources having an event or state change within a predetermined time window; and conducting pairwise testing for each identified combinatorial pair of data sources by applying an algorithm to the stored detected events or state changes; and determine one or more relationships for at least one identified combinatorial pair of data sources.

Abstract: Described are platforms, systems, and methods for real-time enrichment of vertices, edges, and related data within a graph database. The platforms, systems, and methods maintain a graph database comprising a representation of a current state of an automation environment comprising a plurality of data sources, wherein the data sources are represented as vertices in the graph database and relationships between the individual data sources are represented as edges in the graph database; operate a plurality of software agents, each software agent configured to perform operations comprising: applying an algorithm to identify patterns in the graph database; and generating a specific data enrichment based on one or more identified patterns; and contribute the generated data enrichment back to the graph database.

Abstract: Described are platforms, systems, and methods for mapping data found in connected equipment from a manufacturer's selected schema, format, and protocol to a normalized data model. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; retrieve data from at least one of the identified data sources; generate a plurality of data source mapping profiles, each data source mapping profile specific to a particular data source configuration; maintain a data store comprising the plurality of data source mapping profiles; select a data source mapping profile specific to the at least one identified data source configuration; and apply an algorithm to map the retrieved data to a predetermined ontology based on the selected data source mapping profile for the at least one identified data source.

Abstract: Described are platforms, systems, and methods to discover relationships among equipment in automated industrial or commercial environments by cycling each individual piece of equipment while observing sensors in all other equipment in order to measure how each part reacts to each other part. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; issue one or more commands to cycle a current data source in the a plurality of data sources; monitor the automation environment for events or state changes in the data sources; detect one or more events or one or more state changes in one or more other data sources in the a plurality of data sources; and determine one or more relationships between the current data source and the one or more other data sources.

Abstract: Described are platforms, systems, and methods to combine counts of activity correlations over time with a link salience method to identify collections of digital devices in an automated environment to identify sub-systems comprised of portions of the overall environment. The platforms, systems, and methods detect activity in a plurality of data sources associated with an automation environment; determine correlation in the detected activity between two or more of the data sources; store records of determined correlation in the detected activity over time in a data storage system; apply a link salience algorithm to the stored records of determined correlation in the detected activity to determine a salience property; and identify one or more subsystems in the automation environment based on the salience property.

Abstract: Described are platforms, systems, and methods to discover subtended devices through introspection of executive or supervisory controllers. The platforms, systems, and methods maintain a plurality of introspection directives, each introspection directive comprising a sequence of instructions specific to a communications protocol, the sequence of instructions comprising instructions to send at least one command to at least one controller associated with an automation environment in accordance with the communications protocol, instructions to receive a response to the at least one command, and instructions to parse the response; identify an appropriate introspection directive for the at least one controller; and execute the sequence of instructions with respect to the at least one controller to perform operations comprising: sending at least one command to at least one controller; receiving a response; and parsing the response.

Abstract: Techniques are disclosed for providing a device-based PIN authentication process used to protect encrypted data stored on a computing system, such as a tablet or mobile device. A client component and a server component each store distinct cryptographic keys needed to access encrypted data on the client. The mobile device stores a vault encryption key used to decrypt encrypted sensitive data stored on the mobile device. The vault key is encrypted using a first encryption key and stored on the mobile device. The first encryption key is itself encrypted using a second encryption key. The second encryption key is derived from the PIN value.

Abstract: Techniques are presented herein for receiving a hash value of a file computed by a collaboration client prior to the collaboration client uploading the file to a collaboration server in an attempt to share the file with another collaboration client. The collaboration server may query an internal file storage system of file hashes for a hash value of a previously uploaded file that matches the hash value of the file to be uploaded. In response to the collaboration server receiving a notification that a matching hash value was not found in the file storage system, the collaboration server queries a first connector service that is in communication with a first service that has access to at least a first file storage system that is external to the collaboration server. The collaboration server queries the first connector service with the hash value of the file to be uploaded.

Abstract: Techniques are provided for augmenting the capabilities of the standard OAuth2 authorization framework in such a way as to allow clients to consume the services of multiple resource servers residing in disjoint security domains while requiring only a single one-time user authentication. An access token that provides access to resource services distributed across a plurality of security domains is partitioned into a plurality of reduced-scope access tokens. Each reduced-scope access token is limited to a subset of authorization scopes of the access token, providing access to a resource service in a particular security domain based upon the subset.

Abstract: A method and apparatus for using a remote delegate is described. In one embodiment, the method comprising evaluating information that identifies at least one of software packages resident in a client computer or licenses associated with the software packages using a remote delegate and enabling use of a resource at the client computer based on the information through use of the remote delegate.

Abstract: A system and method for achieving authorization in confidential group communications in terms of an ordered list of data blocks representing a tamper-resistant chronological account of group membership updates. This method permits ad-hoc and decentralized group definition, dynamic and decentralized membership updates, open sharing, tamper resistance, and tracking of membership history. There are many applications of these techniques. One such application is enabling end-to-end encryption of instant messaging, content sharing, and streamed media.

Abstract: A portable hardware device such as a USB memory stick is used to provide parental locking functionality to a computer. When the device is coupled to the computer, the computer is unlocked and allowed to operate normally. When the device is not coupled to the computer, the computer is locked, and some or all of the computing functionality is blocked. This enables parents to lock and unlock a child's computer with a “key.” A detecting module detects the coupling and uncoupling of devices to the computer. When a device is coupled to the computer, an identifying module identifies the device by reading its unique identifier, and determining whether the coupled device is the one being used as the key. If so, the computer is unlocked, and allowed to operate. If not, a blocking module blocks at least some capabilities of the computer.

Abstract: A system and method for achieving authorization in confidential group communications in terms of an ordered list of data blocks representing a tamper-resistant chronological account of group membership updates. This method permits ad-hoc and decentralized group definition, dynamic and decentralized membership updates, open sharing, tamper resistance, and tracking of membership history. There are many applications of these techniques. One such application is enabling end-to-end encryption of instant messaging, content sharing, and streamed media.