Abstract: A secret sharing scheme with yes and no shares and having a hidden access structure. The secret sharing scheme may include share generation in which yes shares and no shares are generated for, and distributed to, each party in the secret sharing scheme. In turn, upon an attempt to reconstruct the secret, participants in the reconstruction each provide a share, which is unknown to be a yes share or a no share to the other participants. The secret is only reconstructable if the shares used in the reconstruction include yes shares of a minimal authorized subset of the parties. However, prior to secret reconstruction, the access structure remains hidden and the participants in a reconstruction are unaware of the character of the shares provided by other participants in the reconstruction attempt.

Abstract: Embodiments of the present invention provide a computer system a computer program product, and a method that comprises converting received data from a time-based domain to a frequency-based domain using a signal processing algorithm; identifying transactional noise within the converted data by identifying contextual factors based on a determined pattern, wherein the transactional noise is data associated with an identified fraudulent transaction; filtering the identified transactional noise by removing datapoints within the converted data that reaches a predetermined threshold of signal strength using the signal processing algorithm; and generating a line graph depicting removal of the data that is indicative of the identified transactional noise from the converted data.

Abstract: An acquiring unit acquires information of the residence of one or more second users each having a second social media account related to a first user having a first social media account. An estimating unit estimates the residence of the first user from the information of the residence of the second user. A detecting unit detects a posting area at which the first user has posted on social media. A comparing unit compares the detected posting area with the estimated residence of the first user. A determining unit determines whether the posting area is an ordinary activity area or an extraordinary activity area for the first user based on the result of the comparison.

Abstract: An interactive system and method allows customers to electronically place and pay for menu orders without wait staff intervention at food service establishments and which processes orders. The invention has at least one ordering device with data input, a display, and wireless communications, and one or more computer servers for processing menu orders and payments. The ordering devices and computer servers cooperatively utilize means for adding a menu item to an order from a list or entering a code; means for wirelessly transmitting orders to food preparation areas; means on a terminal and a mobile device to use cashless payment mediums; means for identifying the dining party leader; means for consolidating a customer's reward points; means for offering discounts and accepting coupons; means for pre-ordering menu items; means for reserving seating; means for accessing the internet from a terminal; and means for splitting orders for batch processing.

Abstract: An accommodation area management device, which manages an accommodation area for accommodating a moving body, includes an acquisition unit configured to acquire information including at least one of specifications of the moving body and traveling performance of the moving body when the moving body enters the accommodation area, an accommodation position determination unit configured to determine an accommodation position of the moving body based upon the information, and a use fee determination unit configured to determine a use fee of the accommodation area based upon at least one of the information and the accommodation position.

Abstract: A method for evaluating bids for the purchase of inventory items to optimize bid-generated revenue. The method comprises receiving a bid for an inventory item, the bid comprising a bid price, a specific inventory item that is to be purchased, and a number of inventory items to be purchased. The bid is input into a machine learning algorithm as are features associated with the inventory item and information associated with the bid. The machine learning algorithm analyzes the bid and generates an output to accept or decline the bid. Responsive to that output the bidder is advised whether the bid was accepted or declined.

Abstract: This document describes, among other things, security hardening techniques that guard against certain client-side attack vectors. These techniques generally involve the use of an intermediary that detects and handles identity service transactions on behalf of a client. In one embodiment, the intermediary establishes a resource domain session with the client in order to provide the client with desired resource domain content or services from a resource domain host. The intermediary detects when the resource domain host invokes a federated identity service as a condition of client access. The intermediary handles the identity transaction in the identity domain on behalf of the client within the client's resource domain session. Upon successful authentication and/or authorization with an IdP, the intermediary connects the results of the identity services domain transaction to the resource domain.

Abstract: A system for database access comprising a plurality of databases, each database having a plurality of defined data fields and a mapping system coupled to the plurality of databases, the mapping system configured to create an algorithmic relationship between a plurality of first fields of a plurality of first databases, and a corresponding field of a plurality of second fields of a plurality of second databases.

Abstract: A method includes receiving, by a computing device of a media service provider, a search request associated with a first product. The search request is received from a media device associated with a subscriber of a service provided by the media service provider. The method includes, in response to the search request, determining, by the computing device, a responsible party associated with the first product based on a purchase date of the first product and a return period for the first product. The method also includes sending, from the computing device to the media device, contact information of the responsible party. The contact information is to be displayed by the media device to a display device with an option to contact the responsible party.

Abstract: A method of providing maintenance services to at least one user of an electrically operated smoking device using an automatic testing apparatus is provided, the method including: making the automatic testing apparatus publicly accessible; determining a connection of the electrically operated smoking device to the automatic testing apparatus; performing automatic electrical testing of the electrically operated smoking device; automatically extracting usage data from the electrically operated smoking device; and performing a software update or a software reset of the electrically operated smoking device; and/or automatically generating an electrical test report based on the performed automatic electrical testing, automatically providing the electrical test report together with a recommended action to the at least one user, and automatically sending or saving the electrical test report together with the automatically extracted usage data to a data store.

Abstract: A response method and system in virtual network computing authentication, and a proxy server, where the method includes receiving, by a proxy server, a password from a controller, receiving challenge information from a serving end, where the challenge information is generated by the serving end based on the virtual network computing authentication, determining a first response value according to the password and the challenge information, and sending the first response value to the serving end in order to resolve a problem that sensitive data of a user is leaked or decrypted by brute force because a response process in the virtual network computing authentication is completed by a client, thereby improving security in the virtual network computing authentication process.

Abstract: Methods, systems and apparatus for identifying illegitimate selections of content items. In some implementations, one or more servers can receive display data specifying a display state of a web page in a viewport. The web page includes a content item. Display instances are identified. A display instance is a display of at least a portion of the content item in the viewport. Selection instances of the content item are identified. A selection instance is a selection of the content item. The server(s) determines whether a selection of the content item occurred during a display of at least a portion of the content item in the viewport based on the display instances and the selection instances. A selection of the content is defined as an illegitimate selection if the selection did not occur during a display of at least a portion of the content item in the viewport.

Abstract: A key store microservice is provided for a cloud based identity management system. The key store microservice receives, over a network, a request from a client application to retrieve a key, the request including a tenancy identifier, and determines whether the key is present in a tenant specific memory cache associated with the tenancy identifier. When the key is determined to be present in the tenant specific memory cache, the key store microservice retrieves the key from the tenant specific memory cache, retrieves a decryption key from a key wallet, decrypts the key retrieved from the tenant specific memory cache using the decryption key retrieved from the key wallet, and sends, over the network, the key to the client.

Abstract: A technique allows a credential manager application on a client computer system to identify fields and forms on a web page. An analysis server may automatically crawl web pages and identify the fields and form, then push the information to the client computer system for use by the credential manager. If the credential manager discovers the information is not available, the credential manager may analyze the web form to discover the fields and form information, then provide the discovered information to the analysis server for providing to other client computers. The analysis server may use crowd-sourcing for asynchronous verification of field and form information discovered by the analysis server or provided by the client computer.

Abstract: Techniques for credentials enforcement using a firewall are disclosed. In some embodiments, a system, process, and/or computer program product for enforcement using a firewall includes storing a plurality of user credentials at a network device; monitoring network traffic at the network device to determine if there is a match with one or more of the plurality of user credentials; and performing an action if the match is determined.

Abstract: Example online payment systems and methods are described. In one implementation, a method generates a list of a plurality of candidate items that can be associated to a base item to form a plurality of bundles. The method also displays the list of candidate items to the user in a ranked order.

Abstract: Methods and systems are disclosed for providing approaches to receiving, by an enterprise framework device from an application executing on a computing device, a first request associated with accessing an enterprise resource and generating, by the data proxy device, a ticketed URL that is associated with resource device communications related to the first request. The methods and systems may include receiving, by the data proxy device from the operating system, a second request addressed to the ticketed URL, transmitting, by the data proxy device to the operating system, based on the second request addressed to the ticketed URL, a resource device response, and transmitting, by the enterprise framework device to the application, the resource device response.

Abstract: A data-enhanced video viewing system scans videos in order to detect and extract certain objects, such as human faces, so as to compile non-time based synopses, including “facelines” of people appearing in the video sequence. It can also provide a time-based synopsis that includes timestamps for all detected objects. The data-enhanced video viewing system can be deployed on a network for a client to request data extraction on one or more designated videos. The designated video may be one of those that have been uploaded to social networks, uploaded to online video hosting sites, streamed over the Internet or other network, or uploaded directly by the user.

Abstract: Techniques for credentials enforcement using a firewall are disclosed. In some embodiments, a system, process, and/or computer program product for enforcement using a firewall includes storing a plurality of user credentials at a network device; monitoring network traffic at the network device to determine if there is a match with one or more of the plurality of user credentials; and performing an action if the match is determined.

Abstract: A network node, comprising a receiver configured to receive a request for a service, wherein the request comprises a hierarchically structured name comprising a root and a suffix, a data storage component comprising a network synchronized policy rule associated with a service name root, wherein the network synchronized policy rule is applied to any request for a service whose name comprises a root matching the service name root, and a processor coupled to the receiver and to the data storage component, wherein the processor is configured to apply the network synchronized policy rule to the request, wherein the processor is configured to synchronize service definitions and service policies with other nodes in a network based on the name of the service, and wherein the network synchronized policy rule is synchronized with the other nodes in the network using name-based routing.

Abstract: Disclosed herein is a data synchronization between a client computing device's local store and another data store, such as a data store that is remote to the client computing device. The other data store may comprise a cloud data store. The existence, or absence, of a causal relationship between the local and remote data stores for a given data item is used to determine whether or not a conflict exists and/or whether a requested operation may be performed. The causal relationship may be determined using a previous commit's hash value, referred to as a hash_base value, and a hash value, both of which are associated with the data item.

Abstract: A computer system for accessing remote content stored outside of a local network from within the local network comprises a relay proxy and a plurality of applications. The relay proxy receives a first request from a first application and a second request from a second application, the first and second requests identifying first and second remote content items respectively. The relay proxy forwards the first and second requests to a proxy server that manages network traffic entering and leaving the local network. The relay proxy receives responses to the first and second requests, with the response to the first request including the first remote content item and the response to the second request including the second remote content item. The relay proxy forwards the first and second remote content items to the first and second applications respectively.

Abstract: The disclosure is generally directed to systems and methods for HTTP header-based authentication. For example, the systems and methods include receiving, at a mobile platform server, a first request message from a client device, the first request message requesting to download an application from the mobile platform server, sending, to the client device, a first response message having a first authentication query within header portions of the first response message, receiving, at the mobile platform server, a second request message having first authentication credentials within header portions of the second request message, sending, to the client device, a second response message having a second authentication query within header portions of the second response message, receiving, at the mobile platform server first device, a third request message having second authentication credentials within header portions of the third request message, and sending, to the client device, the application.

Abstract: One or more servers perform functions that include: maintaining a database including information relating to facilities that are subject to a first entity, the facilities being dispersed geographically, the information including geographic locations for at least some of the facilities; receiving a first message from a facility for which information is in the database, the first message identifying a fixture of the facility that requires attention, where information in the database for the facility identifies the fixture by at least one of a designation of the fixture and a characteristic of the fixture; sending a second message to a second entity that has contracted with the first entity to provide service within a geographic location of the facility; and enabling the second entity to access the database to identify the fixture.

Abstract: Systems and methods for automatically locating web-based social network members are provided. According to one embodiment, contact content including an associated GPS identifier and status for web-based social network members located at or near the same location automatically appears on a GPS-enabled device. A further exemplary system includes a GPS-enabled device configured to receive a GPS identifier and a status representing a location and a current state for a web-based social network member, a processing module that associates the received GPS-identifier and the received status, and a communications module that sends the associated GPS-identifier and status to a server comprising a web-based social network database. Contact content in a web-based social network database record in the web-based social network database is updated to include the associated GPS identifier and status for the web-based social network member.

Abstract: A system, apparatuses, and methods for enabling management of customizations/extensions to the functionality of a multi-tenant computing platform. In some embodiments, an extended or customized entity, such as a function, operation, process, module, sub-routine, data item, etc. is represented as a record. That record is then associated with an underlying record by means of a tenant specific mapping or equivalent structure. This enables the tenant to utilize the extended or customized entity in place of the underlying record in situations in which the underlying record would typically be used. This also provides a way of isolating the extensions or customizations on the multi-tenant platform so that they are associated with specific tenants and not with other tenants who may still access the underlying or un-extended versions of the entity.

Abstract: Disclosed herein are techniques for obscuring Internet tendencies. It is determined whether a user tends to access a category of information over the Internet more than an average user. If the user accesses the category of information over the Internet more than the average user, a user profile associated with the user is adjusted such that the user profile is proportional to an average user profile associated with the average user.

Abstract: A service providing device includes a requesting unit for receiving, from the device operated by a user, a request for a process of using a service providing system having a different authentication base, and making a request to acquire authorization information for using the service providing system; a substitute authentication unit for acquiring authentication information of the service providing system from a second storage when the authorization information associated with the user is not stored in a first storage, and acquiring the authorization information from the service providing system by using the authentication information; and a providing unit for providing the authorization information stored in the first storage when the authorization information associated with the user is stored in the first storage, and providing the authorization information acquired from the service providing system when the authorization information associated with the user is not stored in the first storage.

Abstract: Methods and systems configured to provide hash-based snapshot services for a virtual storage are provided. The system includes a processor and memory coupled with the processor. The memory is configured to provide the processor with instructions for maintaining, by a hash-based snapshot module executing on the system, a file system of the virtual storage. The file system is associated with a plurality of data blocks. The virtual storage is supported by a hash-storage having a hash base-file and a hash-database. The hash-database is configured for storing the plurality of data blocks. And the hash base-file includes hash codes generated by applying a hash function to the plurality of data blocks.

Abstract: Systems, methods, and devices for providing and managing electronic event tickets are provided. For example, a device for managing an electronic event ticket may include a processor configured to run an electronic ticket management application, a memory device configured to store data associated with the electronic ticket management application, an electronic display configured to display at least a portion of the data associated with the electronic ticket management application, and an input/output interface configured to receive an electronic ticket and the data associated with the electronic ticket for management by the electronic ticket management application. The electronic ticket management application may be configured to enable the electronic device to gain entry to an event and to obtain at least one other event-related benefit after the electronic ticket is received by the input/output interface.

Abstract: An ordering apparatus stores an order quantity, moreover, generates the order data for each ordered commodity by associating a plurality of the commodity identifiers which is accepted the input with the order quantities which is stored, during the period from the moment that the input of the commodity identifier is accepted to the moment that is determined that the input acceptation is terminated.

Abstract: A database system comprising: a memory containing multiple data records, wherein each of the data records has a data record asymmetric key pair for cryptographic encryption and decryption, wherein each data record asymmetric key pair comprises a data record public key and a data record private key, wherein the data contained in each of the multiple data records is encrypted by the data record public key, wherein the data record private key of each data record asymmetric key pair is encrypted with the public key of another asymmetric key pair; a set of user accounts, wherein each of the user accounts has a user asymmetric key pair for encryption and decryption, wherein each user asymmetric key pair has a user public key and a user private key; wherein data is added to a data record by encrypting it with the data record public key; wherein access to the data record is granted to a user account by encrypting the data record private key with the public key of an asymmetric cryptographic key pair whose encrypted p

Abstract: An automated banking machine (10) is operative to carry out financial transactions and includes a user interface (15). The user interface includes a card reader (16) which is operative to read data on user cards which identify user's financial accounts. A fascia of the machine includes a keypad (404, 438, 458) through which users input confidential data. Covers (400, 422, 430) prevent unauthorized persons from viewing confidential inputs to the keypad. Alternatively, movable panels (462, 464) are movable to prevent unauthorized viewing of confidential inputs. Alternatively a keypad cover is selectively collapsible to prevent digit access. A visual indicator is operative to indicate to a user that keypad inputs are being encrypted. Disinfecting techniques may be used to disinfect manual contact surfaces of the machine.

Abstract: A method, executed on a processor, for serving a video content segment at an online resource, includes receiving a request for a video content segment; identifying one or more candidate video content segments to serve in response to the request; accessing a quality factor (QF) and a bid for each of the candidate video content segments; ranking the candidate video content segments based on a combination of each of the video content segments' QF and bid; and providing in response to the request, a set of candidate video content segments based on the ranking.

Abstract: Disclosed is a method for processing content published on-line so as to identify each item in a unique manner. In some implementations, an RSS feed is received from a publisher and a unique identifier is identified for each item in the feed. Each item then has third party content or advertisements associated with the item based on the unique identifier. The feed is then stored and, when appropriate, updated. The augmented feed, which contains the third party content and the items in the feed, is provided to user devices.

Abstract: In general, a method includes receiving a training data set that includes a plurality of examples, wherein each example includes one or more features and an answer, generating a plurality of modified training data sets by applying one or more filters to the training data set, each of the plurality of modified training data sets being based on a different combination of the one or more filters, training a plurality of predictive models, each of the plurality of predictive models being trained using a different modified training data set of the plurality of modified training data sets, determining a respective accuracy for each of the plurality of predictive models, identifying a most accurate predictive model based on the determined accuracies, and specifying an association between the training data set and the combination of filters used to generate the modified training data set that was used to train the most accurate predictive model.

Abstract: Joint pricing and replenishment of freshness inventory or products having different qualities determines the joint pricing and inventory strategies to optimize the retailer's benefits from product freshness, employing a dynamic programming formulation that incorporates a demand model that captures consumer choice based on both the freshness and price.

Abstract: A point-of-sale system includes: a check-out terminal having a cash drawer; and a video terminal coupled to a rotating base. In an attended check-out terminal mode the video terminal is configured to be rotated on the rotating base to a first position such that a display screen of the video terminal is approximately parallel with a front surface of the cash drawer, and in a self-service check-out terminal mode the video terminal is configured to be rotated on the rotating base to second position such that the display screen of the video terminal is approximately perpendicular to the first position.

Abstract: A secure online banking transaction apparatus to communicate with a server over a non-secure connection is provided and includes a selector configured to allow for a selection of a mode of the apparatus, a processing unit coupled to the selector and including a secure communication unit, which is configured to set up a secure connection, along which a secure transaction occurs, with the server via the non-secure connection in accordance with the mode, an input unit coupled to the processing unit and configured to allow for a input of data into the apparatus, which is at least partly related to the secure transaction, and an interface coupled to the processing unit and configured to convey at least a status of the secure transaction and the contents off the inputted data.

Abstract: In one method, a request is received for a market trend report corresponding to a designated payment type over a designated timeframe. A payment type dataset is identified from aggregated POS data. The payment type dataset comprises POS datasets corresponding to the timeframe and to transactions categorized by payment type. Market trend data is generated as a function of the payment type dataset and is output as a report. The method may produce a variety of reports. For example, a report may display the percentage of transactions for each payment type in terms of numbers of transactions. A report may further show whether each payment type is increasing or decreasing in numbers of transactions over the timeframe.

Abstract: In a method of processing customer applications at an event, an application is received from a customer on a customer interface computer. The data in said application is verified on the customer interface computer and encrypted. The encrypted data is transmitted wirelessly to a portal computer via a private wireless network, and then transmitted to a processing computer system for approval of the application.

Abstract: Systems and methods for automatically locating web-based social network members are provided. According to one embodiment, contact content including an associated GPS identifier and status for web-based social network members located at or near the same location automatically appears on a GPS-enabled device. A further exemplary system includes a GPS-enabled device configured to receive a GPS identifier and a status representing a location and a current state for a web-based social network member, a processing module that associates the received GPS-identifier and the received status, and a communications module that sends the associated GPS-identifier and status to a server comprising a web-based social network database. Contact content in a web-based social network database record in the web-based social network database is updated to include the associated GPS identifier and status for the web-based social network member.

Abstract: A user interface (UI) with multiple UI paradigms. Each of the multiple UI paradigms is substantially different from the other UI paradigm(s). The substantially different UI paradigms are within a single application. A switching mechanism, which is also a part of the single application, enables a user to relatively rapidly switch between the different UI paradigms.

Abstract: A system and method is provided for adaptive control of at least one parameter of an auto guidance control algorithm for a vehicle. The parameters may be varied according to a previously established look up table, or automatically adapted through the use of control logic, such as a “fuzzy logic” algorithm. The control parameters that can be adaptively controlled include steered wheel turn rate, proportional valve current gain, line acquisition rate and/or auto guidance control valve current limits. The control algorithm responds to the vehicle's operating parameters such as vehicle speed, tracking error, predicted heading, and hydraulic oil temperature to make adjustments to the auto guidance control parameters.

Abstract: A POS payment terminal (1) using a mobile communication device (4), such as a mobile phone, is created over a temporary connection between the merchant's Sales Device (2) with the removable memory card (18), where the removable memory card (18) is inserted into the customer's slot of the mobile communication device (4). The Sales Device (2) contains a secure memory (6) with the POS terminal's identification data in the form of a SAM card or an ICC card (9) or directly in the form of a secure element on the circuit printed. The payment terminal (1) is created before or during the payment process over a temporary connection between a Sales Device (2) with a mobile communication device (4), which is held by the customer and which has a removable memory card that can have an independent communication element, especially of the NFC type. The payment cryptogram is of standard form, e.g.

Abstract: Improvements in a point of sale multi-functional device are disclosed. The device can operate as a stand-along unit or as a tablet companion device. The features include but are not limited to readers of credit cards, bar codes, flatbed scanner. Connections for USB, HDMI, SIM cards, flash memory and earphones or external speakers. A power supply provides power to the device with sufficient capacity to operate as long as required for sales transactions. The unit utilizes an embedded wireless connection with WiFi, 3G, and 4G using cell phone type communication signal or equivalent to allow the device to communicate with the internet to complete the transaction without requiring the device to store any information locally. The tablet compatible device accepts a tablet where the tablet thereby provides the display, computational power, wireless connection to the internet or a network and control of the sales process.

Abstract: An automated retail terminal in which a plurality of goods and/or services are provided in an integrated system. The integrated system generally avoids duplicating hardware or functions in the course of delivering the goods or services offered, so for example in a combination ATM and Internet kiosk the same credit card or smart card reader is used for both the ATM and the Internet kiosk functions, the same control screen activates the ATM functions and the Internet functions, and etc.

Abstract: An automated retail terminal in which a plurality of goods and/or services are provided in an integrated system. The integrated system generally avoids duplicating hardware or functions in the course of delivering the goods or services offered, so for example in a combination ATM and Internet kiosk the same credit card or smart card reader is used for both the ATM and the Internet kiosk functions, the same control screen activates the ATM functions and the Internet functions, and etc.

Abstract: An automated retail terminal in which a plurality of goods and/or services are provided in an integrated system. The integrated system generally avoids duplicating hardware or functions in the course of delivering the goods or services offered, so for example in a combination ATM and Internet kiosk the same credit card or smart card reader is used for both the ATM and the Internet kiosk functions, the same control screen activates the ATM functions and the Internet functions, and etc.

Abstract: An automated retail terminal in which a plurality of goods and/or services are provided in an integrated system. The integrated system generally avoids duplicating hardware or functions in the course of delivering the goods or services offered, so for example in a combination ATM and Internet kiosk the same credit card or smart card reader is used for both the ATM and the Internet kiosk functions, the same control screen activates the ATM functions and the Internet functions, and etc.