Abstract: A method is provided for determining command-to-process correspondence. The method includes identifying, by the hardware processor, initial processes resulting from executions of container immutability change events for each of multiple initially mutable containers in a cluster, based on an execution time, a process identifier and a process group identifier for each of the container immutability change events. The method also includes designating, by the hardware processor, a particular external command, from among external container commands stored in a database, as having a correspondence to an initial process, responsive to the initial process matching at least one respective process resulting from executing the particular external command.

Abstract: Described herein is a system for syncing asynchronously received sequential data from disparate sources. In an embodiment, a central system may receive data transmissions from disparate sources. Each data transmission includes a timestamp and an identifier of the disparate source. The central system may sort the data from the data transmissions of disparate sources in chronological order based on the timestamps. The central system may group the data based on the identifier of the disparate source and normalize the data of the data transmissions to be in a specified format. The central system may store the normalized data of the data transmission in a data storage facility based on the identifier of the disparate source and the sorted order of the data.

Abstract: Processing per-use requests for user data is disclosed, including: receiving a use-specific request to read a set of user data; determining whether to grant the use-specific request based at least in part on an access policy associated with an accessor definition associated with the use-specific request; and in response to a determination to grant the use-specific request, transforming the set of user data based at least in part on the accessor definition.

Abstract: A request from a user to access a report associated with one or more content items maintained by an electronic content management system can be received. A query, associated with the request and including one or more attributes of the request to access the report can be executed. A set of user permissions can be set. The requested report can be based on one or more results returned from the executing of the query. The requested report can include information consistent with the set of user permissions and generated to include a link to the one or more content items maintained by the electronic content management system. The analytics engine can be logically separate from the electronic content management system. A request can be received through the query to access the one or more content items. The one or more content items can then be presented to the user.

Abstract: Improved computer-implemented methods for evidencing the existence of a digital document, anonymously evidencing the existence of a digital document, database management for systems for evidencing the existence of a digital document, and verifying the data integrity of a digital document provide increased reliability, security and enhance trust from users and third parties.

Abstract: A first set and a second set are identified as operands for a set operation of a similarity analysis task iteration. Using respective minimum hash information arrays and contributor count arrays of the two sets, a minimum hash information array and contributor count array of a derived set resulting from the set operation is generated. An entry in the contributor count array of the derived set indicates the number of child sets of the derived set that meet a criterion with respect to a corresponding entry in the minimum hash information array of the derived set. The generated minimum hash information array and the contributor count array are stored as part of input for a subsequent iteration. After a termination criterion of the task is met, output of the task is stored.

Abstract: An illustrative pseudo-file-system driver uses deduplication functionality and resources in a storage management system to provide an application and/or a virtual machine with access to a locally-stored file system. From the perspective of the application/virtual machine, the file system appears to be of virtually unlimited capacity. The pseudo-file-system driver instantiates the file system in primary storage, e.g., configured on a local disk. The application/virtual machine requires no configured settings or limits for the file system's storage capacity and may thus treat the file system as “infinite.” The pseudo-file-system driver intercepts write requests and may use the deduplication infrastructure in the storage management system to offload excess data from local primary storage to deduplicated secondary storage, based on a deduplication database.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for facilitating prevention of duplicate transactions across multiple transaction entities in database systems according to one embodiment. In one embodiment and by way of example, a method includes receiving a request to facilitate a financial transaction, wherein the request is received from an external computing device and includes an idempotency key that is unique to the request, and verifying, based on the idempotency key, the request as being a valid request or an invalid request, wherein the valid request is registered, and classifying, based on the idempotency key and a gateway log, the valid request as an original request or a duplicate request that is a successful duplicate request or an unsuccessful duplicate request.

Abstract: Provided is a method of synchronizing a distributed object store including a plurality of data stores, the method including bringing a first data store of the data stores online after having been offline, choosing a second data store of the data stores, the second data store being online while the first data store was offline, reading, by the first data store, an entry from a catch-up log, and performing a data modification operation corresponding to the entry on the first data store to synchronize the plurality of data stores.

Abstract: Data moving micro-services are deployed to a public cloud and a cloud vault target (CVT). A first request is issued to the public cloud for a first snapshot of data belonging to a customer tenant. The first snapshot is accessed to write the data to a first cloud volume in the public cloud. Data of the first cloud volume is vaulted to the CVT via the micro-services. The first cloud volume is maintained in the public cloud. A second request is issued to the public cloud for a second snapshot of the data belonging to the customer tenant. The second snapshot is accessed to write the data to a second cloud volume in the public cloud. Data of the second cloud volume is compared against data of the first cloud volume to identify redundant data. Data of the second cloud volume that is not redundant is vaulted to the CVT.

Abstract: Provided in the present disclosure are an electronic device and a control method therefor. An electronic device of the present disclosure comprises a memory in which a kernel and at least one application are stored, and a processor, which generates a first rule for determining a time at which the application calls a system in order to execute a process, determines, on the basis of the first rule, whether the application corresponds to an application for which security is verified, and generates a second rule for skipping an audit on the basis of a plurality of pre-defined rules, if the application corresponds to the application for which security is verified.

Abstract: Methods and systems for transforming data archives are provided. In one embodiment, a method is provided that includes receiving a data archive and selecting a first data item from among a plurality of data items contained within the data archive. A first data format of the first data item may be identified that specifies a first type of data stored in the first data item and a first data transformation may be selected that corresponds to the first data format. The first type of data may be transformed by the first data transformation to generate a first transformed data item. The first data item may be replaced with the first transformed data item in the data archive and an executable item contained within the data archive may be executed.

Abstract: An apparatus may be configured to determine an industry object model based on an industry of a data set of an enterprise; generate an archive package for an archive time point by, for each data source, determining archival data of the data source to be archived and transforming the archival data of the data source into a set of data source objects based on the industry object model, and storing, in the archive package, the data source objects for each data source; identify a subset of the data source objects to be purged based on a purge time point; and remove the subset of the data source objects from the archive package. An apparatus may also be configured to generate and store a set of global objects that are represented in the data set, and to associate the set of data source objects with the set of global objects.

Abstract: A storage system receives data to be stored in its memory. A controller in the storage system allocates a primary block of the memory to store the data and determines the health of the allocated block. If the controller determines that the allocated block is not healthy enough to reliably store the data, the controller allocates a secondary block to redundantly store the data.

Abstract: A method for managing data includes obtaining data from a host, wherein the data is associated with an object identifier (ID), initiating a classification mapping update to obtain a classification entry, applying an erasure coding procedure to the data to obtain a plurality of data chunks and at least one parity chunk, deduplicating the plurality of data chunks to obtain a plurality of deduplicated data chunks, generating storage metadata associated with the plurality of deduplicated data chunks and the at least one parity chunk, generating an object entry associated with the plurality of data chunks, and the at least one parity chunk, wherein the object entry comprises the object ID and a classification ID, storing the storage metadata and the object entry in an accelerator pool, and storing the plurality of deduplicated data chunks and the at least one parity chunk.

Abstract: Embodiments of the inventive concept include solid state drive (SSD) multi-card adapters that can include multiple solid state drive cards, which can be incorporated into existing enterprise servers without major architectural changes, thereby enabling the server industry ecosystem to easily integrate evolving solid state drive technologies into servers. The SSD multi-card adapters can include an interface section between various solid state drive cards and drive connector types. The interface section can perform protocol translation, packet switching and routing, data encryption, data compression, management information aggregation, virtualization, and other functions.

Abstract: Facilitating detection of anomalies of a target entity is provided herein. A system can comprise a processor and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations. The operations can comprise training a model on a first set of variables that are constrained by a second set of variables. The second set of variables can characterize elements of a defined entity. The first set of variables can define a normality of the defined entity. The operations also can comprise employing the model to identify expected parameters and unexpected parameters associated with the defined entity to at least a defined level of confidence.

Abstract: Embodiments of the disclosure provide systems and methods for providing random access to segmented and encrypted or compressed data stored in a repository. Retrieving at least a portion of a file stored in a repository can comprise storing a plurality of files in the repository. A request to retrieve at least a portion of one of the plurality of files can be received and object metadata for the requested one of the plurality of files can be obtained. A determination can be made based on the obtained metadata as to whether the requested one of the plurality of files is a multipart file. In response to determining the requested one of the plurality of files is not a multipart file, a single file retrieval process performing and in response to determining the requested one or the plurality of files is a multipart file, a multipart retrieval process can be performed.

Abstract: The present invention relates to a system and method configured to store and retrieve files and, specifically, to a system and method for encoding files, such as image files or video files, into compressed archive and then later retrieving the files from the compressed archive in response to user requests.

Abstract: A computing system can receive contextual data corresponding to a particular user and execute context resolution and constraint evaluation processes with local data acquisition and/or derivation priority to classify the user in one or more groups and reduce network latency. Based on the classified group(s) of the user, the computing system can provide targeted, group-specific content through an executing application of the user's computing device to enhance user experience with the application service.

Abstract: Systems and methods are disclosed for efficiently storing information identifying journey instances within unstructured event data of a data intake and processing system. Each journey instance is illustratively associated with a series of events within the unstructured event data occurring over a journey duration. Because the unstructured event data may be constantly updated, any given inspection of the event data may yield both complete and incomplete instances. Storage of instance data over time can require updating of prior incomplete journey instances with complete versions of such instance detected at a later point in time. However, a data store of the unstructured event data may be unsuited for such updating, as the store may maintain version information for deleted data to reduce possibility of data loss. To address this issue, a separate structured data store, such as a columnar time series data store, is provided to efficiently store instance information.

Abstract: A method for storing information includes receiving information to be stored and an information tag from a user computing entity, and storing the information and the information tag. The information to be stored includes a chunk that is divided into a plurality of blocks each comprising one or more elements. The information tag comprises a plurality of tags each having been computed for one of the blocks, wherein the tag for the j-th block of the i-th chunk is based on: an output of a random function using as input: 1) an output of an index function mapping each index j to a certain value, and/or 2) a seed sampled for the i-th chunk; the j-th block; and a representation of a second secret comprising one or more random elements each associated with a respective one of the one or more elements of one of the blocks.

Abstract: A method and system for authenticating a variety of consumer products is provided. The system includes a plurality of near field communication (NFC) tags configured for coupling to a variety of consumer products, the tags programmed to provide identifying data associated with a single consumer product to an NFC-capable mobile computing device, the NFC having a structure that detects opening of the consumer product, a central database for storing said data, a server communicably connected to a communications network and configured to access the database, and a mobile application executing on a mobile computing device, configured to read said identifying data from the NFC tag and communicate said identifying data to the server.

Abstract: Methods and apparatus for obfuscated audience identification are disclosed. An example apparatus includes a camera to capture an obfuscated recording of a viewing environment, feature identifying circuitry to identify one or more features of a viewer in the viewing environment based on the obfuscated recording, and panelist identifying circuitry to identify a panelist in the viewing environment based on the one or more identified features of the viewer.

Abstract: In some implementations, a computing device can manage conflicts using conflict islands. For example, when a computing device receives bulk map data updates, the computing device can determine conflicts between point updates (e.g., small, ad hoc feature edits) in the current map data and the bulk map data updates. When the bulk map data updates are merged with the current map data, a point update for a map feature may conflict with the bulk update for the feature. The computing device can determine a perimeter of stable map features around the conflicted feature. The map features within the perimeter can correspond to a conflict island. The bulk updates for features within a conflict island (e.g., within the perimeter) can be deferred until resolved while bulk updates for features outside of a conflict island can be applied to the current map data.

Abstract: A branch of a main database is created, comprising a copy of the main database schema. A user edits the branch and requests that it be merged back into the main database. A schema diff is generated and used to determine differences between the main database and the edited branch. The merge is performed if it does not create a conflict. A second branch is created and edited by a second user. When the second user indicates to merge the second branch back into the main database, differences between the two branches are determined, relative to the main database. If merging the second branch back into the main database on top of the first branch does not create a conflict, a three-way merge is performed of the first branch, the second branch, and the version of the main database from which the first and second branches were generated.

Abstract: Embodiments of the present disclosure provide a storage management method, an electronic device, and a computer program product. The method includes determining at least one count corresponding to at least one data segment of a file in a file set, the file set being stored in a local storage device, and the at least one count indicating the number of occurrences of the at least one data segment in the file set. The method further includes determining a deduplication ratio of the file based on the at least one count, the deduplication ratio indicating an overlapping level of the file with other files in the file set. The method further includes migrating the file from the local storage device to a remote storage device according to a determination that the deduplication ratio of the file is lower than a threshold.

Abstract: A method for synchronizing a file system (FS) and a remote file system (RFS) includes monitoring the FS for FS events, generating FS event records, receiving RFS event records of RFS events, generating file system operations (FSOs) based on the FS and RFS event records, and communicating the FSOs to the FS and RFS to synchronize them. A method for generating the FSOs includes accessing a plurality of FS and/or RFS event records, processing the accessed records to generate processed event records, generating the FSOs based on the processed event records, and outputting the FSOs to cause synchronization of the FS and RFS. Systems are also described. The invention facilitates event-based, steady-state synchronization of local and remote file systems.

Abstract: Techniques are disclosed relating to caching techniques for processing a database change stream. A computer system may receive change records from a change stream that includes a plurality of records indicating changes to a database table. The change stream may include change records for multiple shards and be accessible by providing one or more position indicators for one or more of the multiple shards to request one or more change records and an updated position indicator. The system may store, for changes to a set of one or more shards, one or more cache entries that include respective groups of change records. The system may request a portion of the change stream by providing a received position indicator. The system may provide one or more cached change records from a cache entry that matches the provided position indicator.

Abstract: Satellites may be integrated into a provider network for cloud-based services by utilizing a satellite-deployable computing device to execute one or more cloud services that are accessible by client devices of the provider network via respective associated Application Programming Interfaces (APIs). In some embodiments, the satellite-deployable computing device may process payload data of the satellite in accordance with one or more cloud-based services indicated in control instructions originating from a client device of the provider network. In some embodiments, the processed data may be transmitted to a ground station in accordance with one or more cloud-based services.

Abstract: A database platform authenticates a system user for access via an application to a database that is associated with a customer account of the database platform. The system user is a first object in a first account-level namespace of the customer account, and the first account-level namespace is distinct from a default account-level namespace of the customer account. The database platform sends, as the system user, a query to the database via the application. The database platform receives, as the system user, results of the query from the database, and stores, as the system user, the results of the query in a first-namespace stage, which is a second object in the first account-level namespace.

Abstract: A system for applying fingerprinting/watermarking of consumer data, and analyzing “wild files” of consumer data to assign a guilt score for a particular party who may have leaked the data, allows the owner of data sources (“Data Owners”) to identify and assert ownership of textual data that has been distributed outside of their firewall in the clear (i.e., without encryption), either intentionally or unintentionally, and assign guilt to parties misusing the data. The system can be used by Data Owners who transmit, lease, or sell data to individuals or organizations (“Trusted Third Parties” or “TTPs”) to recognize and assert ownership of their data in the case where one or more TTPs leaks the data (the leaked file is defined as a “Leaked Subset”) into the hands of others (“Bad Actors”) who either knowingly or unknowingly use the data illegally.

Abstract: The present technology pertains to synchronizing contents of a directory external to a synchronized directory by a content management system. The content management system is configured to synchronize only objects in the synchronized directory. Accordingly, the present technology creates an anchor object that represents the directory external to the synchronized directory within the synchronized directory. The anchor object includes special attributes that indicate to the synchronization client that the anchor object represents an external directory, and allows the contents of that directory to be synchronized directly to a server on the content management system without first storing the contents of the external directory on the hard drive of the client device.

Abstract: A case management system is configured to provide one or more case generation and management functions. As configured, the case management system enables a user to define a workflow, the workflow including one or more states, one or more operations which may be performed at the one or more states, and one or more transitions corresponding to the operations and defining a sequence of the states; to generate and configure a state machine; to receive a workflow identifier to assign to the state machine; and through a command received from a client device, to open and manage a case based on the configuration of the state machine.

Abstract: A computer-implemented method classifies and creates a container file based on non-functional parameters. The method includes analyzing, by a learning model, a codebase. The codebase includes code for one or more applications. The method also includes identifying, based on the analyzing, a set of functional requirements for each application and a set of non-functional parameters. The method further includes classifying a first application of the one or more applications with a first non-functional parameter. The method includes generating a first container file for the first application. The first container file includes the functional requirements for the first application and the first non-functional parameter. The method further includes creating a first container from the first container file.

Abstract: A system for applying fingerprinting/watermarking of consumer data, and analyzing “wild files” of consumer data to assign a guilt score for a particular party who may have leaked the data, allows the owner of data sources (“Data Owners”) to identify and assert ownership of textual data that has been distributed outside of their firewall in the clear (i.e., without encryption), either intentionally or unintentionally, and assign guilt to parties misusing the data. The system can be used by Data Owners who transmit, lease, or sell data to individuals or organizations (“Trusted Third Parties” or “TTPs”) to recognize and assert ownership of their data in the case where one or more TTPs leaks the data (the leaked file is defined as a “Leaked Subset”) into the hands of others (“Bad Actors”) who either knowingly or unknowingly use the data illegally.

Abstract: Methods and systems comprising a gateway coordinator of a local system that receives a task comprising search criteria, crawls for files on a local data source of the local system, and encounters one or more files of interest. The one or more files of interest may be deNISTed and deduplicated and sent to an upload coordinator of a remote cloud facility. In one or more examples, the gateway coordinator may be a virtual machine.

Abstract: Versions of a schema may be maintained for application to hierarchical data structures. Updates to include in a new version of a schema may be received. The updates may be evaluated for compatibility with a current version of the schema. Compatible updates may be included in the new version of the schema. Incompatible updates may not be included in the new version of the schema. The new version of the schema may be made available for application to hierarchical data structures inclusive of the compatible updates to the schema.

Abstract: A method is disclosed that includes receiving a request to display a service-monitoring user interface that illustrates performance of one or more services that are each provided by one or more entities. Each service is associated with a stored service definition that identifies the one or more entities, and each entity is associated with stored entity definition information that identifies machine data produced by or about the entity from one or more sources. The method further includes causing display of the service-monitoring user interface illustrating performance of each service via an aggregate key performance indicator (KPI) that characterizes a respective service as a whole, and a plurality of aspect KPIs that each characterize an aspect of an associated service. Each KPI is defined by a search query that produces a value derived from the machine data identified by the entity definition information, the value indicative of a measure of the service at a point in time or during a period of time.

Abstract: The present invention relates to a method and a system for robust, searchable, symmetrical encryption, the method comprising: during initialization, having a retrieval server perform retrieval on stored ciphertext information according to a searchable ciphertext and retrieval trapdoor information (Cntupd, K, Locgrp) sent by a client, wherein, the retrieval server acquires a last received first ciphertext set Cnew from a ciphertext database CDB just before the present retrieval according to a retrieval key K and an encryption counter Cntupd sent by the client, acquiring a second ciphertext set Ccache in a retrieval request history from a cache ciphertext database GRP according to a cache ciphertext index Locgrp, and merging the first ciphertext set Cnew and the second ciphertext set Ccache to form a retrieval set , and sending it to the client for decryption.

Abstract: A data storage system allows a user to search a secondary copy such as a back up, archive, or snapshot and receive an abbreviated version of the secondary copy of the file system as a result of the search. The abbreviated version of the secondary copy of the file system may include metadata such as a listing of secondary copy data that correspond with a search term or other filtering criteria provided by the user. An operating system of the user's computing device may mount the abbreviated version so that it can be displayed within a view of the file system of the computing device. Once a user selects one or more desired data objects listed in the abbreviated version, the selected actual one or more data objects are retrieved from secondary storage.

Abstract: Embodiments of the present invention provide a method, system and computer program product for data spaces for multi-tenancy computing. In an embodiment of the invention, different application networks are deployed into a multi-tenancy computing environment. The different application networks each provide common program logic for one or more application instances accessed by different end users. As well, the different end users exchange messages between one another within a same one of the networks. For each of the networks, a separate data space is defined within the multi-tenancy computing system, each including an interface to one or more data repositories. Finally, data queries by ones of the different end users may be processed by extracting meta-data from each of the queries and filtering corresponding underlying data queries to the data repositories with a key derived from the extracted meta-data.

Abstract: A generative attribute optimization (“GAO”) system facilitates understanding of effects of changes of attribute values of an object on a characteristic of the object and automatically identifying attribute values to achieve a desired result for the characteristic. The GAO system trains a generator (encoder and decoder) using an attribute generative adversarial network. The GAO model includes the trained generator and a separately trained predictor model. The GAO model inputs an input image and modified attribute values and employs the encoder and the decoder to generate a modified image that is the input image modified based on the modified attribute values. The GAO model then employs the predictor model to that inputs the modified image and generate a prediction of a characteristic of the modified image. The GAO system may employ an optimizer to modify the attribute values until an objective based on the desired result is achieved.

Abstract: An apparatus, a method, and a computer program product for obtaining map update data of a region are provided. The method comprises receiving a node identifier and a first node digest of an update candidate node; obtaining, based on the node identifier, a second node digest of the update candidate node; comparing the first node digest and the second node digest of the update candidate node; and generating, based on the comparison, the update data for the map database, the update data containing one of an indication of unchanged content; node digests of the child nodes of the update candidate node; or updated content corresponding to the update candidate node.

Abstract: Disclosed is a system to obtain the data set including multiple variables. The system extracts the multiple variables from the data set. Based on the data set, the system creates an ontology indicating multiple relationships between two or more variables among the multiple variables, where a relationship among multiple relationships indicates a correlation between the two or more variables. The system obtains an intent associated with the user, and a visualization standard, where the visualization standard indicates an attribute associated with the visualization. The system generates a sequence of multiple visualizations to present to the user by ranking the multiple visualizations based on the correlation between the two or more variables, the visualization standard and the intent associated with the user. The system presents the sequence of multiple visualizations based on the ranking.

Abstract: A machine and process for branch self-generation in a change server that provide a technical solution via a practical application that reduces: a need for storage use in a memory, and a volume and time required for transmission of date responsive to inputs for creating, updating, querying, or deleting parts of a master baseline. The master baseline may serve utilities providing at least analysis, configuration, and allocations for a control unit in an object. The change server self-generates a branch utilizing a singular persistent imported baseline copy of the master baseline. Validation, export, and replay of the branch onto the master baseline eliminate a need for use of running exports to the master baseline through a differences analyzer.

Abstract: Facilitating temporal data management for anomalous state detection in data centers is provided herein. A system can comprise a processor and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations. The operations can comprise performing a process of extraction, transformation, and loading of data from log files into a telemetry data store. The data can be loaded into the telemetry data store as telemetry data. The operations also can comprise dividing the telemetry data into first telemetry data and second telemetry data. The first telemetry data can comprise telemetry data that does not satisfy a defined quality level. The second telemetry data can comprise telemetry data that satisfies the defined quality level. Further, the operations can comprise removing the first telemetry data from the telemetry data store and outputting the second telemetry data based on a request for the second telemetry data.

Abstract: Methods, systems, and computer-readable media for splitting partitions across database clusters in a time-series database are disclosed. A time-series database determines that a heat metric for the first tile has exceeded a threshold. The first tile represents spatial boundaries and temporal boundaries of time-series data, and a lease for the first tile is assigned to a storage node. Based (at least in part on) the heat metric, a temporal split of the first tile is performed to generate an intermediate tile representing the spatial boundaries and a later portion of the temporal boundaries. A spatial split of the intermediate tile is performed to generate second and third tiles representing two portions of the spatial boundaries and the later portion of the temporal boundaries. The storage node stores elements of the time-series data within these new boundaries to the second and third tiles.

Abstract: The present technology pertains to synchronizing contents of a directory external to a synchronized directory by a content management system. The content management system is configured to synchronize only objects in the synchronized directory. Accordingly, the present technology creates an anchor object that represents the directory external to the synchronized directory within the synchronized directory. The anchor object includes special attributes that indicate to the synchronization client that the anchor object represents an external directory, and allows the contents of that directory to be synchronized directly to a server on the content management system without first storing the contents of the external directory on the hard drive of the client device.

Abstract: A quality assurance (QA) system for automatically performing a quality assurance check on digital communication is configured to: receive a digital communication from an executing application on an external computing device; retrieve a predetermined set of rules applicable to the digital communication; and perform a QA check on the digital communication by determining whether the digital communication complies with each rule in the predetermined set of rules. The set of predetermined rules includes non-visual (e.g., textual and user-selected form fields) rules and vision-based rules. The non-visual rules include a rule requiring the inclusion of specific text or a rule requiring the exclusion of specific text. The visual-based rules include a rule identifying a specific graphical item to be included in or excluded from the digital communication. The QA system is further configured to generate a GUI that provides a visual indication of each rule not met.