Abstract: Systems, methods, and computer program products are configured to apply k-anonymity to an answer to a query sent to a relational database. A query to the relational database is obtained, the relational database containing a plurality of records. A frequency of occurrence of the attributes in the relational database is determined, an anonymization rule set is created based on the frequency of occurrence of the attributes, the anonymization rule set defining which attributes are to be suppressed in the answer to the query, the anonymization rule set is used to generate the answer to the query, wherein the answer to the query has k-anonymity, and a display or other device is controlled based on the answer to the query.

Abstract: Embodiments for providing an intelligent media data service in a computing environment by a processor. One or more sections of media data are identified and annotated (e.g., tagged) for a user based on a degree of relevancy between a user profile and the media data, wherein the media data include media classification, topic detection, speaker detection and noise detection. The one or more sections of media data are selected for the user based on the tagging of the or more sections.

Abstract: A system comprising one or more computing devices implements a vehicle information extraction service. The vehicle information extraction service enables customers to optimize an amount of relevant vehicle sensor information extracted from vehicles by reducing instances of collection of redundant data. The vehicle information extraction service additionally, or alternatively, enables customers to maintain a model of a fleet of vehicles and determine number of the vehicles of the fleet in a certain partition to calculate a data reduction factor that will filter out sensor data. The vehicle information extraction service communicates the reduction factor to the vehicles in the geographical region using a vehicle scheme to indicate to the vehicles the probability with which the vehicle is to transmit a particular type of sensor data.

Abstract: Various aspects of triggering and controlling workflows are disclosed, where a workflow processes data across a plurality of services by performing a predefined operation using predefined parameters when triggered by a predefined input. Specifically, the various aspects include providing access control for workflows triggered using button sharing, encoding workflows and scanning encoded workflows to trigger workflows, using security badges and access control systems used at workplaces to trigger workflows, and enabling workflows to extract information from mobile devices and using the information for subsequent processing.

Abstract: Data channels of a computer system may be remotely monitored to detect data channel degradation. A monitoring agent on a client may execute script commands on the remote computer system to monitor input/output (I/O) rates of a set of channels. The monitoring agent may compute an average data rate of the data channels and compare the I/O rate of each channel to the average. When the I/O rate of a channel falls below the average by at least a threshold amount, an alert may be generated to indicate to an administrator a possible failure with the data channel.

Abstract: A computer implemented method performed by an identity verification computing system includes generating a user-level token associated with a user-level profile. The user-level profile is associated with a user and is unique to the user. The method includes receiving a request to provide an identity verification of a user via an entity computing system, the request comprising a card-based transaction message associated with a card-based transaction, the card-based transaction message comprising the user-level token. The method further includes accessing the user-level profile associated with the user-level token, obtaining the user-level token from the card-based transaction message, validating the user-level token, and transmitting an identity verification approval to the entity computing system.

Abstract: A relational database management system (RDBMS) optimizes limit queries over analytical functions, wherein the limit queries include an output clause comprising a LIMIT, TOP and SAMPLE clause with an expression specifying a limit that is a number K or a percentage ? %. The optimizations of the limit queries include: (1) static compile-time optimizations, and (2) dynamic run-time optimizations, based on semantic properties of “granularity” and “input-to-output cardinality” for the analytical functions.

Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

Abstract: Computer implemented systems and methods are disclosed for automatically clustering and canonically identifying related data in various data structures. Data structures may include a plurality of records, wherein each record is associated with a respective entity. In accordance with some embodiments, the systems and methods further comprise identifying clusters of records associated with a respective entity by grouping the records into pairs, analyzing the respective pairs to determine a probability that both members of the pair relate to a common entity, and identifying a cluster of overlapping pairs to generate a collection of records relating to a common entity. Clusters may further be analyzed to determine canonical names or other properties for the respective entities by analyzing record fields and identifying similarities.

Abstract: An information processing device includes a reception unit that receives an instruction to delete a preregistered user, a storage unit that stores related information that relates to a process that the user executes on the information processing device itself, and a deletion unit that deletes the related information stored in the storage unit corresponding to a user targeted for deletion received by the reception unit.

Abstract: A security framework and methodology is provided which provides front-end security through authentication and authorization, and back-end security through a virtual private data-store created within an insecure environment using existing object-relational mapping (ORM) layers or database drivers. The front-end security utilizes numerous multi-factor authentication metrics and a distributed denial of service (DDoS) cryptographic boundary to proactively attack malicious users using a cryptographic puzzle, and the back-end security provides data encryption and decryption, data privacy, data integrity, key management, pattern monitoring, audit trails and security alerts while simultaneously hiding the complexity behind an identical or similar ORM or database drive application programming interface (API).

Abstract: Methods and systems facilitate managing retail facilities using a managed retail rental service. A physical facility for retail rental may be identified. Configuration instructions to configure the physical facility for a specific retail use in accordance with specific configuration parameters may be received from a retail portal. The configuration instructions may be processed into facility modification instructions that direct one or more facility operators affiliated with the physical facility to modify an attribute of the physical facility. The facility modification instructions may be provided to one or more facility operations devices to configure the facility according to the specific configuration parameters.

Abstract: A method, apparatus, and computer program product are disclosed that improve the efficiency and speed with which promotions can be generated. The method includes creating a promotion builder document, wherein the promotion builder document comprises a set of data elements guiding assembly of a promotion. The method further includes storing the promotion builder document in a memory connected to a computer network, and authorizing, by a processor, one or more remote users to access, via the computer network, the promotion builder document. The method further includes modifying the promotion builder document in response to instructions from at least one of the one or more remote users and assembling the promotion based on the promotion builder document. A corresponding apparatus and computer program product are described herein.

Abstract: A method for monitoring application updates including accessing a first application server of a first application to obtain first application update data on a first application website. First application data and the first application version update data are structured on the first application website in a first format, a first number of locations, and/or a first webpage hierarchy. The method further includes accessing a second application server of a second application to obtain second application update data on a first application website. Second application data and the second application version update data are structured on the first application website in a second format, a second number of locations, and/or a second webpage hierarchy. At least one of the first format, the first number of locations, and the first webpage hierarchy is different than at least one of the second format, the second number of locations, and the second webpage hierarchy.

Abstract: The invention describes a process and system for improving user experience with web-based applications on an electronic device. In particular, instructions are provided for one or more truncated applications that may be stored in memory of the electronic device. Icons associated with the one or more truncated applications are caused to be displayed on the electronic device. It is further determined that a user has selected at least one of the truncated applications. Thereafter, user input fields of the selected one or more truncated application is populated with user information.

Abstract: Systems and methods described herein provide heterogeneous access to tenant databases. A delegator intermediary to clients and tenant database receives a request from a client to perform a database related action. The request identifies a query type and tenant identifier. The tenant databases include a first tenant database of a first database type and a second tenant database of a second type. The delegator identifies a tenant database using the tenant identifier from the request. The delegator determines a database type corresponding to the identified tenant database. The delegator selects, from a plurality of drivers corresponding to respective database types, a driver based on a database type for the identified tenant database. The delegator establishes a database connection using the selected driver between the delegator and identified tenant database. The delegator uses the database connection for performing the database related action from the request.

Abstract: Techniques for enrolling a user in an organization directory include receiving a first request from a first user for inclusion in the directory configured to facilitate access to a collaboration application, the first request including a least a first user profile item for the first user; generating a first user account for the user assigned a first set of permissions and including a first user profile listing the first user profile item; providing a first level of access to the directory; receiving a second request from a second user transitioning the first user account from the first set of permissions to a second, broader set of permissions; verifying a first user identity for the first user based on the second request; assigning the first user account the second set of permissions; automatically updating the directory; and providing a second level of access to the directory to the first user.

Abstract: Selective validation of subgroups of users against group rule parameters is performed to validate group rule parameters for a dynamic group rule. An administrator defines the group rule parameters and selects individual user accounts which are either expected to be included within and/or excluded from a full membership list for the dynamic group rule. For example, the administrator may select first user accounts that are expected to be included within the full membership list and/or second user accounts that are expected to be excluded from the full membership list. Then, a subgroup validation report is generated to inform the administrator whether or not individual user accounts from the subgroup of user accounts satisfy the group rule parameters and, therefore, will be included within the full membership list of the dynamic group rule. The subgroup validation report reveals the efficacy of the group rule parameters.

Abstract: The disclosed technology relates to a system configured to receive a request to capture active application content of a client application running on a client device and generate, based on raw digital data from the client application, an object structure representing the active application content of the client application. The object structure comprises application data including information about the client application, content data including information about the active application content, and a data block including at least a portion of the raw digital data from the active application content. The system may further store the object structure representing the active application content on the client device.

Abstract: An information processing apparatus includes a determination unit that determines a delivery priority of delivery target information on the basis of a disclosure possibility of the delivery target information and a necessity of the information for a receiver, and a disclosure unit that discloses the information to the receiver according to the delivery priority.

Abstract: A method for managing data by a multi-tenant server in a distributed network is described. The multi-tenant server manages a multi-tenant environment for a set of tenant systems and peers in the distributed network, which include the set of tenant systems and a set of non-tenant systems. The method includes receiving a tenant transaction request to modify an object in the distributed network, wherein the tenant transaction request is received from a tenant system in the set of tenant systems based on a non-tenant transaction request from a non-tenant system from the set of non-tenant systems; generating, on behalf of the tenant system and the non-tenant system, a transaction object based on an exchange object and the tenant transaction request; and making, on behalf of the tenant system, the transaction object available to the sets of tenant non-tenant systems to attempt to obtain consensus for modifying the object.

Abstract: Systems and methods for providing interaction data in response to a query from a content provider are provided. One method includes receiving a query from the content provide including a plurality of parameters relating to interactions with a content item of the content provider. The method includes retrieving a set of log file records using the included plurality of parameters and generating a current set of records identifying interaction data with the content item. The method includes comparing the current set of records to a previous set of records generated by the one or more processors for a previous query from the content provider and determining a similarity between the current set of records and the previous set of records. The method includes modifying, if the similarity is above a threshold, the current set of records and providing the modified set of records to the content provider.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for a light integration. One of the methods includes receiving a plurality of objects from a functional logic tier of an application, each object representative of data stored in a data tier of the application, a first portion of the stored data being stored in a first persistent data store and a second portion of the stored data being stored in a second persistent data store. The method includes presenting in a first area of the user interface information from the plurality of objects, the information selected from the first portion of the data. The method includes receiving an indication of an object being selected from the plurality of objects. The method includes presenting in a second area of the user interface information from the second part of data corresponding to the selected business object.

Abstract: Provided are techniques for testing pairings to determine whether they are publically known. It is determined whether a pairing from a record is publicly known by searching public data stores. The pairing is marked with an outcome of the determining. An operation is performed on the pairing based on the outcome.

Abstract: A system, method, and computer program product for web communication based content servicing and delivery. In use, a first communication session is established with a user using a first embedded communication data channel. Next, during the first communication session, a second communication session is established using a second embedded communication data channel. Further, a plurality of profiles is exchanged using the second embedded communication data channel, wherein the plurality of profiles is associated with the user and with a content provider. Additionally, while simultaneously maintaining the first communication session and the second communication session, content is exchanged based on the plurality of profiles using the second embedded communication data channel.

Abstract: Systems and methods presented herein provide for adaptive content delivery. In one embodiment, a system includes a repository operable to store a plurality of web components, and a database operable to store identifiers of a plurality of users. The system also includes a machine learning module operable to: generate a model of computing device interactions of the plurality of the users based on the stored identifiers of the plurality of users; monitor a computing device interaction of a first of the plurality of users; process the computing device interaction of the first user through the model; and predict a format of web component delivery desired by the user based on the model. A formatter may be operable to retrieve a portion of the web components from the repository, and to automatically format the retrieved web components for the first user based on the predicted format of web component delivery.

Abstract: A query for a tag within the collaborative tagging system is received. The query can specify at least one attribute of the tag and a particular selected artifact, wherein the attribute includes a security level of a user who created the tag. Tag records that match the query can be determined as query results. Access control privileges can be applied to the query results. Applying the access control privileges can include filtering the tag records by removing tag records that have an assigned security level exceeding a security level of a user that initiated the query. At least a portion of each tag record in the query results that has a security level that does not exceed the security level of the user that initiated the query can be written to a display.

Abstract: Methods, systems, and apparatuses in a computing device enable user access to a resource. The method includes receiving, from a user, a request for access to a resource; accessing an authentication flow for granting access to the resource; obtaining first claims for a user from a first claims provider in the authentication flow; determining a second claims provider in the authentication flow, the second claims provider having a trust relationship with the claims facilitator; directing the user to the second claims provider; receiving second claims for the user from the second claims provider; and enabling the user to access the resource in response to at least the received first and second claims.

Abstract: In one embodiment, a domain-name based framework implemented in a digital assistant ecosystem uses domain names as unique identifiers for request types, requesting entities, responders, and target entities embedded in a natural language request. Further, the framework enables interpreting natural language requests according to domain ontologies associated with different responders. A domain ontology operates as a keyword dictionary for a given responder and defines the keywords and corresponding allowable values to be used for request types and request parameters. The domain-name based framework thus enables the digital assistant to interact with any responder that supports a domain ontology to generate precise and complete responses to natural language based requests.

Abstract: Aspects extend to methods, systems, and computer program products for creating workflow instances. Workflow templates define different functionalities, such as, for example, between fixed and variable functionality or between functionality authored by different co-authors. Different functionalities defined in a workflow template can be configured to interoperate to provide workflow instances. Functionality defined within a workflow template can be instantiated in a workflow instance based on properties corresponding to the functionality. The properties can include connections with credentials for accessing resources used by the functionality. Connections can obscure access to credentials so that processes outside of a workflow instance cannot use the credentials to access resources.

Abstract: Implementations are provided herein for systems, methods, and a non-transitory computer product configured to use predictive analysis of quantifiable parameters associated with individual files stored on a distributed file storage system. In some embodiments, parameters are analyzed by machine learning so that real-time and scheduled antivirus scanning can be intelligently conducted. We teach creating a sequential order for scheduled antivirus scanning such that the files most likely to be accessed or needed by users in the future will be scanned for viruses before those files less likely to be accessed. We reconcile scheduled antivirus scanning with predictive analysis for real-time antivirus scanning. Our teachings encompass the use of heuristic data compiled, in some instances through machine learning, and analyzed on a per-file basis. We enable system administrators to determine which parameters to prioritize and to set thresholds for antivirus scanning, such as time limits.

Abstract: The invention describes a process and system for improving user experience with web-based applications on an electronic device. In particular, instructions are provided for one or more truncated applications that may be stored in memory of the electronic device. Icons associated with the one or more truncated applications are caused to be displayed on the electronic device. It is further determined that a user has selected at least one of the truncated applications. Thereafter, user input fields of the selected one or more truncated application is populated with user information.

Abstract: Methods and systems are disclosed for providing enhanced information relating to terms for financing a purchase, such as a real estate purchase. According to disclosed embodiments, a financial service system collects financial information associated with the prospective buyer. The financial service system also configures a secure software object, or token, comprising the buyer's financial information. The financial service system transmits the token to various inventory listing sites. By utilizing graphical user interfaces on the inventory listing sites that integrate the transmitted token information, the prospective buyer is provided enhanced information for shopping and researching their purchase, including how the purchase and its financing fit into their overall financial profile.

Abstract: Embodiments relate to enabling users to provide feedback on resources displayed in user interfaces. A feedback tool is executed to allow a user to specify a resource displayed in a user interface. Context metadata about the user interface is captured and stored by the feedback tool. The context metadata corresponds to runtime activity such as loading executable modules, rendering the user interface, handling windowing/input events, etc. The tool is used to specify a resource displayed in the user interface. This triggers capture of the specified resource and the runtime context metadata. The resource and context metadata are searched for in a database of known resources and their respective properties and identifiers. If a match is found, then the source-level identity of the resource is known. The feedback is associated with the resource and used to directly supplement or modify the resource in a source code resource file.

Abstract: A method for presenting a trusted tag cloud to a user. The method includes associating a number of tags with a first user who applies the tags, calculating a weight of the tags being examined by a second user. The weight may be based on the identity of the second user, the identity of the first user, and examining the relationship between the two. The tags may then be presented to the user in accordance with the value of the weight.

Abstract: According to various exemplary embodiments, professional identity content associated with a member of a social network service is identified, based on a network search for online content that contains online content attributes that match member profile attributes included in member profile data associated with the member. Thereafter, a display of a prompt is generated, via a user interface in a device, wherein the prompt invites the member to update a member profile page associated with the member, based on the identified professional identity content.

Abstract: Systems and methods disclosed herein compactly store representations of segment-specific interaction data from a real time data stream of data interactions by multiple entities to facilitate segment-specific analytics for particular time periods. Segment rules defining characteristics of entities within a segment are received. A first probabilistic data structure is created representing unique entity IDs included in instances of interaction data in the real time data stream during a first time period. A second probabilistic data structure representing unique entity IDs included in instances of interaction data in the real time data stream during a second time period different from the first time period. The first probabilistic data structure represents only entity IDs of entities within the segment and the second probabilistic data structure represents only entity IDs of entities within the segment. The first and second probabilistic data structures are indexed and stored.

Abstract: A controller of a display control device is configured to execute causing the display control device to display a plurality of tabs, and a tab screen corresponding a selected tab. A plurality of icons are arrangeable on the tab screen. The plurality of icons includes a particular icon assigned with a particular process. When a particular selecting operation to select two or more common tab screens is received, a common area is set to each of the common tab screens. When a particular arranging operation is received to arrange the particular icons with respect to the common area in the common tab screen currently displayed on the display, and the particular icons assigned with the particular processes are arranged to the common areas of all the common tab screens based on the arranging operation.

Abstract: Systems and methods are disclosed for identifying human users on a network.

Abstract: A system, method, and computer program product for web communication based content servicing and delivery. In use, a first communication session is established with a user using a first embedded communication data channel. Next, during the first communication session, a second communication session is established using a second embedded communication data channel. Further, a plurality of profiles is exchanged using the second embedded communication data channel, wherein the plurality of profiles is associated, at least in part, with the user and with a content provider. Additionally, while simultaneously maintaining the first communication session and the second communication session, content is exchanged based on the plurality of profiles using the second embedded communication data channel.

Abstract: An administration tool can be used to provide data flexibility in a business intelligence (BI) server that is associated with a data warehouse. The administration tool can display one or more data objects that are adapted to be imported from an application framework into a physical model maintained on the BI server. The administration tool can further map the one or more data objects in the physical model into a logical model, also maintained on the BI server, which corresponds to at least one target table in the data warehouse. Additionally, the administration tool can publish an extension input to an extender associated with the data warehouse based on the logical model, wherein the extender operates to generate one or more metadata extensions based on the extension input.

Abstract: A system and method of enabling row level security through security policies is disclosed herein. In this system and method, a computing device may be communicatively coupled to a storage device. The computing device may further be activated and maintain data that comprises a plurality of rows. When executed by the computing device, the system and method may process a data definition language statement comprising a security policy definition. Further, the system and method may receive a query language statement comprising a request to access a first column of a row from the plurality of rows. The system and method may process the request and determine if access may be granted to a user based on the security policy definition in the system.

Abstract: Presented herein are systems and methods related to efficiently hosting one or more computing applications on a server for remote access by a plurality of user computing devices (e.g., personal computers, smart phones, tablet computers, or the like). Applications can be hosted on a server that is part of a distributed (e.g., clustered) computing system. The server can be a physical server or a virtual server (e.g., a cloud-based server). The computing application is executed in a host operating system of the server. The host operating system includes one or more specially designed pattern files, which a processor of the server uses to produce user-specific calls for execution in the hosted computing application. These unique user-specific calls allow a plurality of user devices to efficiently access and operate a single instance of a computing application.

Abstract: Embodiments provide systems and methods configured to mine information available from informal sources (e.g., social media, blogs, and forums) regarding security vulnerabilities. Particular embodiments may comprise engine(s) of a backend in communication with a user through an interface of a frontend, and also in communication with an underlying database to store security information and related information (e.g. search parameters). Embodiments may allow creation of user-specific search phrases for searching information in one or more informal social media information sources. Search results may be consolidated, and users such as system administrators quickly alerted to possible security issues. Embodiments may refine data mining over time by tracking the reputation (e.g. for data accuracy, freshness) of various sources. Embodiments may also reference formal official and third party sources of security information.

Abstract: A method for building or enhancing a relationship between user A and user C may include receiving an identification of user C of a communications network with whom user A of the communications network wants to build or enhance a relationship. The method may also include receiving an identification of an existing relationship that user A wants to use as a model for building or enhancing the relationship with user C. The method may additionally include developing the model for building or enhancing the relationship with user C based on the existing relationship. The method may further include using the model for building or enhancing the relationship between user A and user C.

Abstract: A method for building or enhancing a relationship between user A and user C may include receiving an identification of user C of a communications network with whom user A of the communications network wants to build or enhance a relationship. The method may also include receiving an identification of an existing relationship that user A wants to use as a model for building or enhancing the relationship with user C. The method may additionally include developing the model for building or enhancing the relationship with user C based on the existing relationship. The method may further include using the model for building or enhancing the relationship between user A and user C.

Abstract: Systems, apparatuses, services, platforms, and methods are discussed herein that provide activity-based gallery views for communication platforms. In one example, a media gallery service is provided that determines contextual properties associated with media objects shared over communication sessions provided by a communication platform. Based at least on the contextual properties, the gallery service establishes internal sequencing among the media objects for each of the communication sessions, and presents an activity view in the user interface comprising a representation relating the communication sessions, with each of the communication sessions having associated media objects organized at least according to associated internal sequencing.

Abstract: Disclosed are methods, apparatus, systems, and computer readable storage media for providing access to a private resource in an enterprise social networking system. One or more servers may receive a request for access to a private resource to be granted to a user from a publisher. The publisher may be configured to publish a message as a feed item to one or more feeds, where the message includes a user identification identifying the user. The user does not have access to the private resource. The feed item may be provided to display in the one or more feeds. Access may be granted to the user via the one or more feeds. In some implementations, access may be granted in response to a user input from the feed item associated with a moderator or owner, the moderator or owner having a privilege to control user access to the private resource.

Abstract: An external system (e.g., a website) is associated with an event and includes an interface that allows users to interact with streams of content associated with a social networking system. The interface allows a user to provide posts about the event via the interface, where the posts are displayed in the interface and also in a social networking interface on social networking system in connection with the user and other users associated with that user. The user can view, via the interface on the external system, posts from all users that are provided via the interface (e.g., everyone watching the event), thereby increasing the likelihood that the posts are relevant to the event. The user can also view, via the interface, posts from users associated with the user via the social networking system (e.g., friends of the user), regardless of where those are posted.

Abstract: Cache data analysis for enterprise content management systems is described. A content category is identified based on content provided by a cache server associated with an enterprise content management system. A determination is made whether content associated with the content category is cached by the cache server. The content associated with the content category is requested by the cache server if the content associated with the content category is not cached by the cache server. The content associated with the content category is cached by the cache server.