Abstract: The technology described herein protects the privacy and security of data stored in a knowledge graph (“graph”) by enforcing visibility policies when returning property information in response to a query or other attempt to extract property information from the graph and/or about the graph. The visibility policies may be stored with the object and used to prevent restricted properties from being extracted from the object, let alone the graph. The object-specific visibility policy may be stored in the storage layer of the knowledge-graph object with the object properties and content. Some implementations may include multiple visibility records for a single object. Together the visibility records form the object visibility policy. An object visibility policy may have a single visibility record or multiple visibility records.

Abstract: Methods, systems, and apparatuses for providing access to records of a database stored on a database server in a cloud database platform are described herein. A data sharing platform may determine a shared view definition for access to the database. The data sharing platform may determine rules that specify criteria that limit access to the records stored by the database. The one or more first rules may be received via a user interface. The data sharing platform may perform, based on the rules, a data access certification process on the records stored by the database to generate a table of certification results. The data sharing platform may generate, based on the table of certification results, and without modifying the records stored by the database, a limited consumer view definition. Based on updates to the records, a new limited consumer view definition may be generated.

Abstract: Embodiments use a graphical tree to illustrate hierarchical records including a child record having parent field(s) identifying a first parent record and a second parent record of the child record. The graphical tree is generated by determining a first position for the child record and a second position for the first parent record without considering the second parent record. Subsequently, a third position for the second parent record is determined at a same level as the second position. Once the positions are determined, a first shape, a second shape and a third shape are rendered at the first position, the second position and the third position, respectively. The graphical tree is then generated by visually connecting the first shape with the second shape and the third shape, thereby graphically illustrating the plurality of hierarchical records on a target output medium.

Abstract: A system, method, and computer-readable medium, including authoring and consolidating a semantic layer universe and at least one semantic layer extension (e.g., a collection of semantic layer entities) created on top of the objects of the semantic layer universe, the semantic layer universe and the one or more semantic layer extensions being linked via a repository relationship; and dynamically presenting a consolidated view of relevant objects from the semantic layer universe and possibly entities of the at least one semantic layer extension to provide a user with additional querying metadata.

Abstract: Provided are a server connected to a first terminal operated by an orderer, a second terminal operated by a recipient that accepts an order, and a third terminal operated by a third party. The server includes: a first receiver configured to receive, from the first terminal, an order content indicating a content of the order; a first creating unit configured to create a work order, based on the order content; a first viewing controller configured to display the work order on the second terminal; a second receiver configured to receive, from the second terminal, acknowledgement information indicating acceptance of the order; a second creating unit configured to create a written acknowledgement for the accepted order, based on the acknowledgement information; and a second viewing controller configured to display the written acknowledgement on the third terminal in such a manner that a part of the order content is invisible.

Abstract: Embodiments are directed to techniques for chaining, triggering, and/or enforcing entitlements in a constrained environment. A constrained environment may be provided within with shielded assets are required to exist or execute. An entitlement may be granted on a variety of shielded assets, including datasets, computations scripts, data privacy pipelines, and intermediate datasets generated by an intermediate step of a data privacy pipeline. Thus, a beneficiary may use a granted entitlement as an input into other data privacy pipelines, without the need for the grantor to approve each specific downstream operation. The constrained environment may enforce an entitlement by fulfilling applicable constraints upon accessing the entitlement, restricting the output of the entitlement to the constrained environment, and fulfilling applicable policies when executing downstream operations.

Abstract: A method for dynamic test suite creation from event communications from customers includes receiving an event communication from a customer about an adverse event. The customer receives support for computing equipment over a management network from a support provider and the adverse event is regarding the computing equipment. The method includes analyzing the event communication using natural language processing to identify a potential cause of the adverse event and selecting one or more tests from a test library based on the identified potential cause of the adverse event. Each test of the tests is configured to test a portion of the computing equipment to lead to identification of a cause of the adverse event. The method includes automatically initiating the selected one or more tests through the management network and analyzing test results from execution of the selected one or more tests to identify a cause the adverse event.

Abstract: The terminal device may acquire a first data association instruction for associating a label file and a first database file and acquire a second data association instruction for associating the label file and a second database. The terminal device may, in a case where the first data association instruction and the second data association instruction are acquired, store data association information in a memory. The terminal device may, in a case where a print instruction is acquired under a state where the data association information is stored in the memory, create one or more pieces of print data corresponding to one or more label images using the label file and the third database file associated with the label file, and send the one or more pieces of print data to a label printer.

Abstract: Access to sensitive information in a database can be restricted to improve security and enable efficient auditing. A security engine receives a request from a requesting entity to access data in the database and determines that the requested data includes sensitive information. In response to the requesting entity being authorized to access the data, the security engine retrieves the requested data from the database and modifies the retrieved data by modifying metadata of the retrieved data to include a tag indicating that the retrieved data includes sensitive information. The security engine provides the modified data to the requesting entity and modifies a data access log to identify each attempted access to the modified data. When sensitive data is requested, an interface can include an obscuring element, requiring a user to manually select the element to view the data, enabling the logging of the explicit access request by the user.

Abstract: A method includes sequentially generating fragment records for a user device according to fragment generation rules specifying that each subsequent fragment record be generated for user device events that occur within a defined period of time. Each fragment record includes event data for a series of user device events and includes a fragment ID generated using a non-deterministic ID generation algorithm. The method includes generating an ID-fragment record associating a chain ID with the fragment IDs. The chain ID is associated with device IDs that identify the user device. The method includes removing associations between the chain ID and fragment IDs according to removal parameters indicating that associations be removed based on an age of the fragment records. The method includes generating at least one of search results and advertisements for the user device based on the event data in the fragment records that remain associated with the chain ID.

Abstract: Techniques and solutions are described for providing flexible access to data during execution of a data access request. Multiple instances of a data artifact are created, where different instances of the data artifact provide access to different data sources having data associated with the data access request. When a data access request is executed, a particular data artifact instance can be used during execution of the data access request. In some cases, switching logic can be used to determine which data artifact instance is to be used in executing the data access request. Also described are technologies for facilitating creation of data artifact instances corresponding to a modelling artifact.

Abstract: Methods, systems, and computer program products for detection of personally identifiable information (PII). A first detector and a second detector are configured to interoperate. The first detector is different from the second detector and the second detector incurs a greater computational cost than the first detector when processing identical content. Content is presented to the first detector so as to implement a first type of PII detection that is based at least in part on regular expression analysis using regular expressions. The content is presented to the second detector. The second detector performs PII detection based on content analysis that is different from the first detector's regular expression analysis. The second detector causes generation of new regular expressions based on the content analysis and the first detector is updated with such new regular expressions. Performance of the first detector is continually improved as new regular expressions are generated.

Abstract: Decision support technology is provided for use with patients who may be prone to a cardiovascular condition such as acute coronary syndromes. A mechanism is provided to determine a patient's risk for experiencing a cardiovascular ischemic event at a future time interval based on temporal patterns determined using physiological parameters of the patient such as serum or blood uric acid and/or C-reactive protein (CRP). A forecast or score may be determined indicating whether or not temporal patterns merit intervention to prevent occurrence or reoccurrence of ischemic events, or for determining adherence to or efficacy of treatment or preventive interventions. Based on the forecast or score, appropriate response action such as automatically issuing an alert or notification to a caregiver associated with the patient, may be determined, recommended, or implemented.

Abstract: A computer-implemented system and related method secures the access of a data object in a datastore by a remote system without user-specific credentials. The method comprises using a processor of a data resident operating system for verifying, using a security resource profile for the datastore, which access entity the remote system has access to, but without the user-specific credentials. The method also provides the security resource profile through a security application program interface (API) to the processor to determine whether access to the access entity should be allowed. The method allows the access to the data object by the remote system when the security resource profile exists and permits the access.

Abstract: A method for access control, the method may include (a) receiving, by a file server, an access request for allowing a user to access a file system entity, the user is identified by a first file system protocol (FSP) user identifier, (b) converting the first FSP user identifier to a first access control user identifier (ACUI) of the user, the first ACUI represents a combination of the user and the first FSP, (c) searching, within an access control data structure (ACUI), for a relevant access control rule associated with a member of a multiprotocol set of ACUIs of the user, wherein the multiprotocol set includes the first ACUI of the user and at least one other ACUI of the user that represents at least one combination of the user and at least one other FSP, and (d) responding to the access request based on the relevant access control rule, when finding the relevant access control.

Abstract: Disclosed herein are systems and methods for processing personal data by application of policies. In one aspect, an exemplary method comprises, by the network infrastructure component, analyzing communication protocols between an IoT device and the network infrastructure component, identifying at least one field that contains personal data, for each identified field, analyzing the identified field using personal data processing policies uploaded to the network infrastructure component, and applying the personal data policies for enforcement.

Abstract: Representative embodiments of secure authentication to a resource in accordance with a predefined, electronically stored quorum-based authentication policy include causing electronic interaction among multiple devices that constitute a quorum in accordance with the policy, computationally determining whether the interaction satisfies the policy, and if so, electronically according access to the resource to one or more individuals associated with the interacting device(s).

Abstract: Disclosed herein are embodiments of systems, methods, and products comprises an analytic server, which dynamically predicts future events for web users. The analytic server generates prediction models based on historical click-through analytics data received from the web server. The analytic server captures the current event (e.g., the current operation of the web user) on the web page, and determines the next event by predicting the web user behavior using the prediction models on an event-by-event basis. The analytic server also queries the web user data from a database to better understand the web user's intention, and improve the prediction accuracy. The analytic server modifies the HTML code to display the web page to include a graphical user interface comprising the predicted event. Based on the web users' reactions to the predicted event, the analytic server updates the prediction models.

Abstract: Aspects of the technology described herein relate to techniques for guiding an operator to use an ultrasound device. Thereby, operators with little or no experience operating ultrasound devices may capture medically relevant ultrasound images and/or interpret the contents of the obtained ultrasound images. For example, some of the techniques disclosed herein may be used to identify a particular anatomical view of a subject to image with an ultrasound device, guide an operator of the ultrasound device to capture an ultrasound image of the subject that contains the particular anatomical view, and/or analyze the captured ultrasound image to identify medical information about the subject.

Abstract: Methods and systems of recovering a cryptographic key associated with a blockchain based computer network, including encryption of at least a portion of a cryptographic key of the computer network with a recovery public key, sending of the encrypted at least a portion of the cryptographic key to at least one second computing device, sending of a recovery private key to a recovery escrow service, detection that the at least one first computing device is unavailable, publishing the recovery private key in a public repository, retrieving the recovery private key from the public repository, and decryption of the encrypted at least a portion of the cryptographic key by the at least one second computing device.

Abstract: Systems and methods relate generally to contextually providing a dynamic user interface. In an example method thereof, an apps list is obtained by a dynamic scheduling service for an operating system. The apps list is generated responsive to a query by the operating system responsive to a request by the dynamic scheduling service. Dynamic scheduling data is obtained by the dynamic scheduling service, which includes generating the dynamic scheduling data by an artificial intelligence service including filtering apps on the apps list responsive to a policy. A dynamic user interface is created by the dynamic scheduling service responsive to the dynamic scheduling data, which includes deactivating one or more of the apps on the apps list by the artificial intelligence service responsive to the policy.

Abstract: The present invention is provided with a threat analysis processing unit that, on the basis of an analysis result from the vulnerability analysis unit, analyzes a threat to the system and outputs a threat analysis result; a countermeasure planning unit that, on the basis of the threat analysis result and vulnerability information, plans the countermeasure plan which reduces the impact of the vulnerability; a security test planning unit that plans the security test on the basis of the countermeasure plan; an evaluation calculation unit that performs an evaluation on the basis of the security test, and outputs an evaluation result; and a result processing unit that processes the evaluation result and generates a security countermeasure.

Abstract: Methods and system for creating and managing personalized fonts. Personalized fonts are created by applying personalization parameters to a base font using a style application method or module such as a neural style transformation. The personalized fonts may be transferred to recipients of textual communications to enable the recipient to read messages from a sender in the personalized font of the sender.

Abstract: A computer is provided that includes a search engine. The search engine is configured to receive a search request and conduct a search against a database. Each record within the database includes or is associated with a display criteria or profile that specifies when data from that record can be included into a response to a search.

Abstract: The exemplary embodiments describe, inter alia, an apparatus comprising: a processor configured to (1) generate a plurality of graphical user interfaces (GUIs) for interaction with a user to support configuration of a narrative story generator to automatically generate a narrative story based on input data, wherein at least one of the GUIs presents content blocks comprising a story outline in a hierarchical structure, (2) evaluate configuration elements of the narrative story generated using imported sample data, and (3) generate narrative stories based on the configuration of the narrative story generator and the input data.

Abstract: Quorum-based access control management may be implemented. Quorum controls may be created for determining whether to perform or deny access control operations to perform privileged tasks. When an access control operation is received, approval of the operation may be requested from members for the quorum control. If a policy for the quorum control is satisfied by approval responses, then approval to perform the access control operation may be provided.

Abstract: The disclosed technology addresses the need in the art for a content management system that can be highly flexible to the needs of its subjects. The present technology permits any object to be shared by providing a robust and flexible access control list mechanism. The present technology utilizes a data structure that is highly efficient that both minimizes the amount of information that needs to be written into any database, but also allows for fast reads and writes of information from authoritative tables that are a source of truth for the content management system, while allowing for maintenance of indexes containing more refined data that allow for efficient retrieval of certain information that would normally need to be calculated when it is needed.

Abstract: A system is described for controlling access to resources using an object model. Users can specify use cases for accessing resources. The user may be granted access if the user satisfies qualifications required for accessing the resource, selected a use case permissible for accessing the resource, and satisfies qualifications required for the use case. Use cases, qualifications, resources, and/or links between them can be implemented using an object model. The system can be used in addition to authentication and authorization.

Abstract: Certain aspects of the present disclosure provide techniques for waveform parameters adaptation. Aspects provide for adapting waveforms to account for impairments that can occur when communicating in a high frequency band. A method that may be performed by a base station (BS) includes detecting one or more impairment conditions. The method includes determining a plurality of waveform parameters to adapt in response to the detected one or more impairment conditions. The method includes signaling the plurality of adapted waveform parameters to a user equipment (UE).

Abstract: The present embodiments relate generally to a system and method for creation of a patient account on a medical imaging system during a medical imaging examination. The method may involve operating a processor to: acquire a set of medical imaging data during the medical imaging examination, the set of medical imaging data being acquired in association with a logged-in medical professional account on the medical imaging system; display a new patient account prompt to initiate creation of the patient account; receive a patient identifier to initiate the creation of the patient account; and use the patient identifier to initiate the creation of the patient account, the patient account to be used for accessing at least a portion of the set of medical imaging data acquired during the medical imaging examination.

Abstract: An electronic device is provided that includes a memory storing program instructions, and one or more processors. The one or more processors, when executing the program instructions, are configured to generate an agent public key, and generate a key font based on the agent public key. The one or more processors are also configured to communicate the key font to an operating system, and obtain a key message based on the key font from an application. The one or more processors are also configured to respond to the key message on a bus based on the key message.

Abstract: A computerized system for encryption and transmission of digital information comprising: a set of non-transitory computer readable instructions that, when executed by a processor, preform the steps of: receiving a data set from an instance of a sender browser running on a sender computer device, verifying that a recipient is a subscriber and if the recipient is a subscriber, generating a sender key, encrypting a portion of the data set with the sender key, generating a key pair having a first key and a second key, encrypting the sender key with the first key, encrypting the second key with a master key, and, generating a hyperlink to the portion of the data set that is encrypted.

Abstract: The present disclosure provides systems and methods for creating and updating vehicle listings using crowdsourced images. An exemplary embodiment of the disclosed systems and methods includes at least one processor and at least one non-transitory computer-readable medium containing instructions. The instructions, when executed by the at least one processor, cause the system to perform operations. The operations include communicating with a listing system to create a listing for a vehicle and receiving, from an identification application executing on a mobile device distinct from the listing system, an identifier for the vehicle and an image of the vehicle. The operations further include identifying the listing using the received identifier, determining one or more parameters associated with an image quality for the received image, and updating the listing for the vehicle to include the received image based on the determined one or more parameters for the received image.

Abstract: The present disclosure provides a computer-implemented method for applying access rights to a database comprising a plurality of data units. The method may comprise receiving a request from a user to perform an operation directed to at least a subset of data objects stored in the database. Next, access rights associated with the user may be determined. The access rights may comprise an access permission to a subset of one or more of the data units that is implemented by performing a filter operation. The operation and the filter operation may then be performed concurrently to the at least subset of data objects to obtain a filtered data set.

Abstract: A method for continuous data transfer is provided. Data blocks are generated from a continuous data stream captured via a physiological monitoring device by segmenting data from the continuous data stream into the data blocks. A time at which the data associated with each data block occurs is determined and a sample number is associated with each data block. The data blocks are transmitted from the physiological monitoring device to a server. The data blocks are ordered on the server based on the time and the sample number associated with each data block.

Abstract: Systems and methods for managing data are disclosed. One method can comprise receiving a first request for a service, wherein the first request is associated with a first rights package. The first rights package can be processed to determine access to the service. An evaluation key can be generated, wherein the evaluation key represents the determination of access relating to the processing of the first rights package. A second request for a service can be received, wherein the second request is associated with a second rights package. The second rights package can be processed using the evaluation key.

Abstract: A collaborative matter management and analysis tool is presented. Each matter has its own workspace that is built around a collaborative backbone. Users can provide access to the matter workspace to anyone who they want to collaborate with, including others at their organization and persons outside the organization, such as clients, lawyers, experts, vendors and other third parties. Processing of the document is automatic and based on the content and document type. The document, when uploaded, is OCR'd and based on the content, citations are converted to hyperlinks and the cited documents are linked. Documents and events are associated to enable enhanced productivity tools such as searching and e-brief.

Abstract: Embodiments of the present disclosure include a processing device that, responsive to detecting an unavailability of a first node device of a plurality of node devices of a network, activates a proxy device to correspond to the first node device, detects a consensus operation among the plurality of node devices, wherein the consensus operation comprises a plurality of vote transmissions within the network, and controls the proxy device to provide a proxy vote transmission as part of the consensus operation.

Abstract: A method is provided for performing transaction processing in a system. The system includes a plurality of processors. Each processor executes a plurality of transactions. Two of the processors receive requests to process the same subset of the plurality of transactions and each of the two processors execute each of the requests to process the same subset of the plurality of transactions. Each of the two processors create local indicia from the outcome of each transaction in the same subset of the plurality of transactions. Each of the two processors assign a transaction tag to each of the local indicia, wherein the same transaction tag is assigned by each of the two processors executing the same transaction. The local indicia and the respectively assigned transaction tags from each of the two processors are queued. It is then detected when queued transaction tags from the two processors match each other. The local indicia associated with the matching transaction tags are then compared to each other.

Abstract: Methods, apparatuses, or computer program products are disclosed providing for the dynamic data classification of data objects. Examples enable prediction of candidate data classification labels for data objects associated with one or more applications, services, or computing devices. Examples enable the assignment of one or more data classification labels to a data object for transmission to one or more computing devices. Examples enable the interactive and progressive application of machine learning techniques to data classification systems to assign data classification labels with probable certainty. Examples enable the tracking, monitoring, storage, sorting, and retrieval of labeled data objects. Examples provide for access control configuration of services to restrict or allow access to data objects based on data classifications and other service parameters.

Abstract: A computing device can manage installation of an application program using an agent registered with an operating system. The agent can receive a notification in response to a user request to mount a disk image. The disk image can include the application program. The agent can generate metadata associated with the disk image. An action to take can be determined based on the metadata. The application program can be installed using privileges of the agent without changing privileges of an account for the current user.

Abstract: Embodiments may facilitate data analytics for a cloud computing environment. A plurality of system tables may store system metadata that associates a first materialized view with a first view and a first table. A transaction compute unit may process an update request relevant to the first view. A query parser may capture the update request from the transaction compute unit and detect which system tables are associated with the update request relevant to the first view. Responsive to the request, the query processor arranges for first table data to be replicated and transmit a materialized view request to a materialized view compute unit. The materialized view compute unit may be created as a Materialized View-as-a-Service (“MVaaS”) independent of the transaction compute unit. The materialized view compute unit may receive the materialized view request, refresh the first materialized view, compute the first materialized view, and store a result of the computation.

Abstract: A distributed database encrypts tables using table encryption keys protected by a client master encryption key. The client may revoke and subsequently restore authorization to access the client master encryption key. A sweeper process of the distributed database examines encrypted tables and identifies changes to the status of a corresponding client master encryption key. A response to an identified change in status is initiated.

Abstract: The techniques may include maintaining a thread of events for a plurality of users, where each element of the thread corresponds to an event/activity and includes at least a next field that includes a first subset of the plurality of users and a previous field that includes a second subset of the plurality of users. These techniques may allow new events to be quickly added and prior elements may be updated to reflect the addition. Further, the thread elements may allow the thread to be quickly traversed to identify queried information such that the information may be displayed to a user.

Abstract: Provided in the example embodiments are a method, electronic device, and computer storage medium for managing virtual streaming. The method for managing virtual streaming includes: providing a configuration interface for configuring a virtual streaming room with configuration settings, the configuration settings including at least an audience group setting, and a host setting related to a virtual host; receiving, via the configuration interface, configuration input corresponding to the audience group setting, and/or the host setting; and based on the configuration input, generating a host assignment rule, the host assignment rule for assigning at least one virtual host to at least one audience group. The example embodiments solve the problems in which the form of an existing virtual host is fixed, audience adhesion is poor, and use thereof is inflexible.

Abstract: In one embodiment, a method for providing recommendations for workflow alteration is disclosed. Task results for completion of a first set of iterations of a workflow are received. Training data may be extracted from the task results. The training data may be used to build a machine learning model for altering at least a portion of the workflow. An automation forecast that assesses the effects of altering the workflow for a second set of the iterations of the task may be generated, and a workflow alteration recommendation may be provided. Based on automation parameters, such as a minimum required level of accuracy, and the automation forecast, a recommendation regarding whether to automate the task may be included in the workflow alteration recommendation. Finally, based on the recommendation, an automated process may be generated to handle at least a portion of the task.

Abstract: Enabling communication between multiple storage controllers and a single-ported storage device, including determining, by an arbiter, that a first storage system controller of a plurality of storage system controllers has gained exclusive access to a single-ported storage device having a plurality of lanes; and in response to the determination, enabling communication between the first storage system controller and the storage device; and preventing communication between the storage device and at least one other storage system controller of the plurality of storage system controllers.

Abstract: Techniques are disclosed relating to the distribution of database key permissions. A database system may distribute first permission information to a plurality of database nodes that identifies a distribution of key range permissions to ones of the plurality of database nodes. A given key range permission being distributed to a given database node may permit that database node to write records whose keys fall within a key range associated with the given key range permission. The database system may receive, from a first database node, a request for a first key range permission provisioned to a second database node. The database system may modify the first permission information to derive second permission information that provisions the first key range permission to the first database node instead of the second database node. The database system may distribute the second permission information to ones of the plurality of database nodes.

Abstract: Methods, systems, and media for presenting contextually relevant information are provided. In some implementations, the method includes: receiving information associated with a user of a user device from multiple data sources, where the user device comprises a display; identifying, without user intervention, a relevant document based on the received information associated with the user of the user device; determining that a new browser window or a new browser tab has been opened by a browser application being executed by the user device; and causing, without user intervention, the relevant document to be presented using the new browser window or new browser tab.

Abstract: Systems and methods for managing membership in a private data exchange are provided herein. In one embodiment, the method includes generating a plurality of listings in a data exchange, each of the plurality of listings comprising version metadata and referencing a data set within a database. The method further includes receiving a request for access to a first listing of the plurality of listings and, in response to the request, accessing a first version of the data set that is compatible with first version metadata of the first listing.