Abstract: To accelerate the data processing of a processor, a coprocessor subsystem can be used to offload data processing operations from the processor. The coprocessor subsystem can include a coprocessor and an accelerator. The accelerator can offload operations such as data formatting operations from the coprocessor to improve the performance of the coprocessor. The coprocessor subsystem can be used to accelerate database operations.

Abstract: A system and method for the preparation of electronic publications or “ePubs” that provide a rich multimedia experience to readers using any of a variety of user devices, without requiring those individuals wishing to prepare such ePubs to install proprietary client applications on the computing device used to prepare the ePubs, and without the need to download a large portion or all of the ePub to enable viewing on an electronic device of an end-user.

Abstract: A computing system includes a server. The server is communicatively coupled to a data repository and is configured to store a data in the data repository. The server is further configured to create, via a visual information flow creation tool, at least one information flow object, wherein the at least one information flow object comprises a flow, a sub-flow, an Action, or a combination thereof. The server is also configured to interface with the at least one information flow object via a front-end application programing interface (API), a back-end API, or a combination thereof. The server is additionally configured to execute the at least one information flow object via the front-end API, the back-end API, or a combination thereof, and to retrieve results obtained by executing the at least one information flow object via the front-end API, the back-end API, or the combination thereof.

Abstract: Systems and methods for podcast playback in a system including a playback device and a mobile device as a system controller are disclosed. In one embodiment, a playback system comprising a first playback device and a mobile device, the mobile device comprising computer-readable medium having stored thereon instructions executable to perform a method comprising capturing user input selecting an alarm function, capturing user input selecting a time for playing an alarm on the first playback device, capturing user input selecting a podcast channel, updating the graphical user interface to reflect the selected podcast channel, capturing user input specifying what order to play podcast episodes from the selected podcast channel, and starting playback of a first podcast episode on the first playback device according to the specified order to play podcast episodes by the previous user input and the selected time for playing an alarm.

Abstract: Methods, systems, computer-readable media, and apparatuses are described for sending different update times corresponding to a same version of a resource. A computing device may provide a version of a resource in response to requests from a plurality of different devices, and may indicate different update times for the version of the resource. The different update times may be based on times associated with the requests from the plurality of different devices.

Abstract: Disclosed herein is a computer-implemented method of processing a query using a columnstore comprising a plurality of segments, the method comprising: receiving a query comprising a parameter; determining a key corresponding to the parameter; identifying a mapping structure, from a plurality of mapping structures, relating to said key, wherein each mapping structure corresponds to a respective segment of the columnstore; interrogating the identified mapping structure to determine a value corresponding to the key, wherein the value identifies an entry of an index table of a plurality of index tables that corresponds to the respective segment, wherein the entry of the index table identifies a row of the respective segment of the columnstore relating to the parameter; and retrieving data relating to the parameter from a data source based on data stored in the entry of the index table.

Abstract: The disclosed method is performed by a cloud system for changing a registration of a network access device. The method includes initiating a change of a registration of a network access device. The registration is stored at a cloud system and indicates ownership of the network access device by a first user. The method further includes receiving an authorization from the first user to dissociate the ownership of the network access device by the first user, and receiving an indication of a physical reset occurring locally at the network access device. The physical reset allows the first user to dissociate the ownership of the network access device. The method further includes, upon receiving both the authorization by the first user and the indication of the physical reset, releasing the ownership by the first user of the network access device at the cloud system.

Abstract: Methods and systems are disclosed for optimizing record placement in defragmenting a graph database. Issues with fragmented data within a graph database are addressed on the record level by placing data that is frequently accessed together contiguously within memory. For example, a dynamic rule set may be developed based on dynamically analyzing access patterns of the graph database, policies, system characteristics and/or other heuristics. Based on statistics regarding normal query patterns, the systems and methods may identify an optimal position for certain types of edges that are often traversed with respect to particular types of nodes.

Abstract: Example embodiments involve a metrics collection system for collecting software usage metrics from one or more client devices at deployments. A computer, such as a server configured to execute the metrics collection system, collects software usage metrics (e.g., as a metrics submission from a client device) of the software product at the deployment, identifies a metrics type of the software usage metrics collected, assigns the software usage metrics to a metrics category, and calculates and updates a metrics score of the metrics category, based on the software usage metrics collected.

Abstract: Protecting sensitive data in snapshots, including: creating a transformed snapshot portion by applying a transformation specified in an access policy to one or more data objects contained within the portion of the stored snapshot, wherein the stored snapshot is a copy of data in a storage system at a particular point in time prior to a request to access the snapshot; and providing access to the transformed snapshot portion.

Abstract: A data store maintains a collection of data using a log-based storage structure. In response to a request to delete an item from the collection, the database management system adds a tombstone entry to the log-based storage structure, with additional metadata associated with the tombstone. Access to the tombstone metadata is provided to a client of the data store. The tombstone is deleted from the log-based storage structure after expiry of a time-to-live period.

Abstract: A database session in an active standby server on which an active standby database resides receives a DML statement. The session is suspended while the statement is redirected over a database link to a primary database on which the statement is executed. Information associated with execution of the statement is communicated to the session in the active standby server. Redo records describing changes to the contents of the primary database are applied to the active standby database and control is returned to the session. Prior to commitment of a transaction including the statement, a query directed to data to which the statement was directed is received at the active standby server from a client and executed on the active standby database absent use of a database link based on whether information associated with a database session associated with the client matches the information associated with execution of the statement.

Abstract: Protecting data privacy in secure multi-party computation and communication is provided. A method of protecting data privacy includes determining a differential privacy configuration, determining a number of iterations based on a first parameter and a second parameter, and for each of the number of iterations generating a random value and a random noise data; generating a first message and a second message; and performing a transfer based on the first message, the second message, and an input data to output one of the first message and the second message. The method also includes generating a first noise data based on the random noise data in each of the number of iterations, generating a first share based on a first dataset and a second dataset, applying the first noise data to the first share, and constructing a result based on the first share and a second share.

Abstract: A method of controlling resynchronization of a source database and a target database may comprise detecting that a connection between the source database and the target database has been restored. Based on the detecting, the method may also comprise identifying a first edit flag for a first row in a first table on the source database. Based on the identifying, the method may also comprise sending the first row from the source database to the target database. Based on the sending, the method may also comprise clearing the first edit flag for the first row.

Abstract: Embodiments of the present disclosure relate to sharing database roles using hidden roles. A database role may be generated within a database container having a plurality of data objects, wherein the database role exists exclusively within the database container. A set of grants to a particular subset of the plurality of data objects of the database container may be assigned to the database role and the database role may be granted to the share object. The share object is mounted within a consumer account to generate an imported database container within the consumer account, the imported database container including an imported copy of the database role. The imported copy of the database role may be granted to each of one or more account level roles of the consumer account to share the particular subset of the plurality of data objects without creating proxy objects in the consumer account that represent the particular subset of the plurality of data objects.

Abstract: A distributed database system can implement a column-based database system and a row-based database system for processing data. The row-based database system can store data organized into key value pairs, and data to be processed by the row-based database system is converted to a key-value format compressing keys that correspond to values. The distributed database system can perform serialization and compression in converting the data to the key-value format for efficient data storage performance. The distributed database system can unpack portions of the converted serialized compressed data in response to queries that process a portion of serialized compressed data without unpacking the entire converted dataset.

Abstract: A first server can generate user profiles and receive requests from user devices for enrollment in a first server-managed system that includes user groups. The first server can provide a unique key to a user device during an enrolment process based on a user group the user device is assigned to. The first server can include an enrollment notification for the user device in a first notification transmitted to a messaging service. The messaging service can transmit a second notification to the user device, and the user device can request a user profile from a second server based on second server access information included in the second notification. The second server can use the unique key to access user profile information which it transmits to the user device based on the request. The user device can access the user profile from the profile information using the unique key.

Abstract: Discussed herein is a technique for replication of keys across regions of a cloud infrastructure. A first vault is created in a first region. The first vault stores a plurality of records, each of which is associated with a key and corresponding metadata. A second region, different from the first region, is selected where replication of the plurality of records is desired. A second vault is created in the second region. The plurality of records are relayed from the first vault to the second vault, so that each of the plurality of records is replicated in the second vault based on an entropy value of the record. A mutation operation executed with respect to the first vault is stored as a new record in the first vault. The new record is transmitted to the second vault, which is updated to reflect the mutation operation performed on the first vault.

Abstract: Physical storage devices (PSDs) of a protection group cluster (PGC) may be represented by a protection group matrix (PGM) having a plurality of rows and a plurality of columns, where each row corresponds to a PSD of the PGC, and each column corresponds to a partition of each PSD. The value specified in each cell at an intersection of a row and column specifies the protection group of the PGC to which the partition of the PSD represented by the column and row, respectively, is (or will be) assigned. In response to one or more of PSDs being added to a PGC, the PGM may be reconfigured, including adding new rows, and transposing portions of columns to the new rows, or transposing portions of rows to portions of columns of the new rows. Protection members of the PGC may be re-assigned based on the reconfiguration.

Abstract: Disclosed are a method for data synchronization between a host side and a Field Programmable Gate Array (FPGA) accelerator, a Bidirectional Memory Synchronize Engine (DMSE), a FPGA accelerator, and a data synchronization system. The method includes: in response to detection of data migration from a host side to a preset memory space, generating second state information according to first state information in a first address space, and writing the second state information to a second address space (S201); and in response to detection of the second state information in the second address space, calling Direct Memory Access (DMA) to migrate data in the preset memory space to a memory space of a FPGA accelerator, and copying the second state information to the first address space, so as to implement synchronization (S202).

Abstract: Software-based orchestration of communication payloads in satellites. In an embodiment, a payload model of a satellite payload, defined in a data modeling language (e.g., YANG) and representing a configuration for the satellite payload, is received. The configuration specifies a setting for at least one component of the satellite payload. The payload model is translated into one or more satellite commands for configuring the satellite payload according to the configuration represented in the payload model, and the satellite payload is reconfigured using the satellite command(s).

Abstract: A data migration and integration system is disclosed. In various embodiments, the system includes a memory configured to store a mapping from a source schema to a target schema; and a processor coupled to the memory and configured to migrate to a target schema an instance of source data organized according to the source schema, including by using a chase engine to perform an ordered sequence of steps comprising adding a bounded layer of new elements to a current canonical chase state associated with migrating the source data to the target schema; adding coincidences associated with one or more of the target schema data integrity constraints and a mapping from the source schema to the target schema; and merging equal elements based on the coincidences; and repeat the preceding ordered sequence of steps iteratively until an end condition is met.

Abstract: A cybersecurity infection detection system and method of use. In some embodiments, the system and process provide improved network security, computer security, or both, through mutually assured, defense in depth approaches. In some embodiments, one or more of defense in depth, collaborative attack detection, remediation, component redundancy, component self-monitoring, and component self-replacing are combined to effect an enhanced cybersecurity system. In some embodiments, the cybersecurity system and method include, but are not limited to, one or more of one or more probes, monitors, configuration ledgers, signature ledgers, audit ledgers, configuration controllers, message engines, switchboards, and a public-private key infrastructure.

Abstract: A method, apparatus, and non-transitory computer-readable storage medium for generating and presenting information identifying relationships between entity instances in a database that has a plurality of entity structures.

Abstract: A configuration of a security system is optimized based on revising metadata categories and one or more associated properties which comprise the metadata categories included in at least one rule used by the security system. The optimized configuration is transmitted to the security system. A current configuration of the security system is update. An indication of the update being successful is received.

Abstract: A storage system includes a first storage device that includes a first memory and a first processor coupled to the first memory; and a second storage device that includes a second memory and a second processor coupled to the second memory, wherein the first processor is configured to: when migrating data in object units, generate dummy data that corresponds to the data instead of the data in object units, and transmit management information used to manage an object and the dummy data to the second storage device, and the second processor is configured to: store the management information in a storage unit in association with the object, and discard the dummy data.

Abstract: Embodiments of the present invention relate to methods, systems, and computer program products for user behavior management. In embodiments, a group of states of a user of an application system within a previous time period may be obtained. A state in the group of states may be associated with a privilege of the user for accessing resources in the application system during the previous time period. A feature of the user may be generated based on the group of states. A privilege of the user at a current time may be managed in the application system based on the feature. With these embodiments, the user behavior may be managed according to various aspect of the user's historical states and thus the user may be managed in a more accurate and effective manner.

Abstract: A method for deduplicating data comprising: obtaining, from a metadata node and by file system client executing on a client application node, a data layout; generating, by the client application node, a fingerprint for the data stored on the client application node; generating, by a memory hypervisor module executing on the client application node, at least one input/output (I/O) request specifying a location in a storage pool, wherein the location is determined using the data layout; issuing, by the memory hypervisor module, the at least one I/O request to the storage pool, wherein processing the at least one I/O request results in at least a portion of the data being stored at the location; and after issuing the at least one I/O request to the storage pool, transmitting the fingerprint to the metadata node, wherein the metadata node attempts to deduplicate the data using the fingerprint.

Abstract: Aspects of the present disclosure relate to mapping content delivery. A client device provides, to a map management server, a request for a map of a geographic region. The client device receives, from the map management server, an identification of tiles for the map. The client device provides, to a first tile server, a request for the tiles for the map. In response to receiving the tiles from the first tile server: the client device displays the map of the geographic region based on the tiles.

Abstract: Embodiments of the invention are directed to a system, method, or computer program product structured for synthesizing and building infrastructure platforms.

Abstract: This application relates to a system for verifying data access and a method thereof. In one aspect, the system includes a service module for receiving a data access request for an original data from a client, and sending a first verification data to the client. The system also includes a verification module for receiving a first data eigenvalue corresponding to the original data from the service module, and generating a first verification fingerprint corresponding to the first data eigenvalue. The system further includes a data module for generating the first verification data by receiving the first verification fingerprint to embed into the original data, and generating a first integrity value by hashing the first verification data. The system further includes a verification database for storing data access information comprising the first data eigenvalue, the first verification fingerprint and the first integrity value in one record identified as the original data.

Abstract: In one aspect, a method includes receiving merchant profile data describing attributes of merchants; generating, using one or more machine-trained models and the merchant profile data, a respective first profile for each merchant of the merchants; generating, using the one or more machine-trained models, a respective second profile for each of the plurality of merchant services using at least one type of description for each of the plurality of merchant services, wherein the respective first profile for each merchant and the respective second profile for each of the plurality of merchant services are numerically comparable; identifying a list of merchant service recommendations for at least one of the merchants using generated first profiles and second profiles; and configuring a merchant computing device of the at least one merchant with at least one merchant service selected by the merchant from the list of merchant service recommendations.

Abstract: Approaches for a model-driven tool-agnostic reporting approach are provided. In one example, a report request is received from a business intelligence reporting application, from which a graphical template and query template are created, wherein the graphical template comprises the visual presentation of data responsive to the request and the query template specifies how the data responsive to the request is to be computed. The report created by the approaches described herein is compatible with multiple business intelligence reporting applications.

Abstract: A representation of a workflow comprising a plurality of tasks is obtained. An execution of an instance of the workflow is initiated. The execution comprises selecting, with respect to a particular task of the workflow, a particular execution resource option from a set comprising at least a first execution resource option and a second resource execution option. A result of the execution is stored.

Abstract: A record management system stores records for an organization having a plurality of members and a plurality of groups, and manages accessibility of the records for the organization according to a specified record access policy. The record management system generates an accessibility database that indicates, for each member, records that are explicitly or implicitly accessible by each member such that the records accessible for each member can be quickly determined if needed. A member has explicit access to a record if there is an explicit indication of accessibility between the member and the record. A member has implicit access to a record through membership associations to other members or groups that have access to the record. The record management system also receives search queries from members and returns records that are relevant and accessible to the members based on the accessibility database.

Abstract: The presence of new unread electronic messages received, that is, messages received since unread messages were last reviewed, is provided by indicia presented to the user. These indicia can take various forms, such as by bolding, flashing, changing the size or color of a count of unread messages, and/or the unread message icon. Alternatively, a separate indication, such as a second count representing the number of new unread electronic messages received, or some other symbol, such as an explanation point, can be displayed.

Abstract: Systems and methods include determination of a first logical page number of a first database page to be persisted, identification of a first blockmap page associated with the first logical page number, determination, from the first blockmap page, of a block number associated with the first logical page number, determination that the block number is an object key, determination, in response to the determination, that the block number is an object key, determination of a first object key to associate with the first logical page number, and writing of the first database page to the object store using the first object key.

Abstract: An industrial control system and a method of inspecting one or more communication packets in an industrial control system may be provided, the industrial control system firewall module comprising a packet accessing component configured to access a communication packet of an industrial control system; a firewall rules database, the firewall rules database configured to store one or more firewall rules; an inspection module configured to access the one or more firewall rules based on an industrial protocol associated with the communication packet; and the inspection module is further configured to perform a comprehensive inspection of all header fields and data fields of the communication packet based on the one or more firewall rules accessed based on the industrial protocol associated with the communication packet.

Abstract: Systems and methods are provided for self-learning natural language predictive searching including receiving a first input, the first input being related to the desired outcome; retrieving a first information related to the first input; determining a first output based on at least the first input and the first information; outputting the first output; receiving a second input based on the outputted first output in response to the first output being different from the desired outcome, the second input being related to the desired outcome; retrieving, by the processor, a second information related to the second input; determining a second output based on at least the second input, the second information, the first input and the first information; and outputting the second output.

Abstract: A method of data reduction in a block-based data storage system includes selecting a starting position in a block based on a deterministic function of block data content. Then for an unaligned block beginning at the selected starting position, a block digest (e.g., block hash) is generated and compared with stored block digests of stored data blocks. If there is a match, and the stored block matches the unaligned block, then a reference to the stored block is stored in place of the unaligned block, and otherwise the unaligned block and a corresponding digest are stored. The storing of references to already stored blocks, without the constraint of observing aligned-block boundaries, realizes increased savings of physical storage space.

Abstract: Methods and systems are described for prioritizing notifications based on user responses. The system may include determining a first score indicative of a first relevance of a notification to a first user at a first client device. The first score is determined based on at least metadata characterizing the notification. The notification is prioritized for the first user based on at least the first score. The notification is presented at the first client device based on at least the prioritization for the first user. A second score is determined that is indicative of a second relevance of the notification to a second user at a second client device. The second score is determined based on at least a response to the notification from the first client device.

Abstract: An identity provider (“IdP”) system maintains a framework of authentication methods and security targets that enables flexible authentication policy authoring and analysis of authentication performed by users of an organization. The IdP system generates authentication method profiles that include authentication factors and attributes, which may be further classified as required or optional. The IdP system also generates security target profiles that indicate security requirements needed to satisfy the corresponding security targets. The IdP system uses the generated profiles to determine relationships between authentication methods and security targets (e.g., a list of authentication methods that satisfy a given security target). Using these relationships, the IdP system may enable users to author policies and analyze how users' authentication behaviors comply with security targets.

Abstract: A storage cluster is provided. The storage cluster includes a plurality of storage nodes, each of the plurality of storage nodes having nonvolatile solid-state memory and a plurality of operations queues coupled to the solid-state memory. The plurality of storage nodes is configured to distribute the user data and metadata throughout the plurality of storage nodes such that the plurality of storage nodes can access the user data with a failure of two of the plurality of storage nodes. Each of the plurality of storage nodes is configured to determine whether a read of 1 or more bits in the solid-state memory via a first path is within a latency budget. The plurality of storage nodes is configured to perform a read of user data or metadata via a second path, responsive to a determination that the read of the bit via the first path is not within the latency budget.

Abstract: Migration results in specific action requests to move data from a source system instance to a target system instance. Migration may consume many resources. In an effort to monitor migration effects on source and/or target performance, one or more traffic lights are determined to monitor utilization of resources of the source and/or target. Based on the one or more traffic lights, migration is dynamically throttled. The one or more traffic light may be assigned a status based on how the migration affects performance of another data operation which may be contemporaneously operating on either the source and/or the target.

Abstract: Embodiments include receiving an indication of a data storage module to be associated with a tenant of a distributed storage system, allocating a partition of a disk for data of the tenant, creating a first association between the data storage module and the disk partition, creating a second association between the data storage module and the tenant, and creating rules for the data storage module based on one or more policies configured for the tenant. Embodiments further include receiving an indication of a type of subscription model selected for the tenant, and selecting the disk partition to be allocated based, at least in part, on the subscription model selected for the tenant. More specific embodiments include generating a storage map indicating the first association between the data storage module and the disk partition and indicating the second association between the data storage module and the tenant.

Abstract: For an updateable view that is defined for a first database, some embodiments provide an automated method for processing an update to data tuples in a second database, the update specified by reference to the updateable view. The method receives a first query from a client for modifying a particular data tuple presented in the updateable view. From a metadata storage, the method retrieves a definition of the updateable view, where the definition includes a reference to a first set of one or more objects associated with the particular data tuple in the first database. Based on the retrieved definition, the method generates a second query referencing a second set of one or more objects associated with the particular data tuple in the second database. The method executes the generated second query on the second database, to modify the particular data tuple in the second database.

Abstract: A method to exchange medical data between a cloud repository on a cloud server and a plurality of local repositories on a plurality of local servers connected to the cloud server. The plurality of local servers comprises a first local server and the plurality of local repositories comprises a first local repository on the first local server. The method includes, causing the first local server to: transmit an image retrieval request to the cloud server, receive the medical image generated by the cloud server or an instruction from the cloud server to generate the medical image locally, and display the generated medical image on a display. The image retrieval request causes the cloud server to determine whether raw image data associated with the image retrieval request is stored in the cloud repository or locally in the first local repository.

Abstract: A system of managing key entity records required by a user. The system includes a database arrangement operable to store a structured database including entity records and a processing module communicably coupled to the database arrangement. The processing module is operable to receive the structured database including entity records; determine an importance score for each of the entity records; identify key entity records based on the determined importance scores of the entity records; receive a tuning-input from the user; calculate a tuned importance score for each of the entity records based on the tuning-input from the user; and identify the key entity records required by the user based on the tuned importance scores of the entity records.

Abstract: A computing device includes a processor to generate graphics data that includes text, a display to display the graphics data, and a memory to record the displayed graphics data. A sensitive text handling engine is coupled to the processor, the display and the memory. The sensitive text handling engine is configured to perform certain steps before sensitive text within the graphics data is displayed and recorded. These steps include receive sensitive text identification settings, detect text in the graphics data and store the detected text as text images, translate the text images into text strings, and identify sensitive text within the text strings based on the sensitive text identification settings.

Abstract: The invention provides for a system and method for activity-entry reporting and activity-entry report generation by utilizing a drag and drop mechanism that allows users to merge submitted activities in order to generate new activities. These activities are contained within activity reports that can be modified and merged by other users in an effort to develop combined activity reports that maintain the traceability of the merged activities.