Abstract: According to some embodiments, a system to automate platform provisioning for an enterprise includes a platform resource computer store containing a set of electronic data records (each including a component identifier and a set of computing characteristic values). A profile engine may receive a platform request from a user associated with the enterprise and identify, based on data in the platform resource computer store, a resource bundle of components appropriate in view of the platform request. A platform generator may receive platform requirements based on the identified resource bundle of components and provide input data to a REST API service. Final platform definition information for the enterprise may be stored into a central repository. According to some embodiments, a platform provisioning system may process IaaS and PaaS automation components and utilize a return service to generate infrastructure binding data to couple components in the resource bundle to each other.

Abstract: A method for creating a dynamic element in content performed by a dynamic element management system is disclosed. The method includes receiving a content request for the dynamic element from a client device, the content request comprising a uniform resource locator (URL) of an external data source from which to retrieve content for the dynamic element; identifying the data source based on the URL; forwarding the content request to the identified data source; receiving metadata corresponding to the content hosted by the data source; and forwarding the metadata to the client device for display in a dynamic element placeholder on the client device.

Abstract: A system can include a processor; memory operatively coupled to the processor; an input; an output; and one or more modules stored in the memory that include instructions executable by the processor to instruct the system to receive information, via the input, that includes information associated with a target; parse the information; access a profile; and build a link based at least in part on the information and at least in part on the profile.

Abstract: A method of enhancing a link in collaboration applications includes determining, from content entered into a collaboration application, a string of characters indicating a uniform resource locator (URL). Upon determining the string of characters indicating the URL from the content entered into the collaboration application, the method includes automatically calling a first web service to obtain a representation of content referenced by the URL by sending a request, at least including the URL, to the first web service. The representation of the content referenced by the URL can then be received from the first web service in a format customized for the collaboration application, a computing device on which the collaboration application is implemented, or both.

Abstract: Systems and techniques are provided for a decentralized database associating public keys and communications addresses. A signed secret message may be sent by a validator computing device of a peer-to-peer network for a decentralized database to a communications address from a request for verification entry in a verification queue of the decentralized database. A second request for verification including the communications address and a user-signed secret message may be received. The user-signed secret message may be verified using a public key from the request for verification entry in the verification queue. The communications address and public key may be written to a verified database of the decentralized database when verifying the user-signed secret message causes a number of user-signed secret messages received in requests for verification with the communications address and successfully verified to meet a threshold number.

Abstract: In some embodiments, a synchronization system can synchronize symbolic links across multiple devices. For example, a content management system can receive, from a client device, one or more synchronization operations for synchronizing content items between the content management system and the client device. The content items can be content items associated with a user account registered at the content management system. The content management system can determine that the one or more synchronization operations include an operation for adding a content item to the user account, and that the content item is a symbolic link that includes a path to a target content item. The content management system can then synchronize the content item as a symbolic link.

Abstract: The described technology relates to systems and techniques for providing efficient and easy-to-use user-customizable extract templates for running queries against databases. The user-customizable extract templates enable customization of the same predefined query according to the requirements and privileges of respective users. In particular, embodiments enable customization of queries by users themselves, reducing or altogether eliminating having developers to modify the query or associated extract templates while still allowing the data owners or administrators to control access to the data.

Abstract: Files can be located using a durable and universal file identifier. A content URI includes a file protocol URI specifying a path to a file. The file protocol URI includes a query string specifying properties of the file that can be utilized to locate the file, such as an object ID property specifying a GUID for the file and a volume ID property specifying a GUID for a storage volume storing the file. The content URI can be utilized to locate the file using the file protocol URI and its associated query string even if the file has been moved, renamed, or is accessed on a different computing device. Operations can then be performed using the file, such as resuming a previously performed activity that used the file.

Abstract: A communication method and system according to the present invention generates a unique cryptographically secure URI in response to receiving a user post. The user post and URI are stored temporarily. The URI is sent to an intended recipient. In response to a first instance of accessing the URI, the content is retrieved and sent to the intended recipient. The original uploaded content and URI are then deleted. In response to subsequent instances of accessing the URI, random content determined in part by a current environmental state of the communication, is returned. Recent subsequent instances can return thematically similar content.

Abstract: A data acquisition method, a service provider, a service consumer and a network functional entity are provided. The data acquisition method applied to the service provider includes: receiving a service request message initiated by a service consumer for acquiring a resource attribute of a resource, where the service request message carries query information configured to indicate the resource attribute; and sending data of the resource attribute to the service consumer through a service response message.

Abstract: A global endpoint may be associated with an organization name and a plurality of directories located in different geographic regions. The global endpoint may be a computing system that hosts a page used by users to access an application or service. A user may be able to access the application or service using already existing credentials. For example, the user may access the application or service using credentials stored and maintained by an entity with which the user is affiliated. Users having credentials stored in different geographic regions may be able to access the application or service via the same global endpoint.

Abstract: Disclosed embodiments relate to improving network security through real-time analysis of character similarities. Techniques include identifying a reference name, identifying a domain name, and performing a real-time analysis of the domain name. The real-time analysis may include applying a language processing protocol to the domain name, generating a score indicating a similarity between the domain name and the reference name, accessing a similarity threshold, and comparing the generated score with the similarity threshold. Further techniques include determining that the score exceeds the threshold and performing a security action.

Abstract: A method can include obtaining target data corresponding to a link. The method can include determining, based on the target data, that the link is valid. The method can include obtaining, in response to the determining that the link is valid, source data corresponding to the link. The method can include determining, by comparing the target data to the source data, a degree of relevance between the target data and the source data. The method can include determining, based on the degree of relevance, that the link is incorrect. The method can include generating, in response to the determining that the link is incorrect, a corresponding notification. The method can include initiating a transfer of the notification to a user device.

Abstract: Copies of a distributed ledger with multiple blocks are stored on multiple computing devices. A first computing device coming into proximity with a particular object triggers generation of a new block to the distributed ledger, the new block identifying changes to an inventory of objects of the object type and including a hash of a previous block of the distributed ledger. The new block is optionally verified before it is appended onto the distributed ledger and transmitted out to each of the multiple computing devices so that each copy of the distributed ledger includes the new block.

Abstract: An apparatus, related devices and methods, having memory to store instructions; and a processor to execute the instructions, and the apparatus is configured to receive, by a remote browser isolation (RBI) proxy from a client device, a transfer request to send data to a destination application, wherein the client device is running an RBI agent and includes a Data Loss Prevention endpoint (DLPe) module, and wherein communications between the client device and the destination application are routed through the RBI proxy; receive a plurality of inputs to the client device associated with the transfer request; create a submission request that includes the plurality of inputs and metadata; send the submission request to the DLPe module; receive a response from the DLPe module, wherein the response includes an instruction to allow, to disallow, or to amend and allow the submission request; and process the submission request according to the instruction.

Abstract: The present disclosure provides a method and an apparatus for obtaining product training images, and a storage medium. The method includes: obtaining product images on each of product webpages in an e-commerce website, and determining a product feature vector of each product image on the product webpage; dividing the product images on the product webpage, and determining a target image set of the product webpage according to an image dividing result; classifying target image sets of the product webpages according to the average product feature vector to obtain at least one type of image set; and generating the product training images according to the at least one type of image set.

Abstract: A method for transmitting, by a media-providing server, on-demand content related to commerce content to a set-top box includes receiving a first on-demand request signal for the on-demand content from the set-top box and transmitting the first on-demand request signal to a data server, by the media-providing server, in response to the first on-demand request signal, generating an on-demand call request signal including a product code of the commerce content and a user code of the set-top box and transmitting the on-demand call request signal to an on-demand ARS server, by the data server; receiving process status information on the on-demand call request signal from the on-demand ARS server and transmitting a message corresponding to the process status information to a user terminal corresponding to the first on-demand request signal, by the data server.

Abstract: The Messaging Search and Management Apparatuses, Methods and Systems (“MSM”) transforms message, ranking request inputs via MSM components into work graphs, ML structure input data, ML structure, ranking response outputs. A work graph generation request that includes group level access control data may be obtained. A set of metadata access control carrying messages, a set of users, a set of channels, and a set of topics with access control data corresponding to the group level access control data may be determined. A user priority score for each of the other users, a channel priority score for each of the channels, and a topic priority score for each of the topics, from the perspective of each user, may be calculated. A work graph data structure may be generated that includes, for each user, data regarding the calculated user priority scores, channel priority scores, and topic priority scores.

Abstract: In one embodiment, a domain-name based framework implemented in a digital assistant ecosystem uses domain names as unique identifiers for request types, requesting entities, responders, and target entities embedded in a natural language request. Further, the framework enables interpreting natural language requests according to domain ontologies associated with different responders. A domain ontology operates as a keyword dictionary for a given responder and defines the keywords and corresponding allowable values to be used for request types and request parameters. The domain-name based framework thus enables the digital assistant to interact with any responder that supports a domain ontology to generate precise and complete responses to natural language based requests.

Abstract: A method for generalized structured data discovery may include (1) receiving physical application metadata from data sources for an attribute, a database object, or a database; (2) receiving reference data comprising a plurality of tokens and their associated abbreviations/acronyms; (3) parsing the physical application metadata into a application tokens comprising known and unknown application tokens; (4) identifying unknown application tokens by comparing the parsed application tokens to a corpus; (5) performing probabilistic parsing on the unknown application tokens using the reference data; (6) performing bi-directional encoding to expand the polysemous tokens to relevant expressions using the reference data; (7) applying language tokens to the relevant expressions in the expanded polysemous tokens to disambiguate the relevant expressions; and (8) outputting a mapping of the physical application metadata to enhanced physical application metadata, wherein the enhanced physical application metadata comprises

Abstract: The described technology is directed towards data-driven navigation, in which a next navigation location depends on variable data associated with an interactive user interface element (rather than a fixed link). The data may be in a hierarchy of data models. A menu contains interactive navigation elements, each bound to a data model. A selected interactive navigation element results in locating a data model associated with the selected element. The data model is used to determine the next navigation location. Also described is hierarchical navigation to one item of a level as well as lateral and peer navigation.

Abstract: According to some embodiments, a system to automate platform provisioning for an enterprise includes a platform resource computer store containing a set of electronic data records (each including a component identifier and a set of computing characteristic values). A profile engine may receive a platform request from a user associated with the enterprise and identify, based on data in the platform resource computer store, a resource bundle of components appropriate in view of the platform request. A platform generator may receive platform requirements based on the identified resource bundle of components and provide input data to a REST API service. Final platform definition information for the enterprise may be stored into a central repository. According to some embodiments, a platform provisioning system may process IaaS and PaaS automation components and utilize a return service to generate infrastructure binding data to couple components in the resource bundle to each other.

Abstract: The present disclosure provides a method and an apparatus for advertisement anti-blocking in the technical field of internet. The method includes receiving a first access request of a terminal for a target webpage, and obtaining webpage content of the target webpage; rewriting uniform resource locators (URLs) at a plurality of levels in the webpage content into corresponding anti-blocking URLs according to a preset encryption algorithm, and returning rewritten webpage content to the terminal; restoring the anti-blocking URLs to the URLs at the plurality of levels according to a preset decryption algorithm, when receiving second access requests of the terminal for the anti-blocking URLs; and obtaining resources pointed to by the URLs at the plurality of levels and returning the resources to the terminal. By using the present disclosure, the cost of advertisement anti-blocking for a website provider can be reduced.

Abstract: Systems and methods for automatically removing and replacing outdated compute resources in a cluster. The systems and methods include a configurable monitoring system that is configured to detect outdated compute resources and trigger a cycling process to automatically replace the detected outdated compute resources with new compute resources. The disclosed systems and methods safely rotate a group of compute resources by identifying and detaching outdated compute resources, waiting until the outdated compute resources have been drained of pending jobs scheduled on these resources, waiting until replacement compute resources have started and then cordoning, draining, deleting and terminating the outdated compute resources.

Abstract: A system and method are provided for facilitating configuration of one or more references to a software service to be called by a software application. A catalog process is provided. The catalog includes information identifying services to be called to implement processes. Service references occurring in a process template are determined that are used to implement the processes identified in the catalog. During a build phase, a tokenized process template is created by replacing each of the service references in the process template with a respective token. At least one of the processes is run in accordance with the tokenized process template, including resolving the tokens and invoking at least one service identified thereby.

Abstract: A computer-implemented system for creating an enhanced online gifting experience that allows a purchaser to enter information identifying a gift recipient as well as text, sound, images or video relevant to the gift recipient and/or to an event. The system uses this information to create a personalized webpage identified and located via a personal uniform resource locator (PURL) associated with the gift recipient.

Abstract: In a URL error-correcting method, after a URL is received from a terminal, a server determines whether a web page corresponding to the URL exists. When there is no web page corresponding to the URL, the server determines that the URL is an incorrect URL. Similarity matching is performed using the URL with a URL in a URL database, to acquire a pre-determined quantity of URLs that are most similar to the URL, as alternative error-corrected URLs. The error-corrected URLs are sent to the terminal. The correctness of a URL is determined by means of determining whether a web page corresponding to the URL exists. When the URL is incorrect, similarity matching is performed with a URL in a URL database to obtain URLs possibly needed by a user, so as to achieve error correction of a URL.

Abstract: Applications are surfaced to a user during browsing without requiring a specific search by the user. The applications can be selected for surfacing to the user based on the network address entered into the address bar of a browser, the content of the page corresponding to the network address, or a combination thereof. Applications may be selected for surfacing based on a partial address entered into the address bar and/or based on the web page content that is currently visible in the browser display.

Abstract: A method of computerized presentation of a legend of object symbols on a document. The method includes receiving a document having object symbols. Each object symbol includes a graphical representation, an object symbol type and an object type numerical value. The method includes generating one or more groups of object symbols of the one or more object symbols based upon the object symbol type of each of the object symbols. The method includes deriving a group cumulative quantity for each group of object symbols based upon the object type numerical value of each object symbol in each group of object symbols. The method includes generating a legend including a one or more legend entries corresponding to each of the one or more groups of object symbols. Each legend entry includes a group type symbol, the object symbol type, and a group cumulative quantity. The method includes displaying the legend.

Abstract: System(s) and/or method(s) (“tools”) are described that present indicia for implicitly and explicitly user-associated web pages of a network browser application. The tools can present these indicia in a single graphic user interface, in response to a user's selection of a single unified access point, or in response to a search of the browser's user-associated web pages.

Abstract: A method, system and computer program product for providing a configurable user interface comprises receiving, by a server computer, a request for information to be rendered in a user interface; and in response to the request, sending, by the server computer, the information to be rendered and an identifier related to one of a plurality of user interface components. Also, in response to the request, the server computer sends a registry of the plurality of user interface components, wherein the registry comprises a respective entry for each of the plurality of user interface components. More particularly, the respective entry for a particular one of the plurality of user interface components comprises: a) a location of a configuration associated with the particular one user interface component; and b) a plurality of attributes and corresponding attribute values associated with the particular one user interface component.

Abstract: Techniques for detecting shared devices are disclosed. In one particular exemplary embodiment, the techniques may be realized as a method for detecting shared devices comprising receiving, using a shared computer detection component, information about a connection to a website from a user device, identifying, using the shared computer detection component, one or more characteristics associated with the connection from the user device, determining, in the event there is sufficient data based on the one or more characteristics associated with the connection from the user device, whether the user device is a shared device, and calculating a first responsive action in the event it is determined that the user device is a shared device.

Abstract: A method for data filtering includes displaying on a display device a cell set including data of a common data type, and displaying a first filter icon within a first cell of the cell set and a second filter icon within a second cell of the cell set. The first cell includes a first cell entry and the second cell includes a second cell entry. The first filter icon filters based on the first cell entry and the second filter icon filters based on the second cell entry. The method further includes applying a filter to the cell set in response to selection of the first filter icon by a user, the filter being based on the first cell entry.

Abstract: A method, a computer program product, and a computer system for conditional permission control in a digital data sheet based on permission formulas. A computer checks permission formulas of data cells in the data sheet, in response that a user opens the data sheet. The computer sets cell permissions for the data cells based on the permission formulas. The computer rechecks the cell permissions, in response to that the user edits one or more of the data cells. The computer resets the cell permissions based on the permission formulas.

Abstract: A system with mechanisms that allow for creating, storing and resuming a session without being bound by time. In a system that allows for communication between parties when one of the parties has an account with the system whereas one or more others who are trying to reach this party do not, creating a session and allowing for the same users to come back to resume the session is enabled. Resuming the session by any of the associated parties to the session is supported, this session can be operated through various applications such as voice, video and chat, and be accessed in various networks such as the internet or the telephone network, as well as across devices such as web browsers, smart device apps, and mobile phones with SMs capability. The system supports porting and reusability of the session across networks, applications and devices.

Abstract: A capability is provided for securely transferring a file within network-based storage. A capability is provided for securely transferring a user file of a user from a first server to a second server. The first server may be associated with a first service provider and the second server may be associated with a second service provider. The secure transfer of a user file from the first server to the second server may be performed based on a One-Click File Transfer capability in which only a single click by the user is needed in order for the user file to be transferred. The secure transfer of a user file from the first server to the second server may be performed based on a Zero-Click File Transfer capability in which the user file may be transferred without any interaction by the user.

Abstract: A system can include circuitry that processes a URL for information; circuitry that transmits at least a portion of the information via a network interface; circuitry that receives metadata via the network interface responsive to the transmission of at least a portion of the information; circuitry that associates at least a portion of the metadata with a short URL; and circuitry that transmits the short URL. Various other apparatuses, systems, methods, etc., are also disclosed.

Abstract: A verification system, includes: an arithmetic/logic unit (“ALU”) to perform one or more mathematical operations and compare selected variables; a register to hold a value from a comparison of selected variables performed by the ALU; an instruction decoder to provide read and write commands to memory; an address bus to provide an address to memory for a read or write operation; and a data bus to provide or access data for a write or read operation to or from memory, wherein the ALU generates and provides a recipient identifier to a target computational device, the recipient identifier being related to an identity of the target computational device and/or a target device human operator, and write the recipient identifier to memory in response to a write command issued by the instruction decoder and, as a part of a transaction, the ALU receives, from a user computational device of a first user, the recipient identifier and a credential of the first user and/or user computational device, compares each of the rec

Abstract: Systems and methods are disclosed for analyzing a plurality of clickstreams associated with a resource to identify popular navigational patterns traversed by users of the resource. The analysis provides a navigational framework for performing continued analysis on segmented portions of the identified navigational patterns. To facilitate the analysis, clickstreams associated with the resource are analyzed to identify sets of clickstreams that have a common group of assets with which users of the resource interacted. Navigational patterns, which include commonly traversed series of assets interacted with by the users, are determined for the identified sets. The navigational pattern is then provided to identify popular navigational patterns traversed by users of the resource.

Abstract: In an electronic book system 1 distributing electronic books to browsing devices 30A, 30B, and 30C via a communication network 50, the acquirer of a distribution server 20 acquires the context of operation by a first user who is provided with first candidate pages contained in an electronic book in a previewable manner. The designator of the distribution server 20 designates second candidate pages based on the context of operation acquired by the acquirer and the first candidate pages. The provider provides the second candidate pages designated by the designator to a second user in a previewable manner.

Abstract: Dynamic collaborative presence information is provided. A plurality of users may access a document concurrently. Presence information associated with each of the users may be communicated to a server, collected, and communicated to a client application running on each user's client device. The client application may dynamically show where other users are editing a cell or a range of cells to help avoid collisions of edits in the document. Various interface elements may be provided for indicating presence and for indicating whether a single user or multiple users have selected or are editing the cell or range of cells.

Abstract: In one example, a method includes obtaining, by a data processing device, first secret data associated with a first user and corresponding to a first location of a remote resource. The method further includes generating, using the first secret data, a first uniform resource locator (URL) usable to obtain the first location, and accessing the first location using the first URL. The method further includes obtaining, in response to transfer of usage rights of the data processing device from the first user to a second user, second secret data associated with the second user and corresponding to a second location of the remote resource. The method further includes generating, using the second secret data, a second URL usable to obtain the second location, and accessing the second location using the second URL. The second location is inaccessible via the first URL. The first location is inaccessible via the second URL.

Abstract: Analytics can be performed via analytics snippets that are ordinarily used for remote web page navigation, even though the content does not come from a remote server. The snippet can be embedded into a web application that simulates visitation to a simulated web page address by staging a mock environment that reflects properties for the web page, such as the simulated web page address or other arbitrary information. The analytics snippet is then executed in the mock environment. So, the snippet extracts information from the mock environment and reports it to the analytics server. Subsequently, when analytics reports are presented, the simulated web page address is reflected. The true address of the web page can be preserved and presented in the report to conveniently link back to the page in the local environment.

Abstract: A system that converts standardized lightweight database access protocol (LDAP) requests into a series of domain name system (DNS) requests to look up requested information. DNS responses are validated using DNS security extensions (DNSSEC) to ensure their validity, then converted into standardized LDAP responses. The system is either operated as a service for public use on the Internet or private use in an enterprise; or as an application running on end user machines, e.g., laptops, mobile phones, to guarantee end-to-end security by validating responses on the end user machine. The standardized, widespread nature of the LDAP allows existing applications to immediately reap the benefits of global, ubiquitous, cross-organizational, trans-national data distribution via DNS secured by DNSSEC.

Abstract: A system for classifying an Internet protocol (IP) address, including: a data store for storing client profile data associated with a client, the client profile data including an Internet protocol address of a server; and a processor for receiving a resolved Internet protocol address from the client, and determining whether the resolved Internet protocol address corresponds to a second server associated with the first server. The data store includes configuration data representing Internet protocol addresses corresponding to servers in a server farm, and the processor determines that the servers are associated and part of the server farm when the resolved IP address corresponds to one of the IP addresses of the configuration data. The resolved IP address is received with a client request, and the request is allowed when the second server is associated with the first server.

Abstract: A security software packaging and deployment system is provided. The system may provide a platform for communication between ClickOnce and a Microsoft Excel™ spreadsheet via a computer-readable language. The system may also include a three-tiered security module. A first tier may delete the combination application upon receipt of an unauthorized attempt to access the combination application. A second tier may terminate the combination application if a predetermined file is unavailable. A third tier may encode a password of the spreadsheet in a mathematical formula; and store the decrypt key in a non-descriptive variable name. The system may include an administration module. The administration module may enable an administrative user to emulate a non-administrative user and log into the combination application as one of a plurality of roles.

Abstract: A document preview system provides previews of a native document to client devices. To generate the preview of a document, the document preview system generates a preview document that presents the native document in a browser-compatible format including elements that correspond to fields in the native document. The document preview system also identifies a mapping between fields of the native document and the elements of the preview. The document preview system also identifies a formula listing for the elements of the preview code. When a user edits a document, the edits may be committed to the document preview system and in parallel generate a preview to update the user's display. When an updated preview is available, the updated preview is rendered in a hidden frame and the user's input context is captured and reproduced when the updated preview replaces the prior preview.

Abstract: Methods and systems allow users to enter natural language terms that describe a particular web site into an address field of a browser instead of a formal URL. The terms are evaluated to determine whether they correspond, with a high likelihood, to a particular web site. If so, this web site may be immediately accessed. If not, a list of search results based on the terms may be displayed by the browser.

Abstract: A storage system has a plurality of nodes which are grouped into a plurality of cluster systems each having multiple nodes, each cluster system being logically partitioned into a plurality of namespaces, each namespace including a collection of data objects, each cluster system having multiple tenants, each tenant being a grouping of namespaces, each cluster system having a plurality of capabilities, at least some of the capabilities being bound to the tenants. A node in the cluster system comprises: a memory, and a controller operable to bind each capability to one of a plurality of IP networks so that each capability is bound to only one of the IP networks and has a destination IP address of the IP network to which the capability is bound. It is permissible for one or more capabilities to be bound to the same IP network. Each IP network has one corresponding network interface.

Abstract: A grid structure has a header section and a content section. A scroll user input is detected and columns in the content section are scrolled without scrolling the header section. The displayed grid structure is snapped to a column boundary.