Abstract: A system and method are disclosed for automatically detecting associations between particular sets of search criteria, such as particular search strings, and particular items. Actions of users of an interactive system, such as a web site, are monitored over time to generate event histories reflective of searches, item selection actions, and possibly other types of user actions. An analysis component collectively analyzes the event histories to automatically identify and quantify associations between specific search strings (or other types of search criteria) and specific items.

Abstract: Systems and methods are provided for partially encrypting one or more portions of an electronic file and decrypting the partially encrypted file. In one implementation, a computer-implemented method partially encrypts an electronic file. The method identifies one or more portions of the electronic file to be encrypted. The one or more portions are identified based on metadata in the electronic file that designate the one or more portions to be encrypted. The method encrypts the identified one or more portions of the electronic file using encryption software.

Abstract: Aspects of systems and methods for maintaining and operating agent nodes are provided. In some embodiments, calls, contacts, and other work units may be routed to individual customer service agents via a centralized queue based on a variety of factors. Some embodiments may provide market-based call pricing and customer service agent compensation.

Abstract: Consistent link sharing is implemented on one or more share servers. Consistent link sharing includes receiving a request from a user to store a web page that resides on an originating server to one or more share servers. The request includes a universal resource locator (URL) of the web page, which is a web page stored on the share servers of a content distribution network. The share servers generate a replacement URL for future access to the stored web page. The replacement URL may be shared with one or more users. The share servers provide the stored web page to a user who submits the replacement URL.

Abstract: Resource management techniques, such as cache optimization, are employed to organize resources within caches such that the most requested content (e.g., the most popular content) is more readily available. A service provider utilizes content expiration data as indicative of resource popularity. As resources are requested, the resources propagate through a cache server hierarchy associated with the service provider. More frequently requested resources are maintained at edge cache servers based on shorter expiration data that is reset with each repeated request. Less frequently requested resources are maintained at higher levels of a cache server hierarchy based on longer expiration data associated with cache servers higher on the hierarchy.

Abstract: Common content is generated and provided to client computer systems. The common content includes encrypted portions, corresponding unencrypted portions, and decryption key identifiers that identify decryption keys for decrypting the encrypted portions. Decryption keys are provided to the client computer systems separately from the common content for decrypting portions of the common content that an associated user is authorized to view or otherwise utilize. In order to use or display the common content, the client computer systems determine for each encrypted portion in the common content whether an associated decryption key has been received. Each encrypted portion for which a decryption key is available is decrypted and displayed or otherwise utilized. For each encrypted portion for which a decryption key is not available, the unencrypted portion corresponding to the encrypted portion may be displayed or otherwise utilized.

Abstract: Distributed computer systems prepare and instantiate snapshots by processing sets of nodes representing computer resources that are portions of a larger system. A user may choose to prepare or instantiate a snapshot containing all or only a portion of the data within the distributed computer system, such as a template of the distributed computer system. A template snapshot may be available in an electronic marketplace for other users to purchase and instantiate into a replica of the distributed computer system.

Abstract: Techniques for outputting different content on a touch-sensitive display of a device based at least in part on an amount of force applied to the touch-sensitive display. For instance, when a user reads an electronic book (eBook) on a device having a touch-sensitive display, the user may select a word and the device may accordingly display information associated with the selected word. Thereafter, the user may apply a greater or lesser amount of force to the selected word and, in response, the device may output other instances or uses of the selected word. This document also describes techniques for refining search results associated with a particular word or phrase based at least in part on a measured amount of force associated with a selection. For instance, the device may refine (e.g., expand or narrow) illustrated search results based on the user providing greater or lesser force on the touch-sensitive display.

Abstract: Generally described, the present disclosure is directed to managing request routing functionality corresponding to resource requests for one or more resources associated with a content provider. The processing of the DNS requests by the service provider can include the selective filtering of DNS queries associated with a DNS query-based attack. A service provider can assign DNS servers corresponding to a distributed set of network addresses, or portions of network addresses, such that DNS queries exceeding a threshold, such as in DNS query-based attacks, can be filtered in a manner that can mitigate performance impact on for the content provider or service provider.

Abstract: A graphical user interface can provide a three-dimensional appearance that is consistent for changes in a current location or point of view of a user. The user's point of view can be determined by analyzing images showing a current relative location of the user with respect to the device, and motion sensors operable to provide information about changes in orientation or position of the device. In addition to point of view updates, the interface can render active elements such that the elements appear to be closer to an outer surface of the display element. Such rendering can enable the user to easily determine which elements are active, such as may be used to provide text input to the device.

Abstract: Secure information is managed for each host or machine in an electronic environment using a series of key identifiers that each represent one or more secure keys, passwords, or other secure information. Applications and services needing access to the secure information can specify the key identifier, for example, and the secure information currently associated with that identifier can be determined without any change to the code or manual input or exposure of the secure information on the respective device. Functionality such as encryption key management and rotation are inaccessible and transparent to the user. In a networked or distributed environment, the key identifiers can be associated with host classes such that at startup any host in a class can obtain the necessary secure information. Updates and key rotation can be performed in a similar fashion by pushing updates to host classes transparent to a user, application, or service.

Abstract: In one embodiment, a system and associated processes for transparent client-side cryptography are provided. In this system, some or all of a user's private data can be encrypted at a client device operated by the user. The client can transmit the encrypted user data to a content site that hosts a network application, such as a social networking application, financial application, or the like. The content site can store the private data in its encrypted form instead of the actual private data. When the content site receives a request for the private data from the user or optionally from other users (such as social networking friends), the server can send the encrypted user data to a client associated with the requesting user. This client, if operated by an authorized user, can decrypt the private data and present it to the authorized user.

Abstract: Methods and systems for causing the display of items for the review and selection thereof by a potential purchaser has a plurality of search tools whereby a customer can select certain search criteria for displaying items corresponding to the search criteria for review and selection thereof and comparison therebetween. In one embodiment, the system provides a brand menu whereby a customer can select one or more brands of products for displaying the same in a common display window.

Abstract: A flexible, non-linear, unit-level sortation system for sorting mixed collections of items into orders. Collections of unsorted items for fulfilling requests are delivered to one or more singulation stations. At a singulation station, individual units of items are selected from a collection, associated with particular conveyance receptacles, and placed into the receptacles, with one and only one unit per receptacle. The receptacles may be inducted into a conveyance mechanism under the direction of a control system. The receptacles are not fixed to the conveyance mechanism. The control system may direct the conveyance mechanism to route the receptacles to a particular one of one or more sorting stations. At a sorting station, the units may retrieved from receptacles and placed into locations corresponding to particular orders under control or direction of the control system. The conveyance mechanism may, but does not necessarily, return empty conveyance receptacle to a singulation station.

Abstract: Disclosed are various embodiments for the management of dependencies on data. Multiple jobs are executed in one or more computing devices. It is determined that a first one of the jobs consumes data produced by a second one of the jobs, and a dependency is recorded. It is then determined whether the dependency is satisfied. When the dependency is determined to be unsatisfied, execution of the first one of the jobs is suspended. When the second one of the jobs produces the data, the dependency is updated as being satisfied. Execution of the first one of the jobs is resumed in response to the dependency being updated as being satisfied.

Abstract: Host machines and other devices performing synchronized operations can be dispersed across multiple racks in a data center to provide additional buffer capacity and to reduce the likelihood of congestion. The level of dispersion can depend on factors such as the level of oversubscription, as it can be undesirable in a highly connected network to push excessive host traffic into the aggregation fabric. As oversubscription levels increase, the amount of dispersion can be reduced and two or more host machines can be clustered on a given rack, or otherwise connected through the same edge switch. By clustering a portion of the machines, some of the host traffic can be redirected by the respective edge switch without entering the aggregation fabric. When provisioning hosts for a customer, application, or synchronized operation, for example, the levels of clustering and dispersion can be balanced to minimize the likelihood for congestion throughout the network.

Abstract: Patterns of access and/or behavior can be analyzed and persisted for use in pre-fetching data from a physical storage device. In at least some embodiments, data can be aggregated across volumes, instances, users, applications, or other such entities, and that data can be analyzed to attempt to determine patterns for any of those entities. The patterns and/or analysis can be persisted such that the information is not lost in the event of a reboot or other such occurrence. Further, aspects such as load and availability across the network can be analyzed to determine where to send and/or store data that is pre-fetched from disk or other such storage in order to reduce latency while preventing bottlenecks or other such issues with resource availability.

Abstract: Various aspects of a data volume or other shared resource are determined and updated dynamically for purposes such as to provide guaranteed qualities of service. For example, the number of partitions in a data volume and/or the way in which data is stored across those partitions can be updated dynamically without significantly impacting the customer using the volume. The data stored to the volume can be striped or otherwise distributed across a number of logical areas, which then can be distributed across the partitions. Separate mappings can be used for the data in each logical area, and the logical areas in each partition, such that when moving a logical area only a single mapping has to be updated, regardless of the amount of data in that logical area. Further, logical areas can be moved between partitions without the need to repartition or redistributed the data in the data volume.

Abstract: Disclosed are various embodiments for applying restrictions to items. Multiple rejection rules are applied to each item in a catalog of items. Each of the rejection rules is associated with one or more conditions in a geographic area. The respective item is designated as restricted for the geographic area when the conditions are met.

Abstract: A method of transporting inventory items includes receiving a route request from a mobile drive unit. The route request identifies a destination location within a workspace. The workspace includes at least one cell associated with a first cell attribute and at least one cell that is not associated with the first cell attribute. The method includes determining a state of the mobile drive unit. The method also includes generating a path to the destination location for the mobile drive unit that traverses cells associated with the first cell attribute, in response to determining that the mobile drive unit is associated with a first state. The method includes generating a path to the destination location for the mobile drive unit that does not traverse cells associated with the first cell attribute, in response to determining the mobile drive unit is not associated with the first state. The method further includes transmitting the path to the mobile drive unit.