Abstract: Implementations of the systems and methods discussed herein provide for distributed HTTP proxy services with synchronization of per-server or per-tenant resource allocation counters amongst the proxy devices, allowing devices to quickly identify denial of service attacks or other malicious or erroneous behavior. In some implementations, a database server may receive resource consumption notifications from each of a plurality of proxy devices and may aggregate the notifications or increment a counter on a per-server or per-tenant basis, and provide updated counter values to proxy devices via callbacks. Each proxy device may check the counter value before utilizing resources, and may disable or block proxy processing responsive to the counter exceeding a threshold.

Abstract: The present disclosure describes a system and method to reduce the overall time taken to complete distributed process workflows. Each workflow can include multiple actions that are completed by or at different client devices. The actions of a workflow can be dependent on prior actions in the workflow. For example, a second client device may not be able to complete a second action until a first client device completes a first action in the workflow. The system can predict time periods and the geolocations where client devices are most likely to complete an assigned action. Using the selected time periods and geolocations, the system can transmit notifications to the client devices when the action is most likely to be completed.

Abstract: A method of providing access to digital resources using multiple user identities comprises receiving, from a client application, a first set of authentication tokens that authorize a user to acquire target data provided by a server application. The method further comprises receiving, from the client application, a second set of authentication tokens that authorize the same user to access a connected application. The method further comprises sending, to the server application, a first request to acquire the target data provided by the server application, the first request including the first set of authentication tokens and an identifier of the target data. The method further comprises receiving, from the server application, the target data. The method further comprises sending the target data from the application connector to the connected application in a second request that also includes the second set of authentication tokens.

Abstract: Described embodiments provide systems and methods for cross protocol association using internet addresses for metadata association. An association between IPv4 addresses and IPv6 addresses can determined and used to bridge metadata from collection context in a first protocol into usage for a second protocol. A server can monitor a plurality of handshake exchanges to generate the association between IPv4 addresses and IPv6 addresses for a device or group of devices. The handshake exchange can include an IPv4 address, an IPv6 address, or both an IPv4 address and an IPv6 address for a respective device. The handshake exchanges can include a unique identifier corresponding to the respective device. The server can use the association to generate a mapping linking a range of IPv4 addresses to a range of IPv6 addresses corresponding to the same device. The mapping can be used to associate metadata to devices within the same ranges.

Abstract: Disclosed is a computing system capable of performing a method that involves receiving, from a first device, a first indication that a peripheral device associated with the first device is available for sharing; sending, to a second device, a second indication that the peripheral device is available for sharing; receiving, from the second device, a request to access the peripheral device; and based at least in part on receipt of the request, causing a peer-to-peer connection to be established between the second device and the first device, the peer-to-peer connection enabling communication between the second device and the peripheral device. The peer-to-peer connection may, for example, enable direction of the peripheral device to the second device so that the peripheral device is a virtual device of the second device.

Abstract: Described embodiments provide systems and methods for pushing session information to a newly joined node in a cluster of nodes. In the cluster, each node may maintain a session table of existing sessions. One or more nodes may detect a new node has joined the cluster. Each node, responsive to the detection, may apply a hash function on a tuple of each session of the existing sessions in the session table of the node to determine whether one or more existing sessions are identified to be owned by the new node as a result of the hash function. Each node, responsive to identifying that one or more sessions are to be owned by the new node, may push corresponding session information to the new node. The new node may become configured to receive a packet corresponding to the one or more sessions and to process the packet.

Abstract: Embodiments described include systems and methods for using an HTML-based application integrated with an embedded browser on a client device, for trusted data transfer for instance. An HTML-based application within an embedded browser of a client device can provide access to a network application and its resources. The HTML-based application can establish a secure session for the network application between a server and the HTML-based application. The embedded browser can determine that the HTML-based application is a trusted application via application of one or more policies. With the secure session established and responsive to determining that the HTML-based application is a trusted application, the embedded browser may establish at least one virtual channel between the embedded browser and the HTML-based application. Using the at least one virtual channels, the embedded browser can transfer data between the secure session of the network application and the operating system (OS) of the client device.

Abstract: A client computer requests a resource from an ISP/OSP. The ISP/OSP maintains multiple instances of the resource. In deciding to which instance of the resource to route the client computer, a resource selection server takes network routability information into account. Geographic proximity, resource utilization, network utilization, and/or maintenance of peering agreements may also be taken into account in selecting the instance of the resource.

Abstract: A method, computer program product, and computer system for receiving, by a computing device, data from a client device, the data being a piece of data from a source of digital content. A file may be created that includes the received data, the file being accessible by a file system executable on the computing device. An icon may be generated within a user interface of the file system in response to creation of the file, the icon configured to copy the received data to a cache in response to input received on the icon, and the copy of the received data within the cache may be accessible to one or more applications. The copy of the received data may be provided from the cache to at least one application accessible by the computing device so as to share the data received without accessing the file created.

Abstract: A first device connected to a network via a first connection may perform a method that involves determining a need for improved communication between the first device and the network, receiving a message from a second device that includes an indication of at least one performance parameter of a second connection between the second device and the network, establishing a peer-to-peer connection between the first device and the second device based at least in part on the indication, and communicating with the network via a communications channel that includes the peer-to-peer connection and the second connection.

Abstract: Methods and systems for previewing an application user interface (UI) for multiple locales are described herein. A first device, on which an application capable of rendering views for multiple locales, may receive selections of a first locale and a second locale from a second device via a web console running on the second device. The first device may render a plurality of UI screens including a first UI screen, corresponding to a current view of the application, for the first locale, and a second UI screen, corresponding to the current view, for the second locale. The first device may generate screenshots of the plurality of UI screens and send the generates screenshots to the second device to be displayed on the web console. A developer of the application may inspect the multi-locale UI of the application through the displayed screenshots and make any necessary adjustments if necessary.

Abstract: Embodiments described include systems and methods for receiving push notifications for Software-as-a-Service (SaaS) applications. Push notifications may be received by an agent or notification listener provided by a client application of a client device. The listener may receive and display notifications for a large plurality of SaaS applications, regardless of whether the SaaS applications are currently active in a browser of the client device. The listener agent may be lightweight, consuming very little memory or processor resources, while being able to handle very large numbers of notifications. This may free up resources on the client device, consume less battery for mobile devices, and provide notification functionality for SaaS applications using native notification techniques without requiring the SaaS application developers to rewrite notification systems or switch to an operating system-provided notification system.

Abstract: A system determines that resource activity notifications, including at least a first notification and a second notification, are to be sent to a client device operated by a user. The first notification includes a first user interface element, and the second notification includes a second user interface element. The system determines, based on content of the resource activity notifications, that a subset of the resource activity notifications are contextually related, the subset including at least the first notification and the second notification. The system provides the first subset of the resource activity notifications to the client device as a first group, thus enabling the user to operate a user interface of the client device to select the first user interface element to take a first action and to select the second user interface element to take a second action.

Abstract: One example disclosed method involves a computing system providing a client device a virtualized computing environment. Upon receiving a request to access a file or folder in the virtualized computing environment from the client device, a file system filter driver of the computing system may intercept the request, and determine authorization to access the file or folder based at least in part on a security policy associated with the user account. If the client device is authorized to access the file or folder, the computing system may cause the client device to output a representation of contents of the first file or folder using the virtualized computing environment.

Abstract: Methods and systems for providing bidirectional communications between client devices and server devices are described herein. Server devices in a cluster may bidirectionally communicate with client devices in a resource site via direct connections or virtual connections. One or more server devices may act as intermediate server devices for communications via virtual connections, and may distinguish different types of messages based on header contents of the messages.

Abstract: A technique uses a managed computing device to extend management control by an organization to IoT (Internet of Things) devices in a local environment of the computing device. The computing device discovers any local IoT devices and participates in a communication with a server to bring one or more of the IoT devices under management control. In some examples, extending management control involves enrolling selected IoT devices into a management framework of the organization and directing communications between the server and the respective IoT devices through the managed device, which provides a point-of-presence for administering management of the selected IoT devices in the local environment.

Abstract: Embodiments described include systems and methods for reusing content across a plurality of network applications. A client application establishes sessions with the network applications via an embedded browser. The client application identifies a plurality of content provided as input to each of the network applications and stores the plurality of content to storage. The client application determines a point in a first user interface of a first network application in which input from content of the plurality of content is available as input. The embedded browser provides a second user interface from which to select at least a first content of the plurality of content stored in storage from a second network application as input to the first user interface of the first network application. The embedded browser receives, as input to the first user interface, the selection via the second user interface of the first content.

Abstract: Methods and systems for secure authentication of users based on unique device identifiers are described herein. A computing device may receive, from a user device, a device registration. The device registration may comprise authentication credentials, device information, and/or a public key. Based on the authentication credentials and/or the device information, a unique device identifier may be generated. A token may be generated based on the unique device identifier and sent to the user device. A request for content may be received from the user device. A nonce may be sent to the user device. The token and a signed version of the nonce may be received from the user device. The nonce may have been signed using a private key corresponding to the public key. Access to the content may be provided based on the token, the unique device identifier, and/or the signed version of the nonce.

Abstract: Methods and systems for a centralized notification service are described herein. The centralized notification service may store notification data received from a plurality of devices and workspaces in a notification database. The notification database may store user account information, associated device and workspace information, associated application information, and notifications received or retrieved from each device and application associated with a user account. The notification service may receive notification data from a plurality of applications based on hooks injected into applications or into a notification manager service.

Abstract: Methods and systems for generating conversation models from documents are described herein. A system may receive a document and generate a conversation model that may be deployed by a chatbot or other automated agent (e.g., voice assistant, messenger bot, etc). The chatbot may use the conversation model to engage in a conversation with a user and obtain information from the user to complete the document. The system may generate questions to ask the user based on text in the document that indicates a request for information. Additionally, the system may provide instructions to a user via a chatbot. The instructions may be generated based on text in the document that explains how to fill out the document.