Abstract: Systems and methods of using an embedded browser for displaying content from a network application in presentation mode on a secondary display are described. A method includes establishing, by a client application on a client device having a primary display and a secondary display, a session to a network application accessed via an embedded browser of the client application. The method further includes detecting, by the client application, selection of a the presentation mode while displaying a web page of the network application on a primary display of the client device. The method further includes displaying, by the embedded browser responsive to the presentation mode, content of the network application for the presentation mode on the secondary display of the client device while displaying the web page of the network application on the primary display.

Abstract: Embodiments described include systems and methods for incorporating tags in content of network applications. An embedded browser, which is executable on one or more processors of a client device, may detect content from a network application accessed via the embedded browser. A DRM engine of the embedded browser identifies a DRM scheme for the network application from the plurality of DRM schemes and according to the network application. The DRM engine generates a DRM tag for the content according to the DRM scheme identified for the network application. The DRM tag includes a classification of the content. The DRM engine incorporates the DRM tag into the content for managing usage of the content according to the classification.

Abstract: A computer system configured for autonomous learning of entity values is provided. The computer system includes a memory that stores associations between entities and fields of response data. The computer system also includes a processor configured to receive a request to process an intent; generate a request to fulfill the intent; transmit the request to a fulfillment service; receive, from the fulfillment service, response data specifying values of the fields; identify the values of the fields within the response data; identify the entities via the associations using the fields; store, within the memory, the values of the fields as values of the entities; and retrain a natural language processor using the values of the entities.

Abstract: A method may include receiving, at a mobile device, a request to capture an image. In response to the request to capture the image, the mobile device may determine whether a camera of the mobile device is in a loopback mode to bypass the camera. In response to the camera being in the loopback mode, the mobile device may capture the image by generating a screenshot of a display associated with the mobile device. Alternatively, in response to the camera not being in the loopback mode, the mobile device may allow the camera at the apparatus to capture the image. Related systems and articles of manufacture, including computer program products, are also provided.

Abstract: Aspects of the disclosure relate to processing systems using improved domain pass-through authentication techniques. A computing platform may send, to an external cloud computing platform, one or more registration requests that each may cause an RLS endpoint corresponding to each of a plurality of resource location connectors to be stored at the external cloud computing host platform. The computing platform may receive one or more requests for a resource location identifier. The computing platform may determine an accessible resource location connector and may send, to the user device, a corresponding resource location identifier. After receiving a pass-through authentication request, the computing platform may receive, from the ticketing service stored on the external cloud computing platform, a one-time ticket. The computing platform may send, to the user device, the one-time ticket, which may allow the user device to perform pass-through authentication with the external cloud computing platform.

Abstract: A virtualization server may include a memory and a processor cooperating with the memory to operate a virtual session controller. The virtual session controller may be configured to assign virtual sessions to a plurality of different client devices, each virtual session having a respective user profile associated therewith, maintain a respective unique access token associated with each user profile separate from the client devices, relay the access tokens to a cloud computing service, receive the user profiles from the cloud computing service responsive to the unique access tokens, and synchronize with the cloud computing service changes in the user profiles responsive to the user sessions based upon the respective access tokens.

Abstract: Methods and systems for performing secure device selection based on sensitive content detection are described herein. The methods and systems may analyze content being accessed via a virtual session established with a first device to determine that at least a portion of the content is sensitive content, determine information indicating one or more security features of the first device and one or more security features of a second device associated with a user of the first device, determine, based on the information, that the second device is more secure than the first device, and, responsive to the determination that the second device is more secure than the first device, transfer the virtual session to the second device or enter a more secure configuration of the first device.

Abstract: A computing device may include a memory and a processor coupled to the memory. The processor may be configured to identify entry of an electronic device within a geographic boundary, and pre-launch a session for a user of the electronic device in response to identification of entry of the electronic device, with the session being inaccessible to the user at a time of startup of the session. The processor may be further configured to provide access to the session with use of the electronic device upon entry of the electronic device within the geographic boundary and based on an identifier of the user.

Abstract: Methods, systems, and computer-readable media for creating and managing a multi-tiered service messaging architecture within a cloud service provider or computing environment. In one or more embodiments, the multi-tiered service messaging architecture may comprise a primary topic configured to receive and manage particular service messages. Services of the cloud are allocated a service topic to receive the service messages managed by the primary topic and may itself subscribe to the primary topic to receive the service messages. Through the subscription to the service topic, the service may receive the service messages provided by the primary topic. Still other sub-topics may subscribe to the service topics for additional subscriptions by services to receive the service messages provided by the primary topic.

Abstract: Methods and systems for transmitting files based on network conditions are described herein. Network conditions of a network that connects a first computing device and a second computing device may be determined. A usage pattern of one or more users may be determined. Based on the network conditions, a first priority level of a first file, and/or the usage pattern, a first file may be sent from the first computing device to the second computing device. Based on the network conditions, a second priority level of a second file, and/or the usage pattern, a delay period may be determined for the second file, and transmission of the second file may be delayed. The first computing device may send a summary of the second file to the second computing device.

Abstract: Described embodiments provide systems and methods for reducing latency in accessing application resources. The first device may be intermediary between a client and a server, and may receive a request of a user session for an application resource from the server. The first device may determine, responsive to the request that a user context of the user session is with a second device at a second location. The second location can be farther from the server than a first location of the first device. The first device may send, responsive to the determination, a request to the second device to obtain the user context of the user session. The first device may provide the client with access to the application resource via the user session. The first device may provide the client with access to the application resource according to the obtained user context.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to query a user profiling system with a skillset provided by a requestor and identify a target user that is associated with the skillset based on the query results. The at least one processor is further configured to identify a network path linking the requestor with the target user. The network path includes one or more links between nodes of a user network, the nodes associated with users including the requestor, the target user, and other users. The at least one processor is further configured to identify a preferred communication channel associated with the target user and/or the other users, based on the query results, and to provide a recommendation to the requester, the recommendation comprising the target user, the preferred communication channel, and the network path.

Abstract: In some aspects, a method for revoking access to a network application on a client device. The method includes establishing, by a client application on a client device responsive to authenticating a user, access to one or more network applications of one or more first servers of a first entity via an embedded browser of the client application, receiving, by the client application, a notification from a second server of a second entity that access for the user to a network application of the one or more network applications is to be revoked, and performing, by the client application responsive to the notification, one or more revoking actions based at least on a policy.

Abstract: Embodiments described include systems and methods of an encrypted cache. An embedded browser of a client application executing on a client device may provide access to a network application accessed via the client application. The embedded browser may detect an event at the client device that causes the network application to send or request application data. The embedded browser may access a copy of the application data from encrypted cache of the embedded browser. The encrypted cache may be maintained for the user and store application data for network application(s) accessed by the user. The embedded browser may use the cached application data for establishing or updating a user interface of the network application for display at the client device.

Abstract: The present disclosure describes a system and method to reduce the overall time taken to complete distributed process workflows. Each workflow can include multiple actions that are completed by or at different client devices. The actions of a workflow can be dependent on prior actions in the workflow. For example, a second client device may not be able to complete a second action until a first client device completes a first action in the workflow. The system can predict time periods and the geolocations where client devices are most likely to complete an assigned action. Using the selected time periods and geolocations, the system can transmit notifications to the client devices when the action is most likely to be completed.

Abstract: Embodiments described include systems and methods for presenting additional content for a network application accessed via an embedded browser of a client application are provided. Additional content related to network applications may be presented on client devices. Specifically, activity such as embedded browser activity may be monitored. Responsive to detecting an event based on the monitored activity, additional content related to the network application may be provided. In various embodiments, the additional content is provided to a client application on the client device for presentation on the client device.

Abstract: Implementations of the systems and methods discussed herein provide for distributed HTTP proxy services with synchronization of per-server or per-tenant resource allocation counters amongst the proxy devices, allowing devices to quickly identify denial of service attacks or other malicious or erroneous behavior. In some implementations, a database server may receive resource consumption notifications from each of a plurality of proxy devices and may aggregate the notifications or increment a counter on a per-server or per-tenant basis, and provide updated counter values to proxy devices via callbacks. Each proxy device may check the counter value before utilizing resources, and may disable or block proxy processing responsive to the counter exceeding a threshold.

Abstract: A method of providing access to digital resources using multiple user identities comprises receiving, from a client application, a first set of authentication tokens that authorize a user to acquire target data provided by a server application. The method further comprises receiving, from the client application, a second set of authentication tokens that authorize the same user to access a connected application. The method further comprises sending, to the server application, a first request to acquire the target data provided by the server application, the first request including the first set of authentication tokens and an identifier of the target data. The method further comprises receiving, from the server application, the target data. The method further comprises sending the target data from the application connector to the connected application in a second request that also includes the second set of authentication tokens.

Abstract: Described embodiments provide systems and methods for cross protocol association using internet addresses for metadata association. An association between IPv4 addresses and IPv6 addresses can determined and used to bridge metadata from collection context in a first protocol into usage for a second protocol. A server can monitor a plurality of handshake exchanges to generate the association between IPv4 addresses and IPv6 addresses for a device or group of devices. The handshake exchange can include an IPv4 address, an IPv6 address, or both an IPv4 address and an IPv6 address for a respective device. The handshake exchanges can include a unique identifier corresponding to the respective device. The server can use the association to generate a mapping linking a range of IPv4 addresses to a range of IPv6 addresses corresponding to the same device. The mapping can be used to associate metadata to devices within the same ranges.

Abstract: Embodiments described include a method for implementing a privacy policy by a device intermediary to a plurality of clients and one or more servers. The method can include identifying, by a device intermediary to a plurality of clients and one or more servers, network traffic of a user that has not selected an option of a plurality of options of a privacy policy managed by the device. The method can include receiving, by the device, an indicator of a selection by the user of the option from the plurality of options of the privacy policy. The method can include handling, by the device, network traffic of the user according to the selected option of the privacy policy.