Abstract: Described are methods, systems, and apparatus, including computer program products for providing authentication for service provisioning. One or more executable authentication rules are provided for determining access by a user to one or more services. At least a first executable authentication rule is selected from the one or more executable authentication rules. The first executable authentication rule is for determining access by the user to at least a first service from the one or more services, wherein selecting the first executable authentication rule is based on: a characteristic of the user, a characteristic of a request, a characteristic of an acquisition point, or any combination thereof. A rules credential is generated. The rules credential includes the first executable authentication rule.

Abstract: System and method for providing participants, and in particular employees, a choice of how to allocate their non-typical benefits, i.e. earned reward amounts or incentives of an employee wellness program, and to manage these additional benefits in conjunction with other employee benefit programs such as health benefits, retirement benefits, 401(k) plans etc. in a manner that provides maximum benefit, interaction, and understanding of selected benefit allocation. The system provides increased user control to increase the perceived value of the rewards earned as well as increase to the participants' engagement in the behavior being incentivized. The system also provides a way to integrate various benefit programs providing a more user friendly and efficient system that encourages employee interaction and understanding.

Abstract: A predictive call routing system that includes a real-time decision engine to receive information about a customer and identify a skill that is useful for providing service to the caller. The decision engine identifies the skill by generating scores for a plurality of statistical models using the statistical models and parameters associated with the caller, each statistical model representing a correlation between a subset of parameters and an action that may be performed or requested to be performed by the caller, the score for each statistical model being generated using the statistical model and the subset of parameters associated with the statistical model, and identifies a skill based on the scores. The system includes a call router to route a call from the customer to a representative who has the skill.

Abstract: System and method configured to provide an access management system configuration that provides the benefits of single sign-on while reducing internal hardware and administration maintenance costs. The system is reconfigured to provide an access control module that directs authentication network traffic such that access management agents are not required to be installed on the application server for each protected application. The system provides a redirection of a login request from the application server to an external security gateway that authenticates the user via policy and sends authenticated user credentials on a back channel to the access control module to obtain a session cookie which is redirected back to the user so the user can establish a session with the application. The solution reduces the plethora of agents to be maintained and upgraded in order to remain compatible with the evolving hosting software, reducing both hardware and administration maintenance costs.

Abstract: A method for using multiple channels to access a resource, wherein a first user requests a resource that requires an indication of approval from a second user, a token value is transmitted to the first user on the first channel, and the second user transmits the token value and a second authentication parameter over a second channel. The token value is used to associate the first authentication parameter to the second authentication parameter, whereby the first user is allowed access to the resource on the first. The first and second user may be independently authenticated in some implementations and not independently authenticated in other implementations.

Abstract: Forecasting financial market activity includes a host system and a graphical processing unit in data communication with the server. Forecasting financial market activity also includes a computer program product residing on the host system, the computer program product including instructions for causing the host system to send one or more financial models to the graphical processing unit; and a computer program product residing on the graphical processing unit for causing the graphical processing unit to: receive the financial models and a list of types of market data associated with each financial model; generate one or more engine instances; structure the received market data; receive instructions, from the host system, to run an identified financial model; clone at least part of the structured market data; run the engine instances; and generate, in real time, forecast data indicative of an expected market performance.

Abstract: A method for using multiple channels to authenticate a user, wherein a first authentication parameter from a first device associated with a user is received over a first channel, a token value is transmitted to the user on the first channel, and the user transmits the token value and a second authentication parameter over a second channel. The token value is used to associate the first authentication parameter to the second authentication parameter, whereby the user is authenticated on the first channel.

Abstract: A computer-implemented method is provided for allocating input data. The method includes receiving (1) the input data comprising source data and driver data, and (2) one or more user-specified parameters for allocating the input data. The method includes configuring a set of rule metadata based on the one or more user-specified parameters. The method also includes filtering at least one of the source data or the driver data based on the rule metadata to generate at least one of filtered source data or filtered driver data. The method further includes processing at least one of the filtered source data or the filtered driver data to generate target data and storing at least one of the filtered source data, the filtered driver data or the target data in separate operational tables in a database.

Abstract: Described are methods and apparatuses, including computer program products, for inserting personalized information into digital content. A request for digital video content is received by a computing device. The request includes authentication data associated with a user of a client device. Personalized data to be inserted into the requested video content is generated by the computing device. The personalized data and the requested video content are combined by the computing device. The combining includes replacing one or more frames of the requested video content with the personalized data to generate personalized video content.

Abstract: Described are methods, systems, and apparatus, including computer program products for providing authentication for service provisioning. At least a first and a second executable authentication rule are provided. One or both of the first and second executable authentications are for determining access by a user to a service. The first executable authentication rule is selected when a lifecycle state associated with the user is in a first state. The second executable authentication rule is selected when the lifecycle state is in a second state. A rules credential is generated. The rules credential includes the selected executable authentication rule.

Abstract: A computer-implemented method is provided for optimizing allocation of resources across stories for a release within an Agile development environment. The method includes receiving (i) resource information representing a plurality of resources available for allocation to the stories, (ii) one or more story definitions, each story definition comprising a unique identifier and one or more story-level constraints corresponding to a story, (iii) release information, (iv) iteration information, and (iv) one or more optimization criteria. The method also includes generating a plurality of story-level allocation scenarios and determining one or more optimized story-level allocation scenarios from the plurality of story-level allocation scenarios. Each story-level allocation scenario satisfies the one or more story-level constraints associated with each story definition.

Abstract: A target income mix is expressed as a set of weights in a portfolio of one or more classes of income generating financial products to meet a first income need indicative of essential expenses and a second income need indicative of discretionary expenses for a user. The target income mix is converted to dollar amounts to invest in the classes of income generating products to meet the first and second income needs. Using the target income mix percentage weights, initial purchase amounts are determined from the user's available assets. The initial purchase amounts for each of the classes of income generating products can be adjusted until the overall portfolio is projected to produce enough after-tax income to meet the first income need at a first predetermined confidence level or return assumption and meet the first income need and the second income need at a second predetermined confidence level.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for guiding a user through a transaction to change a contribution configuration in a defined contribution plan. A request is received by an application from a client device. The application processes the request and plan data associated with a user is retrieved. User interface data is generated by the application and the data is transmitted to the client device. A user interface is displayed which initiates, reviews and executes a transaction to change a current contribution configuration to a suggested contribution configuration without requiring the user to enter any additional information.

Abstract: Dependents of benefit plan participants can be given access to personal information of a plan participant. The dependents, who are not existing users or members of the plan, can be allowed access to some or all of the personal information associated with the plan participant.

Abstract: Described are methods and apparatus, including computer program products, for multi-authoring within a benefits content management the system. Relationships are defined between content elements of the benefits content system. A first request is received to change a first content element of the benefits content system. Other content elements of the benefits content system having a relationship to the first content element are identified. A user interface is provided on a computing device to enable a user associated with the first request to control access by other users attempting to change one or more of the other content elements having a relationship to the first element while the user associated with the first request is changing the first content element.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for detecting fraudulent activity. A computing device in a second network receives a plurality of interactions between data centers in a first network and one or more devices, remote from the data centers, of a user, the interactions forming an aggregate user session representing the user's activity over a period of time with the data centers via the devices. The computing device monitors data transaction requests of the interactions and is configured to respond to each request with a response that appears as if the request was executed. If the interactions are harmful, the computing device interdicts the interactions from execution by the data centers and allows the devices to submit additional interactions. If unable to determine whether the subsequent interactions are harmful, the computing device transmits the interactions to the data centers for execution and marks the interactions.

Abstract: Described are methods and apparatuses, including computer program products, for inserting personalized information into digital content. A digital media player receives a personalized video content stream comprising personalized data associated with a user that replaces one or more frames of requested video content. The player extracts the personalized data from the one or more replaced frames of the video content stream, and displays the personalized data and the video content stream to a user.

Abstract: Described are methods and apparatuses, including computer program products, for optimizing allocation of resources across projects in a project portfolio. The method includes receiving, at a computing device, (i) resource information, (ii) a portfolio of project definitions and (iii) one or more portfolio-level optimization criteria. The resource information representing a plurality of resources available for allocation to the projects, and each project definition includes a unique identifier and one or more project-level constraints. The method also includes generating, using the computing device, a plurality of project portfolio allocation scenarios and determining one or more optimized project portfolio allocation scenarios from the plurality of project portfolio allocation scenarios. Each project portfolio allocation scenario satisfies the one or more project-level constraints associated with each project definition.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for subscribing to data feeds on a network. An user utilizes a transmitting device to transmit data packets that are split between a plurality of data centers for processing. The data packets are captured at the data centers. The data packets are recombined. The recombined data can be analyzed for fraud detection, marketing analysis, network intrusion detection, customer service analysis, and/or performance analysis. If fraudulent activity is detected, then the user can be interdicted to prevent further fraudulent activity.