Abstract: A method for using multiple channels to authenticate a user, wherein a first authentication parameter from a first device associated with a user is received over a first channel, a token value is transmitted to the user on the first channel, and the user transmits the token value and a second authentication parameter over a second channel. The token value is used to associate the first authentication parameter to the second authentication parameter, whereby the user is authenticated on the first channel.

Abstract: A computer-implemented method is provided for allocating input data. The method includes receiving (1) the input data comprising source data and driver data, and (2) one or more user-specified parameters for allocating the input data. The method includes configuring a set of rule metadata based on the one or more user-specified parameters. The method also includes filtering at least one of the source data or the driver data based on the rule metadata to generate at least one of filtered source data or filtered driver data. The method further includes processing at least one of the filtered source data or the filtered driver data to generate target data and storing at least one of the filtered source data, the filtered driver data or the target data in separate operational tables in a database.

Abstract: Described are methods and apparatuses, including computer program products, for inserting personalized information into digital content. A request for digital video content is received by a computing device. The request includes authentication data associated with a user of a client device. Personalized data to be inserted into the requested video content is generated by the computing device. The personalized data and the requested video content are combined by the computing device. The combining includes replacing one or more frames of the requested video content with the personalized data to generate personalized video content.

Abstract: Described are methods, systems, and apparatus, including computer program products for providing authentication for service provisioning. At least a first and a second executable authentication rule are provided. One or both of the first and second executable authentications are for determining access by a user to a service. The first executable authentication rule is selected when a lifecycle state associated with the user is in a first state. The second executable authentication rule is selected when the lifecycle state is in a second state. A rules credential is generated. The rules credential includes the selected executable authentication rule.

Abstract: A computer-implemented method is provided for optimizing allocation of resources across stories for a release within an Agile development environment. The method includes receiving (i) resource information representing a plurality of resources available for allocation to the stories, (ii) one or more story definitions, each story definition comprising a unique identifier and one or more story-level constraints corresponding to a story, (iii) release information, (iv) iteration information, and (iv) one or more optimization criteria. The method also includes generating a plurality of story-level allocation scenarios and determining one or more optimized story-level allocation scenarios from the plurality of story-level allocation scenarios. Each story-level allocation scenario satisfies the one or more story-level constraints associated with each story definition.

Abstract: A target income mix is expressed as a set of weights in a portfolio of one or more classes of income generating financial products to meet a first income need indicative of essential expenses and a second income need indicative of discretionary expenses for a user. The target income mix is converted to dollar amounts to invest in the classes of income generating products to meet the first and second income needs. Using the target income mix percentage weights, initial purchase amounts are determined from the user's available assets. The initial purchase amounts for each of the classes of income generating products can be adjusted until the overall portfolio is projected to produce enough after-tax income to meet the first income need at a first predetermined confidence level or return assumption and meet the first income need and the second income need at a second predetermined confidence level.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for guiding a user through a transaction to change a contribution configuration in a defined contribution plan. A request is received by an application from a client device. The application processes the request and plan data associated with a user is retrieved. User interface data is generated by the application and the data is transmitted to the client device. A user interface is displayed which initiates, reviews and executes a transaction to change a current contribution configuration to a suggested contribution configuration without requiring the user to enter any additional information.

Abstract: Dependents of benefit plan participants can be given access to personal information of a plan participant. The dependents, who are not existing users or members of the plan, can be allowed access to some or all of the personal information associated with the plan participant.

Abstract: Described are methods and apparatus, including computer program products, for multi-authoring within a benefits content management the system. Relationships are defined between content elements of the benefits content system. A first request is received to change a first content element of the benefits content system. Other content elements of the benefits content system having a relationship to the first content element are identified. A user interface is provided on a computing device to enable a user associated with the first request to control access by other users attempting to change one or more of the other content elements having a relationship to the first element while the user associated with the first request is changing the first content element.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for detecting fraudulent activity. A computing device in a second network receives a plurality of interactions between data centers in a first network and one or more devices, remote from the data centers, of a user, the interactions forming an aggregate user session representing the user's activity over a period of time with the data centers via the devices. The computing device monitors data transaction requests of the interactions and is configured to respond to each request with a response that appears as if the request was executed. If the interactions are harmful, the computing device interdicts the interactions from execution by the data centers and allows the devices to submit additional interactions. If unable to determine whether the subsequent interactions are harmful, the computing device transmits the interactions to the data centers for execution and marks the interactions.

Abstract: Described are methods and apparatuses, including computer program products, for inserting personalized information into digital content. A digital media player receives a personalized video content stream comprising personalized data associated with a user that replaces one or more frames of requested video content. The player extracts the personalized data from the one or more replaced frames of the video content stream, and displays the personalized data and the video content stream to a user.

Abstract: Described are methods and apparatuses, including computer program products, for optimizing allocation of resources across projects in a project portfolio. The method includes receiving, at a computing device, (i) resource information, (ii) a portfolio of project definitions and (iii) one or more portfolio-level optimization criteria. The resource information representing a plurality of resources available for allocation to the projects, and each project definition includes a unique identifier and one or more project-level constraints. The method also includes generating, using the computing device, a plurality of project portfolio allocation scenarios and determining one or more optimized project portfolio allocation scenarios from the plurality of project portfolio allocation scenarios. Each project portfolio allocation scenario satisfies the one or more project-level constraints associated with each project definition.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for subscribing to data feeds on a network. An user utilizes a transmitting device to transmit data packets that are split between a plurality of data centers for processing. The data packets are captured at the data centers. The data packets are recombined. The recombined data can be analyzed for fraud detection, marketing analysis, network intrusion detection, customer service analysis, and/or performance analysis. If fraudulent activity is detected, then the user can be interdicted to prevent further fraudulent activity.

Abstract: Methods, systems, and apparatus, including computer program products, implementing techniques for receiving a first information related to a first transaction associated with a first user session with a multi-tier enterprise application, the first information including performance data that is representative of how well components in at least two tiers of the enterprise application perform in executing the first transaction; and determining based on the first information whether the first transaction is associated with a prioritized aspect of the enterprise application, and if so, taking an action based on the determining.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for detecting fraudulent activity on a network. A user utilizes a transmitting device to transmit user requests that are split between a plurality of data centers for processing. The user requests are captured at the data centers. The user requests are unified into a user session. The user session can be analyzed for fraud detection, marketing analysis, network intrusion detection, customer service analysis, and/or performance analysis. If fraudulent activity is detected, then the user can be interdicted to prevent further fraudulent activity.

Abstract: Described are computer-based methods and apparatuses, including computer program products, for providing context-based user authentication, workflow processing and data management in a centralized application in communication with a plurality of third-party applications. Changed data from a first third-party application is received by a centralized application. The changed data is processed by the centralized application. The processing comprises determining an urgency type, a second third-party application to which at least a portion of the data is applicable, mapping the data to a second third-party application data structure, and generating a request including the data structure and based on the urgency type and the second third-party application. The request is sent to the second third-party application. Data in a database associated with the centralized application is updated based on the changed data.

Abstract: An automated account management system provides a user with the ability to establish rules that dictate how the account management system is to manage the user's accounts. Once the user specifies a set of rules, the system automatically manages multiple accounts across multiple financial institutions in accordance with the user-defined rules. Other features, such as an on-line bill payment system, a money transfer system, and a retirement planning system, may be integrated within the automated account management system to provide the user with even greater control over his or her financial assets.

Abstract: Among other things, receiving public information about an actively managed fund, selecting a group of financial assets, determining a group of weights corresponding to the group of financial assets thereby determining a weighted group of financial assets, the weights being determined based only on the public information, and publishing the contents of the weighted group of financial assets, wherein an expected valuation of the weighted group of financial assets is within a threshold percentage of an expected valuation of the actively managed fund.

Abstract: An accounting system allows posting transactions to a general ledger of an Exchange Traded Fund. The accounting system includes a computer-assisted process that nets subscription and redemption orders that occurred over a particular time (e.g., one day) and records a transfer of securities into or out of the fund based on the net of the subscription and redemption orders.