Abstract: A method for detecting fraud rings involves clustering unknown users into unknown user clusters based on a grouping attribute. The method further involves, for each of the unknown user clusters, determining aggregated features including at least one quantification of at least one homogeneity attribute across the unknown users in the unknown user cluster. The method also involves, for each of the unknown user clusters, determining a predictive suspiciousness score based on the aggregated features, determining that at least one of the unknown user clusters is suspicious based on the determined predictive suspiciousness scores, and taking a protective action for the at least one suspicious unknown user cluster.

Abstract: Certain aspects of the present disclosure provide techniques for access control. Embodiments include receiving, by a satellite component of an access control system, a request from a computing device to verify an identity of the computing device, wherein the request comprises one or more characteristics of the computing device. Embodiments include verifying, by the satellite component, that the one or more characteristics of the computing device are valid, the verifying comprising one or more interactions with a management entity related to the computing device. Embodiments include generating, by the satellite component, a signed document that is trusted by a control component of the access control system. Embodiments include providing, by the satellite component, the signed document to the computing device for use in requesting credentials from the control component to access a secure resource.

Abstract: In general, in one aspect, one or more embodiments relate to a method including receiving, in a business rules engine, input data from disparate data sources. The input data describes a merchant and an application by the merchant to use an electronic payments system for processing transactions between the merchant and customers. Featurization is performed on the input data to form a machine readable vector. By applying the machine readable vector as input to a machine learning model in a machine learning layer, a risk score is predicted. The machine learning model is trained using training data describing use of the electronic payments system by other merchants. The risk score is an estimated probability of the merchant being unable to satisfy an obligation of using the electronic payments system. A business rules engine, based on the risk score, limits use of the electronic payments system by the merchant.

Abstract: A method for providing user content that may receive, from a user device, a request for content. The method may obtain, in response to the request, a field identifier from a multiple of field identifiers according to a priority for a multiple of fields corresponding to the field identifiers. The field identifier may correspond to a field. The method may obtain application content based on the field identifier. The method may generate declarative content from the application content. The declarative content may express the application content in a declarative programming language. The method may transmit, to the user device, the declarative content.

Abstract: Capturing dependencies between variables using a variable agnostic object is disclosed. A system is configured to obtain an indication of a first dependency of a first variable to a second variable via a programming interface and depict the first dependency, the first variable, and the second variable in a first instance of a variable agnostic object in a source code. The system is also configured to obtain an indication of a second dependency of a third variable to a fourth variable via the programming interface and depict the second dependency, the third variable, and the fourth variable in a second instance of the variable agnostic object in the source code. The system is also configured to compile the source code to generate a computer-executable program capturing the first dependency and the second dependency based on the first instance and the second instance of the variable agnostic object.

Abstract: A method may include obtaining interactions between users and items, and calculating, for each edge in a bipartite graph, an edge weight using an inverse of the degree of a user node connected to the edge and an inverse of the degree of an item node connected to the edge. The bipartite graph includes user nodes corresponding to the users and item nodes corresponding to the items. The method may further include identifying paths each including an edge connecting the target user node and a common item node, an edge connecting a neighboring user node and the common item node, and an edge connecting the neighboring user node and a neighboring item node. The method may further include calculating, using the edge weights calculated for the edges, scores for the paths, and recommending, to the target user and using the scores for the paths, a recommended item.

Abstract: A method implements an embedded remote desktop in integrated module. An integrated application is received, by a client device, from an integrated server. The integrated application includes an access link to a remote server and integrated application content that references live information from a live application. The live application is executing concurrently with the integrated application and is configured to produce the live information responsive to the integrated application content. A connection is established to the remote application. The remote application establishes a connection to the live application. The live information is received at the client device. A user input is received responsive to the live information. The user input is transmitted to the integrated server.

Abstract: A system receives a request for payment of a transaction between a vendor and a consumer, and sends a first request to a database associated with the online service for historical transactions and personal attributes of the vendor concurrently with sending a second request to a number of third-party services for credit information and personal attributes of the consumer. The system receives information responsive to the first and second requests from the database and the third-party services, respectively, and obtains a risk score for the transaction based on an application of one or more risk assessment rules to the received information by a machine learning model trained with at least the historical transactions and the personal attributes of the vendor. In some aspects, the system determines whether to advance funds to the vendor, prior to requesting payment from a consumer account, based at least in part on the risk score.

Abstract: A method for metrics-based anomaly detection involves receiving an anomaly analysis request for an asset and obtaining metrics associated with the asset. Each of the metrics includes time series data. The method further involves detecting that one of the metrics is a counter. The detection involves seasonally differencing the metric, obtaining a regression line by performing a linear regression on the metric, and determining that an angle of the regression line exceeds a predetermined threshold angle. The method also involves training models for the metrics, the training including training a counter-specific model for the metric that is a counter. The method further involves determining, using the models after the training, at least one metric that is anomalous.

Abstract: A computer-implemented system and method for generating heterogeneous graph feature embeddings for feature learning and prediction. An application server may receive and process a plurality of feature datasets to generate a graph data structure comprising a plurality of interconnected transaction pairs. The application server processes the graph data structure to determine a first-order transaction pair corresponding to a maximum transaction frequency based on a user identifier; executes a jumping probability algorithm to process the graph data structure to determine a second-order transaction pair jumping from a first-order transaction pair; and generates a transaction sequence associated with the user identifier.

Abstract: Systems and methods for identifying suspected anomalies in time series data are disclosed. An example method may receiving time series data for at least one quantity, the time series data including values of the at least one quantity at each of a plurality of times, determining a list of gradients for the time series data, each gradient in the list of gradients based on two or more values of the time series data separated by a specified number of values of the time series data, deriving a plurality of statistics based on the determined list of gradients, and performing a supervised machine learning process based on the derived plurality of statistics to generate a trained machine learning model for identifying one or more suspected anomalies in the time series data.

Abstract: A method that includes extracting image features of a document image, executing an optical character recognition (OCR) engine on the document image to obtain OCR output, and extracting OCR features from the OCR output. The method further includes executing an anomaly detection model using features including the OCR features and the image features to generate anomaly score, and presenting anomaly score.

Abstract: A system for account mapping includes functionality for obtaining more than one labeled accounts labeled by more than one accountant; pre-processing more than one labeled accounts using natural language processing, using the more than one pre-processed labeled accounts to train an account mapping model that performs multinomial classification; receiving an account name from an accounting application where the account name includes a text label for an account included in a chart of accounts; generating an account mapping by applying the account mapping model to the account name, where the account mapping includes a type of the account, a sub-type of the account, a code, and a series associated with an accounting form; returning the account mapping to the accounting application through an Application Programming Interface (API); and receiving a corrected account mapping from an accountant and using the corrected account mapping as a new text label to incrementally update the account mapping model.

Abstract: A content editor for generating content including root blocks and nested blocks is disclosed. The content editor can generate a deployment that includes the content. The content editor can generate user interface code configured to edit the content. The content editor can receive updates to the content and update the root blocks and nested blocks. The updated root blocks and nested blocks can be used to generate updated content for editing and/or can be deployed to end-users.

Abstract: Systems and methods for generating augmented search results are disclosed. An example method may be performed by one or more processors of a ranking system and include receiving a search query, generating, for each respective data asset of a plurality of data assets, a query relevancy score indicating a likelihood that the respective data asset is relevant to the search query, retrieving, for each of a number of potentially relevant data assets, a utility score indicating a likelihood that the potentially relevant data asset is useful, generating, for each of the number of potentially relevant data assets, an augmented query score indicating a likelihood that the potentially relevant data asset is relevant to and useful for the search query based on the query relevancy scores and the utility scores, and generating augmented search results for the search query based on the augmented query scores.

Abstract: At least one processor may obtain a document comprising text tokens. The at least one processor may determine, based on a pre-trained language model, word embeddings corresponding to the text tokens. The at least one processor may determine, based on the word embeddings, named entities corresponding to the text tokens; and one or more accuracy predictions corresponding to the named entities. The at least one processor may compare the one or more accuracy predictions with at least one threshold. The at least one processor may associate, based on the comparing, the named entities with one or more confidence levels. The at last one processor may deliver the named entities and the one or more confidence levels.

Abstract: A processor may receive a request to display a user interface (UI) for a user account. The processor may determine a context for the UI from information specific to the user account. The processor may select one of a plurality of UI elements based on the determining. In some embodiments, the selecting may include evaluating a value function taking the information specific to the user account and information about the context as inputs. The processor may cause the UI including the selected one of the plurality of UI elements to be displayed in response to the request.

Abstract: Systems and methods for quantifying saved time during data entry.

Abstract: A method may include extracting training tokens from a training corpus, generating training token features and training contextual features for each of the training tokens, training a probabilistic graphical model using classes, the training token features, and the training contextual features, extracting, from actual data, actual tokens including an actual token, generating actual token features and actual contextual features for each of the actual tokens, and classifying the actual token as a class using the probabilistic graphical model, the actual token features, and the actual contextual features.

Abstract: A computer-implemented method of managing questions and answers on a computer-hosted service. The method includes a computing device receiving text based tax question and answer pairings and inputting the tax question and answer pairings into a content model executed by the device and outputting a content score for each tax question and answer pairing based on the model. The content score comprises a number within a range. One end of the range corresponds to product content and another end of the range corresponds to general tax content. The device outputs an answer quality score for the tax question and answer pairings based at least in part on the content score and votes assigned to each respective question and answer pair, wherein votes comprises up votes and down votes. The device may generate a FAQ list stored in a database based at least in part on the answer quality score.