Abstract: A computer-implemented system and method for tracking use of personally identifiable information by a computer asset of a firm. The method includes receiving one or more data elements associated with the computer asset, receiving an individual type associated with the one or more data elements, and determining whether the one or more data elements individually or as a combination constitute PII. In response to determining that the data elements constitute PII, the method includes determining whether enhanced data controls are necessary for the computer asset according to the one or more data elements that constitute the PII, determining a sensitivity of the PII, and recording the individual type, whether enhanced data controls are necessary, and the sensitivity of the PII in association with the computer asset in a database communicably coupled to the computer system.

Abstract: An embodiment of the present invention may enable editing and deployment of software by including in an application container editable source code used to produce an application, and tools to edit and build the application, such as a code editor and a build tool to convert the source code to the executable application. The container may include an executable application which may execute in the environment on which the container is saved. A server in the container may control execution of the executable application and build the executable application. A remote user computer may communicate with the code editor to edit the source code, which in its updated version may be built to produce an updated version of the executable application. The server may stop execution of the existing executable application, and start execution of the updated version of the executable application.

Abstract: A computer-implemented method for automatically analyzing handwritten text to determine a mismatch between a purported writer and an actual writer is disclosed. The method comprises receiving two samples of digitized handwriting each allegedly created by one individual and received and entered into a digital system by another. The method further comprises performing a series of feature extractions to convert the samples into two vectors of extracted features; automatically clustering a set of vectors such that the first vector and the second vector are assigned to the same cluster among multiple clusters, based on vector similarity; and automatically determining that a same individual being associated with both the first and second samples indicates a heightened probability that the individual fraudulently created both samples. Finally, the method comprises automatically transmitting a message to flag additional samples of digitized handwriting entered into a digital system as possibly fraudulent.

Abstract: Computer-implemented methods and systems are disclosed for receiving and indexing a plurality of files for later querying, for dynamically generating scripts to be executed during a query of a data store, and for horizontally distributing a query and aggregating results of the distributed query.

Abstract: System comprises an application server for hosting a mobile application service; a mobile device having a mobile application for the mobile application service installed thereon; and a third party server. Application server is configured to: receive a log-in request for the mobile application service from the mobile device, where the log-in request includes device identifying information for the mobile device; transmit, to the third party server, a request for a status setting for the mobile application, wherein the request comprises the device identifying information for the mobile device, where the status setting comprises a plurality of bits, and where the third party server retrieves the status setting from a database based on the device identifying information for the mobile device; receive from the third party server, the status setting for the mobile application; and determine a risk rating for the log-in request based in part on the status setting for the mobile application.

Abstract: Domain specific knowledge base (KB) contains all concepts from domain and the semantic relations between concepts. The concepts and the semantic relations are extracted from an existing corpus of content for the domain. The World Wide Web Consortium (W3C) standard SKOS (Simple Knowledge Organization System) can be used and two types of semantic relations can be captured: hierarchal and associative. A Natural Language Processing (NLP) software engine can parse the input text to create a semantic knowledge graph, which is then mapped to a SKOS knowledge model. During the linguistic understanding of the text, relevant domain concepts are identified and connected by semantic links. Concepts automatically identified as most important in this domain can be promoted to another layer, referred to as “Topics.

Abstract: Systems and methods for routing requests to a plurality of server clusters are disclosed, especially in a workflow management context. A first server cluster handles requests concerning a first software version and a second server cluster responds to requests concerning a second version of that same software. Upon receiving a request to change default routing of requests, a configuration of a gateway router is updated and subsequent requests concerning the first software are routed to the second server cluster while subsequent request concerning the second software remain routed to the first server cluster. A first graphical user interface (GUI) is provided to be used in defining a series of steps in a workflow and to creating a secondary GUI that will be used when performing the series of steps. Tools for automation and data extraction during the workflow are provided and workflow state is tracked until completion of the workflow.

Abstract: A first code generator identifies a value representing a start of a data frame. In response the first code generator outputs a first code representing at least the start of data frame. Fixed parsing components each output a portion of the data located at a respective offset and having a respective data length, in response to receiving the first code from the first code generator. The extracted respective portion of the data is output. For each respective one of a plurality of data messages a finite state machine identifies a length of the respective data message. For each of a plurality of portions of data in the respective data message, the finite state machine reads a length of a respective portion of data, traverses the portion of the data, calculates an associated adjust factor, and outputs a GO control signal and the adjust factor, used by a plurality of variable parsing components.

Abstract: Software application for a digital display device determines, in real time, whether structures/objects of real property comply with applicable ordinances and permits. Mobile device app determines the street address for the property being inspected. User of the mobile device captures visual media of internal or external structure/object on the property. App detects the object in the visual media using computer vision-based image recognition. App calls back-end computer system to look up in real time applicable ordinances for the structure/object and/or whether there is an appropriate permit(s) for the structure/object. App generates and displays on the mobile device augmented visual media that visually indicates whether the detected structure/object is compliant or not.

Abstract: A system for receiving and deduplicating data strings transmitted over a network is disclosed. The system comprises one or more network sensors detecting data strings while in transit on the network; and non-transitory memory comprising instructions. When the instructions are executed by one or more processors, the one or more processors establish a plurality of Bloom filters, receive a first data string, perform a first insertion operation into each Bloom filter; determine, for each of one or more Bloom filters, a set of bits, whether presently set or cleared, to be unset; and unset each determined set of bits in the one or more Bloom filters. At a later moment in time, the first data string is received again, and each Bloom filter is queried to determine whether the first data string has been inserted, based on a current state of that Bloom filter.

Abstract: A system for receiving and deduplicating data strings transmitted over a network is disclosed. The system comprises one or more network sensors detecting data strings while in transit on the network; and non-transitory memory comprising instructions. When the instructions are executed by one or more processors, the one or more processors establish a plurality of Bloom filters, receive a first data string, perform a first insertion operation into each Bloom filter; determine, for each of one or more Bloom filters, a set of bits, whether presently set or cleared, to be unset; and unset each determined set of bits in the one or more Bloom filters. At a later moment in time, the first data string is received again, and each Bloom filter is queried to determine whether the first data string has been inserted, based on a current state of that Bloom filter.

Abstract: A system and method for routing requests to an API to two or more API endpoints are disclosed. The system comprises at least a gateway router and a configuration server. When software is executed, the system transmits, from the configuration server to the gateway router, information setting a desired proportion of API requests to be allocated to each of the two or more API endpoints. When API requests are received, the gateway router forwards the API requests to the API endpoints in the desired proportion. The system receives metrics data from one or more backend entities upon which at least one of the API endpoints relies for data or other services, and determines that an adverse event is underway or imminent based at least in part on the received metrics data. In response to the event, it forwards the API requests in a second proportion different from the desired proportion.

Abstract: A system includes one or more processors and software, executable by the one or more processors that, when executed by the one or more processors, cause the system to retrieve Environmental, Social & Governance (ESG) related data from one or more first databases, retrieve financial-related data from one or more second databases, and generate a dynamically interactive graphical user interface (GUI), containing a combination of ESG and financial information, the GUI having multiple GUI Modules including a Screening GUI Module, a Ratings GUI Module, a Climate GUI Module, and a Sustainability GUI Module.

Abstract: Systems and methods authenticate an end user of an enterprise with an external service provider. The enterprise comprises an identity provider and an entitlements data store that communicate via web services calls. The identity provider makes a determination of whether an end user is authorized to access the external service provider based on: (i) authentication of the end user by the identity provider; and (ii) data from the entitlements data store for the end user with respect to the external service provider. Upon a determination by the identity provider that the end user is authorized to access the external service provider, the identity provider send a SAML token to the end user. The SAML token comprises an XML representation of entitlement information for the end user for the external service provider.

Abstract: A system for generating user interface (UI) components in a web-based interactive UI is disclosed. Instructions, when executed by processors, cause the processors to receive CSS files specifying a desired standardized appearance for UI components, receive an HTML file specifying the interactive UI and including tags not specified by any HTML standard, corresponding to one or more UI components; and provide a webpage comprising the UI components to a human user. When rendered and executed by a web browser of the human user, the web browser will render the UI components indicated by the tags, load data into the UI components and style the UI components in accordance with the CSS file. The browser will also receive input requesting a change to presentation of data in the UI components and update UI components in accordance with the requested change. Additional features improving datagrid, chart, and filter functionality are provided.

Abstract: A method of detecting and responding to anomalous activity within a system involves generating a two-dimensional graphical image of a first dimension and a second dimension, and wherein the first dimension corresponds to a cyclical repeating interval made up of multiple bins, the graphical image having been generated such that a bin of the multiple bins, is the bin having a highest count, and the bin is scaled to the second dimension, and counts of all other bins in the interval are scaled relative to that highest count, graphically comparing the generated graphical image to an immediately preceding graphical image for similarity, and when a result of the comparison fails to satisfy a pre-specified similarity threshold, automatically triggering an appropriate anomaly detection-based follow-on action.

Abstract: A system for receiving and deduplicating data strings transmitted over a network is disclosed. The system comprises one or more network sensors detecting data strings while in transit on the network; and non-transitory memory comprising instructions. When the instructions are executed by one or more processors, the one or more processors establish a plurality of Bloom filters, receive a first data string, perform a first insertion operation into each Bloom filter; determine, for each of one or more Bloom filters, a set of bits, whether presently set or cleared, to be unset; and unset each determined set of bits in the one or more Bloom filters. At a later moment in time, the first data string is received again, and each Bloom filter is queried to determine whether the first data string has been inserted, based on a current state of that Bloom filter.

Abstract: Computer-implemented methods and systems are disclosed for receiving and indexing a plurality of files for later querying, for dynamically generating scripts to be executed during a query of a data store, and for horizontally distributing a query and aggregating results of the distributed query.

Abstract: Computer-implemented methods and systems are disclosed for receiving and indexing a plurality of files for later querying, for dynamically generating scripts to be executed during a query of a data store, and for horizontally distributing a query and aggregating results of the distributed query.

Abstract: Computer-implemented methods and systems are disclosed for receiving and indexing a plurality of files for later querying, for dynamically generating scripts to be executed during a query of a data store, and for horizontally distributing a query and aggregating results of the distributed query.