Abstract: A system for embedding services into a third-party website includes providing first programming code that can be used as part of a webpage that causes a user device to display a first iframe, display a second iframe in response to user input provided through the first iframe.

Abstract: Techniques are disclosed relating to generating real-time suggested actions for a user based on their user profile attributes. In various embodiments, a server system may select, in real-time, a particular action to suggest to a user based on profile attributes associated with a user account of the user. The server system may then provide a message indicative of this particular action to a user device associated with the user. In some embodiments, the server system may then receive an indication that the user has initiated the particular action. In response to this indication, the server system may update the profile attributes associated with the user account to indicate that the user has initiated the particular action. Using these updated profile attributes, the server system may then select, in real-time, an updated action to suggest to the user that is different from the particular action.

Abstract: Systems and methods for regulating service behavior include a system provider device where a policy is registered. The policy defines a modified service behavior for a service running one or more remote servers. In some embodiments, the registered policy is transmitted to a first satellite agent located at a first remote server. By way of example, and after transmitting the registered policy to the first satellite agent, data is received from the first satellite agent corresponding to the service having the modified service behavior running on the first remote server. Thereafter, the system provider may verify that the service having the modified service behavior running on the first remote server satisfies a metric. In various embodiments, and in response to the verifying, the registered policy is transmitted to a second satellite agent located at a second remote server.

Abstract: A system and method for selecting diverse product titles to display on a website are disclosed. In some example embodiments, the methods and systems described herein identify available products to be displayed, cluster the identified products based on their similarity to one another, select one or more products from each of the clusters, and display information, such as a title, associated with the randomly selected products.

Abstract: Techniques are disclosed relating to detecting data leaks using targeted scanning. For example, in various embodiments, a scanner module may monitor communications between a user device and a server system, where the user device requests access to a resource provided via the server system. The scanner module may perform various data loss prevention operations to detect the leaking of sensitive data associated with an organization. For example, the scanner module may perform an initial scan of the resource to capture an initial version of the resource at an establishment of a connection between the user device and the server system. The scanner module may perform a subsequent scan that captures a subsequent version of the resource. Based on the initial and subsequent versions of the resource, the scanner module may determine whether any data loss prevention rules have been violated and, if so, initiate one or more corrective actions.

Abstract: Systems and methods that determine an anomaly in a network are provided. A monitoring engine is installed on a computing device that monitors network information and application information for data flows generated on the computing device and transmitted over a network and for data flows received by the computing device from the network. The network information includes an internet protocol (IP) source address, a source port, an IP destination address, a destination port, and a transport protocol, and a number of bytes sent or received by the flow. The application information includes a process identifier (ID), the threads ID, an application ID and/or a function call, arguments passed to the function, a stack trace of the function, etc., that application used to generate the data flows. The network information and application information can be used to identify the application, thread and/or a function that caused an anomaly in the network.

Abstract: Methods and systems are provided for facilitating shared mobile payments. According to an embodiment, a user can initiate a purchase using a mobile device. The mobile device can display a total price for the purchase. The first user can cooperate with one or more second users to share the cost of the purchase. The cooperation can be facilitated via the first and second users' mobile devices.

Abstract: Techniques are disclosed for passively characterizing a type of host or computing device which may be engaged in a transaction between the host and another computing device. Observation data corresponding to one or more sessions of network traffic between an unclassified host and a second system may be passively generated by a device characterization server. The observation data can be processed by the device characterization server using a machine-learning classifier. The machine-learning classifier can be trained with a set of training data that includes multiple sessions of network traffic from multiple training data hosts. Each session of network traffic includes an exchange of multiple packets in various embodiments, including packets sent from, and packets received by, the training data hosts. Based on the processing, the unclassified host may be characterized by the device characterization server as one of a physical computing device, a virtual machine, or a container.

Abstract: Methods and systems are presented for providing data consistency in a distributed data storage system using an eventual consistency model. The distributed data storage system may store data across multiple data servers. To process a request for writing a first data value for a data field, a first data server may generate, for the first data value, a first causality chain representing a data replacement history for the data field leading to the first data value. The first data server may insert the first data value without deleting pre-existing data values from the data field. To process a data read request, multiple data values corresponding to the data field may be retrieved. The first data server may then select one data value based on the causality chains associated with the multiple data values for responding to the data read request.

Abstract: Methods and systems for processing incoming data in real-time are described herein. The incoming data is processed in real-time to generate data records that may be improved over time, for example, by automatically correcting inaccurate data in the records. In some embodiments, when data is received, a real-time process is initially performed on the received data under a first time constraint to produce first data for a data record. Subsequently, one or more non-real-time processes are then performed on the received data under a second time constraint to produce second data for the data record. The second data may be used to update the data record, for example, to correct any inaccuracy caused by the real-time process of the received data. Preferably, the second time constraint is longer than the first time constraint.

Abstract: There are provided systems and methods for a database synchronization system in high security zones using blockchain. A service provider, such as an electronic payment provider, may maintain data stores across different zones that may need to synchronize data across these zones. As such, the subject technology provides for data storage using interplanetary file system (IPFS) technology in compliment with blockchain technology to create a secure, scalable and reliable data synchronization system. The IPFS may be implemented as a data storage layer and the blockchain may be implemented as a transaction management system, where the IPFS address of data files and synchronization points are stored in a distributed ledger. In various aspects, the integration of the IPFS network with the fabric network can enhance IPFS with the fabric network to create a more secure file sharing platform to improve the transfer of data and database synchronization between different zones.

Abstract: There are provided systems and methods for hardening of rule data object version for smart deployment. A service provider, such as an electronic transaction processor for digital transactions, may utilize different decision services that implement rules for decision-making of data including real-time data in production computing environments. Rules may correspond to coded statements that perform an automated decision-making service for the computing services and platforms of the service provider. When writing rules different variables for data objects are used, which are updated over time. Thus, a rule authoring application may be updated over time to have more and newer variables, which requires updating of the decision services. To optimize updating of the decision services when deploying new rules, the service provider may determine compatible versions of specifications for the variables. Thereafter, the service provider may determine whether a device service's variable specification requires updating.

Abstract: Systems and methods for testing software programs during development are described that are provided in part by a software testing framework that can create unit tests for testing individual modules of code, and create corresponding integration tests for testing those code modules during later integration testing, without duplication of effort. The framework receives function calls, each corresponding to a unit test function. The framework generates unit test code based on the function calls, which is executed on a development device. Upon successful execution of the unit test code, the framework receives an indication to test the function calls in a test environment. The framework identifies dependencies of the function calls. The framework then generates integration test code corresponding to the function calls. The integration test code includes dependency resolution code for the evaluated dependencies. The generated integration test code is then deployed in a test environment.

Abstract: Systems and methods for redirecting control of a process performed on a browser application on a user device accessing a web application to a native application on the user device include receiving, through a web application controlling a process, a request to perform an action (e.g., user authentication). A determination is made whether the request identifies a native application feature for completing the action that is preferable over a web application feature for completing the same action. In response to the action being determined to be completed by a native application feature, a determination is then made as to whether the native application feature is enabled by the native application. In response to determining the native application feature is enabled, control of the process is redirected from the web application to the native application such that the native application completes the action using the native application feature.

Abstract: There are provided systems and methods for a shared prediction engine for machine learning model deployment. A service provider may provide AI hosting platforms that allow for clients, customers, and other end users to upload AI models for execution, such as machine learning models. A user may utilize one or more user interfaces provided to a client device by the service provider to select machine learning models to perform predictive services based on input features provided in an input string. Thereafter, a machine learning engine may host and execute the models during an instance of the engine provided to the client device. The engine may then process the input features in a processing thread remotely from the client device during the instance so that machine learning predictions may be determined. Thereafter, an output string for the predictions and model explanations may be provided to the client device.

Abstract: Latency of a gateway system that connects to downstream services can be measured using an external computer system. The gateway may route component requests to various downstream services in order to service a main request, and be part of an overall service where low latency is important. It may be desirable for the gateway system to have as little added latency as possible. Benchmarking the gateway by performing latency measurements can give an indication of how the gateway is performing. If software on the gateway changes, re-benchmarking the gateway can reveal if problematic code was introduced. A measurement system can employ a lightweight process so that minimal additional latency is incurred by the measuring process. Memory can be allocated as to avoid a garbage collection process so that the latency measurement is unaffected when garbage collection occurs, for example, and multiple buffers can measure latency for different request types.

Abstract: Techniques are disclosed relating to a method that includes executing, by a processor of a computer system, one or more processes. The processor may use a peripheral device coupled to the computer system, wherein the peripheral device utilizes a particular version of a driver. A sideband processor included in the computer system may receive, via a network, instructions for an updated version of the driver to replace the particular version of the driver. The sideband processor may cause the processor to pause use of the peripheral device. While the processor executes the one or more processes, the sideband processor may send a series of commands to install the instructions for the updated version of the driver. The sideband processor may also notify the processor that the peripheral device is available for use.

Abstract: A computer system identifies that a first portion of markup language, extracted from a markup language document of a website, corresponds to a first actionable element, wherein the first portion of markup language is a variable length representation. In response to identifying that the first portion of markup language corresponds to the first actionable element, the computer system utilizes a recurrent neural network (RNN) encoder to create a first code representation that corresponds to the first portion of markup language. The computer system identifies a first additional information that corresponds to one or more pre-defined goals. The computer system creates a final fixed length markup language representation that includes the first code representation and the first additional information. The computer system inputs the final fixed length markup language representation into a model.

Abstract: Apparatus, systems, and methods are disclosed that operate to receiving an authentication request at a server associated with an authenticating entity from a requesting party responsive to a request being provided to the requesting party by a client terminal associated with an unauthenticated individual purporting to be an individual account owner previously authenticated with the authenticating entity. A token from the client terminal associated with the unauthenticated individual is received, and the token includes information associated with the unauthenticated individual and a user permission authorizing the authenticating entity to share a selected portion of the information with a plurality of selected requesting parties. The server associated with the authenticating entity authenticates the unauthenticated individual as the individual account owner based on, inter alia, matching the token to a pre-registered identity uniquely associated with the individual account owner.

Abstract: A system and method for facilitating electronic commerce over a network, according to one or more embodiments, includes communicating with a user via a user device and an issuer of payment media via an issuer device over the network, the payment media being issued to the user by the issuer, receiving user instruction over the network to link the payment media to a user account related to the user, prompting the user over the network to input a secure password known only by the issuer and the user, receiving the secure password from the user over the network, verifying that the payment media is owned by the user over the network via a secure protocol, returning a response to the user related to verification of the payment media, and storing payment media verification information.