Abstract: The present disclosure involves systems, software, and computer implemented methods for a efficient distributed secret shuffle protocol for encrypted database entries using independent shufflers. Each of multiple data providers provides an encrypted secret input value. A set of shuffling clients, independent of the data providers, participate with a service provider in a secret shuffling of the encrypted secret input values. The protocol includes generation and exchange of random numbers, random permutations and different blinding values. A last protocol step includes using homomorphism, for each client, to perform computations on intermediate encrypted data to homomorphically remove a first blinding value and a second blinding value, to generate a rerandomized encrypted secret input value. As a result, the rerandomized encrypted secret input values are generated in an order that is unmapped to an order of receipt, at the service provider, of the encrypted secret input values.

Abstract: Methods, systems, and computer-readable storage media for receiving, by a web tier, an analytics request from a client device, determining, by the web tier, that the analytics request implicates at least one offline document, transmitting, by the web tier, at least a portion of the analytics request to a slim analytics server of an analytics platform, the slim analytics server operating in an offline mode and, in response to receiving the at least a portion of the analytics request, the slim analytics server communicates with an offline document server that loads data from the at least one offline document and executes one or more computations on the data to provide analytics results to the slim analytics server, receiving, by the web tier, the first analytics results from the first slim analytics server, and transmitting, by the web tier, a response to the client device, the response including the analytics results.

Abstract: Data recovery in a database includes performing a backward scan of a transaction log that records transactions made on the database. The backward scan includes traversing log records starting from a latest-in-time log record toward the beginning of the transaction log. Each log record can be replayed to recover data for a database row associated with the log record. An earlier-in-time log record is skipped if the associate database row has been recovered by later-in-time log record.

Abstract: A system includes reception of a definition of a first attribute to associate with a logical object of the first application, reception of a definition of a second attribute to associate with a second logical object of the first application, determination, based on the definition of the first attribute and the definition of the second attribute, that the first attribute and the second attribute are associated with a same semantic, based on the determination, generation of e a first identifier associated with the first attribute and the second attribute and storing the first identifier associated with the first attribute and the second attribute in a first data schema associated with the first application, and storage of the first identifier associated with the first attribute and the second attribute in an analytics schema associated with an analytics application.

Abstract: Disclosed herein are system, method, and computer program product embodiments for a drag and drop minimization system. An embodiment operates by detecting a drag event associated with a selected object located in a first location of a user interface. A visibility of the one or more portions of the selected object is modified during the drag event. A drop event corresponding to the drag event is detected. The visibility of the one or more modified portions of the selected object is restored after the drop event.

Abstract: Disclosed herein are computer-implemented method, system, and computer-program product (computer-readable storage medium) embodiments for efficiently processing configurable criteria. An embodiment includes at least one computer processor configured to receive a first configuration corresponding to a plurality of attributes, access a data set of one or more items, and compute a first key based at least in part on the first configuration. In a further embodiment, the at least one computer processor may be configured to populate a first set of selected items based at least in part on the first key, and may further be further configured to output the first set of selected items. The first key may uniquely correspond to the first configuration, and the first set of selected items may include any item, of the data set of one or more items, selected based at least in part on the first key, according to some embodiments.

Abstract: Systems and methods include receiving an exception raised by a database storage system in response to a database operation requested by an application, providing, in response to the exception, the application with a pointer to a failover framework comprising a memory store, receiving, from the application and at the failover framework, a request to write first data, storing, in response to the request to write first data, the first data in a tree structure of the memory store in chronological order, receiving, from the application and at the failover framework, a request to read second data, and, in response to the request to read second data, sorting the tree structure primarily by user and secondarily by chronological order and reading the second data from the sorted tree structure.

Abstract: A data protection implementation solution includes utilizing a peer-to-peer network and incorporating an auditing method to record and/or track transactions related to a customer's data. A private peer-to-peer network such as inter planetary file system (IPFS) is used to achieve secured and fast data accessibility while also managing data modifications. An auditing method such as blockchain is used to record activity related to data within the IPFS network. The IPFS network may include a plurality of nodes, among which data is distributed. Devices are registered with the network, and public keys, private keys, and node identifiers are used to authenticate users and secure the data. By incorporating blockchain with the IPFS network, file commit transactions are validated and a clear ledger regarding time of modification and count of file edits is provided.

Abstract: A platform's central instance manager (IM) receives microservice requests issued to a common application shared between various tenants. Embodiments function to co-locate within a same database, the persistence containers of different microservice instances of a specific tenant. The central IM associates a corresponding tenant identifier with microservice request instances created. Referencing this assigned tenant identifier, the central IM maintains an external configuration file comprising a mapping of services (m) and tenants (n), to relevant persistence container service instances. Such mapping permits the allocation of tenant-specific microservice data for storage within persistence containers of a particular database. This co-location of data promotes flexibility, allowing tenants to furnish database structures tailored to their individual needs.

Abstract: Different cloud software applications may be efficiently integrated in a secure manner, by providing each system with a dedicated Integration Setup URL/Endpoint. This endpoint can be derived from the base URL together with an Integration Setup User Interface (UI). Security is afforded through verification of certain properties. Cryptographically secured customer identification (via public key certificates) can ensure that customer A does not connect to systems of customer B. Also, business type information or landscape/zone can be referenced assign a tenant to a software variant (development, test, production). This prevents, e.g., a development system of type A from accidentally being connected to a production system of type B. Integration setup may be triggered per an integration scenario from one of the two affected endpoints, or from a separate (e.g., central) system. The configuration may be written on both sides with reasonable defaults, with the double confirmation ensuring compliance and security.

Abstract: According to some embodiments, methods and systems may be associated with a microservice-based cloud computing environment. Model integration content may be received from an integration developer in connection with the cloud computing environment and at least one integration service may be determined associated with the received model integration content. A provisioning application platform may then automatically and dynamically instantiate the at least one integration service on demand during a provisioning process. Moreover, the provisioning application platform may also automatically subscribe the at least one integration service during the provisioning process. Similarly, at least one integration service to be consumed for received model integration content may be determined. The provisioning platform may then automatically instantiate that at least one integration service on demand during a consumption process.

Abstract: A computer system comprises one or more processors, a primary database system, and a secondary database system. The secondary database system is configured as a hot-standby system for the primary database system. The secondary database system is capable of providing at least a minimum amount of essential functionality of the primary database system during a disruption to the primary database system. The primary database system is configured by programming instructions, executable on the computer system, to cause the one or more processors to determine from a query request from a client application directed to the primary database system that workload from a query may be shifted to the secondary database system and selectively instruct the client application to direct the secondary database system to execute the query based on a per-table calculated result lag. Related apparatus, systems, techniques and articles are also described.

Abstract: Techniques for implementing cloud services of a cloud service provider in a dedicated user account environment in a distributed computing system are disclosed. In some example embodiments, a computer-implemented method comprises: receiving, by a management system of a cloud service provider, a user request for creation of an instance of an application platform of the cloud service provider in a user environment within a distributed computing system, the user environment being dedicated to a user account hosted by the distributed computing system, the user request comprising credential data configured to provide the management system with limited permission for accessing the user environment, the limited permission restricting the management system from full administrative privileges in accessing the user environment; and deploying, by the management system, the instance of the application platform to a workload cluster in the user environment using the credential data to access the user environment.

Abstract: In an example embodiment, a specialized in-memory database abstraction component is introduced in a cloud cluster. The in-memory database abstraction component may receive lifecycle commands from a client-facing application and interface with a container service to create an in-memory database resource. When parameters are received by the in-memory database abstraction component from the client-facing application, the in-memory database abstraction component may act to validate the parameters, determine if a service plan is available, and determine whether the parameters meet the service plan requirements. If the service plan requirements are not met, the in-memory database abstraction component translates the parameters for the in-memory database resource.

Abstract: A business data database may store transaction business information of an enterprise along with existing structures, rules, and classification recommendations. A business rules framework agent platform may execute supervised machine learning and generate industry agnostic relationship scores and classification scores based on data in the business data database. The business rules framework agent platform may then optimize data and table structures, using relation graph-based evaluation, in accordance with taxonomy data and the classification scores. A rules and configuration database may store the optimized data and table structures from the business rules framework agent platform. Further, a business configuration and rules mapper platform may identify business configuration data and business rules classification data based on the optimized data and table structures.

Abstract: System and methods for enforcing service level agreements (SLAs) between computing platforms engaged in (e.g., Internet-of-Things) data exchange via peer-to-peer (P2P) connections are described. In accordance with various embodiments, data traffic via the P2P connections is monitored, and if an SLA violation is detected, data streams are rerouted to cure the violation.

Abstract: Some embodiments provide a non-transitory machine-readable medium that stores a program. The program queries a database for a subset of a plurality of records in the database. Each record in the plurality of records includes a value for a first field and a second value for a second field. The program further normalizes the first value of the first field of each record in the subset of the plurality of records. The program also divides the subset of the plurality of records into a plurality of groups of records based on the second values of the second field. The program further generates a function for predicting a type of a particular record based on the value of the field of the particular record.

Abstract: Implementations include receiving, by a migration delta analyzer of a software system, an object list including objects accessed by the on-premise application, determining, by the migration delta analyzer, at least one migration option for each object in the object list using a mapping table, receiving, through a user interface, input from a user representing a selection of migration option for each object in the object list, and providing a cloud application based on the selected migration option for each object in the object list.

Abstract: Methods and systems are disclosed for bridging a natural language processing (NLP) engine to a database engine, enabling natural language queries to be handled by the database engine. The NLP engine produces a query structure, containing an intent and one or more query parameters, for a natural language query. Rules are successively applied to the query structure. When a rule matches, a corresponding action is performed to identify a sub-intent, transform query parameters, or generate a filter string. The sub-intent is mapped to a query destination, which can be an intrinsic or extrinsic service offered by the data engine. A query string is constructed, including the query destination and any filter strings, and transmitted to the database engine to answer the original query. The disclosed technologies are flexible, easily reconfigurable, and future-proof. Variations and use cases are disclosed.