Abstract: Methods and systems for configuring a common security policy for a plurality of nodes included within an enterprise network. Example methods can include grouping nodes within profiles based on IP address, in addition to concordance data. Additionally, nodes may be added to profiles based on a classification of the node being common to classifications of nodes within the profile. Still further, profiles may be grouped into a solution based at least in part on classification of the profile, in addition to grouping of profiles into solutions based on affinitization using concordance data. The methods described also include determining a common security policy to apply to each of the nodes within the profile.

Abstract: A computing system architecture includes a token generator communicable with a client token agent. The client token agent is communicable with a client database access agent. A database management system is communicable with the token agent. The database management system is communicable with the client database access agent. A client authorization management system is communicable with the database management system. The client authorization management system stores a list of authorized operations for a client. The list of authorized operations is configured to be changeable during a client login session.

Abstract: A method and system for delivering announcement broadcasts. The method includes receiving an announcement broadcast from a broadcast system of a transportation station. The method also includes interpreting the received announcement broadcast using natural language processing to extract transportation information. The method also includes the received announcement broadcast and the extracted transportation information in a data storage location. The method also includes translating the stored announcement broadcast into a text message. The method also includes transmitting the text message to at least one mobile device of at least one user registered with the announcement broadcast delivery method, based on the transportation information and the user information stored in the data storage location.

Abstract: Virtual machines in a network may be isolated by encrypting transmissions between the virtual machines with keys possessed only by an intended recipient. Within a network, the virtual machines may be logically organized into a number of community-of-interest (COI) groups. Each COI may use an encryption key to secure communications within the COI, such that only other virtual machines in the COI may decrypt the message. Remote devices may gain access to virtual machines in a network through a virtual device relay. The virtual device relay receives data from the remote device, such as a tablet or cellular phone, and forwards the data to one of the virtual machines, when the virtual device relay shares a COI with the destination virtual machine.

Abstract: A traffic monitoring system includes a first car moving on a first path; a camera having a field of vision including at least a portion of the first path; and a computing system. The computing system receives a plurality of images from the camera. The computing system has a processor. When instructed, the processor performs circling a perimeter of the first car on each of the images with a first rectangle; composing a first set of points, each point of the first set of points representing a center of the first rectangle; finding a first centroid using the first set of points, wherein the first centroid represents the first path; and calculating a speed of the first car using the first centroid.

Abstract: A computing system includes a computer executing an emulated operating system, the emulated operating system including a multichannel control unit; a plurality of virtual drives accessible to the emulated operating system; and a communication channel, the communication channel connecting the multichannel control unit and the virtual drives through one or more virtual channels. The multichannel control unit sends a first data access request to a virtual drive through the first virtual channel of the communication channel, the multichannel control unit sends a second data access request to a virtual drive through the second virtual channel of the communication channel.

Abstract: A computing system includes a computer executing an emulated operating system, the emulated operating system including a multichannel control unit; a plurality of virtual drives accessible to the emulated operating system; and a communication channel, the communication channel connecting the multichannel control unit and the virtual drives through one or more virtual channels. The multichannel control unit sends a first data access request to a virtual drive through the first virtual channel of the communication channel, the multichannel control unit sends a second data access request to a virtual drive through the second virtual channel of the communication channel.

Abstract: A security system includes a camera having a field of vision. The camera sends image frames to a machine readable memory. A processor is accessible to the machine readable memory. The processor performs acts of receiving from the camera a plurality of frames; detecting an object entering the field of vision; determining whether the object is a person; tracking a moving path of the person; and performing facial recognition on the person using at least one of the plurality of frames.

Abstract: The present invention provides for employing SQL to introduce blockchain technologies into a relational database, and thereby leverage the inherent tamper-resistant properties of blockchain, without the need to completely rewrite existing or legacy relational database software. The invention creates a relational database inside of a blockchain and uses a conventional SQL interface for standard database operations. This reduces the burden of introducing blockchain technologies, while providing the benefits of the intrinsic security and verification features of blockchain technology. The invention provides a rich historical record of every transaction thereby greatly reducing, if not eliminating, the relational database's susceptibility to tampering. This allows for temporal queries on arbitrary records within the database and the generation of reports and audits for any point in the history of the database.

Abstract: Methods and systems for defining a solution within an enterprise security management configuration server is disclosed. One method includes, based on network concordance data, grouping a plurality of nodes within an enterprise network into a plurality of profiles and identifying one or more channels among the plurality of profiles within a project of an enterprise security management configuration tool. The method also includes displaying the plurality of profiles in a configuration user interface, and automatically identifying one or more solutions among the plurality of profiles. The method further includes collapsing each of the one or more solutions into a single icon within the configuration user interface, each single icon representing a solution.

Abstract: The present invention provides for employing SQL to introduce blockchain technologies into a relational database, and thereby leverage the inherent tamper-resistant properties of blockchain, without the need to completely rewrite existing or legacy relational database software. The invention creates a relational database inside of a blockchain and uses a conventional SQL interface for standard database operations. This reduces the burden of introducing blockchain technologies, while providing the benefits of the intrinsic security and verification features of blockchain technology. The invention provides a rich historical record of every transaction thereby greatly reducing, if not eliminating, the relational database's susceptibility to tampering. This allows for temporal queries on arbitrary records within the database and the generation of reports and audits for any point in the history of the database.

Abstract: Systems and methods for non-stop computing in a virtualization fabric are disclosed. One system includes a computing fabric comprising a plurality of host platforms, the plurality of host platforms including at least a first host platform and a second host platform communicatively connected to the first host platform. The system also includes an interconnect service partitions residing on the first host platform. The system includes a plurality of guest partitions distributed across the plurality of host platforms. The system further includes a DNS server instance managed by at least one of the plurality of interconnect service partitions and defining at least one zone, the at least one zone including one or more partitions from among the plurality of guest partitions distributed across the plurality of host platforms.

Abstract: An application services broker includes a plurality of adapter modules, each of which are associated with a respective application service. Application service data is received from a first application service and converted to a first message having a predefined message format by a first adapter module associated with the first application service. The first message is sent from the first adapter module to a second adapter module associated with a second application service. The first message is converted to application service data for the second application service by the second adapter module.

Abstract: A computing system architecture includes a service server and a first validator. The first validator is communicable to the service server. A validation request is sent from the service server to the first validator for validating a transaction. The validation request including a first facial image of a party of the transaction. The validator performs a facial recognition comparing the first facial image with a second facial image using a facial recognition algorithm.

Abstract: A computing system architecture includes a service server and a first validator. The first validator is communicable to the service server. A validation request is sent from the service server to the first validator for validating a transaction. The validation request including a first facial image of a party of the transaction. The validator performs a facial recognition using the first facial image of the party for validating the transaction.

Abstract: In a cryptographically-segmented network, a server establishes a cryptographically-segmented communication channel for use by authorized endpoints in an operationally-deployed configuration. In response to a received endpoint-isolation command to isolate a first endpoint, the server de-authorizes the first endpoint from the channel of the operationally-deployed configuration. In response to the de-authorization, the server issues a configuration instruction to the first endpoint to join a first cryptographically-segmented isolation communication channel that is communicatively coupled with at least one monitoring endpoint configured to monitor operation of the first endpoint via the first cryptographically-segmented isolation communication channel.

Abstract: Methods and systems for configuring security management settings within an enterprise network are disclosed. One method includes receiving network concordance data at an enterprise security management configuration tool from a plurality of nodes within an enterprise network, and, based on the network concordance data, classifying each of the plurality of nodes based on an affinitization between the two or more nodes. The method also includes defining a profile for one or more nodes or grouped nodes, and defining one or more solutions within the enterprise security management configuration tool, the one or more solutions each including one or more nodes of the plurality of nodes. The method also includes receiving a deployment selection identifying at least one of the one or more solutions, and, in response to the deployment selection, generating a security settings file describing security settings for each of the one or more nodes.

Abstract: A logistics management system (LMS) may include receiving, at a server, a reservation request from a requestor for a booking on an air carrier's cargo hold for a designated route; validating, by the server, an availability of the requested booking with the air carrier; generating, by the server, a price quote for the booking; communicating, by the server, the price quote to the requestor; and receiving, by the server, an acceptance of the price and terms from the requestor to form commercial terms for the booking.

Abstract: A logistics management system (LMS) may include receiving, at a server, a request from a requestor to amend a booking on an air carrier's cargo hold for a designated route; amending, by the server, at least one of a group consisting of a routing, a weight, a volume, a special handling codes, a product, an allotment, a flight, a container type, and a change of responsible participant for charges of the booking based on the received request; and assigning, by the server, a new price for the booking based on the amendment unless a total price for the amended booking and a rate for the amended booking are both lower than an original total price and an original rate for the booking created at a time of the booking.

Abstract: Database performance may be improved by creating additional backups from an existing backup, rather than the original database or audit log source. A second backup may be created from a first backup by copying the files from the first backup to the second backup. The replication from a first backup to a second backup with modification of the file history information allows identical backups to exist on different types of storage devices, including virtual storage devices. Continue functionality may be implemented during a move function to restart replication at a new starting point while retaining the existing move set. Tape-type-override functionality may be implemented during the replication to replace the tape type for the backups with another compatible type while retaining the original type for history file entries, tape trailers, and messages.