Patents Assigned to Workday, Inc.
-
Patent number: 11658980Abstract: A system includes an interface and a processor. The interface is configured to receive, at an application routing platform, an API call for an application platform comprising a signed tenant token. The processor is configured to determine that the signed tenant token is valid; determine an application platform token for the application platform; associate a root certificate with the application platform token; determine routing information to the application platform based at least in part on the API call; and provide the application platform the API call and the application platform token using the routing information to enable access to the application platform, wherein the application platform determines whether the application platform token is valid using the root certificate and executes the API call in response to a determination that the application platform token is valid.Type: GrantFiled: September 8, 2021Date of Patent: May 23, 2023Assignee: Workday, Inc.Inventors: Bjorn Hamel, Dylan Owen, Jonathan David Ruggiero
-
Patent number: 11641278Abstract: A system for creating an identity mapping on a distributed ledger includes an interface and a processor. The interface is configured to receive a request to create an identity mapping on a distributed ledger. The processor is configured to generate an identity key pair; generate a mobile encryption key; encrypt a private identity key of the identity key pair using the mobile encryption key to create an encrypted private key; store the encrypted private key; create a mapping document; sign the mapping document with the private identity key of the identity key pair; and provide the signed mapping document to be stored in a distributed ledger.Type: GrantFiled: March 26, 2019Date of Patent: May 2, 2023Assignee: Workday, Inc.Inventors: Bjorn Hamel, Jonathan David Ruggiero
-
Patent number: 11640456Abstract: A credential accessing system includes an interface and a processor. The interface is configured to receive a request to access a credential using a credential access application. The processor is configured to execute the credential access application in response to a request from a user application, wherein the request from the user application comprises an indication of a target application. Executing the credential access application comprises:1) receiving an indication of interactive control, wherein interactive control is redirected from the user application, and wherein the indication of interactive control comprises the indication to access the credential; 2) determine whether to allow access to the credential; and 3) in response to determining to allow access to the credential, access the credential and provide the credential to the target application; and 4) indicate to redirect interactive control to the target application.Type: GrantFiled: April 21, 2020Date of Patent: May 2, 2023Assignee: Workday, Inc.Inventors: Prakash Sundaresan, Aneesh Sandeep Verenkar, Lionello G. Lunesu, Krishnan Rajiyah, Kamalanathan Thandapani, Keith Kowal, Amit Jasuja
-
Patent number: 11632239Abstract: A system for blockchain-based authentication comprises an interface and a processor configured to (i) receive, by a first device, a command from a second device, where the first device is associated with a first trust certificate, (ii) receive a second trust certificate from the second device, (iii) communicate a cryptographic challenge using a public key of the second device to the second device, (iv) receive a response to the cryptographic challenge from the second device, (v) check whether the response matches with a predetermined correct response or not, and (vi) authenticate the second device and execute the commend received from the second device only if the response matches with the predetermined correct response.Type: GrantFiled: April 12, 2022Date of Patent: April 18, 2023Assignee: Workday, Inc.Inventors: Prakash Sundaresan, Lionello G. Lunesu, Antoine Cote
-
Patent number: 11627000Abstract: A system for credential authentication comprises an interface configured to receive a create indication to create a badge credential representing an employee badge and receive a claim indication from an authentication device to claim the badge credential, and a processor configured to provide the badge credential to the authentication device in response to the claim indication, receive a proof response from the authentication device comprising the badge credential and a lock identifier, validate the proof response using a distributed ledger, and provide a token for unlocking a lock associated with the lock identifier to the authentication device.Type: GrantFiled: March 26, 2019Date of Patent: April 11, 2023Assignee: Workday, Inc.Inventors: Bjorn Hamel, Jonathan David Ruggiero, Scott Mangino
-
Patent number: 11625500Abstract: A system for secure commingling of tenant isolated data includes a commingling storage unit, an interface, and a processor. The interface is configured to receive an indication of tenant data to be commingled. The processor is configured to determine one or more instances of sensitive data included in the tenant data, and transfer the tenant data to the commingling storage unit without transferring the one or more instances of sensitive data, wherein an index identifier is transferred to be stored in the commingling storage unit in place of an instance of sensitive data of the one or more instances of sensitive data.Type: GrantFiled: January 8, 2020Date of Patent: April 11, 2023Assignee: Workday, Inc.Inventors: Denis Gulsen, Erol Guney, Eric James Ranstrom
-
Patent number: 11620617Abstract: A system for compensation modeling includes an interface and a processor. The interface is to receive live transactional compensation data. The system processor is to determine a set of compensation assignment plans based at least in part on the live transactional compensation data, determine a compensation model based at least in part on the set of compensation assignment plans, and provide the compensation model.Type: GrantFiled: September 8, 2020Date of Patent: April 4, 2023Assignee: Workday, Inc.Inventors: Scott Colner, Peter Ryan
-
Patent number: 11615403Abstract: A processor-implemented system and method for dynamically retrieving an attribute value of an identity claim for a user using a digitally signed access token that is digitally signed by a user device, at a relying party device associated with a relying party. The method includes (i) making an API call to retrieve at least one identity claim for the user, (ii) processing each identity claim of the user, with the relying party device, to identify if at least one by-reference identity claim that includes a URL of an endpoint, (iii) obtaining the digitally signed access token that is digitally signed by the user device, (iv) invoking the URL of the endpoint with the at least one by-reference identity claim and the digitally signed access token, and (v) dynamically retrieving the attribute value from the URL of the endpoint from an issuing party device associated with an issuing party.Type: GrantFiled: May 6, 2020Date of Patent: March 28, 2023Assignee: Workday, Inc.Inventors: Kamalanathan Thandapani, Lionello G. Lunesu, Aneesh Sandeep Verenkar, Keith Kowal, Prakash Sundaresan
-
Patent number: 11609938Abstract: A system for element tracking in documents includes a memory device, a database, and a processor. The memory device is configured to store a mapping in a memory between a linked element within a document and a database object. The database is configured to store the database object. The processor is configured to in response to an update of the database object: a) cause storage in the database of an update event associated with the linked element; and b) provide an update indication that the update associated with the linked element has occurred.Type: GrantFiled: May 12, 2021Date of Patent: March 21, 2023Assignee: Workday, Inc.Inventors: Jay Schultz, Brian Lee Harper, Sayan Chakraborty, Andrew Kershaw, James Casey, Josh Lannin, Rhett DeWall
-
Patent number: 11593504Abstract: A system for determining access for a hypercube includes an interface configured to receive a request for access from a user to data in a location in a hypercube; receive a tree structure with subcubes of the hypercube arranged in a hierarchical structure; and receive a user permission list, wherein an element of the user permission list comprises a permission, a root node, and a set of pruned nodes. The system also includes a processor configured to determine a user permission associated with the data in the location of the hypercube using the user permission list; and provide an indication of the user permission.Type: GrantFiled: July 17, 2019Date of Patent: February 28, 2023Assignee: Workday, Inc.Inventors: John Yates, Mark Hampton, Francis Wang, Lian Zheng, Thomas Nguyen
-
Patent number: 11595816Abstract: A system and method to support identity theft protection and, in particular, to a system and method for supporting identity theft protection as part of a distributed service oriented ecosystem in Internet protocol (IP) multimedia subsystem (IMS) and non-IMS networks. The system includes an identity session initiation protocol (SIP) application server configured to act as a security assertion markup language (SAML) bridge, which allows an SIP enabled device or a non-SIP enabled device to attach to a telecommunications service provider network. A user may accept or reject an authorization request using the SIP enabled device or non-SIP enabled device.Type: GrantFiled: April 26, 2016Date of Patent: February 28, 2023Assignee: Workday, Inc.Inventors: Mamdouh Ibrahim, Sri Ramanathan, Tapas K. Som, Matthew B. Trevathan
-
Patent number: 11556389Abstract: A system for provisioning resources includes a processor and a memory. The processor is configured to receive a time series of past usage data. The past usage data comprises process usage data and instance usage data. The processor is further configured to determine an upcoming usage data based at least in part on the time series of the past usage data, and provision a computing system according to the upcoming usage data.Type: GrantFiled: April 22, 2020Date of Patent: January 17, 2023Assignee: Workday, Inc.Inventors: Montiago Xavier LaBute, Teng Qu, James Michael Stratton
-
Patent number: 11539533Abstract: A system for access control includes an interface to receive an access request from a first user application for permission to access a first digital identity wallet application and a processor to: determine whether to grant access for the first user application to the first digital identity wallet application, wherein access is granted for the first user application to the first digital identity wallet application in response to the first user application belonging to a first circle of trust and the first digital identity wallet application belonging to the first circle of trust; and in response to determining to grant access for the first user application to the first digital identity wallet application, provide an access granting indication.Type: GrantFiled: July 1, 2020Date of Patent: December 27, 2022Assignee: Workday, Inc.Inventors: Bjorn Hamel, Prakash Sundaresan, Krishnan Rajiyah, Marius Maaland, Kamalanathan Thandapani, Lionello G. Lunesu, Aneesh Sandeep Verenkar, Amit Jasuja, Keith Kowal
-
Patent number: 11537568Abstract: A system for processing database data includes an interface and a processor. The interface is configured to receive a query for the database data comprising a date range and a data selection criterion. The processor is configured to determine a set of fields of the database data corresponding to a most recent date of the date range; determine a subset of the set of fields of the database data specified by the data selection criterion; determine a set of transformations, where each transformation of the set of transformations corresponds to a field of the subset and a sub-range of the date range; transform the database data to determine transformed database data using the set of transformations; and select data from the transformed database data using the data selection criterion to determine a query response.Type: GrantFiled: March 27, 2019Date of Patent: December 27, 2022Assignee: Workday, Inc.Inventors: Muthukumarappa Jayakumar, Ashrita Battepati, Don Rudish, Patrick Kirby
-
Patent number: 11531939Abstract: A system for shift design and assignment comprises an interface configured to receive scheduling input data which includes labor demand data, worker data, and scheduling configuration data, and a processor configured to generate a set of shift candidates, determine a set of decision variables, determine a cost function, determine a set of constraints, and determine simultaneously, using a SAT, a MP solver, or a MIP solver, a subset of the shift candidates selected in a final schedule and a set of shift assignments of which worker is assigned to which selected shift candidate of the subset of the shift candidates such that the hard constraints are fully respected, violations to the soft constraints are minimized, and the cost function is minimized.Type: GrantFiled: December 23, 2019Date of Patent: December 20, 2022Assignee: Workday, Inc.Inventor: Jin Yang
-
Patent number: 11531783Abstract: The system comprises an interface and a processor. The interface is configured to receive a request from an application for authorization to access, wherein access to the application is requested by a user, and receive a task request from the application for authorization to access a task, wherein access to the task is requested by the user. The processor is configured to authenticate the request from the application for authorization to access, determine that the task comprises a sensitive task, determine a user authentication device, provide a challenge for a digital credential to the user authentication device, wherein the digital credential is backed by data stored in a distributed ledger, receive a response from the user authentication device, determine the response is valid, and provide an authorization to access the sensitive task.Type: GrantFiled: March 26, 2019Date of Patent: December 20, 2022Assignee: Workday, Inc.Inventors: Bjorn Hamel, Jonathan David Ruggiero
-
Patent number: 11520989Abstract: The system for responding to a set of words includes an interface and a processor. The interface is configured to receive the set of words. The processor is configured to determine a token from the set of words; determine an entity and an associated keyword from the token, wherein the entity is associated with an entity type; determine an intent based at least in part on the set of words; match the entity to an entity of the intent based on the associated keyword; and determine a response based on the intent and the entity.Type: GrantFiled: May 9, 2019Date of Patent: December 6, 2022Assignee: Workday, Inc.Inventor: Vu Le
-
Patent number: 11522713Abstract: The system for credential authentication comprises an interface and a processor. The interface is configured to receive a request from an application for authorization to access, wherein access to the application is requested by a user using a user device. The processor is configured to provide a login request to the user; validate a login response; determine a user authentication device based on the login response; provide a proof request to the user authentication device; receive a proof response; determine that the proof response is valid using a distributed ledger; generate a token; and provide the token to the application authorizing access for the user.Type: GrantFiled: March 26, 2019Date of Patent: December 6, 2022Assignee: Workday, Inc.Inventors: Bjorn Hamel, Jonathan David Ruggiero
-
Patent number: 11520798Abstract: A system for improving a query response includes an interface and a processor. The interface is configured to receive a query. The processor is configured to determine a categorization for the query using a model. The categorization is associated with a confidence value. The processor is configured to a comparison of the confidence value and a first threshold, wherein the first threshold is determined to maximize a metric and modify the query response based at least in part on the categorization and the comparison.Type: GrantFiled: December 16, 2020Date of Patent: December 6, 2022Assignee: Workday, Inc.Inventors: Parag Avinash Namjoshi, Harikrishna Narayanan, Hamdi Jenzri, Adam Charles Baker
-
Patent number: 11481245Abstract: A system for determining a dependency task tree includes an interface and a processor. The interface is configured to receive a task list. The task list is associated with compiling, testing, packaging, and/or deploying a program. The processor is configured to determine a dependency task tree. The dependency task tree includes all tasks in the task list and all prerequisite tasks for each task in the task list and provides the dependency task tree. The interface is configured to receive the dependency task tree. The processor is configured to determine a set of tasks such that a task of the set of tasks does not depend on any other task; add the set of tasks to a task queue; in response to determining that all dependencies of the dependent task are completed; and continue executing tasks from the task queue until all tasks in the dependency task tree are completed.Type: GrantFiled: July 10, 2020Date of Patent: October 25, 2022Assignee: Workday, Inc.Inventor: Brian Oliver