Abstract: An ad publisher provides an online system with user identifying information of users who interacted with an advertisement presented by the ad publisher and indications of interactions with the advertisement. A landing page is associated with the advertisement, and the advertiser provides the online system with user identifiers of users who interacted with the advertisement and requested the landing page. The online system determines whether the ad publisher fraudulently identifies interactions with the advertisement by comparing the user identifying information received from the ad publisher with the user identifiers received from the advertiser.

Abstract: In one embodiment, a method includes accessing a social graph comprising nodes and a edges connecting the nodes, receiving from a first user a query inputted at a search client, the search client being associated with context data from a page associated with the search client, such that the context data identifies one or more nodes associated with the page, generating search results corresponding to the query, wherein each of the search results corresponds to a node, and scoring the search results based at least in part on the context data associated with the search client. The context data may identify a social context of the page, which can include tags, comments, likes, commenters, and the like.

Abstract: Embodiments are disclosed for identifying a suspect application based on multiple operating factors from use of multiple applications. The embodiments can generate a representative distribution of a selected factor based on collected information corresponding to multiple operating factors from use of multiple applications. The embodiments can compare a representative distribution of a target factor with the representative distribution of the selected factor and identify a suspect application when these distributions are different.

Abstract: Particular embodiments provide for asynchronous execution of instructions using a multi-threaded approach to outsource low-level input/output-handling tasks. Particular embodiments may use (1) a main thread to handle execution of instructions to generate a hierarchy of layers representing a GUI, wherein each layer represents a logical grouping of components of the GUI, (2) an input thread to handle asynchronous execution of instructions to process user input based on interactions with the GUI, and (3) a graphics thread to handle asynchronous execution of instructions to generate and/or update display output in relation to one or more layers of the GUI hierarchy. The input thread may send information about received input directly to the graphics thread and the main thread at the same time, thereby enabling the graphics thread to begin refreshing the display output while the main thread performs any necessary processing of the user input.

Abstract: An advertising system receives from an advertiser at a social networking system an advertisement request, the advertisement request comprising advertisement content and a specification of a target audience for the advertisement content. The advertising system defines a plurality of bid values for the advertisement request. For each of the plurality of bid values, the advertisement system estimates a corresponding value of advertisement reach for the target audience, for example, by estimating a number of users of the target audience for each of whom the given bid value is expected to have resulted in at least one successful impression. The advertiser is provided a visual representation of a bid-reach landscape representing the estimated plurality of advertisement reach values as a function of the plurality of bid values. The advertising system provides, to the advertiser, one or more recommendations for bid values for which corresponding return-on-investment metrics exceed a specified threshold.

Abstract: Systems, methods, and non-transitory computer-readable media can detect a trigger event for generating multimedia content. A set of content items associated with a user account can be identified. Information associated with at least one of the set of content items or the user account can be acquired. A subset of content items can be selected out of the set of content items based on the information. In some embodiments, each content item in the subset can satisfy specified selection criteria. The multimedia content can be generated based on the subset of content items.

Abstract: A social networking system selects advertisements for a user based on user characteristics of the user in response to a request to present an advertisement to the user. To increase the number of advertisements eligible for presentation to the user, the social networking system associates the user with one or more cluster groups associated with targeting criteria that are not satisfied by the user's characteristics. To determine whether to associate a user with a cluster group, the social networking system determines a cluster score for the cluster group based on the user's characteristics. If the cluster score equals or exceeds a cluster cutoff score for the cluster group, the user is associated with the cluster group. The cluster cutoff score may be determined based on an estimated distribution of users so that a target number or percentage of users have cluster scores less than the cluster cutoff score.

Abstract: An advertising system predicts advertisement reach for a received advertisement request based on an advertiser-specified bid amount and a specification of a target audience. The system samples the target audience, and for each sampled user of the target audience, accesses a recent impression history to obtain costs or bids associated with recent advertisement impressions. The system compares the advertiser-specified bid amount in the received advertisement request to costs or bid values associated with successful advertisement impressions, for each sampled user, in order to determine whether the received advertisement request would have won a bid auction for each given sampled user to successfully reach each given sampled user. An estimated aggregate reach for the sampled users is computed and extrapolated to the targeted user population to estimate a total reach of the advertisement content for the target audience.

Abstract: A social networking system dynamically adjusts a number of advertisements presented to a user along with organic content items by modifying a ranking including organic content items and advertisements. Partial engagement scores are generated for organic content items based on an expected amount of user interaction with each organic content item, and scores are generated for advertisements based on expected user interaction and bid amounts associated with each organic content item. An engagement score measuring the user's estimated interaction with a content feed including organic content items without advertisements and an additional engagement score measuring the user's estimated interaction with a content feed including organic content items and advertisements are determined from the partial engagement scores and the scores.

Abstract: An online system or third party system allows advertisers to evaluate and test ad creatives before the ad creatives are presented to users in an ad campaign. Based on a set of test ad creatives for which feature scores and objective scores are determined by content evaluators (e.g., users, content processing algorithms), a model is trained to determine objective scores for an ad creative based on feature scores of the ad creative. The trained model is applied to a target ad creative, which has yet to be or has been presented to users, to determine one or more objective scores for the target ad creative based on feature scores of the target ad creative. Feedback is presented to an advertiser associated with the target ad creative based on the objective scores determined for the target ad creative.

Abstract: A multi-shard database system receives a transaction including multiple actions directed to different shards of the database system. The database system creates a transaction record including a transaction identifier and a transaction status for the transaction in a transaction database. The database system then executes, in parallel, the multiple actions on the different shards by associating with each data item involved in the transaction a data structure that includes the transaction identifier and new data to be applied to the data item. The database system then updates the transaction status in the transaction record for the transaction from pending to completed when each of the multiple actions is successfully executed on the corresponding shard. Consistency is eventually implemented when the data structures associated with the data items involved in the transaction are evaluated. The evaluation of a data structure can be triggered by a read request or other events.

Abstract: Systems, methods, and non-transitory computer-readable media can receive an indication that a drive included in a set of drives has experienced an error. Acquiring first data associated with the drive can be attempted. The drive can be prompted to undergo a power-cycle. Acquiring second data associated with the drive can be attempted. At least one of the first data or the second data can be analyzed to determine that the drive is remediable. At least the drive included in the set of drives can be remediated, such as by being rebuilt or reconfigured.

Abstract: The principles described herein provide methods and systems of providing new user assistance information for performing actions within a user interface as a user navigates the user interface. For example, information may be presented to the user in a way that aids the user in discovering and performing available actions within the user interface without being overly disruptive to the user.

Abstract: Techniques for setting up wireless data transfer are described. In one embodiment, for example, an apparatus may be configured to monitor network traffic. A context or origin of the network traffic may be determined. Control options for setting up a wireless data transfer may be determined and presented to a user. Based upon user input, a control option may be selected. Routing network traffic may be performed based upon the selected control option. Other embodiments are described and claimed.

Abstract: Technology is provided for a high-density storage server chassis. The storage server chassis comprises a frame and an opposed pair of support ledges disposed in the frame and positioned to support a storage device therebetween. The support ledges are disposed on corresponding partitions mounted in the frame. The support ledges include at least one protrusion positioned to space the storage device away from the support ledge thereby defining an air flow region between the storage device and the support ledge. The storage server chassis further comprises a retainer moveably attached to a corresponding partition and operative to retain a corresponding storage device in the frame, wherein the retainer is movable between an open position and a closed position.

Abstract: Technology for policies with reduced associated costs is disclosed. A policy may include an ordered rule set. When evaluated, the highest priority rule in the order that does not skip may control the policy outcome. Rules within a policy may have associated costs, such as data fetch and evaluation costs. In some contexts, it may be less important to evaluate every rule than to evaluate the policy quickly. Reduced policies that have one or more rules removed or that skip evaluation of some rules may be created for these contexts. When a rule of a policy is skipped, it may result in a possibility of a false allow or false deny. In some cases, rules may be duplicative. Removal or skipping of duplicative rules does not increase the possibility of a false allow or false deny. By using reduced policies in identified contexts, policy evaluation costs may be reduced.

Abstract: Methods and systems for processing payments using payment aggregators are provided. In particular, one or more embodiments comprise an e-commerce payment facilitator that acts as an intermediary between a commerce application and a plurality of payment aggregators. This allows the e-commerce payment facilitator to provide a user with payment methods supported by the plurality of payment aggregators. Furthermore, one or more embodiments enable the e-commerce payment facilitator to route transactions to payment aggregators based on various factors, such as availability, reliability, and profitability. In addition, one or more embodiments provide e-commerce payment facilitators with greater control over the processing of transactions by allowing for the routing and distribution of transactions across multiple payment aggregators.

Abstract: Systems, methods, and non-transitory computer-readable media can cause a first computing system to receive an obscured version of a first media content item from a second computing system. Access to the obscured version of the first media content item can be provided by the first computing system. Access to an unobscured version of the first media content item can be prevented by the first computing system. An unobscured version of a second media content item can be acquired by the first computing system using at least one sensor. The first computing system can transmit to the second computing system at least one of the unobscured version of the second media content item or an obscured version of the second media content item generated based on the unobscured version. Access to the unobscured version of the first media content item can be provided by the first computing system.

Abstract: A social networking system selects content items previously presented to a user for presentation to the user along with content items that were not previously presented. The social networking system selects candidate content items as previously-presented content items satisfying one or more criteria. One or more indices each associated with one or more attributes are generated that include candidate content items having attributes associated with an index. Candidate content items in an index are ranked based on a likelihood of the user interacting with the candidate content items in the index, and one or more candidate content items are selected from the index for presentation based on the ranking. The candidate content items selected from the index are presented to the user along with additional content items not previously-presented to the user.

Abstract: In one embodiment, a method includes receiving from a first user of an online social network a search query input including one or more n-grams; generating a number of query commands based on the search query input; and searching one or more verticals to identify one or more objects stored by the vertical that match the query commands. Each vertical stores one or more objects associated with the online social network. The method also includes generating a number of search-result modules. Each search-result module corresponds to a query command of the number of query commands. Each search-result module includes references to one or more of the identified objects matching the query command corresponding to the search-result module. The method also includes scoring the search-result modules; and sending each search-result module having a score greater than a threshold score to the first user for display.

Abstract: The principles described herein provide a server device having a cooling system that provides an efficient cooling of server device components. The cooling system can include a radiator block having air passageways that are oriented substantially orthogonal to the initial airflow path direction. In addition, the server device can include one or more baffles that create an airflow path that passes through the radiator block multiple times. Moreover, the server device can include various additional features that provide convenient access to electronic components within the server device without diminishing the effectiveness of the cooling system.

Abstract: Techniques to selectively capture media using a single user interface element are described. In one embodiment, an apparatus may comprise a touch controller, a visual media capture component, and a storage component. The touch controller may be operative to receive a haptic engagement signal. The visual media capture component may be operative to be configured in a capture mode based on whether a haptic disengagement signal is received by the touch controller before expiration of a first timer, the capture mode one of a photo capture mode or video capture mode, the first timer started in response to receiving the haptic engagement signal, the first timer configured to expire after a first preset duration. The storage component may be operative to store visual media captured by the visual media capture component in the configured capture mode. Other embodiments are described and claimed.

Abstract: In one embodiment, a method includes receiving information indicative of an amount of light present for capturing an image frame of a video clip, and, based on the amount of light present, determining a candidate exposure time for the image frame. The method also includes determining a maximum exposure time for the image frame. If the candidate exposure time is less than or substantially equal to the maximum exposure time, the method includes capturing the image frame with approximately the candidate exposure time. If the candidate exposure time is greater than the maximum exposure time, the method includes capturing the image frame with approximately the maximum exposure time.

Abstract: Techniques to selectively capture media using a single user interface element are described. In one embodiment, an apparatus may comprise a touch controller, a visual media capture component, and a storage component. The touch controller may be operative to receive a haptic engagement signal. The visual media capture component may be operative to be configured in a capture mode based on whether a haptic disengagement signal is received by the touch controller before expiration of a first timer, the capture mode one of a photo capture mode or video capture mode, the first timer started in response to receiving the haptic engagement signal, the first timer configured to expire after a first preset duration. The storage component may be operative to store visual media captured by the visual media capture component in the configured capture mode. Other embodiments are described and claimed.

Abstract: Techniques to selectively capture media using a single user interface element are described. In one embodiment, an apparatus may comprise a touch controller, a visual media capture component, and a storage component. The touch controller may be operative to receive a haptic engagement signal. The visual media capture component may be operative to be configured in a capture mode based on whether a haptic disengagement signal is received by the touch controller before expiration of a first timer, the capture mode one of a photo capture mode or video capture mode, the first timer started in response to receiving the haptic engagement signal, the first timer configured to expire after a first preset duration. The storage component may be operative to store visual media captured by the visual media capture component in the configured capture mode. Other embodiments are described and claimed.

Abstract: One or more embodiments of the disclosure include an electronic communication system that allows a user to select, configure, and send an electronic communication element to another user. For example, an electronic communication element can include a symbol, icon, animation, sound, and/or other elements that can be sent via an electronic communication. In particular, one or more embodiments of the electronic communication system allow a user to configure the electronic communication element to send a customized message to another user with the configured communication element.

Abstract: One or more embodiments described herein include methods and systems of providing message status notifications. The status notifications can comprise one or more of sent, delivered, or accessed/read notifications. In one or more embodiments a status notification is persistently displayed in a thread for each participant in a conversation. Each time the participant accesses a new message, the system can move the status notification adjacent to the new message.

Abstract: In one embodiment, a method includes receiving an identification of a location. The method further includes accessing an inverted index that comprises a plurality of records, where each record corresponds to a map tile and identifies one or more places corresponding to the map tile. At least one of the places identified in the inverted index is identified in multiple records corresponding to multiple map tiles, where the map tiles collectively define an area that circumscribes the place. The method also includes identifying based on the inverted index one or more places associated with the location.

Abstract: In one embodiment, receiving a notice from a first user associated with a first mobile device indicating that the first user wishes to share information of the first user with one or more second users respectively associated with one or more second mobile devices; accessing information known about one or more users and one or more mobile devices respectively associated with the one or more users; identifying at least one candidate for the first user based on the information known about the one or more users and the one or more mobile devices; and confirming one or more of the at least one candidate as the one or more second users.

Abstract: Systems, methods, and non-transitory computer-readable media can acquire historical data including a plurality of features associated with known legitimate activities and with known illegitimate activities. A machine learning technique can be applied to the historical data to gain information about the plurality of features associated with the known legitimate activities and with the known illegitimate activities. A decision tree can be generated based on at least a portion of the information about the plurality of features. A node in the decision tree that satisfies specified precision criteria can be identified. A rule can be created based on the node. One or more illegitimate activities can be identified based on the rule.

Abstract: A social networking system allows entities to delegate actions performed on behalf of the entity to social networking system users by assigning one or more roles to social networking system users. Roles may be assigned based on information associated with the entity by the social networking system. Different roles are associated with sets of permissions specifying actions a user associated with a role is authorized to perform on behalf of the entity via the social networking system. Certain permissions of a role associated with the user may be associated with additional users by the user. A persona including a subset of information associated with a user by the social networking system may be created for a user assigned a role, allowing the user to limit information accessible to additional users connected to the persona.

Abstract: In one embodiment, a method includes accessing a set of nodes of a social graph of an online social network. The social graph includes a number of nodes and a number of edges connecting the nodes. Each of the edges between two of the nodes representing a single degree of separation between them. The nodes include a first node that corresponds to the first user and a number of nodes that each correspond to a concept or a second user associated with the online social network. The method also includes accessing one or more grammar tokens. Each grammar token includes references to zero or more nodes and one or more edges. Each grammar token corresponds to a particular type of completion token. Each grammar token may be based on a natural-language string. The method also includes receiving from the first user a selection of one or more of the grammar tokens and one or more of the completion tokens.

Abstract: Systems, methods, and non-transitory computer-readable media receive a source video having a source file size. A bit rate at which to encode the source video is determined. The source video is encoded at the determined bit rate to produce an encoded video having a file size less than the source file size. A video quality metric for the encoded video is determined. Whether or not the video quality metric for the encoded video is within an allowable deviation from a target quality metric is determined. The source video is encoded at another determined bit rate when the video quality metric for the encoded video is outside the allowable deviation from the target quality metric. Determining the bit rate and encoding the source video at the determined bit rate can repeat iteratively until the video quality metric for the encoded video is within the allowable deviation from the target quality metric.

Abstract: An online system provides identifies multiple candidate budgets to an advertiser requesting presentation of advertisements via the online system. The advertiser may select a candidate budget used for presenting advertisements via the online system. A default budget may be identified from the candidate budgets to increase the likelihood of the advertiser selecting the default budget. The candidate budgets and the default budget are determined by the online system to maximize the likelihood that an advertiser elects to present advertisements via the online system or to maximize revenue received the online system for presenting advertisements from the advertiser. Various factors are specific to the advertiser, the object being advertised, and other contextual information may be used to determine the candidate budgets.

Abstract: Particular embodiments of a method comprise providing one or more ideograms (e.g., written characters, symbols or images that represent an idea or thing) for insertion into a message. A request may be received from a user for a restricted one of the ideograms. A determination may be made as to whether the user is authorized to access the restricted ideogram. This determination may be based on whether the user is a member of a group of authorized users, whether an attribute of the user meets a restriction requirement, or whether the request comprises an authorization code or token. If the user is authorized to access the restricted ideogram, then the restricted ideogram may be displayed to the user in association with the message. Otherwise, a restricted-content response may be generated.

Abstract: Particular embodiments of a method comprise analyzing a message to perform sentiment analysis with respect to at least a portion of the message. One or more sentiments associated with the at least a portion of the message may then be identified. One or more ideograms (e.g., written characters, symbols or images that represent an idea or thing), each corresponding to an identified sentiment, may then be suggested to a user for insertion into a message. Upon receiving a user selection of one or more of the ideograms in relation to some portion of the message, an association may be saved in a user-specific dictionary linking the user-selected one or more of the ideograms with the portion of the message. In particular embodiments, the sentiment analysis may incorporate social-networking information and/or historical ideogram usage information.

Abstract: Particular embodiments of a method comprise analyzing an image to classify an expression displayed on a face shown in a captured image. Image analysis may include detecting the face in the image, generating a characterization of features of the face, and classifying the expression based on the characterization. The characterization of facial features may be based on benchmark metrics for a particular expression. One or more ideograms (e.g., written characters, symbols or images that represent an idea or thing) may be selected based on the expression. The selection may be based on one or more match scores for the expression. The match scores may be determined based on an ideogram dictionary or an ideogram usage history. The selected ideograms may then be presented, in association with the face, on a screen for the computing device.

Abstract: An advertiser specifies an advertising campaign along with a budget, a duration and one or more objectives associated with the advertising campaign. An online system presenting advertisements from the advertising campaign determines an interval representing a portion of the duration, an interval budget, and one or more interval objectives. Historical information describing selection and presentation of advertisements by the online system is retrieved, and used to determine one or more filters limiting the number of opportunities to present an advertisement in which advertisements from the advertising campaign are included. The scaling filters may be based on the one or more interval objectives, bid amounts determined for advertisements in the advertising campaign, and bid amounts associated with advertisements previously selected for presentation form the historical data.

Abstract: At least one embodiment of this disclosure includes a method of inferring attribute labels for a user in a social networking system based on the user's social connections and user-specified attribute labels in the social networking system. The method can include: establishing variational equations based on attribute labels of nodes in an ego network in a social graph of a social networking system; determining likelihood scores for at least a portion of the attribute labels of neighboring nodes from a focal user node in the ego network based on user-specified attribute labels from the social networking system; and calculating probability distributions of possible attribute labels for the focal user node of the ego network based on the variational equations and the likelihood scores.

Abstract: An advertising system has limited computing resources to spend evaluating advertisements of advertisers to determine a “best” advertisement to serve to users of a social networking system. The computing resources are allocated (e.g., by varying the number of advertisements that are considered for presentation to a user) based on the neediness of the user and/or the advertiser on a per impression basis. The neediness of a user may be determined by grouping users into groups and determining a yield curve of expected revenue per computing resource used. Then, the revenue may be maximized across impression opportunities for multiple users. The neediness of an advertiser may be determined by biasing the selection of one advertiser's advertisements over another advertiser's advertisements based on an expected revenue, an expected number of interactions of the advertisement, or otherwise maximizing a satisfaction coefficient for the advertiser.

Abstract: An online system receives an advertisement request from an advertiser and determines an advertisement objective associated with the advertisement request. Validation rules associated with the advertisement request are retrieved and applied to components of the advertisement request. Application of the validation rules determines whether components of the advertisement request are consistent with the advertisement objective. A result of the application of the validation rules to the advertisement request is presented to the advertiser, providing the advertiser with a measure of the effectiveness of the advertisement request in satisfying the advertisement objective.

Abstract: For ad campaigns that have multiple advertisements, each associated with an ad creative, which are automatically selected, an online system may bias selection of advertisements away from underestimated advertisements and towards early-selected advertisements with positive user interactions. To increase the likelihood of various advertisements in an ad campaign being evaluated for presentation to users, the online system may: associate a relatively high performance score with each advertisement in an ad campaign, randomly select advertisements from an ad campaign, modify bid amounts associated with advertisements in the ad campaign, or allocate a portion of the ad campaign's budget for allocation across advertisements in the ad campaign. After presenting a threshold number of advertisements in an ad campaign or receiving an instruction from an advertiser, advertisements from the ad campaign may be selected using conventional methods.

Abstract: In one embodiment, a method includes receiving an unstructured text query from a first user of an online social network; and accessing, from a data store of the mobile client system, a set of nodes of a social graph of the online social network. The social graph includes a number of nodes and edges connecting the nodes. The nodes include a first node corresponding to the first user and a number of second nodes that each correspond to a concept or a second user associated with the online social network. The method also includes accessing, from the data store of the mobile client system, a set of grammar templates. Each grammar template includes one or more non-terminal tokens and one or more query tokens. The query tokens include references to zero or more second nodes and one or more edges and each grammar template is based on a natural-language string.

Abstract: A social networking system modifies a bid amount associated with advertisements in an advertising campaign based on a target average price paid associated with the advertising campaign. A bid amount is determined from the target average price paid and associated with advertisements from the advertising campaigns in various advertisement selection processes. From advertisement selection processes in which an advertisement from the advertising campaign was selected, an average amount charged to the advertiser is determined. Based on the target average price paid and the average amount charged to the advertiser, the bid amount is modified. In subsequent advertisement selection processes, the modified bid amount is associated with advertisements from the advertising campaign.

Abstract: An audio identification system generates a probe audio fingerprint of an audio signal and determines amount of pitch shifting in the audio signal based on analysis of correlation between the probe audio fingerprint and a reference audio fingerprint. The audio identification system applies a time-to-frequency domain transform to frames of the audio signal and filters the transformed frames. The audio identification system applies a two-dimensional discrete cosine transform (DCT) to the filtered frames and generates the probe audio fingerprint from a selected number of DCT coefficients. The audio identification system calculates a DCT sign-only correlation between the probe audio fingerprint and the reference audio fingerprint, and the DCT sign-only correlation closely approximates the similarity between the audio characteristics of the probe audio fingerprint and those of the reference audio fingerprint.

Abstract: Techniques provided herein implement systems and methods that can improve access to content items, from an online content source, by a client device. According to some embodiments, an intermediate content streaming system is implemented on a client device for caching digital content locally at the client device as the content is streamed to the client device from an online content source (e.g., content server) over a network. Additionally, according to some embodiments, a priority-based content downloading system is implemented on a client device to facilitate priority-based pre-downloading of content items to the client device before a user at the client device is presented with access to the content items, such as through a social networking news feed.

Abstract: A social networking system identifies user-generated content that can be sponsored to social networking system users based on compensation received from advertisers. Such user-generated content includes photographs, videos, audio files, and so on, that contain advertisable or promotional information such as brands, trademark names, logos, identifiers for product makes or models, or product names that an advertiser may wish to promote. The system tags such user-generated content with the identified promotional or advertisable information. The system matches the tagged content to a sponsor request from an advertiser based on the tag of the tagged content item. The system ranks the tagged content item relative to other non-sponsored content for display to social networking system users, the tagged content ranked higher than the other non-sponsored content based on the tagged content matching the sponsor request.

Abstract: Exemplary methods, apparatuses, and systems receive a candidate object with which a user can interact within a network service. For each of a first plurality of objects with which the user has had a positive interaction, a first value representing a commonality between the candidate object and each of the first plurality of objects is determined. For each of a second plurality of objects with which a user has had a negative interaction, a second value representing a commonality between the candidate object and each of the second plurality of objects is determined. An aggregate positive distance is determined using a plurality of the first values. An aggregate negative distance is determined using a plurality of the second values. The candidate object is displayed or not displayed to the user as a recommendation based upon a difference between the aggregate positive distance and the aggregate negative distance.

Abstract: Techniques for in-app user data authorization are described. An apparatus may comprise a processor circuit, a permissions component, and a token component. The permissions component may be operative on the processor circuit to receive a request from an application to perform a task on a device and to return a response to the request to the application based on active permissions for the application. The token component may be operative on the processor circuit to manage a token database and to determine the active permissions for the application based on the token database. Other embodiments are described and claimed.

Abstract: Exemplary methods, apparatuses, and systems receive a first plurality of actions from a first entity with respect to a first plurality of objects. A global object related to each of the first plurality of objects is determined and a representation of the global object is displayed in association with a representation of the first entity. Additionally, in response to receiving user feedback on the representation of the global object displayed in association with the representation of the first entity, an instance of the global object that is unique to the first entity is created. The displayed representation of the global object is converted into a representation of the instance of the global object that is unique to the first entity.