Abstract: A centralized framework for managing the data encryption of resources is disclosed. A data encryption service is disclosed that provides various services related to the management of the data encryption of resources. The services may include managing application policies, cryptographic policies, and encryption objects related to applications. The encryption objects may include encryption keys and certificates used to secure the resources. In an embodiment, the data encryption service may be included or implemented in a cloud computing environment and may provide a centralized framework for effectively managing the data encryption requirements of various applications hosted or provided by different customer systems. The disclosed data encryption service may provide monitoring and alert services related to encryption objects managed by the data encryption service and transmit the alerts related to the encryption objects via various communication channels.

Abstract: A centralized framework for managing the data encryption of resources is disclosed. A data encryption service is disclosed that provides various services related to the management of the data encryption of resources. The services may include managing application policies, cryptographic policies, and encryption objects related to applications. The encryption objects may include encryption keys and certificates used to secure the resources. In an embodiment, the data encryption service may be included or implemented in a cloud computing environment and may provide a centralized framework for effectively managing the data encryption requirements of various applications hosted or provided by different customer systems. The disclosed data encryption service may provide monitoring and alert services related to encryption objects managed by the data encryption service and transmit the alerts related to the encryption objects via various communication channels.

Abstract: An apparatus is provided which comprises: a multi-bit quad latch with an internally coupled level sensitive scan circuitry; and a combinational logic coupled to an output of the multi-bit quad latch. Another apparatus is provided which comprises: a plurality of sequential logic circuitries; and a clocking circuitry comprising inverters, wherein the clocking circuitry is shared by the plurality of sequential logic circuitries.

Abstract: The present disclosure is directed to a technique for reduction of latency in network traffic data transmissions. The system parses an online document to determine a messaging identifier used to communicate over an asynchronous network-based communication channel with a content provider device. The system assembles a first instance of the online content item with the messaging identifier. An intermediary appliance located on the asynchronous network-based communication channel in between the first computing device and the content provider device intercepts data packets including the electronic message The system determines a quality of the asynchronous network-based communication channel. The system blocks insertion of the messaging identifier in a second instance of the online content item prior to transmission of the second instance of the online content item to a second computing device to reduce latency by preventing additional messages from being sent to the messaging identifier.

Abstract: The present disclosure is directed to allocating communication resources via information technology infrastructure. A system can provide a communication tag and an analytics tag for integration in a web site. The system can receive a request to allocate a phone number generated based on an interaction between the communication tag and the analytics tag. The request can include a first field comprising the communication endpoint identifier, a second field comprising the site identifier for the web site, and a third field comprising a session identifier for the computing device. The system can determine a virtual phone number to assign to a combination of the values of the fields provided in the request, and create a link between the assigned virtual number and the combination. The system can provide the assigned virtual phone number to the computing device that initiated the request.

Abstract: A system is described that identifies, based on contextual information associated with a device that is located at a physical location associated with a merchant, a product that a user of the device is at the physical location to purchase. The system executes an autonomous search query for product information that is predicted to assist the user in completing a purchase of the product, from the merchant, at the physical location. The system sends the product information to the device, and for subsequent output. The system determines whether a degree of likelihood that the user will complete the purchase in response to receiving the product information satisfies a likelihood threshold, if not, the system executes a remote assistance module accessed by the device to provide a virtual environment in which a human provides additional information that the user needs to complete the purchase.

Abstract: An apparatus is provided which comprises a clock inverter having an input coupled to a clock node, the clock inverter having an output, wherein the clock inverter has an N-well which is coupled to a first power supply; and a plurality of sequential logics coupled to the output of the clock inverter and also coupled to the clock node, wherein at least one sequential logics of the plurality of the sequential logics has an N-well which is coupled to a second power supply, wherein the second power supply has a voltage level lower than a voltage level of the first power supply.

Abstract: Some embodiments include apparatus and methods using an input stage and an output stage of a circuit. The input stage operates to receive an input signal and a clock signal and to provide an internal signal at an internal node based at least in part on the input signal. The input signal has levels in a first voltage range. The internal signal has levels in a second voltage range greater than the first voltage range. The output stage operates to receive the internal signal, the clock signal, and an additional signal generated based on the input signal. The output stage provides an output signal based at least in part on the input signal and the additional signal. The output signal has a third voltage range greater than the first voltage range.

Abstract: Techniques for conducting transactions with one-time passwords are described herein. These techniques may include receiving a request to conduct a transaction, as well as a one-time password and an identifier linked with a payment instrument. The identifier may or may not identify the linked payment instrument. In both instances, a transaction processing service may compare the received one-time password with a one-time password stored at or accessible by the transaction processing service. If the passwords match, the service may approve the transaction. Otherwise, the service may decline the transaction or implement one or more additional authorization procedures.

Abstract: A centralized framework for managing the data encryption of resources is disclosed. A data encryption service is disclosed that provides various services related to the management of the data encryption of resources. The services may include managing application policies, cryptographic policies, and encryption objects related to applications. The encryption objects may include encryption keys and certificates used to secure the resources. In an embodiment, the data encryption service may be included or implemented in a cloud computing environment and may provide a centralized framework for effectively managing the data encryption requirements of various applications hosted or provided by different customer systems. The disclosed data encryption service may provide monitoring and alert services related to encryption objects managed by the data encryption service and transmit the alerts related to the encryption objects via various communication channels.

Abstract: A proposed modification to a record of a base data structure is identified, the records of the base data structure sorted by primary key. A type of modification of the proposed modification is identified. A record is added to a differential data structure of the type, the differential data structure record describing the proposed modification. A record is added to a delta data structure sorted by the primary key, the delta data structure record including the primary key value of the record, the type of the proposed modification, and a pointer to the record added to the differential data structure. Data can be fetched using the delta data structure to apply modifications to a set of records requested in the fetch and generate a modified set of records to be returned in a response to the request.

Abstract: In accordance with an embodiment, described herein is a system and method for providing security services using a security configuration template in a multi-tenant environment. The system can load a security configuration template in memory when the multi-tenant environment starts, and can use the security configuration template to create a multi-headed tree to represent tenant-specific security configurations. Each head of the multi-headed tree can represent a root node of either the security configuration template or a tenant-specific security configuration. Each tenant-specific security configuration can reuse one or more nodes in the security configuration template by referencing those nodes, and can include one or more new nodes created from the security configuration template by replacing each placeholder therein with tenant-specific values.

Abstract: An apparatus is provided which comprises: a multiplexer which is gated by a clock; and a flip-flop coupled to the multiplexer, wherein the flip-flop has a chain of at least four inverters one of which has an input to receive the clock.

Abstract: A system is described that identifies, based on contextual information associated with a device that is located at a physical location associated with a merchant, a product that a user of the device is at the physical location to purchase. The system executes an autonomous search query for product information that is predicted to assist the user in completing a purchase of the product, from the merchant, at the physical location. The system sends the product information to the device, and for subsequent output. The system determines whether a degree of likelihood that the user will complete the purchase in response to receiving the product information satisfies a likelihood threshold, if not, the system executes a remote assistance module accessed by the device to provide a virtual environment in which a human provides additional information that the user needs to complete the purchase.

Abstract: The present disclosure is directed to allocating communication resources via information technology infrastructure. A system can provide a communication tag and an analytics tag for integration in a web site. The system can receive a request to allocate a phone number generated based on an interaction between the communication tag and the analytics tag. The request can include a first field comprising the communication endpoint identifier, a second field comprising the site identifier for the web site, and a third field comprising a session identifier for the computing device. The system can determine a virtual phone number to assign to a combination of the values of the fields provided in the request, and create a link between the assigned virtual number and the combination. The system can provide the assigned virtual phone number to the computing device that initiated the request.

Abstract: An apparatus is provided which comprises: a multi-bit quad latch with an internally coupled level sensitive scan circuitry; and a combinational logic coupled to an output of the multi-bit quad latch. Another apparatus is provided which comprises: a plurality of sequential logic circuitries; and a clocking circuitry comprising inverters, wherein the clocking circuitry is shared by the plurality of sequential logic circuitries.

Abstract: An example method facilitates enabling Key Encryption Key (KEK) rotation for a running multi-tenant system without requiring system downtime or interruption. The example method facilitates decrypting a set of one or more DEKs using a preexisting KEK; using a new KEK to re-encode the DEKs using the new KEK, all while simultaneously enabling servicing of tenant requests. This is enabled in part, by strategic caching of tenant DEKs in a secure local memory, wherein the cached tenant DEKs are maintained in the clear and are readily accessible to running processes that are using the DEKs to decrypt and access tenant data, irrespective of the state of a background process used to implement the KEK rotation to the new KEK.

Abstract: The present disclosure is directed to syncing data related to voice calls via dynamically assigned virtual phone numbers. A system receives a voice call entry from a content provider. The system access a lot data structure to parse the log data structure. The system matches a device identifier of the voice call entry with a device identifier of the log entry. The system determines that a predetermined threshold is satisfied by a time or duration of the log entry. The system retrieves a virtual phone number from the log entry. The system performs a lookup to determine a content item impression identifier. The system stores data provided via the voice call entry.

Abstract: The present invention discloses methods and systems face recognition. Face recognition involves receiving an image/frame, detecting one or more faces in the image, detecting feature points for each of the detected faces in the image, aligning and normalizing the detected feature points, extracting feature descriptors based on the detected feature points and matching the extracted feature descriptors with a set of pre-stored images for face recognition.

Abstract: Techniques are provided to manage security artifacts. Specifically, a security management system is disclosed for implementing security artifact archives to manage security artifacts. A security artifact archive may include information for managing one or more security artifacts that can be referenced or included in the security artifact archive. The security management system can create, edit, read, send, and perform other management operations for security artifact archives. Objects can be bundled in an object-specific security artifact archive. Security artifact archives may be named, versioned, tagged and/or labeled for identification. Security artifact archives may be transmitted to a destination (e.g., a service provider or a client system) that provides access to an object whose access is dependent on security artifacts. The destination may can manage access to the object using a security artifact archive that includes relevant and current security artifacts for the object.