Abstract: The system and method described herein provide an order fulfillment database system. The order fulfillment database system may provide a high throughput speed, high availability, redundancy, and scalability. The order fulfillment database system supports very fast transaction times for atomicity, consistency, isolation, and durability (ACID) transactions. Order services instances at a primary cluster provide in-memory databases that service segments of the persistent database and are associated with different order fulfillment entities. A routing manager routes database messages to the appropriate order services instance. A secondary cluster of order services instances provides redundancy. A retry procedure preserves the integrity of the database transactions based on a current operational state of the primary order services instances.

Abstract: The disclosed embodiments provide a system for processing data. During operation, the system obtains a feature configuration for a feature. Next, the system obtains, from the feature configuration, an anchor containing metadata for accessing the feature in an environment. The system then uses one or more attributes of the anchor to retrieve one or more feature values of the feature from the environment. Finally, the system provides the one or more feature values for use with one or more machine-learning models.

Abstract: Disclosed are various approaches for facilitating single sign-on (SSO) for third-party services that are accessible through messages (e.g., email) received by a user. A user can receive a message that includes an embedded URL or link that opens in a third-party service that requires authentication. Instead of requiring the user to enter authentication credentials for accessing the third-party service, a tunnel service can be used to intercept requests for authentication and redirect the requests to an identity manager that can issue a SSO token following an authentication of the user and device. Upon supplying the third-party service with the SSO token, the user can access the content associated with the third-party service without entering authentication credentials.

Abstract: Disclosed are various examples for securing enterprise resources using a virtual private network. At least one computing device that can authenticate a client device for a virtual private network (VPN) connection based on a first device identifier received from the client device and a second device identifier received from a remote management service. The at least one computing device can determine that a network event associated with the client device has been observed and execute a machine learning routine to identify a pattern of access for the client device. A network access anomaly is determined in response to a network interaction of the client device deviating from the pattern of access for the client device. A remedial action is performed based on an anomaly type associated with the network access anomaly.

Abstract: Disclosed are various examples for securing enterprise resources using a virtual private network. A client device can send a first unique device identifier for the client device to a remote management service upon enrollment. When a virtual private network application is first executed, the client device can send a second unique device identifier to the remote management service, where the remote management service is configured to store the second unique device identifier in association with the first unique universal identifier. During subsequent executions of the virtual private network application, the virtual private network service can authenticate the client device by comparing the first unique device identifier and the second unique device identifier to a device identifier received from the remote management service. A machine learning routine can be employed to identify anomalies as the virtual private network application is executed.

Abstract: Disclosed are various approaches for facilitating single sign-on (SSO) for third-party services that are accessible through messages (e.g., email) received by a user. A user can receive a message that includes an embedded URL or link that opens in a third-party service that requires authentication. Instead of requiring the user to enter authentication credentials for accessing the third-party service, a tunnel service can be used to intercept requests for authentication and redirect the requests to an identity manager that can issue a SSO token following an authentication of the user and device. Upon supplying the third-party service with the SSO token, the user can access the content associated with the third-party service without entering authentication credentials.

Abstract: Disclosed are various examples for securing enterprise resources using a virtual private network. A client device can send a first unique device identifier for the client device to a remote management service upon enrollment. When a virtual private network application is first executed, the client device can send a second unique device identifier to the remote management service, where the remote management service is configured to store the second unique device identifier in association with the first unique universal identifier. During subsequent executions of the virtual private network application, the virtual private network service can authenticate the client device by comparing the first unique device identifier and the second unique device identifier to a device identifier received from the remote management service. A machine learning routine can be employed to identify anomalies as the virtual private network application is executed.

Abstract: An apparatus and method are provided for compressing a three-dimensional (3D) object image represented by point cloud data. The method includes positioning the 3D object image into a plurality of equi-sized cubes for compression; determining 3D local coordinates in each of the plurality of equi-sized cubes and a cube index for each point of the 3D object image positioned in the plurality of equi-sized cubes; generating two-dimensional (2D) image data based on the 3D local coordinates and the cube indexes; and storing the 2D image data in a memory. The 2D image data includes at least one of 2D geometry data, 2D meta data, or 2D color data.

Abstract: A portal application can receive a listing of available applications in response to a request sent to a management server. The listing can include a plurality of attributes for each available application, such as the requirements for using the features of each application or a dependency upon another application. Based on the plurality of attributes received, the portal application can determine that a first application requires installation of a second application in order for the first application to provide additional functionality. The portal application can display icons corresponding to the available applications and display one or more UI elements, indicating that the first application requires installation of the second application. The portal application can also push the second application to the device and assist in installing and initializing the second application on the device.

Abstract: An apparatus and method are provided for compressing a three-dimensional (3D) object image represented by point cloud data. The method includes positioning the 3D object image into a plurality of equi-sized cubes for compression; determining 3D local coordinates in each of the plurality of equi-sized cubes and a cube index for each point of the 3D object image positioned in the plurality of equi-sized cubes; generating two-dimensional (2D) image data based on the 3D local coordinates and the cube indexes; and storing the 2D image data in a memory. The 2D image data includes at least one of 2D geometry data, 2D meta data, or 2D color data.

Abstract: The disclosed embodiments provide a system for processing data. During operation, the system obtains a feature configuration for a feature. Next, the system obtains, from the feature configuration, an anchor containing metadata for accessing the feature in an environment. The system then uses one or more attributes of the anchor to retrieve one or more feature values of the feature from the environment. Finally, the system provides the one or more feature values for use with one or more machine-learning models.

Abstract: The system and method described herein provide an order fulfillment database system. The order fulfillment database system may provide a high throughput speed, high availability, redundancy, and scalability. The order fulfillment database system supports very fast transaction times for atomicity, consistency, isolation, and durability (ACID) transactions. Order services instances at a primary cluster provide in-memory databases that service segments of the persistent database and are associated with different order fulfillment entities. A routing manager routes database messages to the appropriate order services instance. A secondary cluster of order services instances provides redundancy. A retry procedure preserves the integrity of the database transactions based on a current operational state of the primary order services instances.

Abstract: A portal application can receive a listing of available applications in response to a request sent to a management server. The listing can include a plurality of attributes for each available application, such as the requirements for using the features of each application or a dependency upon another application. Based on the plurality of attributes received, the portal application can determine that a first application requires installation of a second application in order for the first application to provide additional functionality. The portal application can display icons corresponding to the available applications and display one or more UI elements, indicating that the first application requires installation of the second application. The portal application can also push the second application to the device and assist in installing and initializing the second application on the device.

Abstract: The disclosed embodiments provide a system for processing data. During operation, the system obtains a set of derived data sets for use by a set of clients. For each derived data set in the set of derived data sets, the system produces a default version of the derived data set from multiple versions of the derived data set. The system then outputs the default version and the multiple versions for retrieval by the set of clients through an online data store, an offline data store, and a nearline data store.