Abstract: A system for identifying data of interest from among a multiplicity of data elements residing on multiple platforms in an enterprise, the system including background data characterization functionality characterizing the data of interest at least by at least one content characteristic thereof and at least one access metric thereof, the at least one access metric being selected from data access permissions and actual data access history and near real time data matching functionality selecting the data of interest by considering only data elements which have the at least one content characteristic thereof and the at least one access metric thereof from among the multiplicity of data elements.

Abstract: Once a proximity beacon is installed within a venue, mobile devices receive signals transmitted by the proximity beacon. These mobile devices then report their own locations to an application server. These mobile devices also report a signal strength to the application server, the signal strength associated with the signal from the proximity beacon. The application server determines the location of the proximity beacon by triangulating based on the locations of the mobile devices and on the signal strengths from the mobile devices. The location of the proximity beacon is then transmitted to a front-end device that then displays the location of the proximity beacon on a map along with other locations of other proximity beacons. The map may also display range areas and battery levels of the proximity beacon, and any other data that can be gathered by the application server from the mobile devices or the proximity beacon.

Abstract: A system including a processor and a non-transitory, tangible computer-readable medium in which computer program instructions are stored, which instructions, when read by a computer, cause the computer to process access permission type-specific access permission requests from enterprise users in an enterprise, the system including access permission type-specific access permission request receiving functionality operable for receiving at least one request for at least one access permission type-specific access permission of at least one user to at least one data element in the enterprise, and access permission type-specific access permission request output providing functionality operable for employing information pertaining to ones of the enterprise users having similarities to the at least one user with respect to at least the access permission type-specific access permission to the data elements in order to provide an output indication of perceived appropriateness of grant of the request.

Abstract: An enterprise data collection system including at least one database for receiving over a network and storing data collected from data resources at a plurality of physical sites located at disparate locations, a plurality of remotely synchronizable probes (RSPs) located at the plurality of physical sites, the remotely synchronizable probes (RSPs) performing at least one of the following data collection functions: real time event collection, file system crawling for data structure and permissions, data content analysis, data indexing, data tagging and event triggered alerts, and at least one RSP manager located remotely from at least one of the plurality of remotely synchronizable probes and being operative to govern the operation of and orchestrate data collection and transmission by the plurality of remotely synchronizable probes (RSPs).

Abstract: A system for automatically replacing a user security group-based computer security policy by a computer security policy based at least partially on actual access, including a learned access permissions subsystem operative to learn current access permissions of users to network objects in an enterprise computer environment and to provide an indication of which users are members of which user security groups having access permissions to which network objects, a learned actual access subsystem operative to learn actual access history of users in the enterprise to the network objects and to provide indications of which users have had actual access to which network objects, and a computer security policy administration subsystem, receiving indications from the learned access permission subsystem and the learned actual access subsystem and being operative to automatically replace pre-selected user-security group-based access permissions with at least partially actual access-based access permissions without disrupti

Abstract: A web service platform to improve end-user engagement in a captive audience environment. Mobile and web-based clients allow application users to authorize and approve usage of entitlements of other users, including their children, based upon preconfigured rules and the proximity between the user requesting and the user approving authorization to use the entitlement.

Abstract: Multi-layer devices comprising a layer of an electrochromic lithium nickel oxide composition on a first substrate, the lithium nickel oxide composition comprising lithium, nickel and a Group 5 metal selected from niobium, tantalum and a combination thereof.

Abstract: A live dynamic map that provides for increased convenience for a user at a venue is disclosed. The live dynamic map may be branded for a venue, shows points of interest and paths between locations, includes a messaging capability, and allows users to be social with one another as well as venue management. Live branded mapping may allow for similar engagement on a region-by-region, neighborhood-by-neighborhood, or even brand-by-brand basis. By engaging on a hyper-local level, the present mapping platform can better target user and payload delivering and improve upon business to consumer brand engagement.

Abstract: A multi-layer device comprising a first substrate and a first electrically conductive layer on a surface thereof, the first electrically conductive layer having a sheet resistance to the flow of electrical current through the first electrically conductive layer that varies as a function of position.

Abstract: A method for requesting access rights for an object of a computerized system, comprising invoking in a remote computer linkable to the computerized system an add-on program configured for notifying an owner of the object of the computerized system according to received contact data of the owner of the object, thereby requesting from the owner of the object access rights to the object independently of the computerized system, and an apparatus for performing the same.

Abstract: Multi-layer devices comprising a layer of an electrochromic lithium nickel oxide composition on a first substrate, the lithium nickel oxide composition comprising lithium, nickel and a Group 5 metal selected from niobium, tantalum and a combination thereof.

Abstract: A live dynamic map that provides for increased convenience for a user at a venue is disclosed. The live dynamic map may be branded for a venue, shows points of interest and paths between locations, includes a messaging capability, and allows users to be social with one another as well as venue management. Live branded mapping may allow for similar engagement on a region-by-region, neighborhood-by-neighborhood, or even brand-by-brand basis. By engaging on a hyper-local level, the present mapping platform can better target user and payload delivering and improve upon business to consumer brand engagement.

Abstract: A method for requesting access rights for an object of a computerized system comprising installing in the computerized system a code that associates an object with an owner of the object, thereby enabling to automatically request access rights for the object from an owner of the object, and an apparatus for performing the same.

Abstract: A web service platform to improve end-user engagement in a captive audience environment. Mobile and web-based clients allow application users to authorize and approve usage of entitlements of other users, including their children, based upon preconfigured rules and the proximity between the user requesting and the user approving authorization to use the entitlement.

Abstract: A system collects and manages sets of asset data that are indicative of operational performance of physical assets disposed at multiple physical locations in a plant. The system includes a database that associates each set of asset data to (1) a location at which the data was collected, (2) the asset for which the data was collected, and (3) the monitoring device that was used to collect the data. In this way, each location has its own history of all asset data ever collected on all assets disposed at that location, and its own history of all monitoring devices used to collect data at that location. Also, each asset has its own history of all asset data collected on that asset at all locations at which it was disposed and for all monitoring devices. This sort of asset data is referred to herein as multi-referenced data.

Abstract: A method for a secure search in a computerized system having a storage, comprising searching for objects in the storage of the computerized system according to search criteria provided by a user wherein the criteria comprise at least one attribute of the objects, identifying objects that meet the criteria and displaying representations respective of identified objects that are accessible to the user, and an apparatus for performing the same.

Abstract: A system for operating an enterprise computer network including multiple network objects, said system comprising monitoring and collection functionality for obtaining continuously updated information regarding at least one of access permissions and actual usage of said network objects, and entitlement review by owner functionality operative to present to at least one owner of at least one network object a visually sensible indication of authorization status including a specific indication of users which were not yet authorized by said at least one owner of said at least one network object.

Abstract: An enterprise email governance system including an enterprise-wide email communication item events monitoring subsystem providing at least near real time indications of email communication item events and an enterprise-wide email communication item events storage subsystem receiving inputs from the monitoring subsystem and providing at least near real time user accessibility to the email communication item events.

Abstract: A computerized method and apparatus for distinguishing between false positive read events and true positive events of reading a file, comprising determining an amount of date read from the file, in case the amount of data exceeds a threshold generating a true positive read event, otherwise generating a false positive read event in case a decision condition is met, and an apparatus to carry out the same.

Abstract: A wearable device associated with a guest in a venue stores a unique identification code. The unique identification code may correspond to guest information stored at one or more guest information servers. The guest information may include ticket information, room entitlements, vouchers, payment information, credit card information, or folio information. The wearable device transmits unique identification code to a venue scanner associated with a venue device. The venue device may obtain access to at least some of the guest information based on receipt of the unique identification code. The wearable device also includes a light source that may indicate a status of the guest or of the wearable device based on the colors and/or the blinking patterns emitted by the light source. The light source may, for example, indicate a guest's access permissions to portions of the venue.