Abstract: Described herein is a system and method of processing data of a digital twins object model. Data associated with a node of the digital twins object model is parsed to identify metadata associated with the node. The data can comprise telemetry data received from an IoT device associated with the node. User-defined function(s) are determined that match the identified metadata. The data and metadata can be provided to the user-defined function(s). The determined user-defined function(s) are executed. Also described herein is a method of creating a user-defined function for processing data of a digital twins object model. Information regarding business logic is received from a user defining a user-defined function. Information regarding telemetry condition(s) to which the user-defined function applies is received defining a matcher. The user-defined function and matcher are stored as objects within a spatial intelligence graph associated with the digital twins object model.

Abstract: A program model that includes requirements and control objects associated with requirements, workflows, proof assets. Workflow tasks associated with the workflows may generate requests to collect each proof asset associated with the control objects. Workflow tasks may validate each collected proof asset based on the plurality of control objects associated with each collected proof asset. Workflow tasks may determine completed control objects based on the validated proof assets. Workflow tasks may employ an amount of the completed control objects that is equivalent to the amount of the control objects associated with the program model to provide a report indicating that the requirements associated with the program model may be satisfied. Workflow tasks may employ detection of modifications to the validated proof assets to determine a portion of the workflow tasks based on the modified proof assets such that the portion of the workflow tasks may be re-executed.

Abstract: Isolating resources between sub-entities. A method includes receiving data from a particular connected device. A memory storing a hierarchical graph that defines a topology for an entity is accessed. Branches or leaves in the graph include a node that represents a connected device, such as a sensor, controller, or computing system. Each connected device is configured to provide data or receive control signals. Each of the branches or leaves can be indicated as belonging to a particular sub-entity. A particular branch from the hierarchical graph having the particular connected device is identified using the graph. A sub-entity to which the particular branch belongs is identified. The method identifies that the particular sub-entity should be isolated from other sub entities. The data from the particular connected device is provided to a set of resources specifically allocated for the particular sub-entity.

Abstract: A program model that includes requirements and control objects associated with requirements, workflows, proof assets. Workflow tasks associated with the workflows may generate requests to collect each proof asset associated with the control objects. Workflow tasks may validate each collected proof asset based on the plurality of control objects associated with each collected proof asset. Workflow tasks may determine completed control objects based on the validated proof assets. Workflow tasks may employ an amount of the completed control objects that is equivalent to the amount of the control objects associated with the program model to provide a report indicating that the requirements associated with the program model may be satisfied. Workflow tasks may employ detection of modifications to the validated proof assets to determine a portion of the workflow tasks based on the modified proof assets such that the portion of the workflow tasks may be re-executed.

Abstract: Described herein is a system and method of processing data of a digital twins object model. Data associated with a node of the digital twins object model is parsed to identify metadata associated with the node. The data can comprise telemetry data received from an IoT device associated with the node. User-defined function(s) are determined that match the identified metadata. The data and metadata can be provided to the user-defined function(s). The determined user-defined function(s) are executed. Also described herein is a method of creating a user-defined function for processing data of a digital twins object model. Information regarding business logic is received from a user defining a user-defined function. Information regarding telemetry condition(s) to which the user-defined function applies is received defining a matcher. The user-defined function and matcher are stored as objects within a spatial intelligence graph associated with the digital twins object model.

Abstract: A computing system includes a physical space monitoring interface configured to receive status parameters from a plurality of physical space monitors, each of the physical space monitors configured to report a status parameter for one more locations, devices, or people associated with a physical space. An efficiency analysis machine analyzes the status parameters to determine at least one usage efficiency metric for the physical space and at least one physical space efficiency insight. An analytics interface graphically displays the usage efficiency metric and the physical space efficiency insight, the physical space efficiency insight including a recommendation to change a physical space usage policy affecting one or more locations, devices, or people associated with the physical space to improve the usage efficiency metric.

Abstract: Isolating resources between sub-entities. A method includes receiving data from a particular connected device. A memory storing a hierarchical graph that defines a topology for an entity is accessed. Branches or leaves in the graph include a node that represents a connected device, such as a sensor, controller, or computing system. Each connected device is configured to provide data or receive control signals. Each of the branches or leaves can be indicated as belonging to a particular sub-entity. A particular branch from the hierarchical graph having the particular connected device is identified using the graph. A sub-entity to which the particular branch belongs is identified. The method identifies that the particular sub-entity should be isolated from other sub entities. The data from the particular connected device is provided to a set of resources specifically allocated for the particular sub-entity.

Abstract: Enforcing role assignment permissions. A method includes receiving an access request from a given role entity for access to a resource. A hierarchical graph that defines a topology for an entity is accessed to determine a given node associated with the given role entity. One or more ancestor permissions, applying to nodes hierarchically higher in the graph than the given node, and one or more local permission, applying to nodes hierarchically lower in the graph than the given node, are accessed. The method includes determining that the role entity has permission from at least one of the ancestor permissions or the local permissions to perform the access in the access request on the resource. As a result, the role entity is allowed to perform the access in the access request, on the resource.

Abstract: Providing access to sensor data from devices within a physical space includes identifying areas and sub-areas of the physical space. Based on the areas and sub-areas, a hierarchical graph is generated describing a topology of the physical space. A node for each area and sub-area, each device located within the physical space, and each user associated with an area, sub-area, or device is generated. A device associated with a particular area or sub-area is identified. The device includes a sensor generating data. A device node associated with the device is generated within the hierarchical graph. The device node is a sub-node of a node corresponding to the particular area or sub-area. A database that stores sensor data for each device located within the physical space is generated. Sensor data is provided for the device. The hierarchical graph is used to identify the device within the particular area or sub-area, and to identify sensor data corresponding to the device.

Abstract: Policies are applied to specific data rather than to an entire computing device that contains the specific data. Access to the specific data is controlled by the policies utilizing various password or other authentication credential requirements, selective data caching, data transmission, temporary data storage, and/or pre-defined conditions under which the specific data is to be erased or rendered inaccessible. Policies may be defined by an administrator and pushed to a mobile computing device, whereat the policies are enforced.

Abstract: Policies are applied to specific data rather than to an entire computing device that contains the specific data. Access to the specific data is controlled by the policies utilizing various password or other authentication credential requirements, selective data caching, data transmission, temporary data storage, and/or pre-defined conditions under which the specific data is to be erased or rendered inaccessible. Policies may be defined by an administrator and pushed to a mobile computing device, whereat the policies are enforced.

Abstract: The present invention relates to a system and methodology providing an automated and dynamically responsive infrastructure to support online subscription services. The system includes one or more components to coordinate and manage a plurality of services offered by multiple service providers. This can include automatically creating and managing billing accounts for customers subscribing to such services. At least one engine is provided to process multiple rules in response to subscription events that occur in connection with the services in order to facilitate service delivery. At least one rating processor is provided to process multiple rating rules in response to subscription events for currency and non-currency resources.

Abstract: The present invention relates to a system and methodology providing an automated and dynamically responsive infrastructure to support online subscription services. The system includes one or more components to coordinate and manage a plurality of services offered by multiple service providers. This can include automatically creating and managing billing accounts for customers subscribing to such services. At least one engine is provided to process multiple rules in response to subscription events that occur in connection with the services in order to facilitate service delivery. At least one rating processor is provided to process multiple rating rules in response to subscription events for currency and non-currency resources.

Abstract: The subject innovation relates to a system and/or methodology that provides an automated and dynamically responsive infrastructure to support online subscription services. The system coordinates and manages services offered by service providers. This can include automatically creating and managing billing accounts for customers. At least one engine is provided to process multiple rules in response to subscription events that occur in connection with the services to facilitate service delivery. At least one rating processor is provided to process multiple rating rules in response to subscription events.

Abstract: A system for selectively recording a data structure where one or more external program modules are registered. A group of important actions is selected corresponding to both internal program modules and registered external program modules. The system determines if an action associated with one of the internal program modules or one of the registered external program modules has occurred. If so, the system determines if the action is one of the important actions. If the action is an important action, then information associated with the important action is placed into data fields of a data structure. The data structure containing the information is stored in computer memory. The data structure is maintained within a central container or folder in memory, along with previously recorded data structures. The data structure can be automatically deleted after a predetermined threshold of time.