Abstract: Systems and methods are described for onboarding a new device to a blockchain secured network. A trusted device that is already enrolled on the blockchain can receive information from a new device. The new device can send an onboarding request to a server through a non-blockchain secured Application Programming Interface (“API”). The trusted device can send an onboarding request for the new device through a blockchain secured API. The server can receive the requests and match them. The server can authenticate the two devices and send a request to a blockchain consensus to add the new device to the blockchain with the trusted device as a referral. The blockchain consensus can add the new device to the blockchain and notify the server. The server can notify the new device, and the new device can begin communicating through the blockchain secured API or directly with other devices on the blockchain.

Abstract: Various systems facilitate encrypted file storage. A client device may generate an encrypted version of a file. The client device may obtain at least one reference to at least one storage location for the encrypted version of the file. The client device may cause the encrypted version of the file to be store at the at least one storage location using the at least one reference to the at least one storage location.

Abstract: Various examples for remotely controlling access to email resources are provided. In one example, one or more computing devices can be configured to provide, through an access control service, at least one user interface that enables creation of resource rules configured for use by the access control service in enforcement of one or more client devices in association with email resources. In response to input received through the at least one user interface of the access control service, the one or more computing devices can generate a resource rule that directs a client application on a client device to open an attachment of one of the email resources in an authorized secure container application.

Abstract: Disclosed are various embodiments for controlling a distribution of resources on a network. In one example, among others, a system is configured to transmit a request to access a plurality of resources at a distribution service and receive the plurality of resources and a plurality of location rules. The system is also configured to determine an authorized location and an authorized perimeter area based on the plurality of location rules. The authorized location and the authorized perimeter area are determined to have different access rights to the plurality of resources. The system is further configured to determine a location of the computing device and grant access to a resource based on the location of the computing device with respect to the authorization location or the authorized perimeter.

Abstract: Disclosed are various approaches for initiating workflows with respect to physical resource devices on behalf of a user. A physical identifier can be affixed to a physical resource device. An identifier can be embedded within the physical identifier. A workflow application can initiate workflows upon detecting that a user has scanned or captured the identifier.

Abstract: Systems and methods are described for managing saved web pages on a user device. In an example, when a user bookmarks a web page at the user device, the user device can send the bookmark to a server. A service on the server can gather information about web page and associate a plurality of tags with the web page based on that information. The service can compare the web page's tags to tags of other previously bookmarked web pages to identify a possible matching web page. The service can perform a semantic similarity analysis between the two web pages to determine whether their similarity exceeds a threshold. Where the similarity does exceed the threshold, the service can notify the user device. The user device can notify the user and present options for the new bookmarked web page.

Abstract: Various systems facilitate encrypted file storage. A client device may generate an encrypted version of a file. The client device may obtain at least one reference to at least one storage location for the encrypted version of the file. The client device may cause the encrypted version of the file to be store at the at least one storage location using the at least one reference to the at least one storage location.

Abstract: Examples described herein include systems and methods for providing user-specific previews for terms within text. An example method can include receiving tracked user behavior reflecting terms selected by a user and entered into a search. A representation of known words can be created based on the tracked user behavior. By training machine-learning models for each individual user, personalized previews can be presented when each user encounters a new body of text, such as in a webpage or email. The preview can apply to a term not previously known to the user but likely to be searched by the user, relying on content gathered from a search on a search medium that the user was likely to use. The content can be presented to the user in a graphical user interface allowing for interaction and feedback.

Abstract: Systems and methods are described for extracting and populating content from an email link. In an example, a machine learning (“ML”) model can be trained based on user interactions with emails. When an email is received for the user, the ML model can be applied to score the email. An application can extract a link in the email. The application can retrieve a web page with the link and store it locally. The application can create a card for the email that includes the link and insert the card into a graphical user interface (“GUI”). A user can access the GUI and select the card. The web page can be retrieved from the local storage and displayed in the GUI.

Abstract: Systems and methods are described for managing saved web pages on a user device. In an example, when a user bookmarks a web page at the user device, the user device can send the bookmark to a server. A service on the server can gather information about web page and associate a plurality of tags with the web page based on that information. The service can compare the web page's tags to tags of other previously bookmarked web pages to identify a possible matching web page. The service can perform a semantic similarity analysis between the two web pages to determine whether their similarity exceeds a threshold. Where the similarity does exceed the threshold, the service can notify the user device. The user device can notify the user and present options for the new bookmarked web page.

Abstract: Examples described herein include systems and methods for managing a recurring calendar event. An example method for managing a recurring calendar event can include obtaining event information regarding the recurring calendar event. The example method can also include obtaining context information. Context information can include any type of information and can be obtained from a variety of sources, such as an email gateway, backend server, or directory service. The method can include determining a probability that a user will attend the recurring calendar event. If the probability exceeds a threshold, the user can be prompted to modify the recurring calendar event accordingly.

Abstract: Disclosed are various embodiments for enforcing device compliance parameters by inhibiting access to devices, networks or resources. In one embodiment, among others, a computing device identifies a request to access a first resource and determines that a second resource is associated with accessing the first resource based on a resource group identifier. The computing device determines that a compliance rule is associated with the first resource and the second resource based on the resource group identifier. The client device can determine that the compliance rule has been violated. Then, the computing device determines that the compliance rule is associated with an alternative setting and changes the current setting to the alternative setting.

Abstract: Disclosed are various approaches for automating the detection and identification of anomalous devices in a management service. Device check-ins are received by a management service and housed in a data store. The quantity of device check-ins over various time periods can be analyzed using various approaches to identify anomalous devices.

Abstract: Location-based configuration profile toggling may be provided. Configuration profiles associated with user devices may be identified, determinations of whether the user devices are authorized to enable the configuration profiles on the user devices may be made based at least in part on location constraints, and the configuration profiles may be enabled an the user devices if the location constraints are satisfied.

Abstract: Disclosed are various approaches for initiating workflows with respect to physical resource devices on behalf of a user. A physical identifier can be affixed to a physical resource device. An identifier can be embedded within the physical identifier. A workflow application can initiate workflows upon detecting that a user has scanned or captured the identifier.

Abstract: Disclosed are various embodiments for accessing resources when a client device complies with distribution rules. A client device receives distribution rules associated with resources that are accessible at a distribution service. The client device determines whether the client device complies with the distribution rules. The client device transmits an indication of compliance for the distribution to the distribution service. The client device receives the resource from the distribution service.

Abstract: A cryptographic proxy service may be provided. Upon determining that data associated with a network destination comprises at least some sensitive data, a cryptographic service may provide a security certificate associated with the network destination. The plurality of data may be encrypted according to the security certificate associated with the network destination and provided to the cryptographic service for re-encryption and transmission to the network destination.

Abstract: Disclosed are various embodiments for controlling access to resources by a client device. Methods may include receiving a user request to access a resource on the device and determining whether the resource requires a facial capture. If the resource requires a facial capture, a camera of the device may be automatically activated to capture an image and the resource may be rendered on the device. In some cases, access to the resource may be limited based on whether the image includes a face or not. A record associating the image and the requested resource may be stored, for example, on the device or on a remote server.

Abstract: Disclosed are various approaches for initiating workflows with respect to physical resource devices on behalf of a user. A physical identifier can be affixed to a physical resource device. An identifier can be embedded within the physical identifier. A workflow application can initiate workflows upon detecting that a user has scanned or captured the identifier.

Abstract: Managed real-time communications between user devices may be provided. Upon receiving a request to instantiate a communication connection from an application, a secure session may be established between the application and a remote application. Input from a user of the application may be received, subjected to at least one management policy, and transmitted to the remote application.