Abstract: This document describes techniques for rotating keys used to tokenize data stored in a streaming data store where data is stored for a maximum time [W]. In some embodiments, a data layer of such a data store can encrypt arriving original data values twice. The original data value is first encrypted with a first key, producing a first token. The original data value is encrypted with a second key, producing a second token. Each encrypted token can be stored separately in the data store. A field may be associated with two database columns, one holding the value encrypted with the first key and the second holding the value encrypted with the second key. Keys are rotated after time [K], which is at least equal to and preferably longer than [W]. Rotation can involve discarding the older key and generating a new key so that two keys are still used.

Abstract: Among other things, this document describes systems, methods and devices for providing a cloud proxy auto-config (PAC) function for clients connected to a private network, such as an enterprise network. The teachings hereof are of particular use with cloud hosted proxy services provided by server deployments outside of the private network (e.g., external to the enterprise or other organizational network). This document also describes systems, methods and devices for providing a proxy auto-config (PAC) function for clients connected to a third party network, such as when the client moves outside of the enterprise network.

Abstract: Among other things, this document describes systems, methods and devices for providing a cloud proxy auto-config (PAC) function for clients connected to a private network, such as an enterprise network. The teachings hereof are of particular use with cloud hosted proxy services provided by server deployments outside of the private network (e.g., external to the enterprise or other organizational network). This document also describes systems, methods and devices for providing a proxy auto-config (PAC) function for clients connected to a third party network, such as when the client moves outside of the enterprise network.

Abstract: A latching system includes a first lever connected to a first cable having a first cable end, a second lever connected to a second cable having a second cable end, a latch connected to a third cable having a third cable end, and a cable splitter assembly. The cable splitter assembly has a housing with a first end and a second end and a body with an interior surface defining an interior chamber. A carriage is configured to translate within the interior chamber. The carriage includes a carriage body with a plurality of cavities arranged to seat the respective first, second, and third cable ends and a plurality of resilient arms integrally formed as one piece with the carriage body.

Abstract: Among other things, this document describes systems, methods and devices for discovering and identifying client devices that attempt to access out-of-policy network services via a secure web gateway (or other network security gateway) that lacks visibility into the client network actual IP space. This is a common problem with cloud hosted SWG services that enforce access policy from outside of a customer network (e.g., external to an enterprise network), due to network address translation at the interface between the customer network and the public Internet where the cloud-hosted SWG resides. The teachings hereof address this problem. In one embodiment, a cloud hosted SWG can redirect a client to a bouncer device inside the customer network; that bouncer device can capture the actual client IP address.

Abstract: The present techniques may provide improved processing and functionality of performance of the 128-bit AES Algorithm, which may provide improved power consumption. For example, in an embodiment, an encryption and decryption apparatus may comprise memory storing a current state matrix of an encryption or decryption process and a plurality of multiplexers configured to receive from the memory current elements of the state matrix stored in the memory, perform a cyclic shift on the received elements of the state matrix, and transmit the shifted elements to the memory for storage as a new state matrix.

Abstract: A staple insertion device includes a staple drive chamber, staple reservoir, staple feed mechanism, and staple drive member. The staple drive chamber is formed between a backing plate and a jam plate removably attached to the backing plate. The staple reservoir is configured to receive and hold a plurality of staples and extends from the backing plate to a staple reservoir terminal plate. The staple feed mechanism is operatively connected to the staple reservoir and is configured to feed the plurality of staples from the staple reservoir into the staple drive chamber through the backing plate. The staple drive member is configured to advance downwardly through the staple drive chamber so as to drive a staple out of the staple drive chamber.

Abstract: Among other things, this document describes systems, methods and devices for providing a cloud proxy auto-config (PAC) function for clients connected to a private network, such as an enterprise network. The teachings hereof are of particular use with cloud hosted proxy services provided by server deployments outside of the private network (e.g., external to the enterprise or other organizational network). This document also describes systems, methods and devices for providing a proxy auto-config (PAC) function for clients connected to a third party network, such as when the client moves outside of the enterprise network.

Abstract: Among other things, this document describes systems, methods and devices for providing a cloud proxy auto-config (PAC) function for clients connected to a private network, such as an enterprise network. The teachings hereof are of particular use with cloud hosted proxy services provided by server deployments outside of the private network (e.g., external to the enterprise or other organizational network). This document also describes systems, methods and devices for providing a proxy auto-config (PAC) function for clients connected to a third party network, such as when the client moves outside of the enterprise network.

Abstract: A latching system includes a first lever connected to a first cable having a first cable end, a second lever connected to a second cable having a second cable end, a latch connected to a third cable having a third cable end, and a cable splitter assembly. The cable splitter assembly has a housing with a first end and a second end and a body with an interior surface defining an interior chamber. A carriage is configured to translate within the interior chamber. The carriage includes a carriage body with a plurality of cavities arranged to seat the respective first, second, and third cable ends and a plurality of resilient arms integrally formed as one piece with the carriage body.

Abstract: This document describes among other things, network security systems that incorporate a feedback loop so as to automatically and dynamically adjust the scope of network traffic that is subject to inspection. Risky traffic can be sent for inspection; risky traffic that is demonstrated to have high rate of threats can be outright blocked without further inspection; traffic that is causing errors due to protocol incompatibility or should not be inspected for regulatory or other reasons can be flagged so it bypasses the security inspection system. The system can operate on a domain by domain basis, IP address basis, or otherwise.

Abstract: This document describes among other things, network security systems that incorporate a feedback loop so as to automatically and dynamically adjust the scope of network traffic that is subject to inspection. Risky traffic can be sent for inspection; risky traffic that is demonstrated to have high rate of threats can be outright blocked without further inspection; traffic that is causing errors due to protocol incompatibility or should not be inspected for regulatory or other reasons can be flagged so it bypasses the security inspection system. The system can operate on a domain by domain basis, IP address basis, or otherwise.

Abstract: A cable includes a core with a plurality of first wires made of carbon steel and a plurality of strands surrounding the core. Each strand includes a plurality of second wires made of stainless steel. The cable has a maximum cross-sectional dimension less than 2 millimeters.

Abstract: Among other things, this document describes systems, methods and devices for discovering and identifying client devices that attempt to access out-of-policy network services via a secure web gateway (or other network security gateway) that lacks visibility into the client network actual IP space. This is a common problem with cloud hosted SWG services that enforce access policy from outside of a customer network (e.g., external to an enterprise network), due to network address translation at the interface between the customer network and the public Internet where the cloud-hosted SWG resides. The teachings hereof address this problem. In one embodiment, a cloud hosted SWG can redirect a client to a bouncer device inside the customer network; that bouncer device can capture the actual client IP address.

Abstract: A cable tension adjuster for adjusting tension between two cable sections includes a junction box. A slider is disposable within the junction box and includes a first slider wall, a cable coupling port opposite the first slider wall configured for coupling a first inner cable of a first cable section, and a second slider wall adjacent the cable coupling port. The first and second slider walls together partially define an internal cavity therebetween. A spool is disposable within the internal cavity and is couplable to a second inner cable of a second cable section. The spool includes a plurality of spool teeth. A biasing member is disposable within the internal cavity between the first slider wall and the spool. A locking clip is disposable within an aperture formed in the slider and includes a plurality of clip teeth configured for engagement with the plurality of spool teeth.

Abstract: Described is a technology by which a seamless automatic connection to an (e.g., corporate) network is made for a client device. Upon detecting a need for a connection to a network, such as by intercepting a communication directed towards a network destination, a list of available connection methods is automatically obtained based on the device's current location data (e.g., LAN or remote) and policy information. An available connection method from the list is selected, e.g., in order, and an attempt is made to establish a connection via that connection method. If the attempt fails, another attempt is made with a different connection method, and so on, until a connection method succeeds. Additional seamlessness from the user's perspective is provided via a credentials vault, by which stored credentials may be retrieved and used in association with the access method being attempted.

Abstract: A ranked set of users may be calculated from an expertise categorization for each user and a person's trust in the users for specific categories. The ranked set of users may be used for presenting search results, recommendations, social marketing, or other uses. A person's reputation may be determined through various online activities. A person's trust in another person may be related to their proximity and activity in one or more social networks.

Abstract: A staple insertion device includes a staple drive chamber, staple reservoir, staple feed mechanism, and staple drive member. The staple drive chamber is formed between a backing plate and a jam plate removably attached to the backing plate. The staple reservoir is configured to receive and hold a plurality of staples and extends from the backing plate to a staple reservoir terminal plate. The staple feed mechanism is operatively connected to the staple reservoir and is configured to feed the plurality of staples from the staple reservoir into the staple drive chamber through the backing plate. The staple drive member is configured to advance downwardly through the staple drive chamber so as to drive a staple out of the staple drive chamber.

Abstract: Methods, systems, and computer program products are provided for automatically enriching data in tables of report documents. A table of data contained in a document is received. A category of data stored in a column of the table of data is determined Enhancement information associated with the determined category is retrieved. The enhancement information may include visual enhancements (e.g., symbols, images, etc.) and/or may include reference data that is related to the determined category of column data. A user is enabled to select enhancement information of the retrieved enhancement information. The selected enhancement information is displayed in the document. The user is enabled to accept the selected enhancement information to be stored in the document.