Abstract: Secret application and maintenance policy data is generated for different classes of data. The class of data to be protected is determined and the secret application and maintenance policy data for the determined class of the data to be protected is identified and obtained. Required secrets data representing one or more secrets to be applied to the data to be protected is obtained and then automatically scheduled for application to the data to be protected in accordance with the secret application and maintenance policy data for the determined class of the data to be protected. Maintenance of the one or more secrets is also automatically scheduled in accordance with the secret application and maintenance policy data for the determined class of the data to be protected.

Abstract: Secret application and maintenance policy data is generated for different classes of data. The class of data to be protected is determined and the secret application and maintenance policy data for the determined class of the data to be protected is identified and obtained. Required secrets data representing one or more secrets to be applied to the data to be protected is obtained and then automatically scheduled for application to the data to be protected in accordance with the secret application and maintenance policy data for the determined class of the data to be protected. Maintenance of the one or more secrets is also automatically scheduled in accordance with the secret application and maintenance policy data for the determined class of the data to be protected.

Abstract: In one embodiment, the invention involves a method for readying client financial data. The method comprises receiving a proximity distance; identifying a location of a mobile device of a financial professional (FP); identifying a location of a first client of the FP within the proximity distance from the location of the mobile device; downloading, by the mobile device and in response to identifying the first client, a first financial data item corresponding to the first client; and displaying, to the FP by the mobile device, the first financial data item.

Abstract: A secure secrets proxy is instantiated in a first computing environment and includes secure secrets proxy authentication data for identifying itself to a secrets distribution management system in a second computing environment as a trusted virtual asset to receive and cache secrets data in a secure secrets cache outside the second computing environment. A virtual asset requests one or more secrets, triggering a process to authenticate the requesting virtual asset, gathering authorized secrets data representing secrets the virtual asset is allowed to have. The secure secrets proxy is provided data representing the requested secrets and stores that secrets data in the secure secrets cache of the proxy.

Abstract: A secure secrets proxy is instantiated in a first computing environment and includes secure secrets proxy authentication data for identifying itself to a secrets distribution management system in a second computing environment as a trusted virtual asset to receive and cache secrets data in a secure secrets cache outside the second computing environment. A virtual asset requests one or more secrets, triggering a process to authenticate the requesting virtual asset, gathering authorized secrets data representing secrets the virtual asset is allowed to have. The secure secrets proxy is provided data representing the requested secrets and stores that secrets data in the secure secrets cache of the proxy.

Abstract: Secrets data representing one or more secrets required to access associated resources is provided along with secrets distribution policy data representing one or more secrets distribution factors used to control the distribution of the secrets. When a requesting virtual asset submits secrets request data, virtual asset profile data associated with the requesting virtual asset is obtained. The requesting virtual asset profile data is then analyzed using at least one of the secrets distribution factors to authenticate the requesting virtual asset. The requesting virtual asset profile data is then analyzed using one or more of secrets distribution factors to determine what secrets the requesting virtual asset legitimately needs. Authorized secrets data for the requesting virtual asset representing one or more authorized secrets is then generated. The requesting virtual asset is then provided access to the authorized secrets data.

Abstract: Virtual host creation data used to instantiate a hardened task specific virtual host in a first computing environment is generated including hardening logic for providing enhanced security and trust for the hardened task specific virtual host and internal task specific logic for directing and/or allowing the hardened task specific virtual host to perform a specific function assigned to the hardened task specific virtual host. When task data is received indicating a task to be performed in the first computing environment requires the performance of the specific function assigned to the hardened task specific virtual host, the hardened task specific virtual host is automatically instantiated and/or deployed in the first computing environment.

Abstract: Secrets data representing one or more secrets required to access associated resources is provided along with secrets distribution policy data representing one or more secrets distribution factors used to control the distribution of the secrets. When a requesting virtual asset submits secrets request data, virtual asset profile data associated with the requesting virtual asset is obtained. The requesting virtual asset profile data is then analyzed using at least one of the secrets distribution factors to authenticate the requesting virtual asset. The requesting virtual asset profile data is then analyzed using one or more of secrets distribution factors to determine what secrets the requesting virtual asset legitimately needs. Authorized secrets data for the requesting virtual asset representing one or more authorized secrets is then generated. The requesting virtual asset is then provided access to the authorized secrets data.

Abstract: Systems and methods for assisting user interaction with physical objects. A system may include an interactive display surface configured to display visual output and receive a physical object, where the object possesses encoded data including data other than data directly identifying the object. The system may include a computer-readable storage medium storing program instructions executable by the surface computer to implement software applications. In response to the display surface receiving the object, the surface computer may be configured to read the encoded data passively with respect to the object, without using an active electronic interface between the surface computer and the object, and to display a user interface for software applications dependent upon the passively read encoded data, such that one or more elements of the user interface are visually associated on the interactive display surface with the physical object.

Abstract: A method allowing a professional service provider to access client data stored in an online account without storing confidential account information by the professional service provider. In particular, the service provider may register the relationship with the client in a third party information transfer framework where the client approves such registration and download the data from the online account using the confidential account information in a temporary manner. The client data may be stored in a repository available to the service provider based on the relationship registration. In an example, a professional tax preparation software may include functionality to check for newly downloaded client data within the third party information transfer framework, notifying a tax accountant (i.e., the service provider), and may provide a one click access to import the client data directly into the client tax return.

Abstract: A method allowing a professional service provider to access client data stored in an online account without storing confidential account information by the professional service provider. In particular, the service provider may register the relationship with the client in a third party information transfer framework where the client approves such registration and download the data from the online account using the confidential account information in a temporary manner. The client data may be stored in a repository available to the service provider based on the relationship registration. In an example, a professional tax preparation software may include functionality to check for newly downloaded client data within the third party information transfer framework, notifying a tax accountant (i.e., the service provider), and may provide a one click access to import the client data directly into the client tax return.

Abstract: Method and apparatus for return processing, including tax returns. A return calculation mechanism may partition out return preparation jobs to a plurality of return calculation nodes. A job scheduler may receive returns and distribute the returns among the calculation nodes according to a load-balancing scheme. The job scheduler may decompose a return into two or more calculation jobs. A job may be an individual return or portion of a return. In one embodiment, the calculation jobs may be prioritized according to dependency. If one job depends on results of another job, the job may be scheduled to execute after the job on which it depends. The calculation nodes may cache calculated data from jobs, and a job that depends on another job may be assigned to a node that caches data from the job on which it depends.

Abstract: Systems and methods for facilitating user interaction with physical documents. A system may include a physical document interface configured to receive a physical document having a surface including document data items, such that at least a portion of the surface of the physical document is visible to a user. The system further includes a device including a computer-readable storage medium storing program instructions executable by the device to implement an application, which may be executable to display a user interface including application data items, each of which may be selectable via the user interface. In response to the selection of a given application data item via the user interface, the device is configured to cause the physical document interface to visibly indicate a location on the surface of the physical document, where the location includes a document data item corresponding to the application data item selected via the user interface.

Abstract: A system that tracks financial transactions for a user is presented. During operation, the system receives an electronic message which includes one or more parameters for a financial transaction. The system parses the electronic message to extract the one or more parameters for the financial transaction. The system determines a source address for the electronic message. Next, the system determines whether the source address is associated with a user account. If so, the system associates the one or more parameters for the financial transaction with the user account.

Abstract: A method and system for adapting fault tolerant computing. The method includes the steps of measuring an environmental condition representative of an environment. An on-board processing system's sensitivity to the measured environmental condition is measured. It is determined whether to reconfigure a fault tolerance of the on-board processing system based in part on the measured environmental condition. The fault tolerance of the on-board processing system may be reconfigured based in part on the measured environmental condition.

Abstract: Message translation systems and methods are provided. In one embodiment, a method for translating messages comprises reading a first sequence of one or more message elements from a first interface, wherein the message elements are structured based on a first protocol; converging on a message mapping node based on the first sequence of one or more message elements, wherein the message mapping node is defined by a protocol metadata schema; performing one or more conversion operations on the first sequence of one or more message elements to construct a second sequence of one or more message elements, wherein the one or more conversion operations are based on the message mapping node; and writing the second sequence of one or more message elements to a second interface.

Abstract: An electronic module is provided. The module includes a first logic device having at least two processors and a first comparator and a second logic device having at least one processor and a second comparator. Each of the at least two processors are coupled to each of the first and second comparators. The first and second comparators operate as a distributed comparator system. Each comparator independently identifies faults in the processors.