Abstract: Methods, systems, and apparatus include computer programs encoded on a computer-readable storage medium, including a method for providing content. Data specifying a post-install activity is received from a provider of an application. An opportunity is identified to provide third-party content to a user. A likelihood is determined that the user will perform the specified post-install activity based on one or more attributes of the user and attributes of users that have previously performed the specified post-install activity in the application. A selection value is adjusted for third-party content that identifies the application based on the determined likelihood, wherein the selection value increases as the likelihood increases. The third-party content identifying the application is selected based on the adjusted selection value. The third-party content identifying the application is distributed to a client device of the user.

Abstract: A method includes receiving from a networked spoke device information describing network flows to and from an application, analyzing the information to characterize the application in at least one dimension selected from the group consisting of bi-directional bandwidth usage, network response times, application response times, a number of idle and active application sessions and a maximum number of concurrent application sessions and transmitting the dimensions to at least one networked spoke device as traffic profile information.

Abstract: Methods, systems, and apparatus include computer programs encoded on a computer-readable storage medium, including a method for providing content. Data specifying a post-install activity is received from a provider of an application. An opportunity is identified to provide third-party content to a user. A likelihood is determined that the user will perform the specified post-install activity based on one or more attributes of the user and attributes of users that have previously performed the specified post-install activity in the application. A selection value is adjusted for third-party content that identifies the application based on the determined likelihood, wherein the selection value increases as the likelihood increases. The third-party content identifying the application is selected based on the adjusted selection value. The third-party content identifying the application is distributed to a client device of the user.

Abstract: The present disclosure is directed to a technique to reduce latency in feedback-based system performance determination. A system receives, from an application developer device, indications of an in-application event and a first input value for an application content delivery profile. The system receives, via an interface from an application developed by an application developer and executed by a computing device remote from the data processing system and different from the application developer device, a ping indicative of an occurrence of the in-application event on the computing device. The system merges data from the ping with internal data determined by the data processing system to generate merged data. The system determines a predicted performance for the in-application event and provides an indication of the predicted performance. The system configures, responsive to the indication of the predicted performance, the application content delivery profile with a second input value.

Abstract: Matching conversions from within applications on a client device to interactions with content items presented with resources may include receiving first data associated with an interaction with a content item displayed with a resource. The first data includes an application identifier for an application associated with the content item and an account identifier. The matching may also include receiving second data from the client device associated with a conversion using the application. The second data includes the application identifier and a device identifier for the client device. The matching may further include receiving third data from the client device that includes the account identifier and the device identifier. The conversion can be determined as associated with the interaction with the content item displayed with the resource based on matching the second data with the first data based on the third data.

Abstract: The present technology is directed to a system and method for implementing scalable namespace based VPN headends with context awareness to facilitate targeted and granular provision of security services within the cloud. The scalability aspect involves the creation or allocation of one or more namespaces as direct termination points for inbound VPN connections to the cloud. The namespace are created dynamically upon discovery of context information (metadata) associated with deployment of a new customer traffic/connection onto the cloud. This information will be attached to the namespace to implement context awareness so that customer traffic may be attached into upstream services in a service-discoverable way. In this way, upon deployment, upstream services will automatically know about the new customer traffic and can implement security enforcement in an isolated fashion.

Abstract: The present disclosure is directed to a technique to reduce latency in feedback-based system performance determination. A system receives, from an application developer device, indications of an in-application event and a first input value for an application content delivery profile. The system receives, via an interface from an application developed by an application developer and executed by a computing device remote from the data processing system and different from the application developer device, a ping indicative of an occurrence of the in-application event on the computing device. The system merges data from the ping with internal data determined by the data processing system to generate merged data. The system determines a predicted performance for the in-application event and provides an indication of the predicted performance. The system configures, responsive to the indication of the predicted performance, the application content delivery profile with a second input value.

Abstract: Matching conversions from within applications on a client device to interactions with content items presented with resources may include receiving first data associated with an interaction with a content item displayed with a resource. The first data includes an application identifier for an application associated with the content item and an account identifier. The matching may also include receiving second data from the client device associated with a conversion using the application. The second data includes the application identifier and a device identifier for the client device. The matching may further include receiving third data from the client device that includes the account identifier and the device identifier. The conversion can be determined as associated with the interaction with the content item displayed with the resource based on matching the second data with the first data based on the third data.

Abstract: A method includes determining a network requirement for at least one application, dynamically determining a link suitable for data transmission in accordance with a policy based at least in part on a current network condition to meet the network requirement and routing one or more application network data flows associated with the at least one application over the link.

Abstract: Systems and methods of matching identifiers between multiple datasets are described herein. A system can transmit a first identifier vector to a third party server. The first identifier vector can include a first identifier, first parameters, and second parameters. The system can receive, from the third party server, the first identifier vector encrypted based on a third-party encryption. The system can receive, from the third party server, a second identifier vector encrypted based on the third-party encryption associated with the third party server. The second identifier vector can include a second identifier, third parameters, and fourth parameters. The system can determine a correlation count between the first identifier vector and the second identifier vector. The system can determine that the first identifier corresponds to the second identifier based on the correlation count. The system can generate one identifier key for both the first identifier and the second identifier.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for optimizing digital components. In one aspect, the system includes a digital component server that identifies a digital component to be presented in an electronic document. The system also includes a digital component distribution server that interacts with the digital component server to determine that the electronic document includes a particular item that identifies a same entity as the digital component that was identified to be presented in the electronic document. The system combines at least a portion of the digital component with content from the particular item to form an optimized digital component. The optimized digital component is integrated into the electronic document rather than presenting either of the particular item or the digital component individually.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for optimizing digital components. In one aspect, the system includes a digital component server that identifies a digital component to be presented in an electronic document. The system also includes a digital component distribution server that interacts with the digital component server to determine that the electronic document includes a particular item that identifies a same entity as the digital component that was identified to be presented in the electronic document. The system combines at least a portion of the digital component with content from the particular item to form an optimized digital component. The optimized digital component is integrated into the electronic document rather than presenting either of the particular item or the digital component individually.

Abstract: Bridging encrypted datasets is provided. A system transmits, to a server, a first identifier vector encrypted with a first encryption that is commutative. The system receives an encrypted first identifier vector encrypted based on the first encryption and encrypted by a second encryption associated with the server. The system receives a second identifier vector encrypted based on the second encryption. The system encrypts the second identifier vector with the first encryption to generate an encrypted second identifier vector that is encrypted based on the second encryption and further encrypted based on the first encryption. The system determines a correlation count between the encrypted first identifier vector and the encrypted second identifier vector. The system generates one identifier key for both the first identifier and the second identifier. The system can provide the one identifier key for input into an application to process interactions.

Abstract: A bicycle lock including a lock body having a locked state and an unlocked state. A movable shackle is operatively coupled to the lock body, wherein the lock body in the locked state prevents movement of the movable shackle, and wherein the lock body in the unlocked state enables movement of the movable shackle. A pawl is mounted to one of the lock body and the movable shackle. A rack is configured to engage the pawl, and wherein the unlocked state of the lock body enables at least one of bidirectional movement of the pawl and rotational movement of the rack away from engagement with the pawl.

Abstract: A method includes detecting a data flow and an associated originating interface on a network, determining a first link over which to forward the data flow, transmitting the data flow over the determined link, receiving a return data flow and moving a forward direction of the return data flow to a new path if the return data flow arrived via a link other than the first link, wherein all packets following a first packet on the flow are forwarded on the same path as the first packet.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer-readable storage medium, and including a method for managing privacy rights of a user related to the delivery of content. The method comprises providing a global privacy management interface that presents a selection tool for enabling a user to review privacy options and interests. The privacy options and interests include controls for presenting a list of identifiers that are associated with the user and interests associated with those identifiers. Each identifier is associated with a requesting source having been used by the user to access content. The interface enables de-selection of individual interests on a per-identifier or global basis. The method further comprises determining, in a server system, content to deliver to the user in view of the privacy selections.

Abstract: A bicycle lock including a lock body having a locked state and an unlocked state. A movable shackle is operatively coupled to the lock body, wherein the lock body in the locked state prevents movement of the movable shackle, and wherein the lock body in the unlocked state enables movement of the movable shackle. A pawl is mounted to one of the lock body and the movable shackle. A rack is configured to engage the pawl, and wherein the unlocked state of the lock body enables at least one of bidirectional movement of the pawl and rotational movement of the rack away from engagement with the pawl.

Abstract: A method includes receiving information describing an addition of a first site comprising at least one application to an existing network wherein the information is selected from the group consisting of type of site, planned connectivity to the site and planned policies for the site and estimating an impact on the operation of the at least one application and associated network traffic using statistical analysis of monitored data collected from a second site similar to the first site.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer-readable storage medium, and including a method for providing content. The method comprises receiving a first login request from a first device used by a user, the request being associated with a first anonymous identifier associated with the first device, and determining a user tag for the user, that does not include any personally identifiable information associated with the user. The method further comprises receiving a second login request from a second different device used by the user, the request being associated with a second different anonymous identifier associated with the second different device, and storing an association between the user tag, the first anonymous identifier and the second different anonymous identifier. The method further comprises receiving a request for content from either the first or second different device and providing content in response to the request using the association.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer-readable storage medium, and including a method for providing content. The method comprises receiving a first login request from a first device used by a user, the request being associated with a first anonymous identifier associated with the first device, and determining a user tag for the user, that does not include any personally identifiable information associated with the user. The method further comprises receiving a second login request from a second different device used by the user, the request being associated with a second different anonymous identifier associated with the second different device, and storing an association between the user tag, the first anonymous identifier and the second different anonymous identifier. The method further comprises receiving a request for content from either the first or second different device and providing content in response to the request using the association.