Abstract: This disclosure relates to account management. In one aspect, a method includes receiving a permission query message from a service system. Verification information is obtained from a first client based on the permission query message. The verification information is associated with an identity of the current user. In response to determining that the verification information is valid, proxy permission information for the current user is obtained from a blockchain. The proxy permission information includes at least operation permission information of the current user for the enterprise account. The proxy permission information is sent to the service system. The proxy permission information configured to be usable by the service system to determine whether to authorize the current user to perform an operation on the enterprise account.

Abstract: Application information is received by a client and from a server, and the application information includes an application identifier corresponding to a digital certificate application request transmitted by the client to the server. The application information is delivered to a secure element associated with the client by the client. A public and private key pair are generated by the secure element. The application identifier is signed using the private key to generate terminal signature data. Specified format data is generated by encapsulating the terminal signature data and the public key into the specified format data. The specified format data is transmitted from the secure element to the client. The specified format data is transmitted by the client to the server.

Abstract: A mapping relationship of a device ID associated with a client, a certificate ID associated with a certificate to be applied by the client during a certificate application process, and identity verification methods to be used to verify the client is stored during the certificate application process. From the client, a request for a certificate to perform a service is received, and the request includes the device ID, an identification verification requirement associated with the service, and the identity verification requirement specifies at least one identity verification method. In response to receiving the request based on the mapping relationship, a certificate ID of an existing certificate that corresponds to the received device ID and satisfies the identity verification requirement is retrieved. In response to retrieving the certificate ID, a certificate response to the client including the retrieved certificate ID is sent.

Abstract: A media item cache manager system which implements techniques for efficiently using cache memory to respond to requests. The cache memory may include information on items along with a status indicator for each of the items, indicating different status information. Some examples of possible status indicators include valid, invalid, or in-progress indicators.

Abstract: Generally discussed herein are methods, systems, and apparatuses for tracking user interaction with sponsored and/or unsponsored content. A method can include receiving a tracking event packet including data fields comprising a packet identification, a tracking event identifier, a content identifier, a cost, a campaign identifier, and/or an advertiser identifier, determining whether the tracking event packet is a duplicate based on the packet identification, aggregating non-duplicate tracking event packets by advertiser identification such that packets with advertiser identifications that hash to a same value are aggregated together, and transferring aggregated tracking event packets to a first database and a second database, the first database includes data stored for analytics and the second database includes data stored for billing and campaign performance monitoring.

Abstract: A request intermediary processing system which implements techniques to allow tracking of responses to requests when there is an intermediary. In an embodiment, the intermediary includes an internal exchange. The internal exchange may manage one or more content item providers and select content items from among the one or more internal content item providers to respond to requests. The intermediary may include, when responding to a request, inserting or embedding a token or other means so that the integrity of a content item provider-specific tracking data is maintained, while including request intermediary processing system-specific tracking data.

Abstract: A request filtration system that implements techniques to reduce load on a downstream service by efficiently filtering requests before they are processed by the downstream service. The request filtration system may be used by a request processing system to eliminate requests that satisfy any of one or more filters. For example, each filter specifies one or more attributes that may apply to one or more requests. If a request satisfies a filter, then the request is not considered by the downstream service or a content item does not need to be selected by the request processing system in response to the request.

Abstract: A multi-leg transport system receives a transport request and determines a number of transfer locations between the origin location and the destination. The system selects a first provider to transport the user from the origin location to a transfer location and remotely monitors the position of the user as the user travels to the transfer location. In response to determining that the travel time to the transfer location is within a threshold, the system selects a second provider to transport the user from the transfer location to either the next transfer location or the destination for the transport request.

Abstract: A mapping relationship of a device ID associated with a client, a certificate ID associated with a certificate to be applied by the client during a certificate application process, and identity verification methods to be used to verify the client is stored during the certificate application process. From the client, a request for a certificate to perform a service is received, and the request includes the device ID, an identification verification requirement associated with the service, and the identity verification requirement specifies at least one identity verification method. In response to receiving the request based on the mapping relationship, a certificate ID of an existing certificate that corresponds to the received device ID and satisfies the identity verification requirement is retrieved. In response to retrieving the certificate ID, a certificate response to the client including the retrieved certificate ID is sent.

Abstract: Application information is received by a client and from a server, and the application information includes an application identifier corresponding to a digital certificate application request transmitted by the client to the server. The application information is delivered to a secure element associated with the client by the client. A public and private key pair are generated by the secure element. The application identifier is signed using the private key to generate terminal signature data. Specified format data is generated by encapsulating the terminal signature data and the public key into the specified format data. The specified format data is transmitted from the secure element to the client. The specified format data is transmitted by the client to the server.

Abstract: A media item cache manager system which implements techniques for efficiently using cache memory to respond to requests. The cache memory may include information on items along with a status indicator for each of the items, indicating different status information. Some examples of possible status indicators include valid, invalid, or in-progress indicators.

Abstract: A content item generation system which implements techniques for selecting and identifying content items to return in response to a request is described. For example, the content item generation system may separate requirements included with a request into first and second sets of requirements. The first set of requirements may be used to identify which content items or content item campaigns may be suitable to respond to the request. The second set of requirements may be used to determine whether items associated with the selected content items or content item campaigns correspond to technical requirements specified in the request.

Abstract: A request filtration system that implements techniques to reduce load on a downstream service by efficiently filtering requests before they are processed by the downstream service. The request filtration system may be used by a request processing system to eliminate requests that satisfy any of one or more filters. For example, each filter specifies one or more attributes that may apply to one or more requests. If a request satisfies a filter, then the request is not considered by the downstream service or a content item does not need to be selected by the request processing system in response to the request.

Abstract: A request intermediary processing system which implements techniques to allow tracking of responses to requests when there is an intermediary. In an embodiment, the intermediary includes an internal exchange. The internal exchange may manage one or more content item providers and select content items from among the one or more internal content item providers to respond to requests. The intermediary may include, when responding to a request, inserting or embedding a token or other means so that the integrity of a content item provider-specific tracking data is maintained, while including request intermediary processing system-specific tracking data.

Abstract: A content item generation system which implements techniques for selecting and identifying content items to return in response to a request is described. For example, the content item generation system may separate requirements included with a request into first and second sets of requirements. The first set of requirements may be used to identify which content items or content item campaigns may be suitable to respond to the request. The second set of requirements may be used to determine whether items associated with the selected content items or content item campaigns correspond to technical requirements specified in the request.

Abstract: Techniques for selectively generating and rendering content items are provided. A content request that includes an identifier is received over a network. In response to receiving the content request, an entity profile of an entity that is associated with the identifier is retrieved. A content item is identified based on the entity profile. Based on a content item identifier that identifies the content item, a particular campaign objective from among a plurality of campaign objectives is determined. A particular format for, or particular content to include with, the content item is determined based on the particular campaign objective. A rendered content item is generated based on the content item and at least one of the particular format and the particular content and the rendered content item is displayed on a screen of a computing device.

Abstract: A system and method for rendering different user interfaces are provided. In one approach, a processing component receives data that is composed by a user and that specifies one or more metrics and one or more dimensions. Based on the data, the processing component analyzes log data comprising multiple events and generates output data that specifies (1) each dimension and a dimension value associated with each dimension and (2) each metric and a metric value that is associated with each metric and that is aggregated based on the dimension(s). A user interface component generates, based on the output data, a UI that comprises multiple UI elements. Generating the UI includes (1) identifying the dimension(s) specified in the output data and generating a UI element for each dimension and (2) identifying the metric(s) specified in the output data and generating a UI element for each metric.

Abstract: Techniques for caching data are provided. A service initiates a call to a method of an object that represents a resource, where the call includes identification data that identifies a set of data. In response to receiving the call, a resource data manager that is separate from the service, reads resource configuration data that is associated with the resource and identifies, within the resource configuration data, multiple data layers that includes a first data layer and a second data layer. The resource data manager establishes a connection with the first data layer. The resource data manager sends the identification data to the first data layer. The resource data manager receives the set of data from one of the plurality of data layers. The resource data manager sends the set of data to the service.

Abstract: Generally discussed herein are methods, systems, and apparatuses for tracking user interaction with sponsored and/or unsponsored content. A method can include receiving a tracking event packet including data fields comprising a packet identification, a tracking event identifier, a content identifier, a cost, a campaign identifier, and/or an advertiser identifier, determining whether the tracking event packet is a duplicate based on the packet identification, aggregating non-duplicate tracking event packets by advertiser identification such that packets with advertiser identifications that hash to a same value are aggregated together, and transferring aggregated tracking event packets to a first database and a second database, the first database includes data stored for analytics and the second database includes data stored for billing and campaign performance monitoring.

Abstract: Generally discussed herein are methods, systems, and apparatuses for tracking user interaction with sponsored and/or unsponsored content.