Abstract: An online software platform (OSP) classifies challenges to digital rules into buckets according to respective challenged digital rules that were applied to produce respective challenged resources. The OSP computes respective statistics for the buckets. Each bucket may have a corresponding statistic associated with the bucket based on a current total number of challenges that have been classified into that bucket. The OSP ranks the buckets according to the respective statistics of the buckets. The OSP may correct, based on the ranking of the buckets, the respective challenged stored digital rule of the selected bucket without yet correcting the respective challenged digital rule of at least one of the other buckets. This correction is stored and included in digital rules to be used to produce resources going forward.

Abstract: An online software platform (OSP) classifies challenges to digital rules into buckets according to respective challenged digital rules that were applied to produce respective challenged resources. The OSP computes respective statistics for the buckets. Each bucket may have a corresponding statistic associated with the bucket based on a current total number of challenges that have been classified into that bucket. The OSP ranks the buckets according to the respective statistics of the buckets. The OSP may correct, based on the ranking of the buckets, the respective challenged stored digital rule of the selected bucket without yet correcting the respective challenged digital rule of at least one of the other buckets. This correction is stored and included in digital rules to be used to produce resources going forward.

Abstract: A computer-implemented method includes: obtaining, by a computing device, an original Personal Account Number (PAN) to be transformed; transforming, by the computing device, the original PAN to form a transformed PAN; performing, by the computing device, a verification on the transformed PAN; determining, by the computing device, whether the transformed PAN passes verification; and storing or outputting, by the computing device, the transformed PAN based on determining that the transformed PAN does not pass verification, wherein the original PAN is later recovered from the transformed PAN to process a transaction.

Abstract: Various embodiments of the present application set forth a computer-implemented method that includes detecting a tag that is associated with a real-world object, determining an object identifier (ID) associated with the tag, transmitting a request for data associated with the real-world object, wherein the request includes the object ID, receiving a set of values associated with the object ID from a data source, where the set of values is provided by the data source based on the object ID and on a query executed on raw machine data associated with the real-world object, and displaying, by a client device within the XR environment, a visualization associated with the set of values.

Abstract: Embodiments include methods and systems for enabling third-party data service interoperability, comprising receiving, from an electronic data server, a request for a low-value token, the low-value token being associated with a subset of sensitive data associated with a user; providing the low-value token to the electronic data server; receiving a request for the subset of sensitive data, from a third-party data service server, the request comprising the low-value token; de-tokenizing the low-value token to obtain the subset of sensitive data; providing the subset of sensitive data to the third-party data service server; receiving, from an electronic data server, the low-value token and a transaction authorization request; determining, based on the low-value token and authorization request, an authorization response; and providing the authorization response to the electronic data server.

Abstract: Embodiments include methods and systems for linking high-value tokens using a low-value token, comprising receiving, from an electronic data server, a first high-value token and a request for a low-value token, the first high-value token being associated with sensitive data associated with a user, and the low-value token being associated with a subset of the sensitive data associated with the user. The methods and systems further comprise providing the low-value token to the electronic data server, and receiving, from a second electronic data server, the low-value token and a request for a second high-value token, the low-value token having been provided to the second electronic data server by the electronic data server. The methods and systems further comprise generating a second high-value token associated with the sensitive data associated with the user, and providing the second high-value token to the second electronic data server.

Abstract: In an embodiment, a method includes accessing one or more digital applications by a server system. Each of the one or more digital applications is configured to be accessed by a plurality of users. The method also includes determining, by the server system, compliance content in each of the one or more digital applications. The method further includes removing the compliance content determined from each of the one or more digital applications. The method further includes storing the compliance content in a central repository. Thereafter, the method includes facilitating integration of one or more widgets into each of the one or more digital applications to access the compliance content stored in the central repository. The one or more widgets integrated into a digital application of the one or more digital applications enable a user of the digital application to access the compliance content from the central repository.

Abstract: Provided are techniques for delegating cloud-side roles to devices. Network quality information is received for a network from one or more devices. It is determined that the network is unavailable in an area from which the network quality information was received. For a new device, a trajectory path of the new device is predicted. It is determined that the new device is about to enter the area based on the trajectory path. One or more software modules and data are identified. The one or more software modules and the data are sent to the new device, wherein the new device executes the one or more software modules to generate one or more insights from the data.

Abstract: The disclosed embodiments relate generally to efficient data encoding and transmission. An encoding system determines an encoding interval at which to encode different groups of related data in a data structure. The encoding interval for each group encoded together optimizes the amount of newly received information that is encoded and transmitted in a continuous, repeating loop.

Abstract: A method for securing a system including a configuration subsystem and a production subsystem. The configuration subsystem is separate from the production subsystem that comprises a plurality of components, a gatekeeper and an entity secured with a first secret value. A generator hosted in the configuration subsystem selects a secret sharing scheme and generates, from an input parameter different from the first secret value, a set of secret shares using the secret sharing scheme. The generator uniquely assigns and securely sends a secret share extracted from the set to each of the components. The gatekeeper gets a subset of the secret shares from the components and constructs a second secret value from the subset using the secret sharing scheme. The gatekeeper computes the first secret value by applying a preset function to the second secret value, and then the gatekeeper unlocks access to the entity using the first secret value.

Abstract: A first executable program on a computer system is enabled to exchange communications with a second executable program on the computer system by determining that the first executable program requests to exchange information with the second executable program, using the second executable program to challenge the first executable program for a digital certificate, and using the second executable program to exchange information with the first executable program when the digital certificate is verified.

Abstract: Systems for proximity-based access control include a proximity module configured to determine whether a distance from a first mobile device to each of one or more safe mobile devices falls below a threshold distance; a policy engine comprising a processor configured to determine whether a number of safe mobile devices within the threshold distance exceeds a safe gathering threshold; and a security module configured to activate a safe gathering policy in accordance with the safe gathering threshold that decreases a security level in the first mobile device.

Abstract: A system, a computer readable storage medium including instructions, and a computer-implemented method of pre-fetching in a network, are provided. In an example embodiment, computer-implemented method of pre-fetching in a network comprises receiving a request from a user device for a first network-accessible data item in the plurality of network-accessible data items; transmitting the first network-accessible data item to the user device; identifying a second network-accessible data item in the plurality of network-accessible data items; and transmitting the second network-accessible data item to the user device, the second network-accessible data item being transmitted before receiving a request for the second network-accessible data item from the user device. Pre-fetch logic may be embedded in the first network-accessible data item.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for linking a first electronic data set to a second set of data fields in a second electronic data set. Automatically identifying a prescribing physician identifier based on the linked first and second electronic data sets. Determining a relationship between a physician associated with the prescribing physician identifier and at least one of the approved entities based on comparing the prescribing physician identifier and identifiers of the one or more approved entities to a fourth set of data fields from a fourth electronic data set. Automatically generating an electronic notification indicating that a product sold by the merchant is eligible for the discount in response to determining a relationship between a physician and the at least one of the approved entities.

Abstract: Provided are an image file distribution apparatus, an image file recovery apparatus, an image file distribution method, an image file recovery method, an image file distribution program, an image file recovery program, and a recording medium storing the program which can prevent a relatively large increase in the amount of data of an image file even when an (k, n) secret sharing scheme with high security is used. For example, distributed tag information is obtained from tag information of the image file by a (k, n)-threshold secret sharing scheme. For example, distributed image data is obtained from image data by a (k, L, n)-threshold ramp secret sharing scheme. For example, the distributed tag information and the distributed image data are combined to obtain combined data. Since the amount of data in the tag information is small, the use of the (k, n) secret sharing scheme does not cause a large increase in the amount of data.

Abstract: In accordance with an aspect, there is provided a system and method for electronic communications that involves machine learning and natural language processing for contact relationship discovery, ranking and retrieval. In accordance with an aspect, there is provided a system and device that discovers contacts related to user search terms, quantitatively measures and ranks the strength between contact relationships according to a score calculated by natural language processing and machine learning. The system generates visual effects to present recommendations to the user with multiple alternate route options to establish relationships between contacts.

Abstract: A verification data processing method includes: receiving CAPTCHA response information sent by user through a user terminal and obtaining an IP address of the user terminal from the CAPTCHA response information; obtaining verification data by verifying the CAPTCHA response information, and storing the verification data in a preset hash table, where the verification data includes the type of a CAPTCHA code corresponding to the CAPTCHA response information, and the number of total verifications of CAPTCHA response information and the number of correct verifications both corresponding to the IP address; determining a user type of the user according to the IP address, the number of total verifications and the number of correct verifications; storing the verification data in a min-heap according to the CAPTCHA code type and the user type; and making a statistic of all the numbers of total verifications and all the numbers of correct verifications in the min-heap.

Abstract: Systems and methods enable the real-time authorization of payment transactions initiated by personal and mobile computing devices. In one embodiment, a financial account server associated with a payment recipient, or payee, is configured to receive a payment data envelope from a payee computing device. The payment data envelope can originate from a payer computing device and include transaction information obtained from an identity management service associated with the payer. The payment data envelope can further include information that allows for the authentication of the payee and payer identities as well as payment instructions. The payee financial account server processes the payment data envelope and transmits the envelope to a financial account server associated with the payer.

Abstract: Systems and techniques for securing accessible computer-executable program code and systems are provided. One or more base functions may be generated and blended with existing program code, such that it may be difficult or impossible for a potential attacker to distinguish the base functions from the existing code. The systems and code also may be protected using a variety of other blending and protection techniques, such as fractures, variable dependent coding, dynamic data mangling, and cross-linking, which may be used individually or in combination, and/or may be blended with the base functions.

Abstract: The present invention relates to a method, device, and system for downloading contents on the basis of a rights verification. The content download method is performed by a first device, which obtains digital rights management (DRM) information on an asset from asset metadata associated with the asset, obtains DRM capabilities on a second device, performs a rights verification for using the asset through the second device on the basis of the DRM information and the DRM capabilities that are obtained, and transmits a queuing request for staging the asset through the second device on the basis of the results of the rights verification. Thus, to enable the consumption of contents, the rights verification may be performed on the basis of device capabilities and content information, and contents may be stably and effectively downloaded using a target device on the basis of the verified results.

Abstract: Methods and systems for processing video data are disclosed herein and may comprise receiving within a single mobile multimedia processor chip integrated within a mobile device, a secure key from an off-chip device integrated within the mobile device. The secure key may be decrypted within the single mobile multimedia processor chip, utilizing an on-chip key. The decrypted secure key may be stored within the single mobile multimedia processor chip. The received encrypted data may be decrypted within the single mobile multimedia processor chip, using the stored, decrypted secure key. The on-chip key may be stored within a one-time programmable (OTP) memory in the single mobile multimedia processor chip. The stored on-chip key may be retrieved from the OTP memory for the decrypting. The stored decrypted received secure key may be encrypted utilizing the on-chip key stored within the single mobile multimedia processor chip.

Abstract: A first computing device is detected as substantially collocated with a wireless token device, using a short-range wireless communication network and a connection is established between the first computing device and the token device over the short-range wireless network. Authentication data is sent to the first computing device from the token device over the short-range wireless network to authenticate the token device at the first computing device. Authentication of the token device permits data accessible through the first computing device to be made available to a holder of the token device and to be presented on a user interface of the first computing device. In some instances, the wireless token device may otherwise lack user interfaces for presenting the data itself.

Abstract: A system that accesses managed devices in a heterogeneous network includes a controller, coupled to the managed devices, having processor hardware, an operating system running on the processor hardware, an application framework layer that provides low level communication and resource management to the operating system, and a mapping layer that that provides data routing for the system and includes a plurality of user equipment devices, coupled to the controller, that communicate with the managed devices through the controller, where the controller and the user equipment devices provide messages for the managed devices in a first format and where at least some of the managed devices receive messages in a plurality of different formats and wherein the mapping layer converts messages in the first format to at least one of the different formats prior to providing the messages to the managed devices. The first format may be a CoAP/LWM2M format.

Abstract: A patient data exchange system comprises at least one device. Each of the devices implements an interface. When a device in the patient data exchange system publishes patient data, the device generates a metadata envelope that encapsulates the patient data. The metadata envelope conforms to a schema that defines allowable metadata attributes of the metadata envelope. When a device in the patient data exchange system receives a metadata envelope that conforms to the schema, the device determines, based at least in part on a metadata attribute of the metadata envelope, a particular patient data handling policy to apply to patient data encapsulated by the metadata envelope. In some instances, the metadata attribute indicates that authorization is required from an authorization service to access the patient data encapsulated by the metadata envelope.

Abstract: A first computing device is detected as substantially collocated with a wireless storage device, using a short-range wireless communication network. A connection is established between the first computing device and the wireless storage device over the short-range wireless network. Data stored in memory of the wireless storage device is sent from the wireless storage device to the first computing device over the short-range wireless network for a presentation of the data using a user interface of the first computing device. The wireless storage device lacks user interfaces for the presentation of the data. In some instances, authentication of either or both of the first computing device or wireless storage device can be accomplished through communication between the first computing device and wireless storage device over the short-range wireless communication network.

Abstract: A method and system for secure distribution of digital content, using a disintegration tool under control of a distributor of the digital content to divide the digital content into protected and unprotected segments, delivering the unprotected segments to the customer along with installation software and identification information. The segments to be protected are modified using the identification information on the distribution medium and hardware information unique to a particular customer device. Upon communication of this information from the customer device, the modified segments are sent to the customer device for integration with the unprotected segments to generate a modified digital content operable only on the particular customer device.

Abstract: In some embodiments, the instant invention provides an improved computer system programmed for rating which includes at least the following components: a specialized computer machine, having: a processor for executing program code stored in memory, where the program code is configured to at least perform upon the execution: causing to display a first graphical user interface to each consumer to obtain personal identifying information to validate an identity of such consumer; and a confirmation that such consumer meets requirements to be satisfied for rating a business, based on the confirmation, causing to concurrently display a second graphical user interface to display a consumer rating survey having a predetermined number of questions for rating a business to evaluate such business in rating categories of: service, value, ethics, competence, environment, and price; based on responses and predictive analytics, calculating or recalculating a rating score in each rating category for each business.

Abstract: In some embodiments, the instant invention provides a programmed industry management computer system, having at least: a specialized computer machine, having a processor for executing program code, performing upon the execution: operating an electronic space, allowing: a plurality of consumers to submit ratings that rate on a merit a plurality of businesses in rating categories of: service, value, ethics, competence, environment, and price; generating sales opportunities for businesses by performing: personality matching between the consumers and the businesses, and allowing the consumers to search for the businesses; and providing services, products, or both, to the businesses to improve consumer service and consumer ratings; in real-time, determining a monetary amount to be paid by a particular consumer for a consumer activity; based on the consumer activity performed by the particular consumer, in real-time, determining a monetary amount to be paid by a particular business for a lead option.

Abstract: In some embodiments, the instant invention provides an improved computer system programmed for matching which includes at least the following components: a specialized computer machine having a processor for executing program code stored in memory, where the program code is configured to perform upon the execution: obtaining business information regarding a plurality of businesses and a plurality of offerings offered by the plurality of businesses; concurrently matching each consumer of a plurality of particular consumers with at least one business based on: business identifying matching parameter(s) obtained from each consumer, a geographic indication, a plurality of ranked filtering criteria, personal consumer profile information having responses to psychometric questions, business profile information having responses to psychometric questions, and at least one rating score filtering parameter; and causing to concurrently output, utilizing a graphical user interface, each matching result to each particular

Abstract: In some embodiments, the instant invention provides an improved computer system programmed for searching which includes at least the following components: a specialized computer machine, at least one processor for executing a particular program code stored in a memory, where the particular program code is configured to perform the following operations upon the execution: obtaining business information regarding a plurality of businesses and a plurality of offerings offered by the plurality of businesses; generating a rating score for each business based on consumer ratings; associating each business with the rating score; and concurrently conducting a plurality of searches of the business information based on: business identifying search parameter(s) obtained from each consumer, a geographic indication, a plurality of ranked filtering criteria, a rating score filtering parameter.

Abstract: Methods and apparatus to generate and use content-aware watermarks are disclosed herein. In a disclosed example method, media composition data is received and at least one word present in an audio track of the media composition data is selected. The word is then located in a watermark.

Abstract: In a scanner system comprising a portable terminal and a scanner device, the scanner device has a mounting portion on which the portable terminal is mounted and electrically connected to the scanner device. The scanner device acquires identification information of the portable terminal when the scanner device detects mounting of the portable terminal on the mounting portion, and transmits a connection request to the portable terminal having the identification information. The portable terminal activates an application for establishing communication with the scanner device in response to the connection request from the scanner device when the mounting of the portable terminal on the mounting portion is detected. Thus, the communication between the portable terminal and the scanner device can be established without operation of a user.

Abstract: One embodiment of the invention includes a system comprising: a personal digital key and a computer readable medium that is accessible when authenticated by the personal digital key.

Abstract: Unlocking digital content embodied in digital readable form on a digital media carrier includes receiving a scanned image of a page from scanning a physical copy of content, evaluating the scanned image; and if the scanned image corresponds to a selected page of the digital content, unlocking the digital content.

Abstract: For secure user authentication using a one-time password (OTP) application is pre-stored on a device for generating a OTP value responsive to entry of a valid PIN, no part of the PIN is stored on the device and pre-storing on a server the PIN and a valid shared secret for the user. Upon receiving entry a purported PIN, a purported shared secret is dynamically synthesized on the device by the OTP application based on the purported PIN of the user and a purported OTP value is generated based on the purported shared secret. When entry of the purported OTP value is received by the server in an attempt to log on the server from another device, the server cryptographically calculates a purported shared secret based on the purported OTP value, and log on to the server from the other device is allowed if the calculated purported shared secret corresponds to the pre-stored shared secret.

Abstract: Methods and systems for identification of objects using a laser. Data for an application including transactional data associated with a user is accessed from a computerized database in a system. Systems and methods operate to select objects from an electronic display. In an example, these systems and methods operate to select objects from an electronic display using a handheld laser identification device. In an example, an electronic display is in communication with a database that updates the display of objects displayed on the electronic display.

Abstract: A two-factor network authentication system uses “something you know” in the form of a password/Pin and “something you have” in the form of a key token. The password is encrypted in a secure area of the USB device and is protected from brute force attacks. The key token includes authentication credentials. Users cannot authenticate without the key token. Four distinct authentication elements that the must be present. The first element is a global unique identifier that is unique to each key. The second is a private credential generated from the online service provider that is stored in a secure area of the USB device. The third element is a connection profile that is generated from the online service provider. The fourth element is a credential that is securely stored with the online service provider. The first two elements create a unique user identity. The second two elements create mutual authentication.

Abstract: A system and method of encrypting digital content in a digital container and securely locking the encrypted content to a particular user and/or computer or other computing device is provided. The system uses a token-based authentication and authorization procedure and involves the use of an authentication/authorization server. This system provides a high level of encryption security equivalent to that provided by public key/asymmetric cryptography without the complexity and expense of the associated PKI infrastructure. The system enjoys the simplicity and ease of use of single key/symmetric cryptography without the risk inherent in passing unsecured hidden keys. The secured digital container when locked to a user or user's device may not open or permit access to the contents if the digital container is transferred to another user's device. The digital container provides a secure technique of distributing electronic content such as videos, text, data, photos, financial data, sales solicitations, or the like.

Abstract: A method is presented for rebooting a local data processing entity requiring an access code to boot. The method may include receiving, on a local entity, an access code from a remote entity. The access code may be stored on an auxiliary device coupled to the local entity. The local entity may receive a reboot command from the remote entity and begin rebooting in response thereto. The auxiliary device may provide the access code to the local entity in response to the beginning of the reboot. The access code may then be deleted from the auxiliary device.

Abstract: A computer implemented method, apparatus, and computer usable program code for brokering a charging process of an electric vehicle. In one embodiment, a process extracts event data associated with the charging process from a charge notification in response to receiving the charge notification indicating that the charging process of the electric vehicle is complete. The event data may include, but is not limited to, duration of the charging process, quantity of electricity transferred, or rate at which electricity was transferred during the charging process. The process then identifies, from an energy transaction plan, a set of payees participating in the charging process. Thereafter, the process disburses a payment owed to the set of payees. An amount of the payment is calculated using payment terms in profiles of the set of payees. The payment includes funds from at least one of a payer fund and an incentive fund.

Abstract: A general user given beforehand a proxy right by an administrator is allowed to register a special user having the right to use an apparatus in a range of the function right equal to that of himself by operating a special user setting window.

Abstract: Systems and methods provide a storage media on a portable physical object associated with a set of credentials that enables access to a set of computing resources associated with a set of Web services. In some embodiments, information including a set of credentials is prepackaged onto the storage media of the portable physical object. A pre-activated subscription to the set of Web services in a distributed system is provisioned. Access to the set of Web services is enabled when the portable physical object is coupled with a computing device and the set of credentials is authenticated. In some embodiments, the portable physical object is purchased by a user on a prepaid basis without requiring the user to register an account with the set of Web services, allowing the user to remain anonymous with respect to interaction with the set of Web services.

Abstract: An application program of the portable device receives a command of an owner when the portable device is powered on. The application program notifies a basic input/output system to set a protection variable, and notifies the owner to set a password in a setup menu of the basic input/output system after the application program receives the command of the owner. A keyboard controller turns off the portable device to enable the protection variable after the basic input/output system sets the protection variable and the setup menu of the basic input/output system stores the password. After the protection variable is enabled, whenever the portable device is powered on, the basic input/output system checks a password inputted to the portable device at least once and the basic input/output system executes a corresponding operation according to a check result.

Abstract: Embodiments of the present disclosure provide for upgrades and synchronization of applications installed on a device, such as a mobile device. In one embodiment, a device may include applications purchased and downloaded via a content management system. The device maintains a list or database of applications that are authorized for each device. This list is also replicated in a remote cache that is maintained by an archive host. The device may then synchronize and upgrade these applications across multiple platforms, such as one or more computers that can be coupled to the device or the archive host. The archive host allows for files of the application be provided back to the device. Upon installation, the device can then confirm the authorization and identity of the newly installed application.

Abstract: Systems and techniques for mediating user communications. A user persona manager maintains one or more user profiles and manages user interactions with other parties and with service providers based on user preferences associated with the user profile or profiles selected for a particular interaction. The persona manager receives a single set of user authentication information to establish the user identity, and provides previously stored information to other parties and service providers as appropriate, and otherwise conducts user interactions involving communications initiated by or on behalf of the user. The persona manager also examines interactions initiated by others, selects user profiles appropriate to the interactions, and routes and responds to the interactions based on information stored in the user profiles.

Abstract: An optimized server for streamed applications provides a streamed application server optimized to provide efficient delivery of streamed applications to client systems across a computer network such as the Internet. The server persistently stores streamed application program sets that contain streamed application file pages. Client systems request streamed application file pages from the server using a unique set of numbers common among all servers that store the particular streamed application file pages. A license server offloads the streamed application server by performing client access privilege validations. Commonly accessed streamed application file pages are stored in a cache on the streamed application server which attempts to retrieve requested streamed application file pages from the cache before retrieving them from persistent storage. Requested streamed application file pages are compressed before being sent to a client as well as those stored in the cache.

Abstract: The present invention provides a method for setting a shift point for shifting a transmission for a powered vehicle between a first gear ratio and a second gear ratio. The method includes determining input power data points based on real-time input torque data. The input torque data includes a maximum input torque. The method also includes calculating a gear step value based on the first gear ratio and second gear ratio. The method further includes determining a first power value and computing a second power value based on the gear step value. The first power value and second power value are compared to one another and adjustments are incrementally made in the first power value speed until the difference between first and second power values meets a threshold. The shift point is therefore based on the result of comparing the first power value and the second power value and the corresponding speed associated with the first power value.

Abstract: A data storage device that can be reversibly associated with one or more of a plurality of hosts. A “trusted” host on which the device is mounted is allowed access to a secure data area of the device automatically, without the user having to enter a password. Ways in which a host is designated as “trusted” include storing the host's ID in a trusted host list of the device, storing a representation of the host's ID that was encrypted using a trust key of the device in a cookie in the host, or storing a storage password of the device in a password list of the host. Alternatively, an untrusted host is allowed access to the secure data area if a user enters a correct user password.

Abstract: A universal serial bus (USB) memory is disclosed. The USB memory includes a housing having a plurality of orientated indentations and a plurality of concave props, wherein the plurality of orientated indentation facilitates the USB memory to be connected while the USB memory is inserted into a female USB socket; a print circuit board assembly (PCBA) disposed in the housing, wherein the PCBA is fixed by means of pressing of the plurality of concave props; and a LED module having a LED indicator disposed in the housing and a LED module controller disposed on the PCBA, wherein a space is formed between the housing and the PCBA for disposing the LED module.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for linking a first electronic data set to a second set of data fields in a second electronic data set. Automatically identifying a prescribing physician identifier based on the linked first and second electronic data sets. Determining a relationship between a physician associated with the prescribing physician identifier and at least one of the approved entities based on comparing the prescribing physician identifier and identifiers of the one or more approved entities to a fourth set of data fields from a fourth electronic data set. Automatically generating an electronic notification indicating that a product sold by the merchant is eligible for the discount in response to determining a relationship between a physician and the at least one of the approved entities.