Abstract: A computer implemented method for the automated analysis or use of data is implemented by a voice assistant. The method comprises the steps of: (a) storing in a memory a structured, machine-readable representation of data that conforms to a machine-readable language (‘machine representation’); the machine representation including representations of user speech or text input to a human/machine interface; and (b) automatically processing the machine representations to analyse the user speech or text input.

Abstract: A computer-implemented method can receive a hierarchy table comprising a plurality of records associated with objects organized in a hierarchical structure. The records comprise values corresponding to a plurality of displayable fields and specify value distributions among the objects. The method can specify one or more viewable fields at an input area of a graphical user interface, and display a plurality of nodes and a plurality of directional links connecting the displayed nodes on a display window of the graphical user interface. The displayed nodes represent objects whose associated records have unique combinations of values corresponding to the specified viewable fields. The directional links represent value distributions among objects represented by the displayed nodes. The method can display aggregated value distributed to or from objects represented by the displayed nodes. The viewable fields specify which of the displayable fields are visible on the displayed nodes.

Abstract: Whether a document file is tampered and the like can be determined without imposing a burden on a user. A hash value calculation unit 103 adds contents of update to an original document as incremental update in order of update, and calculates a hash value of the document file for each of the original document and a document for adding the updated content and a hash value of a document file the hash value and the document file ID, identifying the document file, of which are registered in a blockchain network. An ID acquisition unit 102 acquires the document file ID identifying a received document file, from the document file. A hash value acquisition unit 105 acquires the hash value stored in the latest block among blocks storing the document file IDs from the blockchain network. A tampering determination unit 106 determines whether the document file is tampered by determining whether the hash value calculated and the hash value acquired from the blockchain network 300 match.

Abstract: Systems and techniques for metadata quality monitoring and remediation are described herein. Metadata is obtained from a system of record. The metadata is normalized. The metadata is evaluated with an integrity rule to identify a discrepancy in an element of the metadata. The discrepancy is stored as an integrity gap in an integrity database. A notification is generated that includes identification of the element of the metadata and a description of the integrity rule. The notification is transmitted to a user identified based on the integrity rule.

Abstract: Automated negotiation agent adaptation is performed by detecting change in a utility function involved in automated negotiation between a supporting agent and an opposing agent while the supporting agent operates according to a first negotiation strategy model, generating a plurality of training samples from automated negotiation between the supporting agent and the opposing agent while the supporting agent operates according to a baseline negotiation strategy model, and training an initialized negotiation strategy model using the plurality of training samples to produce a second negotiation strategy model.

Abstract: Aspects related to a resource-constrained system are described herein that can provide object storage services after a service interruption is resolved, even if all of the transactions that were pending and incomplete prior to the service interruption have not yet been recovered and/or executed. For example, file systems implemented by computing systems of the resource-constrained system may treat each file or directory as a separate object. Thus, a transaction directed to one file may not affect the file's directory or other files in the directory. As a result, the resource-constrained system can achieve read-after-write consistency without first recovering and executing the pending, incomplete transactions. Instead, read-after-write consistency for an object can be achieved simply by completing any pending, incomplete transaction directed to that object.

Abstract: A hospital or laboratory network including analytical devices for performing in-vitro diagnosis and a gateway is proposed. The network is configured to send a data package request including information regarding the analytical devices from the gateway to a remote service platform, receive from the remote service platform information regarding available data packages, determine a selection of the available data packages to be downloaded from the remote service platform specific to the analytical devices in the network, request the selection of the available data packages from the remote service platform, download the requested selection of the available data packages from the remote service platform, and provide the requested selection of the available data packages to the analytical devices.

Abstract: A computer implemented method for the automated analysis or use of data is implemented by a voice assistant. The method comprises the steps of: (a) storing in a memory a structured, machine-readable representation of data that conforms to a machine-readable language (‘machine representation’); the machine representation including representations of user speech or text input to a human/machine interface; and (b) automatically processing the machine representations to analyse the user speech or text input.

Abstract: A query is preprocessed for features identified by a Data Manipulation Language (DML) in the text of the query. A machine-learning algorithm uses the features as input and provides as output a predicted query parsing execution time needed by a query parser to parse the query. The predicted query parsing time is provided as input to a query optimizer. The query optimizer uses the predicted query parsing time as a factor in optimizing a query execution plan for the query. Subsequently, the query execution plan is executed against a database as the query.

Abstract: A method for protecting a client domain, for example against a computing attack, implemented in a client node of the client domain. The method includes: discovering at least one other client node of the client domain, called a discovered node; detecting a conflict between at least two management rules for the traffic associated with the client domain; and resolving the detected conflict, including: if one of the rules was installed by a the discovered node, modifying the rule or a state associated with the discovered node; and otherwise, obtaining, from a the discovered node, an item of information for identifying at least one node of the client domain that installed one of the rules; and detecting and/or resolving the conflict using information obtained during the discovery of the at least one other node of the client domain.

Abstract: Provided is a system for facilitating recovery of deleted computing resources in a cloud network environment. A centralized resource recovery service may be in network communication with a plurality of resource management services that are each configured to create, modify, or delete their respective computing resources such as data storage volumes, databases, compute instances, and the like. The resource recovery service may be configured to receive a delete request associated with a resource managed by one of the resource management services, and cause the resource to be retained in a recovery bin based on the resource satisfying one of a plurality of resource recovery conditions used to manage resource recovery across the resource management services.

Abstract: A computer implemented method for the automated analysis or use of data is implemented by a voice assistant. The method comprises the steps of: (a) storing in a memory a structured, machine-readable representation of data that conforms to a machine-readable language (‘machine representation’); the machine representation including representations of user speech or text input to a human/machine interface; and (b) automatically processing the machine representations to analyse the user speech or text input.

Abstract: Provided is a storage system capable of properly deleting derivative data stored at a plurality of sites. A CPU executes a creation process of creating data based on data stored in a storage device at a local site and storing the created data in the storage device of a node at one of the plurality of sites. Further, the CPU collects, from each of the plurality of sites, history information created at each of the plurality of sites to indicate the history of each creation process. When deleting deletion-specified data, the CPU identifies deletion derivative data according to the history information created at each of the plurality of sites, and deletes the deletion-specified data and the deletion derivative data from the storage device at each of the plurality of sites. The deletion derivative data is derivative data derived from the deletion-specified data.

Abstract: An image forming apparatus includes an operation device; a storage that stores classification determination information and a user classification rule; a memory that stores instructions; and a processor. The processor executes the instructions stored to: input image data on a document; acquire the input image data on the document; acquire, from the acquired image data, feature quantity; and update the user classification rule. The user classification rule is information in which a criterion for classifying a document having specific feature quantity is set for each user in association with the specific feature quantity. When the user uses the operation device to perform a specific classification operation on image data on a document having the acquired feature quantity, the processor executes the instructions to change a criterion of the user classification rule of the user associated with the acquired feature quantity to a criterion corresponding to the specific classification operation.

Abstract: A processing system including at least one processor may obtain a first ontology of a first type of data pipeline component, map the first ontology to a second ontology for a second type of data pipeline component that is stored in a catalog of data pipeline component types, provide a second data schema for the second type of data pipeline component as a template for a first data schema for the first type of data pipeline component, and add the first type of data pipeline component to the catalog of data pipeline component types, where the adding comprises storing the first ontology and the first data schema for the first type of data pipeline component in the catalog of data pipeline component types.

Abstract: The technology disclosed relates to endpoint data loss prevention (DLP). In particular, the technology disclosed relates to enforcing data loss prevention policies at an endpoint without needing to perform content sensitivity scan at the endpoint.

Abstract: This disclosure relates to method and system for identifying Personally Identifiable Information (PII) through secret patterns. The method includes receiving user data from at least one data source through a plurality of communication channels. The user data includes PII and non-PII. The user data is associated with a user. The PII includes a plurality of personal identifiers. The method further includes identifying the PII in user data through a predictive model. The method further includes generating a secret pattern based on the PII identified through the predictive model. The secret pattern is an identifiable label. The method further includes adding the secret pattern to each of the plurality of personal identifiers in PII. The method further includes identifying each of the plurality of personal identifiers through the secret pattern in real-time, when user data is transmitted from the at least one data source to at least one data destination.

Abstract: A file management device comprising a memory; and a processor coupled to the memory and the processor configured to: a common feature extracting unit that extracts a feature common to a plurality of data files to which a same tag is provided from the data files; a tagging rule storage DB that stores a feature extracted by the common feature extracting unit and the tag provided to the data files in association with each other as a tagging rule; and a tag providing unit that provides a tag to a newly input data file based on the tagging rule stored in the tagging rule storage DB.

Abstract: In some implementations, a device may receive a request to merge a first cloud computing instance with a second cloud computing instance to generate a multi-cloud computing instance. The device may access a first application programming interface to obtain a first configuration of the first cloud computing instance. The device may access a second application programming interface to obtain a second configuration of the second cloud computing instance. The device may generate a target configuration based on the first configuration or the second configuration. The device may instantiate a set of resources with the target configuration for the multi-cloud computing instance. The device may provide output identifying the multi-cloud computing instance.

Abstract: A search query relating to a search for people and including one or more search terms is received. A search graph for the search is created from a previously created graph which is a directional graph in which people are represented by nodes and content is represented by nodes or edges. The search graph is generated by filtering out nodes or edges that represent content that is determined not to be relevant to the search terms in the search query; and, for the remaining content that is determined to be relevant to the search terms in the search query, adding to the graph a measure of the relevance of the content to the search terms. The search results are generated by operating on the search graph to identify people in the search graph who are sources of content that is relevant to the search terms.

Abstract: Certain embodiments described herein relate to an improved disk usage growth prediction system. In some embodiments, one or more components in an information management system can determine usage status data of a given storage device, perform a validation check on the usage status data using multiple prediction models, compare validation results of the multiple prediction models to identify the best performing prediction model, generate a disk usage growth prediction using the identified prediction model, and adjust the available space of the storage device according to the disk usage growth prediction.

Abstract: Systems, devices, and methods are provided for determining whether security assurances are satisfied by security policies that are used to control access to resources used by a mainframe application. A system may use a database to store a plurality of security policies that may comprise security polices of various resources used by mainframes, including resources managed by operating systems and database systems. A reference policy that corresponds to the security assurance being sought may be determined. The security policies may be evaluated using a satisfiability modulo theories (SMT) solver to determine whether the security policies are equally or less permissive than the reference policy.

Abstract: Various techniques are described for platform management of integrated access of public and privately-accessible datasets utilizing federated query generation and query schema rewriting optimization, including receiving at a dataset access platform a query formatted according to a first data schema, generating a copy of the query, saving the query and the copy to a datastore, parsing the copy of the query in the first schema using an inference engine, determining whether the query comprises data associated with an access control condition associated with accessing the dataset, the access control condition being configured to indicate whether the query is permitted to access the dataset, and rewriting, using a proxy server, the copy of the query in a second schema, and optimizing the rewriting by identifying a database engine to execute the query and including other data converted into another triple associated with an attribute of the query.

Abstract: Various techniques are described for platform management of integrated access of public and privately-accessible datasets utilizing federated query generation and query schema rewriting optimization, including receiving at a dataset access platform a query formatted according to a first data schema, generating a copy of the query, saving the query and the copy to a datastore, parsing the copy of the query in the first schema using an inference engine, determining whether the query comprises data associated with an access control condition associated with accessing the dataset, the access control condition being configured to indicate whether the query is permitted to access the dataset, and rewriting, using a proxy server, the copy of the query in a second schema by converting the copy of the query into a triple associated with the query and another triple associated with the access control condition.

Abstract: Provided herein are systems and methods for identity resolution and data enrichment. An example method performed by at least one hardware processor includes detecting at an account of a data provider, an update to personally identifiable information (PII). The PII is stored in a source table managed by an account of a data consumer. An identity resolution process is performed based on detecting the update. The identity resolution process includes generating a secure identifier of a user associated with the PII. The method further includes generating at the account of the data provider, a result table including the secure identifier. The result table is shared with the account of the data consumer.

Abstract: Various embodiments of the present invention provide methods, apparatus, systems, computing devices, computing entities, and/or the like for performing predictive structural analysis. Certain embodiments of the present invention utilize systems, methods, and computer program products that perform predictive structural analysis using at least one of table column classification machine learning models, table column clustering machine learning models, structural variance generation machine learning models, and emergence report generation machine learning models.

Abstract: Some embodiments provide a non-transitory machine-readable medium that stores a program. The program receives a metadata model definition comprising a set of entity definitions specifying a set of entities, a set of semantic key definitions specifying a set of semantic keys associated with the set of entities, and a set of relationship definitions specifying a set of relationships between the set of entities. The set of semantic keys are configured to be used by an application to refer to the set of entities. The program further determines a set of technical keys for the set of entities. The set of technical keys are configured to be used by the device to refer to the set of entities. The program also stores the metadata model definition and the set of technical keys in a set of records.

Abstract: The present disclosure relates to a non-transitory computer readable medium for a separate context viewing, organization, and management area for annotations that have been created. The rationale for such computer readable medium is discussed in detail. These annotations can be created on webpages or PDF documents available at a uniform resource locator (URL) anywhere on the World Wide Web. Once these annotations are created, having a system to manage the life cycle of these annotations in various contexts separate from the original web page is beneficial. This annotation life cycle and the rationale for various steps within this life cycle is discussed in detail. The present disclosure also describes some pertinent filtering and display technologies for annotations that have been created.

Abstract: Techniques are disclosed for performing operations in a distributed computing environment comprising a plurality of computing devices implementing a Kubernetes environment. An indication is received of one or more custom resources of the Kubernetes environment. The custom resources are grouped into a commit set. The commit set is defined as an atomic unit which either succeeds or fails atomically. It is determined that at least one of the custom resources has failed to complete. In response to the determination, the custom resources of the commit set are reverted to a previous consistent state.

Abstract: A system and method for generating shard data based on semantic sharding is proposed. Shard data is generated by a map sharder that is configured to generate the shard data based on semantic objects in a geographical area and a definition of sections. The sections cover parts of the geographical area. The map sharder searches, for each of the sections, for semantic objects that are located at least partly in a section and stores found objects in a shard data entry of the shard data.

Abstract: A method and system for cloud distributed hybrid data storage and normalization are disclosed. The method may include obtaining a data set comprising data entities. A data entity may comprise data fields each containing a data element. The method may further include determining policy constraint meta-data for each of the data elements based on the storage policy constraint. The policy constraint meta-data may include a first meta-tag indicating the storage policy constraint for the data element. The method may further include determining whether a server satisfies the storage policy constraint based on the first meta-tag for the data element. When the server satisfies the storage policy constraint, the method may further include transmitting the data element to the server to store the data element on the server. When the server fails to satisfy the storage policy constraint, the method may further include, storing the data element on the client.

Abstract: A computer system obtains a data model that encodes a data source as a tree of logical tables. Each logical table includes respective data fields of the data source. For each data field in the logical tables, the system automatically assigns a semantic role to the data field based on a concept obtained from a concept graph. The system determines hierarchies between the data field and other data fields in the first data source based on a respective semantic role of the data field and semantic roles of the other data fields. The system validates the data field based on the assigned semantic role and the determined hierarchies. The system displays transformations to clean the data field based on the assigned semantic role. The system transforms data values for the data field according to a user input and updates the logical tables according to the transformed data values.

Abstract: Techniques discussed herein manage backups of a service cell (SC). Each SC may include a data plane that is isolated from other SCs and comprises a distributed computing cluster (a cluster). A manifest that specifies one or more backup policies may be used to generate a full backup or a partial backup of a data set stored by the cluster. In accordance with the manifest, a signal may be sent to nodes of the cluster. In response, the nodes may transmit locally-stored data (e.g., data segments) to specified locations at a remote storage. The system may maintain a mapping of which segments correspond to data that was stored in the cluster at a time corresponding to a full or partial backup.

Abstract: The present disclosure relates to the comparison of data items, such as media data items or streams, e.g. audio files or streams, to determine a similarity between the data items. A device receives a plurality, or ensemble, of data items, and calculates the pairwise similarity scores between a number of unique pairs of data items within the ensemble. For any given pair of data items, the pairwise similarity score is compared with an overall similarity score for an “indirect path” connecting the pair of data items via one or more intermediate data items. If the indirect path indicates a closer similarity between the data items, the pairwise score is updated based on the overall similarity score of the indirect path. The updated similarity score generated by this comparison then provides an improved indication of the similarity of the data items compared to the prior art method.

Abstract: A network validation system is described which may perform operations such as generating, analyzing, verifying, correcting, recommending, and deploying language, symbols, etc., such as domain specific language, configured to allow users to express their intent on the configuration and operation of a network, such as a cloud-based network. The network validation system may provide domain specific language that includes rules, statements, symbols, data, etc., configured to convey the intent of users on the configuration and operation of networks for purposes such as configuring and/or validating communication paths, testing or setting associated network object configurations, and may be employed to report violations in such configurations relative to user intent of the one or more users. The network validation system may also be employed to monitor such domain specific language and generate telemetry signaling, for example, that a rule has or has not been violated, actions a user may take, etc.

Abstract: In an example implementation according to aspects of the present disclosure, a method may include receiving, at a computing device, an attempt to authenticate a user via an authentication event and, upon validating the authentication event used, determining which authentication profile to initiate for the user to use the computing device. As an example, the computing device then initiates the determined authentication profile to launch a customized set of programs on the computing device for the user.

Abstract: Provided herein are systems and methods for identifying personal identifiers in content. An entity engine may receive content to identify candidate personal identifiers. The entity engine may determine that a text string in the content matches to a data format specified in entity definitions corresponding to types of personal identifiers and a rule for finding a geographic or linguistic term in the content correlated to the specific type of personal identifier. Each entity definition may specify a data format for finding a specific type of personal identifier in content. The data format corresponds to a type of personal identifier. The entity engine may identify, according to a rule of the first entity definition, a geographic or linguistic term in the content correlated to the type of personal identifier. The entity engine may classify the text string as the type of personal identifier, for preventing data breach or exfiltration.

Abstract: Some embodiments process data as defined by a polymorphic data model. A server may provide the polymorphic data model to a client application from a datastore. The functionality or features of the client application may be controlled as a function of the polymorphic data model. The client application may thus provide different functionalities when provided with different polymorphic data models. Updates to the polymorphic data model may be used to update the client application's functionality without any updates to the client application's executable code.

Abstract: In an embodiment, a computing system, such as a monitoring computer, receives a request from a user to monitor an account of the user with an online service provider. The request may include personal information and user preferences for one or more protective actions. The system periodically monitors external data sources for indications of changes to personal information associated with the account, and detects changes or attempted changes to personal information associated with the account. The system may determine risk levels associated with detected changes or attempted changes, and transmit a notification to the user via a communication channel selected based on the determined risk level and/or the user preferences. The system may also initiate protective actions, so that further unauthorized access to the account may be prevented.

Abstract: Embodiments of storage device architecture for processing data using machine learning are disclosed. In some embodiments, the storage device includes a separate I/O core and a neural network core. The storage device can create a copy of data streams in which the data is stored, and the neural network core can process the copy of the data streams in a neural network while the I/O core can perform read or write functions on the data streams.

Abstract: One embodiment provides a method, including: receiving, at a service provider and from a user, a request for computation of a function, wherein the request includes a description of the function to be computed and requirements of the user; identifying, from data sources accessible to the service provider, a plurality of data sources to participate in the computation in view of the requirements and the description of the function, wherein each of the plurality of data sources includes data of a data owner and constraints on use of the data; identifying a multi-party computation protocol and parameters of the multi-party computation protocol for performing the computation; and running the computation of the function using the data of the plurality of data sources and in view of the requirements of the user and the constraints of the plurality of data sources.

Abstract: A system for verifying a user's request to access a resource determines a set of entitlement attributes from the request. The set of entitlement requests indicates a type of permission to access a particular resource, including at least one of a write-access and a read-access to the particular resource. The system determines whether there is any rule that is violated by the set of entitlement attributes. In response to determining that there is at least one rule that is violated by the set of entitlement attributes, the system denies the request.

Abstract: Methods, systems, and devices for asset discovery, user discovery, data classification, risk evaluation, and data/device security are described. The method includes retrieving data stored at one or more remote locations, summarizing the retrieved data at the one or more remote locations, transferring the summarized data from the one or more remote locations to the at least one computing device, processing the transferred data by the at least one computing device, discovering assets in technology environments, classifying data that resides on each asset of the discovered assets into a respective confidentiality group of multiple confidentiality groups, calculating one or more risk scores for the discovered assets or users of the discovered assets, or both, and performing a security action to protect data that resides on an asset of the discovered assets.

Abstract: A system for preventing duplication of a computer source file to a destination file includes a user application accessed by a user of a computer. An agent application hosted by the computer registers for a notification of a user interface action with an operating system (OS) of the computer. The agent receives notice from the OS of the user interface action and determines if the user interface action is indicative of a data file duplication operation of a source file to a destination file location The Agent compares a property of the source file and a property of the destination file location to a blocking criteria, and blocks the user interface action from reaching the application.

Abstract: A structured data store service, such as a database service, may implement fine-grained access to data maintained at the database service using federated identity. Fine grained access requests may be received at a database service for specified data maintained for an application provider from a client of the application provider. An access credential may be also be received. Verification of the access credential may be obtained, and the database service may evaluate the fine-grained access request according to a delegation policy corresponding to the access credential to determine whether the fine-grained request is authorized. If authorized, the fine-grained access request may be service. If not authorized, the fine-grained access request may be denied. In some embodiments, multiple application clients may have the same authorization for data, such as read authorization, while another one or more application clients may have different authorization for the data, such as write authorization.

Abstract: Systems and techniques are described herein for providing a beholder, via a user interface on a user experience device, with a multi-faceted and flexibly-dimensional virtual experience of one or more target identities placed in a subject matter context. A systems aspects include selecting, finding, and interpreting digital content pertaining to a subject matter context indicated by the beholder; deconstructing digital content into discrete content elements containing content segments that are classified according to a schema of element facets, and then constructing a facet-segmented repository of discrete content elements pertaining to a target identity; supplementing existing digital content with supplemental information and content to support the presentation of expanded information content, dimensions, or sensory capabilities; and creating and presenting a virtual experience container that is adapted to the beholder and the capabilities of the beholders user experience device.

Abstract: A method, computer program product, and computing system for defining a normal IO write mode for writing data to a storage system, the normal IO writing mode including: writing the data to a cache memory system, writing the data to a journal, in response to writing the data to the journal, sending an acknowledgment signal to a host device, and writing the data from the cache memory system to a storage array. A request may be received to enter a testing IO write mode. In response to receiving the request, the data may be written to the cache memory system. The writing of the data to the journal may be bypassed. The acknowledgment signal may be sent to the host device in response to writing the data to the cache memory system. The data may be written from the cache memory system to the storage array.

Abstract: Non-limiting examples of the present disclosure describe systems and methods for scanning of data for policy compliance. In one example, network data is evaluated to generate one or more groupings. A grouping may be based on file type of the network data. Data identification rules are applied to identify one or more data schemas from file data of a grouping. One or more policy rules that apply to content of the data schema may be determined. At least one file of the file data may be scanned to determine compliance with the one or more policy rules. A report of compliance with the one or more policy rules may be generated based on a result of a file scan. Other examples are also described.

Abstract: A method includes receiving a piece of data for storage in a storage system, breaking the piece of data into a plurality of fixed size data portions, and determining a deduplication hash for each of the fixed size data portions. The method further includes checking for matching hashes already stored in the storage system, storing fixed size data portions unmatched to an already stored hash with metadata identifying the unmatched hash fixed size data portions in the storage system, and storing metadata for hash fixed size data portions already stored in the data storage system. The piece of data is reviewed for further deduplication using sliding window hashes during background activity of the data storage system.

Abstract: A data analysis computer system is provided that receives a timeseries dataset and generates implied data from the dataset. The dataset is further vectorized to reduce the dimensionality of the data. Users provide input to identify windows of data that either positively or negatively correlate to instances of a given type of occurrence within the data. The user defined windows are converted to fixed sized windows and a machine learning algorithm constructs a model from the data. The model is used to predict instances of the given type of occurrence in newly received data. Validation of the predications may be performed.