Abstract: A method and system are provided for estimating a skill level of a user regarding a software program executed by the user on a computer processing system. The software program has workbenches that each include commands corresponding thereto. The method includes creating at least one special command set for user skill level estimation by including the commands that exist in various ones of the workbenches and that are executed at least a predetermined percentage of times by the user and excluding the commands which are common to at least two of the workbenches. The method further includes creating partial command sequences from the commands in the at least one special command set. The method also includes determining frequent command execution patterns by applying pattern mining to the partial command sequences. The method additionally includes estimating the skill level of the user based on frequencies of the frequent command execution patterns.

Abstract: One or more content items can be received at a data recognition module. The data recognition module can utilize, individually or in any combination, image recognition (e.g., OCR, object recognition, etc.), audio recognition (e.g., speech recognition, music identification, etc.), and/or text recognition (e.g., text crawling) in order to identify or recognize at least a portion of the one or more content items. Based on the identified content portion(s), the one or more content items and/or their respective source(s) can be classified. In one example, an image containing a not yet machine-readable curse word can be included in a source webpage. The image can be received at the data recognition module. The curse word contained in the image can be recognized/identified using an OCR process. Based, at least in part, on the recognized/identified curse word, the image and/or the webpage can be classified as likely being associated with inappropriate material.

Abstract: Pre-processing before precise pattern matching of a target pattern from a stream of patterns. Including acquiring occurrence numbers of target elements in the target pattern, initializing the buffer, the buffer indicating a section in the stream of patterns, determining whether occurrence numbers of the target elements in the buffer reach the occurrence numbers of the target elements in the target pattern, updating the buffer and then returning to the determining step, in response to determining that the occurrence numbers of the target elements in the buffer do not reach the occurrence numbers of the target elements in the target pattern, and outputting the elements in the buffer for subsequent processing, in response to determining that the occurrence numbers of the target elements in the buffer reach the occurrence numbers of the target elements in the target pattern.

Abstract: A method for retroreflective tagging of objects in a data processing system is described herein. The method includes first monitoring tagging of objects in memory of the data processing system. Subsequently, an application of a new tag to an existing one of the objects can be detected that differs from a previously applied tag of the existing one of the objects. Thereafter, the end user responsible for the new tag can be prompted to retroreflectively tag the existing one of the objects with the new tag. In response to an affirmation by the end user, the new tag is applied to the existing one of the objects and also to others of the objects tagged with the previously applied tag.

Abstract: The disclosed computer-implemented method for detecting modification attacks on shared physical memory may include (i) identifying a page frame of physical memory that is shared by a plurality of virtual machines, (ii) calculating a first checksum for the page frame, (iii) calculating, while the page frame is shared by the plurality of virtual machines and before any of the plurality of virtual machines writes to a page of virtual memory that is mapped to the page frame, a second checksum for the page frame, (iv) detecting a modification attack (such as a rowhammer attack) on the page frame by one of the plurality of virtual machines by detecting that the first checksum does not equal the second checksum, and (v) performing a security action in response to detecting the modification attack. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A feeling of each of members forming a group or team and the mood of all the members felt by each member are objectified and recorded. An emotion/mood data input, display, and analysis device includes a controller, a display, an input unit, and a recording unit. The controller includes an input screen generation unit. The input screen generation unit generates a first input screen that allows each of multiple members forming a group to, as an inputter, input whether an emotion or feeling of the each member is cheerful or gloomy, a level of cheerfulness or gloominess, whether the emotion or feeling is strong or weak, and a level of strength or weakness in a bifurcated manner. The display displays the first input screen. The controller captures data through the first input screen displayed on the display and the input unit and records the data in the recording unit.

Abstract: A method and associated systems for synchronizing a disaster-recovery system of a database. A processor identifies transactions that affect data blocks of a database and records each change in a vector form. For each block, the processor determines a more efficient way to communicate changes made to the block by a subset of the identified transactions. If fewer resources are needed to communicate an updated image of the entire changed block than would be needed to instead communicate a related set of change vectors that identify changes made to the block by the subset of transactions, then the processor communicates the updated image to the disaster-recovery system. Otherwise, the processor instead communicates the related change vectors to the disaster-recovery system. The processor repeats these determinations and communications for each block of the database that was changed by an identified transaction.

Abstract: A system includes a server and an image processing apparatus, and the server is provided that includes a communication interface, a storage, and a processor. The communication interface is configured to communicate with the image processing apparatus. The storage is configured to store data. The processor may provide a result of processing a first event that includes a speech of a user to the image processing apparatus in response to the first event being received from the image processing apparatus, store a record of the first event in the storage according to processing of the first event, determine a relation between the first and second events that includes a user input by a non-speech method in response to the second event being received from the image processing apparatus, and process the second event based on the record of the first event stored in the storage in response to the relation.

Abstract: An example provides a method of creating an instance of a virtual machine in a cloud computing system that includes: accepting a network connection at a server resource in the cloud computing system from a first client resource in a first virtualized computing system to transfer a first virtual machine; receiving first signatures for guest files of the first virtual machine from the first client resource; checking the first signatures against a content library in the cloud computing system to identify first duplicate files of the guest files that match first base files stored in the content library, and to identify first unique files of the guest files; instructing the first client resource such that a response to the instructing will send the first unique files to the exclusion of the first duplicate files; and generating an instance of the first virtual machine in the cloud computing system having the first base files and the first unique files.

Abstract: Provided are techniques for a domain specific representation of document text for accelerated natural language processing. A document is selected from a set of documents to be analyzed. A character stream from the document is converted into a token stream based on tokenization rules. Irrelevant tokens are removed from the token stream. The tokens remaining in the token stream are converted into an integer domain representation based on a domain specific ontology dictionary. The integer domain representation are stored to a Graphics Processing Unit (GPU) processing queue of each of one or more GPUs. Then, a result set is received from the one or more GPUs.

Abstract: In a method for validating data, a text of a document is received. At least one fact is extracted from the text. At least one expert refinement is merged with the at least one fact to create at least one modified fact. The at least one modified fact is provided for a review. An expert refinement to the at least one modified fact is captured in response to the review. A superset document based on the at least one pre-existing refinement and the expert refinement is stored.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for receiving a series of queries provided from a user device, the series of queries including two or more queries, obtaining a query pattern of the series of queries based on one or more entities and one or more aspects associated with the two or more queries, and determining, at least partially based on the query pattern, that a teachable moment interface is to be displayed with search results, and in response, transmitting content to be displayed in the teachable moment interface on a computing device.

Abstract: Implementations include systems and methods for scoring candidates for set recommendation problems. An example method includes repeating, for each code in code arrays for items in a set of items, determining a most common value for the code. In some implementations, the method includes determining that the most common value occurs with a frequency that meets an occurrence threshold and adding the code and the most common value to set-inclusion criteria. In other implementations, the method includes determining a value for the code from a code array for a seed item and adding the code and the most common value to set-inclusion criteria when the value for the code from the code array for the seed item matches the most common value. The method may also include evaluating a similarity with a candidate item based on the set-inclusion criteria and basing a recommendation regarding the candidate item on the similarity.

Abstract: A system that enables development and execution of predictive models comprises a centralized data management system, a data extraction tool a model validation tool and a model execution tool. In embodiments, a data management system includes a data management server that can be accessed via a web browser that stores data in the form of a flat file. An extraction tool extracts data. A model validation tool validates a model by scoring an analytical environment data set and a production environment data set. A model execution tool allows a user to select when and how often a model is scored.

Abstract: Techniques are described for assigning collections of records to parallel processing tasks for sorting index keys of the records. In one example, a method includes determining an order of the collections of records in a descending order by byte length of an index key of each of the collections of records. The method further includes modifying the order of the collections of records in a descending order, for collections of records with index keys of equal byte length, by number of records per collection of each of the collections of records with index keys of same byte length. The method further includes assigning the collections of records to a plurality of parallel processing tasks in the order of the collections of records. The method may combine low elapsed processing times by balancing the amount of work in each assigned processing task with reduced computing resource overhead for each processing task.

Abstract: Identification of inheritance-by-descent haplotype matches between individuals is described. A set of tables including word match, haplotypes and segment match tables are populated. DNA samples are received and stored. A word identification module extracts haplotype values from each sample. The word match table is indexed according to the unique combination of position and haplotype. Each column represents a different sample, and each cell indicates whether that sample includes that haplotype at that position. The haplotypes table includes the raw haplotype data for each sample. The segment match table is indexed by sample identifier, and columns represent other samples. Each cell is populated to indicate for each identified sample pair which position range(s) include matching haplotypes for both samples. The tables are persistently stored in databases of the matching system. As new sample data is received, each table is updated to include the newly received samples, and additional matching takes place.

Abstract: For dynamically changing a rendering of content, the content including a textual character is received at a mobile device. An encoding of the textual character uses a first code point according to a character encoding standard. The mobile device's presence at a geographical location is detected. The mobile device is associated with a user. A variant selection rule is selected at the device. The variant selection rule specifies a location based condition to select a variant corresponding to the textual character. A variant is selected at the device according to the variant selection rule, a variant mapping corresponding to the first code point. The variant mapping includes the variant. The encoding of the textual character is replaced at the device with an encoding of the variant in the rendering of the content.

Abstract: Software for processing a database query that includes: (i) receiving a query of a database including a search value; (ii) determining a distance between the search value and at least one reference value; (iii) determining a maximum distance from the search value to be used in searching a plurality of datasets of the database, wherein the maximum distance from the search value defines a search range and is based, at least in part, on the determined distance between the search value and the at least one reference value; (iv) determining a subset of datasets from the plurality of datasets that includes datasets for which a data range with respect to each reference value overlaps with the search range; and (v) performing approximate string matching for the search value on the subset of datasets.

Abstract: A security system for an external data storage apparatus and method of control thereof includes: a data storage, in which data is stored; a high-speed serial bus, which connects the data storage with a data terminal, which reads and writes the data stored in the data storage; a key input unit, which converts an identification (ID), which is input by operation of the user, to an electrical signal and outputs the converted signal; a memory, which stores and sets the ID input by the key input unit; and a control circuit, which, when the ID input by the key input unit is applied, compares the input ID with the preset ID stored in the memory and drives the data storage based on the compared results.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for receiving a query including search parameters; selecting one or more of the search parameters; for each of the selected parameters: generating a natural language representation of the selected parameter, and determining a rank of the selected parameter among the one or more selected parameters; generating a uniform resource identifier comprising the natural language representations of the selected parameters arranged in an order based on the ranks; obtaining one or more search results identified as responsive to the query; and providing the uniform resource identifier and the one or more search results for output.

Abstract: A computer system implements novel addressing algorithms to translate different types of non-network addresses requested by distributed clients into unique numeric addresses device of language-specific alphabetic characters. The non-network addresses may locate different objects in different addressing or locating systems for physical and virtual objects or locations. The computer system, working in cooperation with distributed clients, assists users who supply the unique numeric addresses with locating the different objects or locations in the different systems.

Abstract: A digital rights management (DRM) method for protecting digital documents, implemented in a DRM system. When an operator (document publisher) scans a document on a scanner to generates a digital document and specifies a list of users who will be granted access rights to the document, the DRM system applies digital rights protection to the document according to the specified access rights, and distributes the document to the specified users; the system also sends a confirmation notification such as an email to the document publisher, which contains a list of the receiving users, a copy of the protected digital document, and a link to a web-based tool that will allow the publisher to modify the access rights granted to the users. In addition, when applying digital rights protection, the DRM system specifies the publisher as a user who will have access rights to the document.

Abstract: Provided is an information processing apparatus including a control section that provides, to a terminal of a user, a relationship among a plurality of keywords each as an element constituting a facet that is used as an index for searching for a content, as a facet map, and a facet selection environment that is based on at least one keyword addable to the facet map as a new element of the facet, calculates a usage frequency of each of the keywords in the terminal, and adds a keyword whose calculated usage frequency satisfies a predetermined condition to the facet map as the new element of the facet.

Abstract: This disclosure provides example techniques to invoke one or more forensic tools, with a forensic investigative tool. The forensic investigative tool provides a common framework that allows investigators to invoke their own trusted forensic tools or third-party generated forensic tools. The forensic investigative tool described herein seamlessly and transparently invokes the forensic tools in accordance with an investigative profile created by the investigator.

Abstract: The present invention provides at least a method includes: extracting a plurality of partial communities from a plurality of users, based on the relationships of companion messages; computing a first degree of similarity for showing the similarity of the companion partial communities, based on the relationship of a user belonging to one partial community with a user belonging to the other partial community, from among the plurality of communities; computing a second degree of similarity for showing the similarity of companion partial communities, based on words within the messages sent by users belonging to both partial communities and under the condition that the first similarity be higher than a predetermined first threshold value; and creating an integrated community by integrating the companion partial communities under the condition that the second similarity be higher than a predetermined second threshold value.

Abstract: The present invention provides a method and device for detecting the presence of logo patterns in product images. The method comprises the steps of retrieving one or more logo patterns from a logo pattern library, each of the one or more logo patterns identifying a respective product brand; retrieving a product image; calculating for each of the one or more logo patterns, a matching degree, the matching degree representing a degree to which each logo pattern is present in the product image; selecting as a selected logo pattern, the logo pattern having the greatest calculated matching degree; and determining that the product image includes the selected logo pattern if the matching degree of the selected logo pattern is greater than a first threshold.

Abstract: Method for an automatic provisioning of a customized cloud stack comprising a customized infrastructure of servers, software and services, by using a number of domain specific languages, model-to-model transformations and code generators, wherein a first domain specific language is used to define a model of software and services to be provisioned on particular hosting units that are defined by a user, wherein the hosting units are mapped to a general model of the infrastructure of the customized cloud stack by an execution engine; and wherein the general model is generated by a second domain specific language, transformed by the execution engine and mapped to a model conforming to a metamodel of a third domain specific language which is used to provision the infrastructure according to the particular hosting units defined by the first domain specific language; wherein files for initialization of a particular server within the infrastructure of servers are generated by particular code generators according to t

Abstract: Various exemplary embodiments relate to a method and related network node including one or more of the following: receiving a request message, the request message including a pointer; determining whether the network node is associated with the pointer; and if the network node is associated with the pointer: determining a label associated with the pointer, modifying the request message to produce a modified message, the modified message including the label, and transmitting the modified message to at least one other network node. Various embodiments additionally or alternatively relate a method and related network node including one or more of the following receiving a publish message, wherein the publish message includes a pointer; generating a label to be associated with the pointer; modifying the publish message to produce a modified message, wherein the modified message includes the label; and transmitting the modified message to at least one other network node.

Abstract: Systems and methods for a communication platform that includes receiving a media message request; obtaining a set of web content resources associated with the media message request; rendering the set of web content resources; converting the rendered set of web content resources into a media resource; and transmitting the media resource to a destination according to the media message request.

Abstract: Techniques for determining a location of an entity are described. A determination module using member profile data may determine the location of the entity. Member profile data can include information about a member's employer and the employer's location. The module accesses member profiles from a social network. Additionally, the module may create a subgroup of entity-related member profiles from the accessed member profiles. The entity-related member profiles can be associated with a specific entity. Furthermore, the module may determine a suggested location for the specific entity based on location information derived from the related member profiles. Moreover, the module may calculate a connection density for the specific entity based on connections associated with the entity-related member profiles. Subsequently, the module may determine that the suggested location is a physical location when the calculated connection density is above a pre-determined threshold value.

Abstract: A system and method are disclosed for classifying a message. The method includes receiving the message, identifying in the message a distinguishing property; generating a signature using the distinguishing property; and comparing the signature to a database of signatures generated by previously classified messages.

Abstract: Systems and methods for communication of user comments over a computer network are provided. Users may place and review comments on webpages or other resources without the resources necessarily expressly incorporating such commenting systems and methods. User comments may be associated with particular elements of resources (e.g. links, videos, pictures, text, HTML tags). Comments may be displayed to the user based on the position of their associated elements. Commenting systems and methods according to the present disclosure may flexibly associate comments with particular elements based on metadata such as one or more attributes of an element, so as to account for changes in resources over time. Users may review comments left by other users, and users' view of other users' comments may be restricted based on visibility settings. User activity profiles comprising displays of user activity across multiple unrelated resources may be provided.

Abstract: A computer processor may extract identity information from a document. The identity information may include at least one custodian identity attribute. After extracting the identity information, the computer processor may determine that the identity information is associated with a specific custodian. The computer processor may then search for the custodian identity attribute in a custodian directory to determine whether the custodian directory contains an entry for the custodian. If the custodian is not in the custodian directory, the computer processor may create a new entry in the custodian directory for the custodian and store the extracted identity information in the new entry.

Abstract: Embodiments of the present disclosure set forth methods for selecting a preferred data set. The methods include generating a joined relation based on a first relation having a first join attribute and a first existence probability attribute, and a second relation having a second join attribute compatible with the first join attribute and a second existence probability attribute, wherein the joined relation comprises a skyline probability attribute based at least in part on the product of a second value of the first existence probability attribute and a third value of the second existence probability attribute; and selecting, by one or more processors, the preferred data set from the joined relation based on a comparison of the first value of the skyline probability attribute and a predetermined threshold.

Abstract: Provided is a knowledge extracting apparatus for extracting knowledge information related to a knowledge-extraction target from an electronic document distributed continually in a state where the electronic document is not associated with the knowledge-information extraction target. A knowledge extracting apparatus according to one embodiment is a knowledge extracting apparatus including: an information receiving section for receiving an electronic document; a knowledge extracting section for extracting a concept from the electronic document based on a target word to extract knowledge information and a clue word to extract knowledge information and forming knowledge information in which the concept thus extracted and the target word are associated with each other; a storage section for storing the knowledge information thus extracted; and an information analysis section for, after the knowledge information is stored, analyzing the electronic document based on the knowledge information in the storage section.

Abstract: Systems and methods for protecting the privacy of users by controlling access to the users' data. In particular, some embodiments provide for a higher-level declarative language for expressing privacy policies which can be verified using a computer-aided verification tool. The verification tool uses the expressed privacy policies along with language-level assumptions and assertions in the verification process. For example, high-level models of the privacy policies can be reduced to a simpler verification representation (e.g., a Boolean representation) based on a set of assertions. This verification representation can then be submitted to a constraint solver (e.g., Satisfiability Modulo Theories solver) for verification.

Abstract: Methods and arrangements for providing a compressed representation of a number sequence. An input number sequence is received, as is a stored number sequence. The input number sequence is compared to the stored number sequence. The comparing includes determining a set of coefficients corresponding to the input number sequence, via solving at least one algebraic equation, the at least one algebraic equation comprising at least one of: an arithmetic equation, and an exponential equation. The comparing further includes applying at least one test to determine whether the set of coefficients identifies at least a portion of the stored number sequence as matching the entire input number sequence.

Abstract: A method comprises receiving data associated with a detection of the odor, the data associated with the detection of the odor comprising a location of the detection of the odor and a time of the detection of the odor, retrieving weather data corresponding to the detection of the odor, the weather data including a wind speed and direction in the location of the detection of the odor at the time of the detection of the odor, calculating a location of the source of the odor as a function of the location of the detection of the odor, the time of the location of the odor and the wind speed and direction in the location of the detection of the odor, and outputting to a user on a display a graphical representation of a likely area that includes the location of the source of the odor.

Abstract: A method comprises receiving data associated with a detection of the odor, the data associated with the detection of the odor comprising a location of the detection of the odor and a time of the detection of the odor, retrieving weather data corresponding to the detection of the odor, the weather data including a wind speed and direction in the location of the detection of the odor at the time of the detection of the odor, calculating a location of the source of the odor as a function of the location of the detection of the odor, the time of the location of the odor and the wind speed and direction in the location of the detection of the odor, and outputting to a user on a display a graphical representation of a likely area that includes the location of the source of the odor.

Abstract: A method and a system of providing a web feed in a uniform resource identifier (URI) are provided. The method includes obtaining, by a processing unit, a plurality of the URIs from at least one data source in a primary electronic device, automatically fetching, by a parsing unit, at least one web feed, corresponding to at least one URI of the plurality of URIs, from a server, and providing the at least one fetched web feed.

Abstract: The method generates a first deduplication map (DDM) level of a DDM pyramid. The DDM pyramid identifies locations of data stored in the persistent storage resource of the deduplication system. The method further determines a first false positive rate target for a first index summary (IS) level of an index pyramid based on a memory footprint for the first IS level and an aggregate false positive rate target for the index pyramid. The first IS level accelerates lookup into the first DDM level. The first false positive rate target indicates a rate that a hit for a value found in the first IS level is not found in the first DDM level. The method also generates the first IS level with a first false positive rate based on the determined first false positive rate target.

Abstract: A method for computer system forensics includes receiving an identification of at least one host computer (26) that has exhibited an anomalous behavior, in a computer network (24) comprising multiple host computers. Respective images (68) of the host computers in the network are assembled using image information collected with regard to the host computers. A comparison is made between at least one positive image of the at least one host computer, assembled using the image information collected following occurrence of the anomalous behavior, and one or more negative images assembled using the image information collected with respect to one or more of the host computers not exhibiting the anomalous behavior. Based on the comparison, a forensic indicator of the anomalous behavior is extracted from the positive and negative images.

Abstract: A table creation request pertaining to a table in a database maintained on a multi-node data partitioning landscape that comprises a plurality of processing nodes can specify a number of partitions to be generated. At run time, a currently available number of processing nodes in the multi-node data partitioning landscape can be queried, and this currently available number of processing nodes can be compared with the specified number of partitions to be generated for the created table. The table can be generated with the specified number of partitions such that the generated partitions are located across the plurality of partitions according to a load balancing approach if the number of processing nodes equals the number of partitions to be generated or according to other information in the table request if the number of processing nodes does not equal the specified number of partitions.

Abstract: Based on information associated with users, a social networking system recommends one or more groups for a target user to join or to create. Characteristics of the target user, characteristics of users connected to the target user, characteristics of candidate groups in the social networking system may be used to identify groups for recommendation. The social networking system may provide questions to the target user and recommend a group to the target user based on received answers to the questions. For example, the answers to the provided question identify one or more characteristics of the target user, which are used to select a group for recommendation. Additionally, the social networking system may recommend additional users for the target user to add or invite to a group based on characteristics of the target user, the additional users, and/or the group.

Abstract: In one example embodiment, a method is implemented to relink a data item. The method includes identifying that a data item, referenced by a referencing document, is absent from a data item location for the data item indicated by the referencing document. User preference data, indicating a designated relink location to search for absent data items, is accessed. The relink location is searched for the absent data items. Another example embodiment may include a method to relink a current data item to a replacement data item location by accessing user preference data and searching a relink location for a replacement data item in accordance with the relink location indicated by the user preference data.

Abstract: Access is obtained to a plurality of intermediately transformed electronic documents (with a plurality of sections and subsections) which have been transformed, by topical analysis and text summarization techniques, from a plurality of original electronic documents comprising at least some unstructured electronic documents. Audit and retrieval agent code is appended to the sections and subsections to create a plurality of finally transformed electronic documents. Users are allowed to access the finally transformed electronic documents. The users are provided with accountability reminders contemporaneous with the access. The access of the users to the sections and subsections of the finally transformed electronic documents is logged. An audit report is provided based on the logging. Also provided is a cloud service for enterprise-level sensitive data protection with variable data granularity, using one or more one guest virtual machine images.

Abstract: A method performed by a physical computing device communicatively coupled to a computer network for creating an aggregate report of a presence of a user of the physical computing device on the network includes periodically searching the network with the physical computing device for content related to the user authored by a source other than the user, the searching being based on a unique set of identifiers associated with the user, dynamically updating the unique set of identifiers based on contextual trends within content returned as a result of the searching, and aggregating content published by the user to the network with the content returned as a result of the searching to form the aggregate report of the presence of the user on the network.

Abstract: Embodiments of the present invention is a technique of searching for relevant nodes. This technique may include: in response to selection of a first node, displaying, as first relevant nodes, nodes having a first relevance of at least a predetermined value among nodes connected from the first node by two hops; and, in response to selection of at least one of the first relevant nodes, displaying the selected first relevant node as a second node involving the first node. This technique may further include displaying, as second relevant nodes, nodes having a second relevance of at least a predetermined value among nodes connected from the second node by two hops.

Abstract: The present invention extends to methods, systems, and computer program products for formulating global statistics for parallel databases. In general, embodiments of the invention merge (combine) information in multiple compute node level histograms to create a global histogram for a table that is distributed across a number of compute nodes. Merging can include aligning histogram step boundaries across the compute node histograms. Merging can include aggregating histogram step-level information, such as, for example, equality rows and average range rows (or alternately equality rows, range rows, and distinct range rows), across the compute node histograms into a single global step. Merging can account for distinct values that do not appear at one or more compute nodes as well as distinct values that are counted at multiple compute nodes. A resulting global histogram can be coalesced to reduce the step count.

Abstract: A method and apparatus for controlling document access and application usage using centrally managed rules. The rules are stored and manipulated in a central rule database via a rule server. Policy enforcers are installed on client systems and/or on servers and perform document access and application usage control for both direct user document accesses and application usage, and application program document accesses by evaluating the rules sent to the policy enforcer. The rule server decides which rules are required by each policy enforcer. A policy enforcer can also perform obligation and remediation operations as a part of rule evaluation. Policy enforcers on client systems and servers can operate autonomously, evaluating policies that have been received, when communications have been discontinued with the rule server.