Abstract: The invention relates to a method for storing data in a relational database, comprising a plurality of tables, wherein the data is stored in these tables, wherein each row of each table is provided with an original primary key for identification, and wherein foreign keys are provided for cross-referencing different tables of the relational database, wherein the primary keys are encrypted, wherein the foreign keys are encrypted based on the encrypted primary keys and wherein for each table where a primary key is referenced as a foreign key an encrypted pointer is stored to link the corresponding encrypted foreign key to the encrypted primary key. The present invention further relates to a relational database server.

Abstract: A method and apparatus for dynamically adjusting an ingestion rate for backup operations on a source system. The method generally includes monitoring a resource utilization related to one or more performance metrics of the source system in performing at least a primary workload. Based on the monitored resource utilization, the backup system determines a data ingestion rate for backup operations on the source system. The backup system ingests data from the source system to a backup repository at the determined data ingestion rate.

Abstract: Provided are a computer program product, system, and method for using geographical location information to provision one or more target storages for a source device. A determination is made of a geographical location of the source device and of geographical locations of the target storages. A determination is made of one of the target storages whose distance from the source device based on the geographical locations of the source device and the target storages satisfies at least one distance requirement. A configuration procedure is initiated to configure the source device and the determined target storage to have the source data backed-up from the source device to the target storage over the network.

Abstract: A data handling system includes a managing resource that manages one or more managed resources. The managed resource inherits tags of its managing resource(s). A user of the data handling system may apply tags to a managing resource via a management console. The tags may be applied via a user interface and utilized to organize the managed and managing resources. The tags may be typeless in that the user may assign any type of meaning to any tag. Tags assigned to the managing resource are applied or inherited to the resources it manages. The pattern of inheritance repeats through ‘n’ generations as managed resources, themselves, can be managing resources.

Abstract: Some embodiments provide a program that receives, from an application, a role-based permission (RBP) request specifying an RBP, a first user, and a second user. The RBP specifies a set of actions, a first set of users authorized to perform the set of actions, a second set of users on which the first set of users is authorized to perform the set of actions, and a relationship condition. When the relationship condition specifies a hierarchy-based relationship, the program determines valid users in the second set of users according to a hierarchy of users. When the relationship condition specifies a non-hierarchy-based relationship, the program determines valid users in the second set of users according to a relationship not based on the hierarchy of users. The program determines whether the first user is authorized to perform the set of actions on the second user based on the determined valid users.

Abstract: A system and method for identifying distributed attacks, such as, but not limited to, distributed denial of service attacks and botnet attacks, in a first network serviced by a first carrier and configured to alert a second network serviced by a second carrier that is different from the first carrier is disclosed. Once an attack has been identified, an attack alert is generated and provided to the second network or other aspects of the first network, or both. The attack alerts may be distributed dynamically with the second network via diameter based security protocol Rs. Such system and method may mitigate distributed malicious attacks by sharing destination internet protocol and bad international mobile subscriber identity information across carriers.

Abstract: Various aspects and embodiments facilitate management of digitally emulated physical resources. Users can access a management system to create pairings between digitally emulated resources and physical resources. The paired resources can be consistently managed through the system, such that any user from any source can access and dynamically reserve physical and digital resources. In further embodiments, the system can create pairings between the digital emulation and physical resources based on merge operations performed on multiple digital emulations of resources, copy and pasting for other digital emulation of resources, and digital altering of existing resources. The system enables efficient management, control, and implements security for digital and physical resources using, for example, a “digital room.” Security rules and enforcement can be specified within the digital rooms based on access rights, content displays, and can be specific to each resource controlled by the digital room.

Abstract: A method for execution by one or more processing modules of one or more computing devices of a dispersed storage network (DSN), the method begins by receiving a store data object request from the user device. The method continues by initiating storage of N instances of the received data object in the storage set. The method continues by issuing a status response to the user device when detecting that M instances have been successfully stored and sending an instance i of the data to the user device when receiving a read instance i of the data object request from the user device.

Abstract: A machine may be configured to perform image evaluation of images depicting items for online publishing. For example, the machine performing a user behavior analysis based on data pertaining to interactions by a plurality of users with a plurality of images pertaining to a particular type of item. The machine determines, based on the user behavior analysis, that a presentation type associated with one or more images of the plurality of images corresponds to a user behavior in relation to the one or more images. The machine determines that an item included in a received image is of the particular type of item. The machine generates an output for display in a client device. The output includes a reference to the received image and a recommendation of the presentation type for the item included in the received image, for publication by a web server of a publication system.

Abstract: Generally discussed herein are systems, devices, and methods for unstructured text analysis. A method can include deconstructing structured data to create unstructured text, creating a first word cloud using the unstructured text, creating a query based on the first word cloud, receiving data corresponding to contents of a specified number of records determined to include data most similar to the first word cloud in a database of records, creating a second word cloud for each of the specified number of records using the data from the specified number of records, determining similarity values indicating how similar the first word cloud is to each of the second word clouds, and providing a similarity indicator for each record of the specified number of records to a user interface, the similarity indicator representing a relative magnitude of the determined similarity values of the specified number of records.

Abstract: A method and apparatus for displaying a product. The three-dimensional model includes objects and a spatial relationship of the objects to each other. A group of the objects in the three-dimensional model is identified based on a policy applied to a user input selecting a portion of the product and assigns a value to a group of attributes associated with the group of the objects. The value assigned to the group of the attributes indicates that the group of the objects is to be displayed on the display system. Other objects in the objects having the attributes without the value are not displayed. The attributes associated with the objects are outputted in which the group of the objects is displayed in three dimensions on the display system using the attributes associated with the objects, enabling a desired level of performance in visualizing the three-dimensional model of the product.

Abstract: Embodiments of a supplemental message display method and system are described. Supplemental messages to be displayed on the client display of a network client are defined and comprise content that is separate from content generated by any application currently executed on the network client. A virtual desktop view is served from a server computer to the network client. The virtualization layer defines a screen region on the virtual desktop view of the client display device through for the display of one or more of the supplemental messages. The virtualization layer controls the size, location, color, and transparency level of the defined screen region. The defined screen region is made persistent to ensure the continual display of the supplemental message. The supplemental message content is provided to the network client and interactive user input is received through the displayed message.

Abstract: Some embodiments provide a method for a system that enforces policy for a network. The method receives (i) a first set of network state data from a first cloud management application that manages a first aspect of the network and stores its network state data in a first format and (ii) a second set of network state data from a second cloud management application that manages a second aspect of the network and stores its network state data in a second format. The method stores the first and second sets of network state data in a single, unified data format. The method monitors the stored sets of network state data to determine whether the network state violates one or more network policies that constrain the network state received from the first and second cloud management applications.

Abstract: Adapting a mobile or other application (“app”) to a partitioned environment is disclosed. In various embodiments, a “secure zone” or other logical partition is created and enforced at least in part by adapting a mobile or other app to behave in a manner required by and/or otherwise associated with the secure zone or other partition and which behavior is or in various embodiments may be different than a native behavior of the mobile or other app as designed and written by an application developer of the app.

Abstract: An information processing apparatus in which a plurality of applications operate, the apparatus comprising: a detection unit which detects a change, in a display unit, of screens respectively corresponding to the plurality of applications; and a control unit which performs control when, in accordance with a screen of an application displayed in the display unit, the application exclusively uses a USB device USB-connected to the information processing apparatus; wherein if a change of the screen is detected by the detection unit, the control unit performs control so as to forcibly close usage of the USB device by an application for which usage of the USB device is permitted, and permit usage of the USB device to an application corresponding to a screen after the change.

Abstract: Responsive to each of a plurality recipients of an electronic communication accessing the electronic communication and accessing information that is associated with the electronic communication but not contained in a body of the electronic communication, activity information relating to activities of respective electronic communication recipients accessing information associated with the electronic communication can be received. A request to receive at least one recommendation as to who is able to provide information pertaining to the electronic communication can be received from another electronic communication recipient. Responsive to receiving the request, each of the electronic communication recipients can be rated to generate at least one recommendation as to who is able to provide information pertaining to the electronic communication, the recommendation based, at least in part, on the received activity information and respective weighted attributes.

Abstract: A system and associated methods for responding to a request for a web page containing dynamic content by generating and delivering a static version of the requested page and content. Specifically, embodiments are directed to a system and methods for receiving a request for dynamic web content at a server, instantiating a virtual browser within an execution environment running on the server, loading the requested dynamic web content into the virtual browser, executing the executable content of the requested dynamic web content (thereby creating a corresponding static version of the requested dynamic web content), and delivering the static version in response to the request.

Abstract: Embodiments of the invention are directed to systems, methods and computer program products for converting MLOAD and TPUMP operations. In some embodiments, a system is configured to: receive an input production parameter, wherein the input production parameter is associated with a load utility and defines a library of parameters, wherein the library of parameters defines a first syntax; convert the first syntax of the library of parameters to a second syntax, wherein the second syntax is associated with the load utility; validate the second syntax of the library of parameters; and write an output parameter to a memory location based on positive validation of the second syntax of the library of parameters.

Abstract: Embodiments relate to payload storage format for storing data in support of an aggregation function. As an input is subject to aggregation, the input is evaluated to ascertain a payload format for the aggregation. It is understood that there is more than one payload format. An evaluation of the aggregation key is a factor in the initial payload format. If the key is an addition to an existing aggregation, the evaluation considers changing the format of the payload to address processing and/or memory efficiency for the aggregation. The evaluation and the format change takes place dynamically so that the aggregation may continue.

Abstract: Embodiments of the invention are directed to systems, methods and computer program products for converting MLOAD and TPUMP operations. In some embodiments, a system is configured to: receive an input production parameter, wherein the input production parameter is associated with a load utility and defines a library of parameters, wherein the library of parameters defines a first syntax; convert the first syntax of the library of parameters to a second syntax, wherein the second syntax is associated with the load utility; validate the second syntax of the library of parameters; and write an output parameter to a memory location based on positive validation of the second syntax of the library of parameters.

Abstract: A method, article of manufacture, and apparatus for managing data. In some embodiments, this includes receiving a query from a client, based on the received query, analyzing a catalog for location information, based on the analysis, determining a first storage system, an associated first file system, an associated first protocol translator, a second storage system, an associated second file system, and an associated second protocol translator, identifying a first data and a second data, wherein the first data is stored on the first storage system, and the second data is stored on the second storage system, running a first job on the first data using the associated first protocol translator, wherein the first job is not a native job of the first file system, and running a second job on the second data using the associated second protocol translator, wherein the second job is not a native job of the second file system.

Abstract: A method for managing license information for playback of content, includes transmitting certificate information of a storage device to a license serve, updating a certificate revision list received from the license server on the basis of the certificate information, receiving encrypted license information allowing the content to be played through a first session established between the storage device and the license server, the first session being identified by session identification information, and decrypting the encrypted license information and storing the decrypted license information to a secure region.

Abstract: A social networking system leverages information obtained regarding user interactions with applications hosted through the social networking system as well as information obtained regarding purchases of application-related digital items and digital currencies to provide insight into user behavior. The social networking system can use these insights to enhance the user's experience of the applications, purchases, and the social networking system generally. For example, the social networking system can customize transaction flows, provide credit referrals, and provide users with aggregated yet personally tailored sales information.

Abstract: An apparatus, system and method for providing search results based on a social distance from a user are provided. The method includes receiving a search query from a user, setting a value representing a social distance from the user, the social distance including one or more levels, gathering results corresponding to the search query for each level of social distance, and providing the gathered results to the user.

Abstract: A method and system for controlling access to data. Each dataset of L datasets is stored, via storage access controller (SAC) software external to an operating system, on at least one physical storage device. Each dataset is independently accessible in accordance with an access permission type assigned to each dataset independently selected for each dataset from N unique access permission types. N?2 and L?N. Control of access to each dataset stored on the at least one physical storage device is configured to enforce, via the SAC, access to each dataset in accordance with the access permission type assigned to each dataset. The operating system is unable to provide the control of access to each dataset to which access is enforced by the SAC in accordance with the access permission type assigned to each dataset and which is stored on the at least one physical storage device.

Abstract: There is disclosed a method of and system for providing access to a file from a user to a web resource, without the web resource needing to store the file on its server.

Abstract: An electronic device connects to a network associated with a service provider via a router at a home location. During a time interval, the electronic device provides information specifying a network address of the router to an authentication computer when the electronic device is connected to a network. The authentication computer uses the received information to determine a connection pattern of the electronic device. Moreover, the authentication computer identifies that the electronic device is at the home location based on the connection pattern. Then, the authentication computer provides, to an accounting computer associated with the service provider, a request to allow the electronic device to access a wireless network associated with the service provider at a remote location (which is other than the home location).

Abstract: There is provided a display control apparatus including: a display control unit configured to cause a display apparatus to display a live preview image generated based on image data obtained through an image sensor, and one or more processed images generated using respective image processing conditions based on one of the image data which has been obtained at some time point; and a determination unit configured to determine whether or not a predetermined user operation has been recognized. If it is determined that the predetermined user operation has been recognized, the display control unit updates the one or more processed images to be displayed.

Abstract: Improved techniques of identifying when a device needs of service involve using data analytics to determine conditions when a device administrator of a computerized device is to be sent an alert regarding that device. Along these lines, a device monitoring system receives state data from a device that indicates the device is in a particular state, e.g., running certain applications, using some percentage of the processor and memory capacity, etc. The device monitoring system maps the device state data to a decision of whether or not to send a device administrator an alert concerning the device. The decision itself is a result of applying a model to the state data that is derived from the application of data analytics on historical device state data and administrator login data.

Abstract: Method and system are provided for updating data at a shared resource in a concurrent user environment. The method includes: a first client application carrying out the steps of: pulling data from a shared resource for update wherein the data includes a timestamp of a last update; requesting a lock on the data only allowing updates from the first client for a set period of time; working on the data whether or not a lock is in place for the first client application. Wherein when a first client application applies to update the data, a check is carried out to compare the timestamp of the data updated by the first client application with the current timestamp of the data, and if these do not match, the update fails.

Abstract: A system and method for interacting with a social network database. A user's spoken request is transcribed and associated with metadata comprising location data and sent through a communication port of a mobile electronic device to a social network database. The social network database, in response to the communication, produces a response dependent on the transcribed information and metadata, which is returned to the mobile electronic device, and presented to the user. An ad may be included in the presentation to the user.

Abstract: Controlling drones and vehicles in package delivery, in one aspect, may include routing a delivery vehicle loaded with packages to a dropoff location based on executing on a hardware processor a spatial clustering of package destinations. A set of drones may be dispatched. A drone-to-package assignment is determined for the drones and the packages in the delivery vehicle. The drone is controlled to travel from the vehicle's dropoff location to transport the assigned package to a destination point and return to the dropoff location to meet the vehicle. The delivery vehicle may be alerted to speed up or slow down to meet the drone at the return location, for example, without the delivery vehicle having to stop and wait at the dropoff location while the drone is making its delivery.

Abstract: To authenticate nodes, a connection between a first node and a second node may be identified. A first set of nodes having connections with the first node and assigned to a first plurality of clusters may be identified. A second set of nodes having connections with the second node and assigned to a second plurality of clusters may be identified. A first distribution of clusters may be generated based on the first set of nodes. A second distribution of clusters may be generated based on the second set of nodes. The first distribution and the second distribution may be analyzed. An authenticity metric for at least one of the first node and the second node may be generated based on the analyzing the first distribution and the second distribution.

Abstract: Methods and systems are described for a media guidance application that provides recommendations to a user viewing a media asset. For example, the media guidance application may provide a recommendation of a media asset based on a user's profile and may modify the user's profile based on the user's actions and keywords in the content of the media asset. For example, the media guidance application may determine whether the media asset is of interest to a user and in response may update the user's profile based on keywords in the media asset. If the media guidance application determines that the media asset is of interest to the user, it may add keywords in the content of the media asset to the user's profile and increase their corresponding weights. Otherwise, the media guidance application may decrease the weights in the user's profile corresponding to keywords in the media asset.

Abstract: A security program installed or in communication with a computer is provided. The security program is configured to intercept disk (I/O) operations that read/write from/to disk. This allows the security program to confirm and control access to data based on security rules. Further, the security program can categorize data based on security rules and then format and store data on disk in a format that prevents access by application(s) of the computer. The security program is further configured to re-format data to be accessible by the application in a format accessible by the application(s) when a request to access the data complies with security rules.

Abstract: There are provided a method, apparatus, system and computer readable storage medium of adding an instant message contact. The method includes: receiving a joining-in request for a group from a client where a user locates, the joining-in request comprising a group identifier; acquiring audio and/or video information of other user in the group, based on the group identifier; and transmitting the audio and/or video information of the other user to the client where the user locates, for adding by the client where the user locates the instant message contact based on the audio and/or video information of the other user. Thereby, the mutual trust between unknown users is improved, and the success ratio of adding an unknown user as a contact and the ratio of turning into a contact from an unknown user are increased.

Abstract: A data securing device according to an embodiment includes a processor that executes a process including: receiving individual data and a parameter for anonymization, using the parameter to suppress data that does not satisfy k-anonymity among data that is included in various attributes of records in the individual data, and suppressing data that is extracted from the data at random; and outputting individual data in which data is suppressed at the receiving.

Abstract: A system for protecting data managed in a cloud-computing network from malicious data operations includes an Internet-connected server and software executing on the server from a non-transitory physical medium, the software providing a first function for generating one or more security tokens that validate one or more computing operations to be performed on the data, a second function for generating a hash for each token generated, the hash detailing, in a secure fashion, the operation type or types permitted by the one or more tokens, a third function for brokering two-party signature of the one or more tokens, and a fourth function for dynamically activating the one or more signed tokens for a specific time window required to perform the operations permitted by the token.

Abstract: Provided are a computer program product, system, and method for using geographical location information to provision multiple target storages for a source device. A determination is made of a geographical location of the source device and a distance between the source device and each of the target storages and between each pair of target storages. A determination is further made of qualifying k-tuples of the target storages, wherein each k-tuple comprises a group of k target storages to which the source data is to be backed-up. A qualifying k-tuple has one target storage that satisfies a distance requirement with respect to the source device and a distance between any two target storages in the k-tuple satisfies the distance requirement. A selected qualifying k-tuple is indicated to use to backup the source data at the k target storages in the qualifying k-tuple.

Abstract: Provided are a computer program product, system, and method for using geographical location information to provision multiple target storages for a source device. A determination is made of a geographical location of the source device and a distance between the source device and each of the target storages and between each pair of target storages. A determination is further made of qualifying k-tuples of the target storages, wherein each k-tuple comprises a group of k target storages to which the source data is to be backed-up. A qualifying k-tuple has one target storage that satisfies a distance requirement with respect to the source device and a distance between any two target storages in the k-tuple satisfies the distance requirement. A selected qualifying k-tuple is indicated to use to backup the source data at the k target storages in the qualifying k-tuple.

Abstract: A synchronization window for synchronizing data for a calendar in a client calendar data store on a calendar data client computer system with data for the calendar in a server calendar data store on a calendar data server computer system can be calculated using a current time. A request for synchronization data for calendar items for the calendar with calendar times that are within the synchronization window can be sent to the calendar data server. One or more responses to the request can be received from the calendar data server. The response(s) can include received records for calendar items that are at least partially within the synchronization window. The received records can include a master record of a recurring calendar item and an instance record of an occurrence of the recurring calendar item. The received records for the calendar items can be incorporated in the client calendar data store.

Abstract: The present invention provides a system and method for real-time communication signaling between HTML5 endpoints and the IMS Core of a telecommunication network. The method adapts complex signaling on the server-side into simple operations towards the Web. In an embodiment the system includes a network-side controller communicating over an Internet domain protocol with a client-side controller. The client-side controller provides a JavaScript API to encapsulate the signaling layer. The network-side controller includes session border control functionality, terminates Internet domain communications with the client-side, parses, and normalizes the Internet domain communications into an internal protocol suitable for communication with telecommunications network systems. The system thereby provides a dedicated signaling channel with session border control for applications on the client to interact with telecommunications network services.

Abstract: Systems, methods and computer program products for using searchable aggregate indices associated with non-aggregated value storage. In one method, a search system stores metadata values for each of a plurality of objects in a storage unit. The metadata values are stored in corresponding value storage locations that are associated with an identifiable metadata fields. An aggregate index is provided which includes a dictionary of terms that are contained in metadata values associated with a designated set of the metadata fields. The aggregate index is searched for one or more specific search terms, and one or more of the metadata values are retrieved from the value storage locations in response to the search, where the individual metadata fields associated with the retrieved metadata values are identified.

Abstract: Customer initiated tenant operations are presented that are provided within a work center of a client cloud application. System supported tenant operations combined with automatic validations and determinations are exposed directly to the customer via the work center. Customers are able to coordinate and initiate tenant operations using a specific work center called a service control center, which is added to other work centers that build the cloud enterprise applications or products the customers are using. The enterprise application embedded service control center is connected to a central service control center, which is located in a service provider cockpit system. The central service control center enables the execution of customer specific tenant operations that are tailored to the customer's landscape and guarantees the tenant isolation.

Abstract: Methods, systems, and computer program products for preventing sharing of sensitive information through code repositories are provided herein. A method includes detecting one or more items of sensitive information in a check-in associated with a given user in a shared version management system; automatically refactoring the one or more items of sensitive information in the check-in by externalizing the one or more items of sensitive information as an encrypted file; and upon acceptance by the user of one or more changes to the check-in, automatically (i) decrypting the encrypted file using one or more code repository credentials associated with the given user, and (ii) incorporating the one or more items of sensitive information into the check-in.

Abstract: In one embodiment, a method includes while a user is interacting with a mobile device, displaying a notification on a screen of the mobile device automatically and without any user input to the mobile device, the notification informing the user an event that has occurred recently and is not related to the user's interaction with the mobile device.

Abstract: Embodiments of the disclosure provide a method, system, and computer program product for managing a windowing operation. The method can include determining a sentinel value that defines a start of a grouping window for a stream of tuples and a terminating sentinel value that defines the end of the grouping window based upon an attribute contained in the stream of tuples. The stream of tuples can be monitored for the sentinel value and the terminating sentinel value by a stream operator. The stream operator can initiate a windowing operation that defines the start of the grouping window in response to a presence of the sentinel value and terminate the windowing operation in response to a presence of the terminating sentinel value.

Abstract: Methods, systems, and products are disclosed for securing access to a file system. A directory is established in a hierarchical file structure having access permission defined by a first owner. A subdirectory is established in the directory. A sub-level subdirectory is established in the subdirectory having access permissions defined by a second owner. The subdirectory is publically accessible to anyone satisfying the access permission defined by the first owner, such that a change directory system call is executed for a user in the subdirectory, even though the user has not authenticated the access permission defined by the second owner.

Abstract: A server is implemented with a modified file open action, which, when a user performs the modified open, initially opens a file without locking the file. When a user indicates (either explicitly or implicitly) that the user is attempting to or intending to open the file, the file can then be locked for editing. In this way, the default action when a user requests a file is to open the file without denying other users access to the file. Then, when the user indicates that editing should occur, the lock for the file is obtained.

Abstract: A content player receives user-specific information from different users and associates the information with content. Subsequently, the player receives a request to perform a content-altering operation. In response, the player performs the operation such that the information for the requesting user is affected, but not the information for other users. The information may include a placeholder, an indication as to whether the content and/or the entire content has been accessed, a protection status indicating whether or not the content can be deleted, and so on. The information may be added to and/or configured to accompany and/or otherwise be associated with the content. The player may identify the user so that different information for different users can be associated with the content for the respective user, such as by prompting the user to select an identifier from a list or perform a “log in.