Abstract: In an information management system, activity data is collected and analyzed for patterns. The information management system may be policy based. Activity data may be organized as entries including information on user, application, machine, action, object or document, time, and location. When checking for patterns in the activity or historical data, techniques may include inferencing, frequency checking, location and distance checking, and relationship checking, and any combination of these. Analyzing the activity data may include comparing like types or categories of information for two or more entries.

Abstract: A late-binding token (LBT) is securely generated and provided to a device application. When the LBT is presented and validated, a resource associated with the presentation is bound to the LBT and authenticated for access to a service and provided valid credentials for accessing that service.

Abstract: The disclosed computer-implemented method for completing multi-factor authentication via mobile devices may include (1) identifying a request to communicate with a user's mobile device to complete multi-factor authentication of the user to an online service, (2) determining that authentication notifications are disabled for attempts made by the user to login to the online service, (3) preventing an authentication notification from being displayed on the user's mobile device, (4) receiving an out-of-band authentication communication from a mobile device, (5) determining that the mobile device that sent the out-of-band authentication communication is the user's mobile device and is therefore trusted to complete the multi-factor authentication of the user to the online service, and (6) enabling the user to login to the online service and automatically receive future notification. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Embodiments of the invention include systems and methods for recovering the system status and maintaining drive coherency after an unexpected power loss. In particular, these systems and methods reduce overhead for maintaining drive coherency by providing for pre-allocation of groups of write addresses and recording the pre-allocated groups of addresses to the non-volatile memory. Write processes can write to the pre-allocated group of addresses while the next group of addresses are pre-allocated and recorded to non-volatile memory.

Abstract: System and method of anonymising data comprising the steps of reading parameters of an anonymisation procedure from a configurable anonymisation procedure resource. Receiving data to be anonymised from a data source, wherein the data source is identified by one or more of the read parameters. Applying one or more transformations to the received data according to the anonymisation procedure, wherein the one or more transformations include transforming at least an original portion of the received data into a transformed portion.

Abstract: In accordance with an embodiment, described herein is a system for real-time communication signaling protocol for use in a telecommunication network and communication in web-only Internet. The protocol facilitates adapting complex signaling on the server-side into simple operations towards the Web. In an embodiment the protocol is used to communicate between a server-side web signaling engine and a client-side communication controller. The client-side communication controller provides a JavaScript API to encapsulate the signaling layer. The web signaling engine includes a controller which terminates communications using the protocol, and normalizes communications into an internal protocol suitable for communication with telecommunications network systems. In an embodiment, the protocol utilizes JSON and a WebSocket connection and can be defined as a WebSocket subprotocol.

Abstract: An identification system that may be used in heterogeneous computing environments provides a fail-free path to providing identifiers from a single canonical namespace. Objects or gateways requiring an identifier for access are accessed using an identifier for the canonical namespace. If an entity requests access using an identifier from another namespace, an external database is consulted to determine if a mapping exists for the identifier to another identifier the canonical namespace. If no mapping exists, or the external database is unavailable, then an identifier is automatically generated in the canonical namespace and is used for the access. An internal database is updated with the automatically generated identifier, providing a mechanism to add mappings without administrative intervention. To access resources requiring an identifier from another particular namespace, a canonical namespace identifier may be mapped to another identifier in the particular namespace, or a generic identifier may be used.

Abstract: Event notifications can be provided to a user across multiple client devices or platforms. If a user takes action on one device, notifications on all devices can be updated to reflect the action. For example, notifications can be indexed by topic and time sequence (or other sequence), and multiple notifications related to the same topic can be consolidated at a server or the client so that current information can be presented to the user.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for sharing tenant information utilizing a multi-tenant on-demand database service. These mechanisms and methods for sharing tenant information utilizing a multi-tenant on-demand database service can allow automatic sharing of information owned by a first tenant with other tenants of the multi-tenant on-demand database service. In this way, collaboration among tenants of the multi-tenant on-demand database service may be enabled via the sharing of the tenant information.

Abstract: Methods, systems, and articles of manufacture for implementing user access to remote resources residing on an external domain. Various implementations include authenticating and authorizing a user on a first system and receiving user request to access remote resources. The first system invokes processes or modules to initiate a new session to perform auto logon on behalf of the user on a second system by using stored user's credentials and subdomain delegation techniques without user intervention. The second system authenticates and authorizes this new session to allow user access to remote resources residing thereupon. The first system further prepares the user's system to take over the new session by setting cookie(s) and also by redirecting the URL so the user may continue to use the new session to access the desired remote resources residing on the second system.

Abstract: Described herein is a technology for facilitating visualization of multiple hierarchies. In some implementations, a primary hierarchy having primary components arranged in different primary hierarchical levels is provided. A second hierarchy for the primary components of the primary hierarchy is provided. The primary components are configured as geometric objects with concentric zones corresponding to different secondary hierarchical levels with secondary components.

Abstract: Various embodiments are provided for managing a global cache coherency in a distributed shared caching for a clustered file system (CFS). The CFS manages access permissions to an entire space of data segments by using the DSM module. In response to receiving a request to access one of the data segments, a calculation operation is performed for obtaining most recent contents of one of the data segments. The calculation operation performs one of providing the most recent contents via communication with a remote DSM module which obtains the one of the data segments from an associated external cache memory, instructing by the DSM module to read from storage the one of the data segments, and determining that any existing contents of the one of the data segments in the local external cache are the most recent contents.

Abstract: Some embodiments of supporting trusted relationships between multiple organizations in a networked system have been presented. In one embodiment, a centralized server manages a networked system, which includes the centralized server and a set of computing machines coupled to each other within an internal network of a customer. The centralized server may segregate data and encapsulating resources within the networked system by a set of organizations created by the customer. Furthermore, a trusted relationship defined by a system administrator of the centralized server may be applied to a first one and a second one of the set of organizations.

Abstract: The disclosed embodiments provide a set of methods, systems, data structures, and computer-executable instructions for executing on a compute machine to automatically analyze data associated with an indexed corpora and to generate for graphical display a set of results associated with those analytic operations.

Abstract: Methods and systems are disclosed for assessing an identifier. The method comprises receiving, via an interface, a string of characters making up the identifier and determining a keyboard type for a keyboard. The method further comprises calculating, by a calculator module, a typeability score for the identifier based on the string of characters and the keyboard type, wherein the typeability score signifies a difficulty of typing the identifier on the determined keyboard type. In certain embodiments, the method further comprises determining a finger positioning corresponding to a position of a typer's fingers on the keyboard, and the typeability score is further based on the finger positioning. In some embodiments, the finger positioning is based on the typer's typing habits.

Abstract: A database query governor determines when a query cannot be executed within a defined time threshold, but still executes the query or some variant of the query so partial results for the query may be returned to the user after executing for less than the defined time threshold, instead of an error message indicating the query was not executed at all. The partial results provide information to the user that may be sufficient for some applications, or may indicate to the user how the query could be modified to run in less time.

Abstract: Techniques include: identifying a first group that has a specified number of entities or more; associating a first group restrict with the first group, where a group restrict comprises data associated with two or more members of a group; assigning the first group restrict to one or more items of content in a search index that the members of the group can access; identifying a second group associated with a second group restrict, where the second group has fewer than the specified number of entities; and assigning searcher restricts for entities in the second group to one or more items of content in the search index, where the searcher restricts include data associated with a searcher.

Abstract: A database query governor determines when a query cannot be executed within a defined time threshold, but still executes the query or some variant of the query so partial results for the query may be returned to the user after executing for less than the defined time threshold, instead of an error message indicating the query was not executed at all. The partial results provide information to the user that may be sufficient for some applications, or may indicate to the user how the query could be modified to run in less time.

Abstract: Methods, storage medium and systems for implementing visibility policies within a supply chain include storing event data on a computer-readable storage medium of a first partner, the event data corresponding to at least one event associated with an item while the item was in possession of the first partner, the item having traveled through the supply chain, transferring evidence of possession between the plurality of partners as the item travels through the supply chain, and requesting access to the event data by a second partner. Implementations further include determining that the item traveled through a portion of the supply chain based on the evidence, authenticating an identity of the second partner, and authorizing the second partner to access the first event data, when it is determined that the item traveled through the portion of the supply chain and when the identity of the second party is authenticated.

Abstract: According to some implementations, a technique for processing an application search query is disclosed. The techniques include receiving a search query from a partner, determining a set of subqueries based on the search query, and extracting query features of the search query from the search query. The techniques further include determining an initial result set of applications based on the set of subqueries and the query features. The initial result set includes a plurality of application representations each defining features of a different application. The techniques also include determining a score for each application in the initial result set of applications based on the set of query features and one or more scoring models, determining a result set based on the scores of the applications in the initial result set, and providing the result set to the partner.

Abstract: A client terminal is provided with: a column encryption unit that, from an encryption key, a table identifier, and a column identifier, generates a column private key, a column public key, and a comparison value, from which the unit generates a concealed comparison value and a ciphertext, thus encryption a particular column; and an encrypted table natural joining request unit that issues a natural joining request text that requests natural joining related to the column encrypted from the encryption key, table identifier, and column identifier. The natural joining request text contains as a table joining key the column public key and column private key that were generated by the encryption key from the table identifier of a first and second tables and the column identifier of the a-th column and b-th column. Then, an encrypted database server executes natural joining using the table joining key, and returns the result.

Abstract: According to one aspect of the present disclosure, a method and technique for managing access to application-based objects in a system utilizing a role-based access control framework is disclosed. The method includes: determining, for each object class of an application, a privilege needed for invoking a privileged operation associated with the object class; creating a privilege shell for a user running the application; setting the determined privilege on the privilege shell; associating an authorization to the privilege shell; and invoking the privilege shell to run the application by the user.

Abstract: Example embodiments disclosed herein relate to determining a reputation of a network address. A long-term reputation of the network address is determined. A short-term reputation of the network address is determined based on the long-term reputation and trend information associated with the long-term reputation.

Abstract: A user can have media files associated with a user account in a shared resource environment, enabling the user to access those files from multiple devices and locations. Instead of uploading each file, a process can scan the files to determine corresponding copies already stored to the shared resource environment, which can be associated with the user account without uploading another copy. In cases where encryption or other protection prevents the content of a file from being verified, a fingerprint of unencrypted records of the file can be generated and compared against an index of fingerprints for previously encountered files. If the fingerprint matches information stored for a media file, and the fingerprint meets at least one validity criterion, a copy of the media file can be associated with the user account even though the user's copy cannot be read, or potentially even played, by a component of the environment.

Abstract: A computer-based system identifies, measures, and rewards user interaction with online content, such as customer interaction with online content posted by companies about their products and services. The system tracks user activity online, such as user activity on online social networking systems and on web sites. For each user and company, the system generates a profile that contains data representing the user's interaction with the company's online content. The system may use such profiles to search for users who are similar to a particular user, to drive social gesture advertising to amplify the actions of users, to highlight particular users for other users to discover and connect with, and to deliver targeted promotions and to incent online engagement by users.

Abstract: A method of implementing a universal framework for searching across multiple search platforms in a secure federated search.

Abstract: A computer determines, based on a degree of authorization of a user, that a user has authorization to view a type of field. Based on the degree of authorization of the user, the computer generates a modified list of search terms by adding additional search terms to a list of search terms. The computer executes a search using the modified list of search terms. The computer identifies a search result that includes the first type of field which further includes a search term that is included in the modified list of search terms.

Abstract: Interfaces to storage devices that employ storage space optimization technologies, such as thin provisioning, are configured to enable the benefits gained from such technologies to be sustained. Such an interface may be provided in a hypervisor of a virtualized computer system to enable the hypervisor to discover features of a logical unit number (LUN), such as whether or not the LUN is thinly provisioned, and also in a virtual machine (VM) of the virtualized computer system to enable the VM to discover features of a virtual disk, such as whether or not the virtual disk is thinly provisioned. The discovery of these features enables the hypervisor or the VM to instruct the underlying storage device to carry out certain operations such as an operation to deallocate blocks previously allocated to a logical block device, so that the storage device can continue to benefit from storage space optimization technologies implemented therein.

Abstract: A method for sharing an email in an on-demand database system is provided. The method receives, at one or more computer systems associated with the on-demand database system, the email from a first user; determines, at the one or more computer systems, a database record associated with the email; logs, at the one or more computer systems, the email with the associated database record; and provides access to the email to one or more second users with access rights to the database record.

Abstract: A method, system and computer-usable medium are disclosed for controlling the distribution of data. Data stored in a datastore is filtered according to a data release policy to generate filtered data. A data release policy agreement, corresponding to the data release policy, is generated. The filtered data and the data release policy agreement are then provided to an information consumer. The data release policy agreement is then used to enforce the data release policy.

Abstract: Techniques are provided for a database server to identify a query that comprises an access check operator specifying a data access control policy, and if so, to re-write the query to produce an optimized query execution plan. A first technique rewrites a query comprising an access check operator based on the privileges associated with the database principal requesting the query. The rewritten query exposes the access predicates relevant to the requesting principal to subsequent database optimization processes. A second technique rewrites a query comprising an access check operator that specifies a data security policy that does not include a denied privilege. A third technique rewrites a query that comprises an access check operator specifying one or more database table columns that store row-specific access control lists. The rewritten queries are used to generate a query execution plan that provides for several query execution optimizations.

Abstract: Methods, systems, and apparatus for selecting geographic areas of interest for a query. A method includes for each query stored in search log data, determining an origin location for each occurrence of the query, determining a content location for each occurrence of the query, for each of a plurality of catchment areas, determining catchment area matches for the query based on the origin location of each occurrence of the query and the content location of the occurrence of the query, determining, for each catchment area, a catchment area score that is indicative of an interest level for the catchment area for a query, the determination based on a number of catchment area matches for the catchment area for the query and selecting, for the query and based on the catchment area scores for the catchment areas, one of the catchment areas as a selected catchment area for the query.

Abstract: A social networking system receives a query associated with a user and, in response, provides a combined result set comprising objects stored by a social networking system that match the query. The combined result set comprises multiple result sets obtained from different search algorithms. The various objects stored by the social networking system may be of different types representing different concepts, such as user objects, application objects, event objects, location objects, group objects, and hub/page objects, any of which may be included in the result set. The objects of the result set may be further filtered, ordered, and/or grouped based at least in part on known relationships of the user with the objects, such as geographic distances between locations associated with the user and the objects.

Abstract: Embodiments of techniques or systems for customization of, diagnostic assistance, and driving analytics related to snapshot data of a vehicle are provided herein. For example, a snapshot can be taken. The snapshot can be based on a snapshot package customized according to symptoms experienced by a driver of a vehicle, and analyzed individually or in conjunction with other snapshots to determine a trend. Additionally, the snapshot can be based on a configuration of a vehicle. In this scenario, the snapshot and the configuration of the vehicle can be used to provide an enhanced troubleshooting guide by removing non-suspect areas from consideration, thereby mitigating troubleshooting time. The snapshot can be setup to record parameters related to wear and tear on components of the vehicle. Suggestions can be made to a driver of the vehicle to reduce or mitigate actions that negatively impact wear and tear.

Abstract: A security module determines categories of files normally accessed by a software application. The security module monitors file accesses of the application to determine whether the application accesses files belonging to different categories than it normally accesses. If the categories of the files accessed are the same, then the file accesses are allowed to proceed. If the categories of the files accessed are different, then the security module takes a security action.

Abstract: Provided are techniques for data movement. An activity is created that overrides existing security, that is associated with a user, that defines one or more source tables in a relational database and one or more target tables that are available to the user for the activity, and that provides security credentials of an author of the activity for use by the user, wherein the one or more target tables represent data in one or more target files in a file system. The activity is executed using the security credentials of the author to move data in a source table of the one or more source tables to a target file of the one or more target files, wherein a target table of the one or more target tables is defined over the target file. Access is provided to the user to the moved data using the target table.

Abstract: Terminating user access to database systems is described. A system receives, from a user interface associated with a system administrator, a request to terminate access by a user of a database system. The system terminates access by the user to the database system, without deleting an account associated with the user from an association with data and/or a workflow associated with the database system.

Abstract: Multiple computers are connected to a data storage unit that includes a file system, which further includes multiple data entities, including files, directories and the file system itself. The file system also includes, for each data entity, an owner field for indicating which computer, if any, has exclusive or shared access to the data entity, along with a time field for indicating when a lease of the data entity began. When a computer wants to lease a data entity, the computer uses a disk reservation capability to temporarily lock the data storage unit, and, if the data entity is not currently leased, the computer writes its own identification value into the owner field and a current time into the time field for the data entity, to claim the data entity for a renewable lease period. If a prior lease of a data entity has expired, another computer may break the lease and claim ownership for itself.

Abstract: A service delivery platform receives a request for a catalogue. The system obtains subscriber-specific multi-media catalogue entries based on profile information stored with the service delivery platform. The system sends the subscriber-specific catalogue entries along with service details of the subscription back to the subscriber.

Abstract: A standardized platform, implemented in a secure web-based environment, enables the sharing of data between different individuals, institutions and even industries. Data is shared between members of the platform in accordance with defined data objects with specified relationships and permissions which are managed, accessed and modified by members using the platform. Such data objects have defined relationships to entities and other data objects, and are controlled by designated preferred owners, which can vary over time.

Abstract: Data management systems and methods include a cloud-based platform coupled to a system of agents or folders hosted on client devices. The platform does not store actual data but instead makes use of metadata provided by the agents to track a location of all data in the system and manage the distributed storage, movement and processing of the actual data among the agents. In so doing, the platform pools networked storage into “virtual clusters” using local storage at the agents. The agents collectively monitor, store, and transfer or move data, and perform data processing operations as directed by the platform, as described in detail herein. The agents include agents hosted on or coupled to processor-based devices, agents hosted on devices of a local area network, agents hosted on devices of a wide area network, agents hosted on mobile devices, and agents hosted on cloud-based devices.

Abstract: Embodiments of the invention relate to optimizing user response rate in social media. One embodiment includes generating a statistical model for modeling a likelihood of social media user response from data collected from social media using a set of available features. The social media users are ranked in an estimation set based on the statistical model. The ranked social media users are placed in a rank ordered list. A sub-interval on the rank ordered list is selected for maximizing the response rate.

Abstract: Information technology tools can be provided to manage access by a plurality of attendees through a network to a presentation. Each of the attendees is registered with an associated content access status, and presentation data for the presentation is provided to a registered attendee based on the particular content access status of the registered attendee.

Abstract: Systems and methods for obtaining access to a database file managed by an operating system in a computing system are disclosed. One method includes transmitting a call to an operating system from a database management system, the call requesting access to a database file. The method also includes receiving an address from the operating system at the database management system. The address represents a general address of the database file managed by the operating system. The method further includes transmitting a call to the operating system from the database management system, which includes an address and a size of a view of the database file to be created. The method also includes receiving an address of the view of the database file from the operating system.

Abstract: Systems and methods for clustering content according to similarity are provided that identify and group similar content using a set of tags associated with the content. A topic model of a group of content is built, producing a probability distribution of topic membership for the content. Individual items of content are then clustered using a clustering algorithm, and a distance matrix from the probability distribution is built. Based on the distance matrix, individual items of content are labeled as “must-link” or “cannot-link” pairs with the group of content. The topic model is then embedded into successively smaller dimensions using a kernel method, until the clustering is stable with respect to both the behavioral and content domains.

Abstract: Methods and apparatus related to obtaining access-restricted search related structured data. Stored access-restricted search related structured data may be obtained in response to an authorized informational query request. An access-restricted data key corresponding to the informational query request may be compared with a database data access key in a database that includes the access-restricted search related structured data to determine whether access to such data is allowed. Search results that include and/or are based on access-restricted search related structured data may also be obtained.

Abstract: Systems and methods are provided for performing a search based on a snapshot image captured from media content presented to a user. The snapshot image contains features of the media content that the user wishes to target for the search. A search system recognizes features of the snapshot image and creates a search query based on the snapshot image. The search query is used to identify features of the snapshot image, and search results related to the identified features are presented to the user. Supplemental data or user input received with the snapshot image may be used in analyzing and identifying features of the snapshot image.

Abstract: A method for searching for a travel product having one or more data elements associated therewith from a plurality of potentially suitable travel products in a system comprising a web based interface for receiving inputs from a user and from one or more sources of data, and for displaying results to a user based on the inputs; a business logic layer providing access to the sources of data in a predetermined manner, such as based on rules and preferences; and a database including data relating to the parties associated with the system; wherein the method comprises the steps of: entering one or more search parameters into the interface; launching multiple simultaneous searches based on the search criteria and one or more attribute of the travel product to the one or more sources of data to identify the potentially suitable travel products; displaying the potentially suitable travel products on the interface; selecting one or more of the potentially suitable travel products for further processing; further proces

Abstract: An intelligent framework is provided that is disposed between a high-level language environment and a database system environment. According to one embodiment, a software framework infers the need for one or more integrity constraints. The software framework programmatically receives (a) information regarding definitions of a multiple data structures associated with multiple objects participating in a software application, and (b) information regarding relationships among the data structures, where each object represents an instance of a data structure of the multiple data structures. Then, the software framework infers the need for one or more integrity constraints based upon the information regarding definitions of the data structures and the information regarding relationships among the data structures. Finally, the software framework instructs a storage system to apply the one or more integrity constraint.

Abstract: A telemetry system can parse and transform one or more change sets from a format intended to be processed by a computer to a form that is readily consumable by a human. The report or display generated to present the results can be customized for a particular domain.