Abstract: A method for securely accessing a number of computing systems within a remote facility includes, with a mobile computing system, checking out access data from a centralized database, the access data providing access to the computing systems within the remote facility. The mobile computing device then interfaces with a first computing system, the first computing system being unable to have access criteria changed from a remote location. The mobile computing system then provides a user with access to the first computing system using the checked out access data without revealing that checked out access data to the user.

Abstract: Methods, systems, and apparatus, including computer program products, for discovering entities in a first portion of a data center network, examining information associated with the discovered entities to determine relationships that exist between pairs of entities in the first portion of the data center network, and generating a specification of the relationships that exist between pairs of entities in the first portion of the data center network based on results of the examining.

Abstract: In various embodiments, systems and methods for Multi-Tenant In-Memory Database access to an application program accessing an object-oriented database (OODB) are disclosed. Embodiments may include: connecting, by a processor, the application program to a data repository for a database; generating, by the processor, a first Firm for a first tenant; placing, by the processor, an address of a first object of the first Firm into a knowledge base pointer associated with the first tenant; placing, by the processor, an address of a main database object of the database into a pointer in an object of the first Firm; and accessing, by the processor, the first Firm through the knowledge base pointer and the database through the pointer object of the first Firm.

Abstract: Methods and systems for performing file transfers across different domains hosted by a virtualization server are described herein. A trusted domain (Dom 0) may indicate that one or more files, directories, and/or volumes are available to a second domain (guest domain) by updating share information stored in a key value store. The guest domain may enumerate the shared files to appear as if within its own file system structure. The guest domain intercepts calls to its file system, determines whether the requested data is actually stored in its own file system or in trusted domain, and proxies the file system call to the trusted domain when the requested data is shared by the trusted domain. Key value store information and shared data information and contents may be communicated using one or more memories shared between the trusted domain and guest domain.

Abstract: A database control method comprising a first main system processing in which, upon first data being stored in a second storage unit included in a second server communicably connected with the first server, the first data is stored in a first storage unit following instructions from a host computer, a first inhibiting processing in which, upon detecting an abnormality in communication with the second server, storing the first data in the first storage unit following instructions from a host computer is inhibited, a first query processing performing a first query to an arbitrating device arbitrating between the first server and the second server, and a processing executing or stopping the first main system processing in accordance with instructions from the arbitrating device.

Abstract: Techniques are described for data redistribution. Embodiments store a first set of receiver location identifiers mapped to a document identifier and assigned to a first set of receiver locations storing relational data referencing the document identifier. Embodiments store a second set of receiver location identifiers mapped to the document identifier and assigned to a second set of receiver locations storing document data corresponding to the document identifier referenced by the relational data. Sender index keys are received separately from the relational data and the document data, the sender index keys referencing the document identifier and containing sender location identifiers. Embodiments determine, from the first set of receiver location identifiers and the second set of receiver location identifiers, which receiver location identifiers are mapped to the document identifier referenced by the sender index keys.

Abstract: A system and method for connection labeling for use with connection pools. In accordance with an embodiment, the system comprises a connection pool, including a plurality of connection objects which provide connections that software applications can use to make requests to access the database, wherein each of the connections can be labeled according to the configuration of particular applications; and a connection pool logic that identifies connections labeled as high-cost connections, and avoids using those high-cost connections to serve requests when the total number of connections is below a particular threshold value.

Abstract: A system and method for connection labeling for use with connection pools, including support for cloud-based multi-tenant environments using connection labeling. In accordance with an embodiment, the system comprises a connection pool, including a plurality of connection objects which provide connections that software applications can use to make requests to access the database, wherein each of the connections can be labeled according to the configuration of particular applications; and a connection pool logic that identifies connections labeled as high-cost connections, and controls the creation or repurposing of high-cost connections to serve requests from the multiple tenants or tenant applications.

Abstract: A system and method for exposing internal search indices to Internet search engines. The internal search indices are exposed to external search engines in such a way that the data may be segregated into at least two types including one layer of search data specifically for the search engines, and another for potential users of the application. This significantly improves the probability of discovery by search engines and also provides for presentation of discovered content to users in a manner consistent with the content itself, or consistent with the intended controls or presentations established by the content's owner. The system and method also includes one or more components that reproduce information about IP in a format that search engines can recognize and locate. The component also forwards users coming through the search engines to the actual IP graphical user interface (GUI) instead of the files that the search engine discovered.

Abstract: In one embodiment, a method includes accessing a profile page of a user of an online social network, determining whether content on an external web site has been update by the user, and if the content on the external web site has been updated, then updating the profile page of the user to include the content.

Abstract: Particular embodiments access a search query submitted by a first user of a social-networking system; identify one or more web pages in response to the search query; retrieve, from the social-networking system, social-networking information of the first user to identify one or more second users of the social-networking system who are connected to the first user within a predetermined degree of separation within the social-networking system; for each of the one or more web pages, determine a value indicating a number of times that the web page has been accessed by the one or more second users; rank the one or more web pages based on the value determined for each web page; and send a ranked set of hyperlinks for the one or more web pages to a second computing device associated with the first user.

Abstract: Methods and systems for verifying server-storage device connectivity in a storage area network (SAN) environment are provided. One system includes determining which of a plurality of storage devices a server is physically connected and determining which of the plurality of storage devices a zoning configuration in the SAN environment enables the server to access. The method further includes returning to a user an indication of each storage device in the plurality of storage devices that the server is both physically connected and includes zoning access. One system includes a server, a plurality of storage devices, a switch fabric coupling the server to the plurality of storage devices, and a processor coupled to the server, the plurality of storage devices, and each device in the switch fabric. In this system, the processor is configured to perform the method discussed above.

Abstract: Disclosed is an improved approach for performing lock management. A semi-distributed Lock Management (SDLM) system is provided utilizing RDMA and an acyclic time-dependent dependency graph that can lead to higher system performance while maintaining higher flexibility and autonomy for each process at each compute node in the given cluster, in particular for distributed database applications.

Abstract: A lease system is described herein that allows clients to request a lease to a remote file, wherein the lease permits access to the file across multiple applications using multiple handles without extra round trips to a server. When multiple applications on the same client (or multiple components of the same application) request access to the same file, the client specifies the same lease identifier to the server for each open request or may handle the request from the cache based on the existing lease. Because the server identifies the client's cache at the client level rather than the individual file request level, the client receives fewer break notifications and is able to cache remote files in more circumstances. Thus, by providing the ability to cache data in more circumstances common with modern applications, the lease system reduces bandwidth, improves server scalability, and provides faster access to data.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for sharing tenant information utilizing a multi-tenant on-demand database service. These mechanisms and methods for sharing tenant information utilizing a multi-tenant on-demand database service can allow automatic sharing of information owned by a first tenant with other tenants of the multi-tenant on-demand database service. In this way, collaboration among tenants of the multi-tenant on-demand database service may be enabled via the sharing of the tenant information.

Abstract: A communication terminal provides at least two modes of operation. When a first mode (child mode) is selected, predetermined functions such as search queries are restricted. In a second (normal, adult mode), a search query is transmitted from the communication terminal to an external search server that returns results of the search query to the communication terminal for display. In the first mode, the search query is not transmitted to the external search server. Instead, information associated with the search query is extracted from dictionary data that is stored in a memory within the communication terminal. The extracted data is displayed on the communication terminal as the search result. The dictionary data may include general terms and information that is biographic, geographic, pictorial, encyclopedic, etc., that is installed as an initial setting or is later downloaded with administrative permission.

Abstract: A system and method for time-multiplexing the display of a plurality of electronic documents are provided. Time-multiplexing criteria for displaying a plurality of selected documents associated with a concept on a time-multiplexed basis is determined. The plurality of selected documents are caused to be displayed at an output device in a predetermined sequence according to the time-multiplexing criteria. The time-multiplexing criteria may be a variety of criteria related to the selected documents, the source of the selected documents, or other factors such as a relevance to a concept and one or more preferences associated with the selected documents.

Abstract: A method, and computer-readable media for performing the method, for managing business transactions. Electronic transaction documents are received from authenticated users and stored in a database, with system usage data regarding users' access to and use of the system captured and stored in the database. Only specified parties are afforded access to system usage data for each user.

Abstract: A method of monitoring health parameters of subjects within a defined space and over a period of time includes collecting first data corresponding to a physiological parameter of an ambulatory subject, collecting second data corresponding to a behavioral and cognitive parameter of the ambulatory subject, collecting third data corresponding to an identity and a location of the one of the subjects, collecting fourth data corresponding to the one of the ambulatory subjects from third party sources, generating a data record for the one of the ambulatory subjects based upon the first, second, third, and fourth data, and outputting a modified data record, the modified data record containing portions of the data record, the portions selected based upon an access level of a person requesting the data record and a format of the modified data record selected based upon the access level and community needs.

Abstract: A computer system is disclosed. The computer system includes one or more processors, and a memory storage storing one or more instructions for implementing a search tool. The instructions, when executed, instruct the computer system to perform a set of steps. The steps include receiving a search query from a user computer, the search query including one or more search terms to use to perform a first search. The steps further include, based on the one or more search terms, performing the first search, and providing for display at the user computer a list of one or more law-related documents responsive to the search query, a list of one or more recommended sources in which to perform a second search for documents, and a list of legal topics associated with the responsive documents.

Abstract: Methods and computer-readable media are provided for associating security trimmers with documents in an enterprise search system. According to one method, a search index is maintained that includes one or more document identifiers corresponding to documents stored at back-end computing systems. Each document identifier in the search index is associated with one or more security trimmer implementations. When a query request is received from a user, the search index is queried to identify documents referenced by the search index that match search terms provided with the query request. For each document that matches the search terms, the associated security trimmer implementations are identified and executed to retrieve the access rights to view the document for the current user from the back-end computing system where the document is stored.

Abstract: When categories are assigned to pieces of information, a search can be focused based on the categories. In an online forum, information is categorized by topic, and a search can be focused on the topic by adding additional search terms or restrictions to a search query, where the additional search terms or restrictions are based upon the categories. The restrictions may restrict the search to a particular web site that is determined based upon the category. In an online forum for answering questions, where the questions are categorized by topic, information related to a question may be located by performing a Web search for search terms extracted from the question. The search can be focused on relevant web sites restricting the search to sites that are related to the question's category. The results of the search may be displayed as related links alongside the question in the online forum.

Abstract: The present application includes methods and system for managing a storage device. In one implementation, a storage allocator that is present in a host or a storage device receives a request to store a file in a storage area of the storage device. The storage allocator marks the file as discardable in a file system structure associated with the storage device and updates a primary file allocation table (“FAT”) to associate a cluster chain that is allocated to the file with the file. The storage allocator additionally updates a discardable FAT or a database to reflect a physical location of the file, or may generate one or more location files that store the physical location of the file. The storage allocator then manages the storage area device based on the FAT and a discardable FAT, database, or one more location files indicating the physical location of the file.

Abstract: Collecting and distributing information related to recent content publication activity of an instant messaging (IM) user provides other users in a network with timely, relevant information about people known to the user or within the same social network. A user participating in a social network can quickly and efficiently perceive new information related to other users (referred to as co-users) in a social network by reviewing the co-users' recent content publication activity. A user may be made able to do so without requiring the co-user to send a communication directly to the user regarding the new facts or new content, and also without requiring the user to actively browse or request information about the co-user.

Abstract: The embodiments provide a system for managing access to Information Management System (IMS) database resources. The system may include an initialization routine configured to generate a first task in response to an IMS batch job request to enable an application program access to IMS resources including attaching an IMS Coordinator Controller. The IMS Coordinator Controller may be configured to establish a database resource adaptor (DRA) connection to an IMS database control region. The initialization routine may be configured to generate a second task in response to the DRA connection being established including attaching an application program controller. The application program controller may be configured to transform a database access call from the application program to a DRA interface call to access the IMS resources via the DRA connection.

Abstract: Business groups are created to secure business entities of a BI data model. In one aspect, a user to be secured is selected and a business group of the BI model is retrieved. Based on the business group, access to a business entity of the BI model is secured. The business group is associated with the business entity it secures. A value of the secured business entity is selected. A user is secured by assigning the user to the business group for the selected value. The value of the secured business entity is assigned to the user. In one aspect, requests from the user to access the secured business entity are filtered based on the assigned, to the user, value of the business entity.

Abstract: Methods and systems for sharing digital information, such as photos, that include creating a viewable medium or website associated with an event using a computer interface. An identification module is provided at the website or other viewable medium that generates a unique event identifier that may be provided to or received by a plurality of individuals. Photos or other digital files or information relating to the event can then be communicated to the website or viewable medium by the individuals via user devices such that a subset of the information may be accessed at a remote computing interface e.g., by utilizing the event identifier.

Abstract: Methods and systems for providing content are disclosed. An example method can comprise identifying a first plurality of data fragments of a media file. An example method can also comprise identifying a second plurality of data fragments of the media file. An example method can comprise generating a manifest file. The manifest file can comprise information for playback of the second plurality of data fragments on a device without access to the first plurality of data fragments.

Abstract: A method for managing a binary object in a database system is provided. The method may include receiving a request to store the binary object and determining if a size of the binary object is above a first threshold. If the size is less than the first threshold, the method may include storing the binary object in a database of the database system using a database communication protocol. If the size is above the first threshold, the method may include determining if the size is above a second threshold. To this end, if the size is less than the second threshold, the method may include storing the binary object in a file system of the database system using the database communication protocol. Furthermore, if the size is above the second threshold, the method may include storing the binary object in the file system using a file system communication protocol.

Abstract: Methods and apparatus, including computer program products, are provided for template based output management. In one exemplary embodiment, the method may be implemented by a generic output data service. The method includes calling the service to retrieve the template for formatting the output document, the document having one or more data fields, retrieving a schema defining one or more data elements, retrieving binding data mapping the one or more data elements to one or more data fields of the document, and generating the output document formatted based on the retrieved template, the retrieved schema, and the retrieved binding data.

Abstract: A method, program product and apparatus for controlling access to profile information, multi-media resources or social network functions of a first user by a second user not listed on a friend or group listing of the first user. An application retrieves a threshold criteria for access control and social network statistics in response to an attempted access by an entity without an appropriate privilege. The application compares the statistics to the threshold. Then, if the statistics meet the threshold criteria, the application allows access.

Abstract: A software module is presented that enables a person to determine the relevance of a document while preventing the person from making a copy of the entire document. In one embodiment, this is accomplished by programmatically controlling which portions of a document will be presented to a user and which portions will not be presented to the user. In one embodiment, the software module is used in conjunction with a search engine to present a document search result.

Abstract: Software tools assist an access-policy analyst or creator to debug and/or author access policies. An access request contains a query that evaluates to either true or false depending on whether access is to be allowed. Abduction may be used to generate assumptions that, if true, would cause the access request to be true. The tool may perform analysis on the generated assumptions, such as: comparing the assumptions with tokens to detect errors in the tokens or to suggest changes to the tokens that would cause the query to be satisfied, or comparing the assumptions to a meta-policy. The tool may allow an analysis, policy author, or other person to interactively walk through assumptions in order to see the implications of the access policy.

Abstract: A method of managing access rights to corporate records is described. Employee data with respect to a first organizational hierarchy is maintained in a database, and file records data with respect to a second organizational hierarchy is maintained in another database. A request from an employee is received for a file record. A determination is made as to whether the requesting employee matches an entry in the first organizational hierarchy. Another determination is made as to whether the requested file record matches a file record of file records that the requesting employee is authorized to access, and access to the requested file record is permitted or denied to the requesting employee based upon the determinations.

Abstract: Provided are a method and apparatus for generating and accessing metadata in a media file format. The method of generating metadata in a media file format includes generating a time-track map composed of a plurality of map nodes that are distinguished according to track and unit time, and generating media objects corresponding to each of the map nodes, in which each of the map nodes includes position information of the corresponding media objects, thereby facilitating real-time reproduction and modification of content.

Abstract: A method and system for providing keyword ranking using a common affix is provided. The method for providing keyword ranking using the common affix includes: extracting a common affix using a keyword set; and providing keyword ranking which includes the extracted common affix.

Abstract: Methods, systems, and products for governing access to objects on a filesystem. In one general embodiment, the method includes providing a framework in an operating system environment for support of a plurality of access control list (ACL) types, thereby enabling governing of access to objects on a filesystem according to an associated definition of an ACL type; and accepting definitions of ACL types. The associated definition may comprise a kernel extension.

Abstract: An information processing apparatus includes a file obtaining information generating part that generates file obtaining information at based on at least a place at which a first file is stored; a combined file generating part that combines the file obtaining information generated by the file obtaining information generating part with the first file or a second file corresponding to the first file to generate a combined file; a request receiving part that receives a request that is based on the file obtaining information that is input to an external terminal unit by using the combined file generated by the combined file generating part; and a file managing part that carries out a process according to the request received by the request receiving part.

Abstract: A method for sharing documents between on-demand services is provided. In an embodiment, a user of a first on-demand service may be able to view a list of content that includes content stored at the first on-demand service and content stored at a second on-demand service. The content of the second on-demand service may be associated with information about the content, allowing the content to be shared among multiple users of the first on-demand service. The user wanting to view the content, select or click on an indicator identifying the content, a connection to the second on-demand service is established, and images of the content are sent from the second on-demand service to the first on-demand service.

Abstract: A system receives context data associated with a context and a user. The system then associates the context data to a user identifier and retrieves data associated with the context. The system then filters the data according to the context data to create result data. In another embodiment, the system also receives context data from a plurality of users, where the context data pertains to one or more attributes of a context. The system then using the context data ranks the one or more attributes of the context to create ranked data and generates a user interface based on the ranked data. In yet another embodiment, the system communicates context data associated with a context and a user to a server, and receives result data created by the server filtering data retrieved based on the context data. The system then generates a user interface based on the result data.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for evaluating image similarity. In one aspect, a method includes receiving, by a data processing apparatus, image search data for different search sessions, a search session being a pre-specified period, the image search data for a search session including: search query data specifying search queries that were received during the search session; responsive image data specifying images that were identified in response to the search queries; and interaction data specifying images referenced by search results with which a user interacted. Sets of learning images are identified based on the image search data. The sets of learning images include co-selected images for the search sessions. A query-dependent image profile for a particular image is determined based in part on the co-selected images that were identified in response to the particular query.

Abstract: Methods and systems for knowledge discovery and organization employ a relational meta model and domain context-based knowledge inference engine to produce answers to queries that involve inferences among items stored as knowledge in a knowledgebase.

Abstract: Business information about business entities are received from a plurality of aggregate information sources such as business directories. Mobile application logs about user activities are received from a plurality of mobile devices. Business entities related to the user activities are identified based on the mobile application logs. Scored attributes about the related business entities are acquired by applying data analysis rules to the mobile application logs. Accuracy scores are determined for attribute values in the business information based on the acquired scored attributes. Updated business information for the business entities is generated based on the accuracy scores and outputted to users upon request.

Abstract: A controller is configured to generate and propagate instructions to an execution agent which, in turn, is configured to collect and deposit collected artifacts into a repository. Write access to a location in the repository for collected artifacts that are to be deposited into a specified location is granted to the execution agent. Once the execution agent deposits the collected artifacts in the specified location in the repository, a summary of collected artifacts is propagated to the controller. The controller manages appropriate levels of access to the collected artifacts, while the repository enforces the level of access. The controller can grant read only access to the collected artifacts or it can allow for controlled changes to be made to the metadata associated with the collected artifact. An agent processes the data and generates additional metadata that can be associated with the collected artifacts and then saved in the repository.

Abstract: A method, apparatus and computer program product for requesting information upon returning to a search results list is presented. A search results list is presented to a user. The user can then navigate to an item referenced in the search results list. The user is provided with additional content when the user returns to the search results list, the additional content permitting the user to provide comments regarding the item previously navigated to from said search results list.

Abstract: A technique for dynamically sharing information includes executing a sharing policy indicating when to share a data object responsive to the occurrence of an event. The data object is created by formatting a data file to be shared with a receiving entity. The data object includes a file data portion and a sharing metadata portion. The data object is encrypted and then automatically transmitted to the receiving entity upon occurrence of the event. The sharing metadata portion includes metadata characterizing the data file and referenced in connection with the sharing policy to determine when to automatically transmit the data object to the receiving entity.

Abstract: The invention provides secure and private communication over a network, as well as persistent private storage and private access control to the stored information, which is accomplished by imposing mechanisms that separate a user's actions from their identity. The system provides (i) anonymous network browsing, in which event the anonymity system is unaware of both the user's identity and browsing activities, (ii) private network storage and retrieval of data such as passwords, profiles and files in a manner such that the data can be stored into the system and later retrieved without the system knowing the contents or owners of the data, and (iii) the ability of the user to control and manage access to the remotely stored data without the system knowing the contents, owners, or accessors of the data.

Abstract: Systems and methods enable remote (or “off-campus”) users complete authorized access to full-record content of 3rd-party databases subscribed to by the user's institution. More particularly, the present invention relates to a method and system that acts as a transparent conduit between the user and a remote database, managing relevant session/context information without the user's awareness and without the need for users to install plug-ins or configure browser proxies.

Abstract: A first computer establishes a connection between a second computer and the first computer when a specific request for access to a specific path from the second computer is accepted. The first computer transmits to the second computer a script for enabling the second computer to perform a proxy process of accepting a database access request for access to a database from an application to be accessed by the second computer, accessing the database, and acquiring an access result from the database. Then, the first computer receives a database access result from the second computer, and outputs the result to the application.

Abstract: A mechanism for the flow of access by derivation is provided. An access point may be any object, such as files or functions, to which the access recipient is granted access rights by the access provider. Access is typically represented by a relationship object referencing the access provider function, the access recipient function, and the access point object, and a set of access rights. This membership access relationship object is typically represented as a subtype of the access relationship. When a membership access relationship is created, typically a new associated persona function is generated, representing the new identity created for the access recipient function while serving as a member of the access point function. When a persona function is invited to be a member in another function, that in turn generates a membership and a second persona that is derived from the first persona, resulting in identity derivation.