Abstract: File management systems and methods are presented. In one embodiment, implementation of a method for determining the accurate ownership of a file within a data system includes: identifying a first plurality of access events for a file, wherein the file is associated with a directory of related files; identifying a second plurality of access events for the related files within the directory, wherein access events in the first and second plurality of access events occur within a period; determining a pool of users accessing files within the directory within the period; and selecting a user from the pool of users as an inferred owner of the file based on access metrics related to the plurality of access events.

Abstract: A method of monitoring health parameters of subjects within a defined space and over a period of time includes collecting first data corresponding to a physiological parameter of an ambulatory subject, collecting second data corresponding to a behavioral and cognitive parameter of the ambulatory subject, collecting third data corresponding to an identity and a location of the one of the subjects, collecting fourth data corresponding to the one of the ambulatory subjects from third party sources, generating a data record for the one of the ambulatory subjects based upon the first, second, third, and fourth data, and outputting a modified data record, the modified data record containing portions of the data record, the portions selected based upon an access level of a person requesting the data record and a format of the modified data record selected based upon the access level and community needs.

Abstract: A method for securely accessing a number of computing systems within a remote facility includes, with a mobile computing system, checking out access data from a centralized database, the access data providing access to the computing systems within the remote facility. The mobile computing device then interfaces with a first computing system, the first computing system being unable to have access criteria changed from a remote location. The mobile computing system then provides a user with access to the first computing system using the checked out access data without revealing that checked out access data to the user.

Abstract: Methods, systems, and apparatus, including computer program products, for discovering entities in a first portion of a data center network, examining information associated with the discovered entities to determine relationships that exist between pairs of entities in the first portion of the data center network, and generating a specification of the relationships that exist between pairs of entities in the first portion of the data center network based on results of the examining.

Abstract: A table creation request pertaining to a table in a database maintained on a multi-node data partitioning landscape that comprises a plurality of processing nodes can specify a number of partitions to be generated. At run time, a currently available number of processing nodes in the multi-node data partitioning landscape can be queried, and this currently available number of processing nodes can be compared with the specified number of partitions to be generated for the created table. The table can be generated with the specified number of partitions such that the generated partitions are located across the plurality of partitions according to a load balancing approach if the number of processing nodes equals the number of partitions to be generated or according to other information in the table request if the number of processing nodes does not equal the specified number of partitions.

Abstract: A dynamic split node defined within a calculation model can receive data being operated on by a calculation plan generated based on the calculation model. A partition specification can be applied to one or more reference columns in a table containing at least some of the received data. The applying can cause the table to be split such that a plurality of records in the table are partitioned according to the partition specification. A separate processing path can be set for each partition, and execution of the calculation plan can continue using the separate processing paths, each of which can be assigned to a processing node of a plurality of available processing nodes.

Abstract: A method, and computer-readable media for performing the method, for managing business transactions. Electronic transaction documents are received from authenticated users and stored in a database, with system usage data regarding users' access to and use of the system captured and stored in the database. Only specified parties are afforded access to system usage data for each user.

Abstract: A method of monitoring health parameters of subjects within a defined space and over a period of time includes collecting first data corresponding to a physiological parameter of an ambulatory subject, collecting second data corresponding to a behavioral and cognitive parameter of the ambulatory subject, collecting third data corresponding to an identity and a location of the one of the subjects, collecting fourth data corresponding to the one of the ambulatory subjects from third party sources, generating a data record for the one of the ambulatory subjects based upon the first, second, third, and fourth data, and outputting a modified data record, the modified data record containing portions of the data record, the portions selected based upon an access level of a person requesting the data record and a format of the modified data record selected based upon the access level and community needs.

Abstract: A facility for navigating within a body of data using one of a number of distinct browse graphs is described. Initially, a navigation request is received. Based upon information contained in the received navigation request, the facility selects one of the plurality of browse graphs. In response to user input, the facility browses the body of data using the selected browse graph. The browse graphs may each correspond to a collection of the body of data, such as a website.

Abstract: Redirection of user entered data to an unauthenticated website (“phishing”) is checked by, at redirection, detecting the presence of data entry fields in a user web page and, if any are present, authenticating the redirection address against lists of approved websites or the redirection web site certificate. If the new address is not authenticated, the user may still opt to be redirected.

Abstract: Collecting and distributing information related to recent content publication activity of an instant messaging (IM) user provides other users in a network with timely, relevant information about people known to the user or within the same social network. A user participating in a social network can quickly and efficiently perceive new information related to other users (referred to as co-users) in a social network by reviewing the co-users' recent content publication activity. A user may be made able to do so without requiring the co-user to send a communication directly to the user regarding the new facts or new content, and also without requiring the user to actively browse or request information about the co-user.

Abstract: Embodiments of the invention provide techniques for generating song playlists for use in an immersive virtual environment. Generally, playlists may be generated based on stored music preference data. The music preference data may be generated by storing user interactions with specific songs. The user interactions may be associated with characteristics of the user's situational context within the virtual world. The music preference data may be indexed by song name, and/or by musical properties. Subsequently, the music preference data may be used to generate a playlist adapted to the user's current situation within the virtual world.

Abstract: A method includes providing an application accelerator to an IMS region controller, which is coupled to an IMS data language interpreter (DL/I) interface. The IMS DL/I interface provides standard data access paths to a user application launched in an IMS environment. The application accelerator is configured to make alternate data access paths available to the user application in addition to the standard data access paths provided by the IMS environment. The method further includes intercepting an IMS DL/I call made by the user application and determining whether the intercepted call should be processed by the IMS DL/I interface or by an I/O engine of the application accelerator.

Abstract: A first computer establishes a connection between a second computer and the first computer when a specific request for access to a specific path from the second computer is accepted. The first computer transmits to the second computer a script for enabling the second computer to perform a proxy process of accepting a database access request for access to a database from an application to be accessed by the second computer, accessing the database, and acquiring an access result from the database. Then, the first computer receives a database access result from the second computer, and outputs the result to the application.

Abstract: Under the present invention, one or more groups of contacts are implicitly formed based on a history of electronic communications that involve the contacts. When one or more contacts in a particular group is identified as an intended recipient of a (current) electronic communication, the entire group will be identified to the sender. If the sender then selects group, the contacts therein will be made additional recipients of the current electronic communication.

Abstract: A mechanism is provided for establishment, optimization, and routing of remote transitive name space access. The illustrative mechanism adds a new protocol primitive to distributed file systems, which establishes a new multiplexed client connection between the client, the transitive server, and the destination server(s). The protocol allows establishment of remote mounts on a transitive file server. The protocol allows the client to request a “recipe” for a direct connection to the destination file server without intermediate nodes. The protocol allows the intermediate server to be established as a multiplexer that forwards requests/responses to/from destination servers without unmarshalling/remarshalling.

Abstract: Described is a method and system for transparently migrating data between storage systems of a computing environment without disrupting realtime access to the stored data of the storage systems. Specifically, when adding a new storage system to the computing environment, realtime data write operations can be redirected to the new storage system instead of an existing storage system. During the redirection, the data stored on the existing storage system can be accessed for data operations. Concurrently, during the redirection, data stored on the existing storage system can be migrated to the new storage system. When the data migration completes and all the data, stored on the existing storage system prior to the redirection, resides on the new storage system, the new storage system can function as the primary storage system. Thus, storage capacity can increase or be replaced without disrupting data operations.

Abstract: Techniques for reusing logic implemented in an existing software application such that the logic can be exposed as a Web service or in any other service-oriented context. In one set of embodiments, a design-time technique is provided that comprises, inter alia, receiving program code for an existing software application, generating metadata based on the program code, and customizing the metadata to align with an intended Web service. Artifacts for the Web service are then generated based on the customized metadata. In another set of embodiments, a run-time technique is provided that comprises, inter alia, receiving a payload representing an invocation of a Web service operation of the generated Web service, processing the payload, and, based on the processing, causing the existing software application to execute an operation in response to the invocation of the Web service operation.

Abstract: Described is a method and system for transparently migrating data between storage systems of a computing environment without disrupting realtime access to the stored data of the storage systems. Specifically, when adding a new storage system to the computing environment, realtime data write operations can be redirected to the new storage system instead of an existing storage system. During the redirection, the data stored on the existing storage system can be accessed for data operations. Concurrently, during the redirection, data stored on the existing storage system can be migrated to the new storage system. When the data migration completes and all the data, stored on the existing storage system prior to the redirection, resides on the new storage system, the new storage system can function as the primary storage system. Thus, storage capacity can increase or be replaced without disrupting data operations.

Abstract: Various methods and systems for automatically obtaining documents that are referenced by an electronic communication, such as an email or instant message, for archival are disclosed. One method involves searching at least a portion (e.g., the header and/or body) of an electronic communication for a reference to a document and, in response to detecting the reference, automatically obtaining an electronic copy of the document. The electronic copy of the document can then be archived.

Abstract: The present invention extends to methods, systems, computer program products, and data structures for filtering cached content based on embedded URLs. A computer system accesses a URL that corresponds to cached content. The computer system identifies an embedded URL included in the accessed URL. The embedded URL corresponds to a site that was accessed to retrieve the cached content. The computer system extracts the embedded URL from the accessed URL. The computer system determines whether or not access to the cached content is to be allowed based on the embedded URL.

Abstract: A mobile security system connects to a mobile device and filters out attacks and malicious code. Using the mobile security system, a mobile device can be protected by greater security and possibly by the same level of security offered by a corporation, enterprise, or other entity associated with the mobile device.

Abstract: A method for redirecting, to a second machine, without user intervention, a request for access to a folder on a first machine, the request made by a resource executing within a remote access session on the first machine, includes receiving, by a component on a first machine, folder mapping information associated with a folder provided by a shell namespace on a second machine. The component intercepts a request by a resource executing on the first machine for access to file system data on the first machine. The component redirects the request to the second machine responsive to the received folder mapping information.

Abstract: A logical network directory database compliant with the X.500 standard for a directory data system is disclosed. The network directory database provides a source of subscriber and service data accessible by various control and management processes that require subscriber information. The network directory database may be extensible across various communications service providers and IT domain. Further, the disclosed network directory database may be applied to new and existing services, such as, IP Multimedia Subsystem, Unlicensed Mobile Access (UMA) and other IP services.

Abstract: An improved method and system for providing path-level access control to a structured document in a collection stored in a database, where the structured document includes a plurality of nodes is disclosed. The method includes the steps of providing an access control policy for the collection, where the access control policy comprises a plurality of access control rules, generating a path for each node of the plurality of nodes in the document, and generating for each path associated with a node a corresponding value expression based on at least one access control rule of the plurality of access control rules. According to the method and system of the present invention, the corresponding value expression is utilized during access control evaluation to determine whether a user is allowed to access a node in the structured document.

Abstract: The present invention relates to a method for preventing the simultaneous modification of the same database object in a shared database by more than one user during the database development stage comprising the steps of: (a) creating security roles for said users, wherein each of the security roles has a modification permission set for denying or granting at least one modification permission to at least one said database object; (b) assigning each of said security roles to each of said users; (c) providing means for said users to request said modification permission to said database object; (d) receiving said request from a first user for said modification permission to said at least one database object; (e) determining that said security roles of said users, excluding the security role of first user, are set to deny said modification permissions to said object; (f) updating said security role of said first user to grant said modification permission to said object; (g) allowing said first user to modify said

Abstract: A recipient node of a multi-node data partitioning landscape can receive, directly from a requesting machine without being handled by a master node, a first data request related to a table. A target node of a plurality of processing nodes can be identified to handle the data request. The determining can include the recipient node applying partitioning information to determine a target data partition of the plurality of data partitions to which the data request should be directed and mapping information associating each data partition of the plurality of data partitions with an assigned node of the plurality of processing nodes. The recipient node can redirect the data request to the target node so that the target node can act on the target data partition in response to the data request.

Abstract: A keystore management system is provided that manages a keystore. The keystore management system creates a mapping of a plurality of keystore identity parameters to a plurality of keystore repository parameters. The keystore identity parameters identify the keystore. The keystore repository parameters identify a repository that stores the keystore. The keystore is a storage entity stored on the repository. The keystore management system further stores the mapping within a configuration file. The keystore management system further translates the keystore identity parameters into the keystore repository parameters based on the mapping stored within the configuration file.

Abstract: A facility for navigating within a body of data using one of a number of distinct browse graphs is described. Initially, a navigation request is received. Based upon information contained in the received navigation request, the facility selects one of the plurality of browse graphs. In response to user input, the facility browses the body of data using the selected browse graph. The browse graphs may each correspond to a collection of the body of data, such as a website.

Abstract: A method and system are provided for transparently migrating a storage object (aggregate) between nodes by one of the nodes (source), automatically verifying another node (destination) is configured to service the aggregate, and changing ownership of the aggregate based on the verifying to enable servicing of the aggregate at the destination. A cluster manager receives an aggregate migration request and provides the request to the source owning the aggregate. The source verifies the destination is configured according to a predetermined configuration for servicing the aggregate. Based on the verifying, the source offlines the aggregate and updates ownership information of the aggregate, thereafter allowing the destination to online the aggregate. The cluster manager provides the updated ownership information to all nodes in the cluster, so an access request intended for the aggregate may be received by any node and forwarded to the destination using the updated ownership information.

Abstract: The disclosed embodiments provide rapid access to information stored on a personal computing device even though the personal computing device is powered off or otherwise in a low-power consumption state such as a sleep state or hibernation state. An software component gathers user data in a location such as a non-volatile memory associated with a host computer. A browser component accesses the stored data and makes it available to the user when the host computer is powered down or otherwise in a state of low power consumption.

Abstract: A method for retrieving data in a data source is provided. The method includes receiving a search term; identifying an active tag associated with the search term; correlating the active tag to dynamic data that is operative to adapt to a mining context in which data is stored; and retrieving the data using the dynamic data.

Abstract: An SAS domain map is automatically generated at an SAS concentrator switch by a virtual mapping device that presents itself as a target for discovery by SAS devices interfaced with the concentrator, such as information handling systems and storage devices. During the SAS protocol discovery process, the virtual mapping device generates the SAS domain map by acquiring the device name and the device port for each concentrator port that interfaces with a device. A management application running on the concentrator applies the SAS domain map to provide network functions, such as zoning or diagnostics.

Abstract: In an embodiment, a plurality of transactions for accessing a database may be acquired. The database may be associated with a plurality of locks. The plurality of transactions may include a first transaction, a second transaction, and a third transaction. A logical serialization sequence for executing the transactions may be identified. The logical serialization sequence may indicate that (1) the first transaction is to be executed before the second transaction based on all locks that are required by the first transaction being available; (2) the second transaction is to be executed after the first transaction has completed execution based on the second transaction requiring a lock that is required by the first transaction; and (3) the third transaction is to be executed before or during execution of the first transaction based on all locks required by the third transaction being different than the locks required by the first transaction.

Abstract: Access to objects of a computing environment is managed. Access to an object of the computing environment is prohibited via one cached entity corresponding to the object, while access to the object is allowed via another cached entity. The cached entities are concurrently maintained for a period of time, but the one cached entity is in a shadow state. In one example, the cached entities are session locks and the object is a file system object.

Abstract: An online network collects a dataset of an individual's information through a computer-implemented method. An individual enters a dataset of the information and a plurality of an individual's life events into a computer system. The dataset is arranged and converted into a graphical representation for display. The online database receives and stores the dataset. The database associates the dataset with the plurality of the member's life events and then the dataset and the life events are outputted into the graphical representation for display for a witness.

Abstract: A system and method of external link processing is disclosed. The system includes an interface configured to receive a user request to access an encoded external link in networked content. The encoded external link comprises a domain name of an external link server and an encoded portion which is an encoded result of an original external link encoded with an encoding function, wherein the original external link is an address to an external destination. One or more processors determine a safety level of the encoded external link using a criterion. In the event that the determined safety level of the encoded external link is determined unsafe, a warning message is generated indicating that the original external link is unsafe and the user is prevented from directly navigating to the original external link.

Abstract: Embodiments are directed towards a system and method for a cloud-based front end that may abstract and enable access to the underlying cloud-hosted elements and objects that may be part of a multi-tenant application, such as a search application. Search objects may be employed to access indexed objects. An amount of indexed data accessible to a user may be based on an index storage limit selected by the user, such that data that exceeds the index storage limit may continue to be indexed. Also, one or more projects can be elastically scaled for a user to provide resources that may meet the specific needs of each project.

Abstract: A system and method for failure recovery in a multiple processing node system are described herein. Each node can be adapted to store a backup copy of its database portion and/or results to disk storage or memory of at least one other node. In the event of a failure of a node, the replacement node can be adapted to transfer or copy the backup copy of the database portion of the failed node from the failed node's neighbors to the replacement node's disk storage or memory in between database operations. Before the transfer or copy of the backup copy is completed, the replacement node can be adapted to perform database operations in part on the portion of the backup copy the replacement node has already received and in part on the backup copy stored at the neighboring node(s).

Abstract: A method for information management comprises monitoring output from an application to an operating system, wherein the output is monitored substantially continuously; determining if a policy applies to data associated with the output; and executing the policy if the policy applies.

Abstract: A method for collaborative management of a process is disclosed herein. The method includes electronically creating a declaration document containing information relating to one or more characteristics of an equipment unit involved in effecting the process. The method further includes electronically creating, at least partially based upon the information contained within the declaration document, an instruction document prescribing changes in one or more operational parameters of the equipment unit. The declaration document may be created by an operator of the equipment unit and the instruction document may be created by a user entity having electronic access to the declaration document.

Abstract: A computing device, executing a decoy application server that does not have access to real data, receives a service request from a client. The decoy application server protects a designated application server, wherein the decoy application server and the designated application server include instances of a single Java application server program. The decoy application server establishes a connection to a false database via a decoy Java Database Connectivity (JDBC) driver. The decoy application server retrieves false data from the false database, and provides the false data to the client.

Abstract: A parsing module receives a web page from a network. The parsing module identifies a frame embedded within the intercepted web page. The parsing module identifies information regarding the embedded frame. A collection module collects the identified information regarding the embedded frame and maintains such information in an exclusion list stored in a memory module. A lookup module intercepts a web page from the network before the web page reaches the client. The lookup module identifies information regarding this web page and accesses the memory module to determine if the identified information is included in the exclusion list. If the identified information regarding the web page is not included in the exclusion list, a modification module modifies the web page such that the web page will not be loaded on the client within a frame.

Abstract: The described embodiments of invention comprises a method and an apparatus for regulating access to objects by authorized entities. Authorized entities are entities authorized for access by either an owner entity of the regulated object or an entity authorized to authorize access to the regulated object. Each user, which may be a physical person or another information system, is identified using standard user validation techniques. When an object is first created or introduced to the system, that information is associated with an owner, who is one user on the system. The present embodiment allows the owner to define relationships with other users, either generally or regarding a particular object. The owner may or may not have trusted relationships with other users. A second user that has a trusted relationship with the owner automatically has access to the object without additional intervention by the owner. In addition, the second user may have a trusted relationship with another user.

Abstract: A system for electronically recording and sharing medical data is provided, the system comprising an electronic source document, wherein the electronic source document comprises a database. In one particular embodiment, the medical data comprise clinical study data, and in another the medical data comprise patient specific data. In some embodiments, the system includes means for defining data parameters and storing the data parameters within the electronic source document, as well as a browser-based means for entering data into the electronic source document and storing the data therein. In a further embodiment, the system comprises means for one or more users of the system to view stored data. In a still further embodiment, means for one or more users to amend data stored in the electronic source document is provided, and in yet another embodiment the system comprises means for creating and maintaining an audit trail when one or more of the users amends data stored in the electronic source document.

Abstract: A computer implemented method for accessing data begins with receipt of a data access request. In response to determining that the requested data needs to be acquired in real time from an original data source, the processor acquires and stores that data. In response to determining that the data cannot be acquired in real time from the data source, the processor acquires the data from a configuration management database in which the requested data was previously stored.

Abstract: A software module is presented that enables a person to determine the relevance of a document while preventing the person from making a copy of the entire document. In one embodiment, this is accomplished by programmatically controlling which portions of a document will be presented to a user and which portions will not be presented to the user. In one embodiment, the software module is used in conjunction with a search engine to present a document search result.

Abstract: A method and system for processing database operation requests, the method comprising: receiving a database operation request from a user; determining whether the database operation request is a heavy-duty request; if the database operation request is a heavy-duty request, routing the database operation request to a heavy-duty request database partition for processing heavy-duty requests to be processed, and recording the data scope affected by the database operation request into a metadata repository, wherein the heavy-duty request database partition is set besides an original normal database partition.

Abstract: The exchange of documents for execution can be performed efficiently using an automated system that routes and archives documents. The system may facilitate the exchange of drafts between parties by highlighting changes of the current draft with respect to the previous draft. Documents may be conveniently archived for efficient document storage and access by providing one or more central archive databases accessible through a shared network to a plurality of organizations. The operating system of the database may provide systematic access to individuals associated with an organization with the privilege to access documents according to a specific organizational hierarchy. Routing and archiving documents may be accomplished through a central exchange server.

Abstract: A method and/or system may be configured to receive an input/output (I/O) request from an initiator system, add priority information to a multiple path referral for each port on which data can be accessed, selectively omit ports on which data may be accessed, transmit the multiple path referral from the target to the initiator, and/or choose a path on the initiator with the highest performance.