Abstract: The invention provides a system and method for sharing anonymous user profiles with a third party. In one aspect of the invention, the system shares user profiles with content servers on a mobile data network so that they may select content responsive to the user's profile. The system provides a store of user profiles for associating profile information with either a source IP address or mobile phone number, where the profile includes information on the user and the user's network usage. The system detects a user's transaction request and inspects it for either an IP address or phone number, which it uses to retrieve the appropriate profile. The system subsequently applies predetermined opt-out policies to determine how much of the user profile may be provided in response to the profile request. The system then returns the profile information such that the user's identity is masked.

Abstract: A method for automatic folder ownership assignment, including ascertaining which first folders, among a first multiplicity of folders, have at least one of modify and write permissions to non-IT administration entities, adding the first folders to a list of candidates for ownership assignment, defining a second multiplicity of folders which is a subset of the first multiplicity of folders and not including the first folders and descendents and ancestors thereof, ascertaining which second folders among the second multiplicity of folders, have permissions to non-IT administration entities, adding the second folders to the candidates, defining a third multiplicity of folders, which is a subset of the second multiplicity of folders and not including the second folders and descendents and ancestors thereof, ascertaining which third folders among the third multiplicity of folders are topmost folders, adding the third folders to the candidates, and recommending possible assignment of ownership of the candidates.

Abstract: Devices, systems, and methods are disclosed which relate to enabling wireless communication between an information kiosk and a mobile device operated by a user. The user may operate the mobile device to request information from the kiosk, with the kiosk authenticating the user before displaying information. The authentication may involve a biometric identifier. The kiosk may provide information to the user via the display on the kiosk or on the mobile device. The profile may be regularly updated with the user's past queries, and other biographical information. Consequently, the user may be able to receive information pertinent to their needs without having to come into physical contact with the kiosk. Kiosks may be installed at public transit terminals such as bus stops, shopping centers or malls, attractions such as amusement parks, museums, etc.

Abstract: A method of constructing an entity profile, having private and public portions with different access restrictions, commences with the assignment of a confidence level to content within an electronic document. The electronic document may be associated with a first entity. The content may furthermore potentially be descriptive of the first entity. If the confidence level assigned to the content is less than a predetermined threshold, the content is automatically rejected for inclusion within the entity profile. However, if the confidence level assigned to the content exceeds the predetermined threshold, the content is included within the private portion of the entity profile. Thereafter, the content is automatically presented to the first entity for authorization, by the first entity, for inclusion of the content within the public portion of the profile. The public portion of the profile may be freely accessible by other entities, whereas the private portion may have access restrictions.

Abstract: An improved technique for granting access to a complex datum maps a single user token representing a user onto a set of data group tokens, each data group token providing access to a data group stored on a storage medium. The improved technique combines the centralization of the complex datum while providing the security of tokenization and will lower the risk of a rogue third party gaining unauthorized access to the user's records stored across the data groups.

Abstract: A user correlation system uses aggregated data and matching/comparison in order to assign an association score that determines likelihood that unique identifiers are associated with the same user.

Abstract: The present invention relates to a method of adapting computer programs to user profiles, including providing a user with a questionnaire to determine at least one of the user's intelligence, personality, emotional state, computer experience, sensory skills, motor skills, education, and training; compiling a user profile based on data received from the questionnaire; modifying the computer programs used by the user based on the user's profile; and storing the user profile and the computer program modifications in a database for future utilization by the user. The modification of the computer programs includes modifying at least one of a user interface, workstation tools, input device and navigation, image presentation, analysis of information presented, and reporting.

Abstract: Systems and methods provide a “live social context” in which users can share multimedia content information. Upon finding multimedia content that a user would like to share with others, the user may select a “share” function Invitations may then be sent to other users across different services. In addition, the invitation may include content, such as a text comment or file that the user has added. The recipient users receive a live notification of the invitation and may then participate in an online discussion with the user. Furthermore, other users may be provided a live notification that activity has been initiated or in-progress about the multimedia content. These users may then request to join in the online discussion.

Abstract: A Stateful Reference Monitor can be loaded into an existing commercial operating system, and then can regulate access to many different types of resources. The reference monitor maintains an updateable storage area whose contents can be used to affect access decisions, and access decisions can be based on arbitrary properties of the request.

Abstract: A computer implemented matching method for matching a user with one or more romantically compatible users of the method. In one example the method comprises: receiving a profile generated by recording user choices from a field of images displayed to the user; applying a logistics regression model to the image choices to determine compatibility between two users. Creating a baseline template of the user's aesthetic preferences then applying this model to templates created from other users of the method. Any results within a desired confidence level are returned to the user. For mutual compatibility the user's own image is compared to that of the query's preference template to determine the presence of mutually compatible aesthetic attraction. Users can also use facial recognition to run personality test on themselves or potential matches to determine a if there is personality compatibility to the combination as well.

Abstract: A method and apparatus for providing an anonymization of data are disclosed. For example, the method receives a communications graph that encodes a plurality of types of interactions between two or more entities. The method partitions the two or more entities into a plurality of classes, and applies a type of anonymization to the communications graph.

Abstract: A system (101) for implementing redaction rules in compliance with an organization's privacy policy, where the system intercepts messages between an information source (103) and an information destination (102), modifies the message contents based on redaction rules (106) and forwards the redacted contents over to the client. The system also maintains a record of the redacted information and updates the contents of any message submitted by the client (102) in order to maintain database integrity.

Abstract: An approach is provided for determining one or more social networks. A processor may then process and/or facilitate a processing of access information associated with one or more files, wherein access to the one or more files is based, at least in part, on the one or more social networks.

Abstract: A system, method, and computer program for generating a social timeline is provided. A plurality of data items associated with at least one relationship between users associated with a social network is received, each data item having an associated time. The data items are ordered according to the at least one relationship. A social timeline is generated according to the ordered data items.

Abstract: A user may select a profile to serve as an active profile on a device, and content objects associated with the active profile may be stored on the device responsive to the selection. Content objects that are not associated with the active profile may be transferred to one or more additional devices based on a prioritization scheme. Content object download operations may take advantage of the prioritization scheme to determine a storage device for a downloaded content object.

Abstract: A sharing model enables users to easily and conveniently create and share standard and custom database objects, and applications, among users or groups of users. The sharing model includes systems and methods that allow users to conveniently create and customize tabs and tab sets that define relationships between custom objects and fields, standard objects and fields, and applications. A tab visually represents a user interface into an element of an application or into a database object. Selection of a tab provides a user access to the object or element of the application represented by the tab. A tab set is a group of related tabs that work as a unit to provide application functionality. New tabs and tab sets may be defined and tab set views may be customized so that an end user can easily and conveniently switch between the various objects and application elements represented by the displayed tabs and tab set views.

Abstract: Disclosed are various embodiments for facilitating access to content using availability information. Content programs are determined based at least in part on a prior selection of one or more of the content programs from a content catalog by a user. Content availability data is obtained from multiple content providers. Availabilities of each content program are determined based at least in part on the content availability data. A user interface is generated that presents the respective availabilities of each of the content programs through the corresponding interfaces of some or all of the content providers.

Abstract: An online social networking system can be used to rank social network objects of various different object types, each according to its type. The objects may comprise types such as users, communities, blogs, blog entries, events, forums, forum topics, postings, photographs, and/or images. The product comprises code for carrying out a method that begins with receiving ranking data about social network objects that comprises data about events performed on the social network. For each social network object, a ranking function is applied to ranking data about the social network object based on its type. In addition, the recency of an event on the social network related to the social network object is evaluated, in order to calculate the score for the social network object. A relative ranking for each of the plurality of social network objects based on its score is determined, and the score and relative ranking of each of the social network objects stored.

Abstract: A method may include: maintaining one or more attributes of a first user; maintaining a risk profile scheme configured by the first user, the risk profile scheme comprising a passive permission table indicating whether a second user has permission to the one or more attributes; allowing the first user to grant dynamic permissions to the second user to access the one or more attributes in accordance with the risk profile scheme; allowing the first user to perform content blobulation of the one or more attributes; and allowing the first user to perform content reblobulation of the one or more attributes in accordance with the risk profile scheme.

Abstract: A method for generating data enabling searching for content complements intended for terminals of a telecommunication network is provided. In one embodiment, the method includes selecting content from a terminal, generating identification information of the selected content, sending a marker generation request to a content complement server, and, in response to receiving the request, generating and saving a marker at the content complement server. The request includes the user's identification data and the identification information of the selected content. The marker includes the user's identification data, the identification information of the selected content, and search characteristics data enabling an additional search for content related to the selected content. A system, a terminal, and a server associated with the method are also provided.

Abstract: Rights clearances management for assets, such as media assets. A rights brokerage service enables potential licensees to clears rights to use assets within designated projects, such as advertising campaign projects. The potential licensee uses an interface to select or identify an asset without necessarily accessing the asset itself. The rights holders and the rights held by each rights holder are identified based on the asset identity. A request is automatically issued to the rights holders to approve use of the asset for the project. The potential licensee may use an interface to track progress of approvals from the rights holders. Unenforceable rights are detected and approval is automatically obtained. If all enforceable rights are cleared, the asset may be committed for approval by a project manager or other authority. When approved, a license to use the asset is automatically created between the potential licensee and each of the rights holders.

Abstract: A system and method for drafting documents using an outline table is provided. A database of outlines is maintained. Each outline includes an organizational framework into which document clauses are inserted to form a document. A request for one or more of the outlines is received from a user. The outlines are filtered by removing those outlines that the user is not authorized to access. The outlines are further filtered by removing those outlines that are not preferred by the user. The remaining outlines, not removed, are presented to the user. Input from the user regarding the presented outlines is received. At least one of the presented outlines associated with the user input is selected. The selected outline is populated with predefined values.

Abstract: A system for accessing, by a resource, a setting in a virtualized user profile includes an isolation environment, a resource, and a filter driver. The resource executes outside an isolation environment on a local machine and requests access to a setting in a user profile. The filter driver intercepts the request for access and identifies one of the isolation environment and a remote machine, responsive to an application of a rule to the request. The filter driver redirects the request to the one of the isolation environment and the remote machine. A method includes intercepting an instruction from a resource to modify a setting on a local machine, the resource provided by a local machine and executing outside of an isolation environment. The method includes identifying the isolation environment, responsive to an application of a rule to the instruction. The method includes redirecting the instruction to the isolation environment.

Abstract: A personal profile data repository is disclosed. The personal profile data repository stores information about a user. The user has complete control over the content of the profile and over what third parties may access information stored in the repository.

Abstract: Methods for modifying a notification template based on user access levels are provided. In one aspect, a method includes receiving a first request, from a first user having a first level of access, to modify a first parameter from a first state to a second state in a notification template, and receiving a second request, from a second user having a second level of access, to modify a second parameter in the notification template from a first state to a second state. The method also includes storing the modified notification template. When the modified notification template is retrieved from storage, the first parameter is in the second state for both the first user and the second user, and the second parameter is in the first state for the first user and the second state for the second user. Systems and machine-readable media are also provided.

Abstract: A website may have a number of owners. According to certain embodiments, site owner-information of current owners of the website is provided to a user to enable the user to re-verify the current owners of the website.

Abstract: A server receives a consumer request pertaining to product asset management from a client. The consumer request comprises one or more product-related certificates that associates the client with one or more products. The product-related certificate comprises at least one extended attribute object identifier that has a corresponding product attribute. For each extended attribute object identifier, the server searches a data store to identify a product that corresponds to the extended attribute object identifier and generates a response to the consumer request based on the product that is identified in the data store.

Abstract: A display system includes a display apparatus including a file identifier storing section, a viewing and editing information storing section storing thereon viewing and editing information permitted to file data, a first display section, and a first communicating section transmitting the file identifier and viewing and editing information, and an information processing apparatus including a second communicating section receiving the file identifier and viewing and editing information, a file data obtaining section, a viewing and editing instruction obtaining section obtaining editing instructions, a viewing and changing permitting section that refers to the viewing and editing information, and, when editing is permitted, gives permission to change contents of the file data based on the editing instructions, and a viewing and changing prohibiting section that refers to the viewing and editing information, and, when editing is not permitted, prohibits changing the contents of the file data.

Abstract: In some embodiments, provided is a method that includes storing, by a profile repository service, respective profile information for one or more users. The method includes receiving, by the profile repository service, permissions input from a particular one of the one or more users specifying content of the particular user's profile information accessible to content providers. Further, the method included receiving, by the profile repository service, a request from a content provider for profile information for the particular user, wherein the content provider is distinct from the profile repository service.

Abstract: Embodiments relate to systems and methods for implementation on a mobile device to force the mobile device into a secure state upon detection or determination of a triggering event. Once it is determined that a triggering event has occurred, each application operating on the mobile device is caused to immediately unreference sensitive objects and a secure garbage collection operation is performed upon the unreferenced sensitive objects to render data associated therewith unreadable. The mobile device is then caused to enter a secure state, in which the mobile device cannot be accessed without authorization. A microprocessor within the mobile device is configured to determine the existence of the triggering event according to a configuration data structure and to perform the secure garbage collection.

Abstract: An information retrieval system having: a client adapted for accessing a plurality of file sets stored on one of a plurality of file servers; a plurality of file servers configured to operate with a federated file system namespace; and a memory for storing re-direction information accessible by the client for identifying a request issued by the client for a file set at a first location in the namespace where the file set is located at a second, different location on one of the file servers and wherein the client in examining the re-direction information in the memory, re-directs the request to the second location in accordance with the re-direction information.

Abstract: Construction of virtual environment, isolate the end user to interact directly with the core data sources, deploy the network listener engine in a virtual environment, using listening and interception technology, a variety of fine-grained authorization aggregates attribute information data to achieve the control of the end user to access core data sources. The present invention implements centralized control of remote maintenance authority, to Encapsulated client application packaged in a virtualized environment, control user access to core data sources, cut off end-users access to core data sources directly. Unify the interface of the maintenance path by virtual environment, standardized login path of maintenance personnel and maintenance tools.

Abstract: A document repository management system for an institution having a defined organization is provided. The document repository management system has (a) a first database containing an organization chart and organizational chart information including information identifying individuals in the defined organization, (b) a second database containing accessible documents, (c) programs for controlling requested access to each document of the accessible documents in the second database, and (d) programs for mapping, to the organization chart and the organizational chart information of the first database, each requested access to each document of the accessible documents, thereby enabling efficient management of the document repository based on historical tracking of actual usage of each document by individuals and groups on the organization chart.

Abstract: Systems and methods for tagging digital content are provided. In some embodiments, a method comprises receiving and storing personal data of a first user of an internet-based social network. The personal data of the first user can include one or more digital images or other digital content that the first user is willing to share with other users of the social network. Accordingly, a request from a second user of the internet-based social network can be received to view some of the digital content of the first user. A viewer image can be used to tag the digital content of the first user allowing the owner of the digital content to quickly determine the viewers. The viewer image can be a personal profile picture, an image, an icon, an avatar (two-dimensional or three-dimensional), or other on-screen representation that includes a visual indicator of the second user.

Abstract: Collecting and distributing information related to recent content publication activity of an instant messaging (IM) user provides other users in a network with timely, relevant information about people known to the user or within the same social network. A user participating in a social network can quickly and efficiently perceive new information related to other users (referred to as co-users) in a social network by reviewing the co-users' recent content publication activity. A user may be made able to do so without requiring the co-user to send a communication directly to the user regarding the new facts or new content, and also without requiring the user to actively browse or request information about the co-user.

Abstract: An image editing method comprises: a step of acquiring identification information on each of a plurality of operation instruction units for instructing editing of an image, a step of automatically selecting one or more images for editing from a group of images to classify the one or more images into a group of usable images based on the identification information, a step of determining a right to edit reaching contents of processing which each operation instruction unit is authorized to perform against each image in the group of usable images, and a step of performing editing processing on an image to be edited in the group of usable images based upon the determined right to edit according to an editing instruction supplied from each operation instruction unit.

Abstract: A novel apparatus and method for changing the behavior of an electronic device is provided. In an embodiment, an electronic device includes the functionality of a cellular phone, a voice mail system and a calendar application. The device is configured to use the calendar application to determine whether to direct a phone call to the user or whether to instantly direct the call to voice mail.

Abstract: A system for transmission of data between a first device operated by a first user and a second device operated by a second user comprises a database that is in network communication with the first device and the second device. The database receives a first set of data input by the first user and a second set of data input by the second user. Additionally, the database allows the second user to access a first portion of the first set of data only after the second user authorizes the first user via the database to access a first portion of the second set of data. The database can be configured so that the first user is authorized by the second user once the first user inputs a user-specific identifier of the second user into the database.

Abstract: Methods, systems, and computer program products for managing access to a Domain Name Service (DNS) database. Embodiments of the present disclosure enable authorization of DNS request messages, such as queries and update requests according to user and network address information. The authorization functionality may be incorporated into existing DNS systems. The invention includes a method including receiving a DNS request message originated from a client by a user, the DNS request message comprising a request and identification information specific to the user; determining if the client is authorized to access a DNS database in dependence upon client address information and the user specific identification information contained in the DNS request message; and executing the request in response to determining the user is authorized. The method may further include extracting user specific identification information from a portion of the ID field of DNS messages.

Abstract: A data storage system including a virtual server on a network managing a plurality of user accounts, each user account including one or more files; the virtual server adapted to verify user access information for a particular user account; the virtual server transferring over the network information relating to files stored on the virtual server in the particular user account to a verified user on a user computer; the virtual server further adapted to transfer files associated with the particular user account to and from the user computer.

Abstract: Search results and associated search-result details are provided in response to user queries. Embodiments include identifying a number of search-result details for different indexed search results, identifying one or more detail-attributes for each search-result detail, and identifying one or more user-attributes for a particular user. These search results, associated search-result details, and associated detail-attributes may be stored in a database. Upon receiving a search query from the user, search results may be generated. Search-result details specific to each search result and specific to the end-user may also be generated by identifying the detail-attributes associated with each search-result detail and the user-attributes associated with the end-user. These search results may then be presented to the end-user. Upon receiving an indication of interest in a particular search result, the search result details may then be presented to the end user.

Abstract: The embodiment of this invention provides a method for classifying and processing data in an instant messaging system, which includes: classifying the data of every service included in the instant messaging system into confidential data and non-confidential data; obtaining and processing the non-confidential data of every service after a first authentication is passed successfully; and obtaining and processing the confidential data of every service after a second authentication is passed successfully. The embodiment of this invention also provides a device for classifying and processing data in an instant messaging system. According to the embodiment of the present invention, the security requirements of the instant messaging system are met, and the user is facilitated to use various services provided by the instant messaging system.

Abstract: A location database may be configured to store a set of subjective, arbitrary, and/or ephemeral names assigned to a location by various users. When a user of a device arrives at a particular location, the device may retrieve and present to the user the set of names assigned to the location. Moreover, the names may be associated with a privacy designation, which may permit an author of a location name to indicate whether the name of a location should be shared with the public or restricted to access by the user (or to a specified group of users, etc.) Other access criteria may also be specified, e.g., read-only access to a name for the public and read/write access to a particular group of users. Within the set of names of a location, particular names may be designated as authoritative, and may be presented to users with emphasis.

Abstract: The subject disclosure is directed towards a sensor fusion interface that enables interaction between one or more entities of a physical environment and a computerized device component. A plurality of sensor modules generate multiple sensor input data associated with one or more entities in an environment and store such data in a shared library in accordance with a uniform and common schema. The multiple sensor input data is refined until a certain level of accuracy is achieved. Using the sensor fusion interface, entity state data is extracted from the shared library and exposed to the computerized device component.

Abstract: Among other disclosures, a method may include collecting historical communication data and personal data relating to a portion of a plurality of communications, a sender of one or more of the communications or one or more recipients of the communications. The method may include generating a profile based on the collected historical communication data and personal data and presenting the profile, in response to user behavior.

Abstract: The present disclosure provides methods, devices, and computer-readable media for acquiring statistical access models. One or more embodiments include collecting data associated with a first access profile, collecting data associated with a second access profile, determining whether the data associated with the first access profile has a particular number of characteristics in common with the data associated with the second access profile, assigning a statistical access model associated with the second access profile to the first access profile based on the particular number of characteristics that the data associated with first access profile has in common with the data associated with the second access profile, and detecting an anomalous access event based on the statistical access model.

Abstract: An approach for sharing and/or viewing one or more remixes of content based on the preferences of a user is described. A segmentation platform causes, at least in part, a segmentation of content into one or more segments, wherein the one or more segments are associated with one or more content labels. The segmentation platform also causes, at least in part, a rendering and/or sharing of one or more remixes of the content based, at least in part, on at least one subset of the one or more segments based, at least in part, on profile information, context information, or a combination thereof associated with one or more viewers of the content, one or more owners of the content, one or more sharers of the content.

Abstract: A computer-enabled method for efficiently displaying automatically generated, customizable views of a master product item catalog of veterinary pharmaceutical and other animal-related product item records provided by a centralized pharmacy to a large number of veterinarians, veterinary hospitals and customers, the views comprising administrator views, hospital staff views and user views, the views being selectively excludable and modifiable by each hospital administrator via an exception-type customization and hospital manageable database, access to which is provided for each hospital on the central pharmacy's server, each hospital being enabled to provide customers and staff of the hospital access to its customized catalog via point-of-sale and e-commerce points of access over the Internet or other network.

Abstract: A system for accessing, by a resource, a setting in a virtualized user profile includes an isolation environment, a resource, and a filter driver. The resource executes outside an isolation environment on a local machine and requests access to a setting in a user profile. The filter driver intercepts the request for access and identifies one of the isolation environment and a remote machine, responsive to an application of a rule to the request. The filter driver redirects the request to the one of the isolation environment and the remote machine. A method includes intercepting an instruction from a resource to modify a setting on a local machine, the resource provided by a local machine and executing outside of an isolation environment. The method includes identifying the isolation environment, responsive to an application of a rule to the instruction. The method includes redirecting the instruction to the isolation environment.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for storing data according to permissions. In general, one aspect of the subject matter described in this specification can be embodied in methods that include the actions of identifying a version of a data item to be stored; determining permissions associated with the version of the data item; and storing the version of the data item at a storage location that is based on the determined permissions.