Abstract: For an enterprise system, a data system has data records identifying logical items and logical containers that correspond to physical items and physical containers, the data records reflecting the storage of physical items and physical containers with other physical containers. An indication is received that a particular physical item has been moved from a first physical container to as second physical container. At least one identified data record is identified that reflects the storage of the physical item in the first physical container. The identified data records are updated to reflect the storage of the physical item in the second physical container.

Abstract: Methods, systems, apparatus, and non-transitory media are described for governing resources used to execute and retrieve database entries in accordance with an ad-hoc structured query language (SQL) script. Various aspects are described to determine whether a written SQL script is optimized, to execute the SQL script if it is optimized, and to otherwise reject unoptimized SQL scripts. The resources used during the execution of the SQL script may further be monitored to control resource use, and the execution of SQL scripts may be ceased if a processor-based resource limit threshold is exceeded. The SQL script execution system may be implemented in a wide variety of systems, such as database servers. The scripts may be executed in conjunction with scrubbing and encryption scripts to protect sensitive data, and thus the SQL scripts may be received via one or more public APIs.

Abstract: A method of providing access control to a relational database accessible from a user interface is implemented at a policy enforcement point, which is located between the database and the user interface and includes the steps of: (i) intercepting a database query from a user; (ii) assigning attribute values on the basis of a target table or target column in the query, a construct type in the query, or the user or environment; (iii) partially evaluating an access-control policy defined in terms of said attributes, by constructing a partial policy decision request containing the attribute values assigned in step ii) and evaluating the AC policy for this, whereby a simplified policy is obtained; (iv) deriving an access condition, for which the simplified policy permit access; and (v) amending the database query by imposing said access condition and transmitting the amended query to the database.

Abstract: A logical apparatus and associated methods provide highly scalable and flexible data storage in a network of computers. The apparatus provides flexible organizational and access control mechanisms and a practical and efficient way to work with smaller portions of a data storage system at a given time to enable sparse population, caching, paging and related functions. A data structure, called a virtual container, comprises references to objects stored in a data storage system such that the same object can be visible from different virtual containers, if such virtual containers hold references to said object. Access controls further enhance the effectiveness of the methods and structures to enable multiple simultaneous organizational schemes and selective sharing of objects.

Abstract: A method for managing storage functions in a data replication environment is disclosed. In one embodiment, such a method includes continually monitoring for changes to a storage configuration at a secondary site. Upon detecting changes to the storage configuration at the secondary site, the method transmits remote metadata describing the changes to the primary site and stores the remote metadata at the primary site. The method then initiates a storage management function at the primary site which is mirrored to the secondary site. In order to perform the storage management function, the method reads the remote metadata at the primary site to determine the storage configuration at the secondary site. The method then performs the storage management function at the primary site in a way that takes into account the storage configuration at the secondary site.

Abstract: A method for managing storage functions in a data replication environment is disclosed. In one embodiment, such a method includes continually monitoring for changes to a storage configuration at a secondary site. Upon detecting changes to the storage configuration at the secondary site, the method transmits remote metadata describing the changes to the primary site and stores the remote metadata at the primary site. The method then initiates a storage management function at the primary site which is mirrored to the secondary site. In order to perform the storage management function, the method reads the remote metadata at the primary site to determine the storage configuration at the secondary site. The method then performs the storage management function at the primary site in a way that takes into account the storage configuration at the secondary site. A corresponding apparatus, system, and computer-readable medium are also disclosed and claimed herein.

Abstract: Execution of code in a multitenant runtime environment. A request to execute code corresponding to a tenant identifier (ID) is received in a multitenant environment. The multitenant database stores data for multiple client entities each identified by a tenant ID having one of one or more users associated with the tenant ID. Users of each of multiple client entities can only access data identified by a tenant ID associated with the respective client entity. The multitenant database is a hosted database provided by an entity separate from the client entities, and provides on-demand database service to the client entities. Source code corresponding to the code to be executed is retrieved from a multitenant database. The retrieved source code is compiled. The compiled code is executed in the multitenant runtime environment. The memory used by the compiled code is freed in response to completion of the execution of the compiled code.

Abstract: A database has a plurality of elements, where each element is associated with a location and at least one set of different attribute values, wherein each set includes a timestamp when the attribute values in the set were determined. A determination is made of a reference geographical location, an element having a geographical location within a geographical region including the referenced geographical location, a most recent set of the attribute values for the element having a most recent timestamp, a previous set of attribute values for the determined element comprising the set of attribute values having a previous timestamp prior to the most recent timestamp, and whether a condition with respect to at least one of the most recent set of attribute values and the previous set of attribute values of the determined element is satisfied.

Abstract: A method of providing access control to a relational database accessible from a user interface is implemented at a policy enforcement point, which is located between the database and the user interface and includes the steps of: (i) intercepting a database query from a user; (ii) assigning attribute values on the basis of a target table or target column in the query, a construct type in the query, or the user or environment; (iii) partially evaluating an access-control policy defined in terms of said attributes, by constructing a partial policy decision request containing the attribute values assigned in step ii) and evaluating the AC policy for this, whereby a simplified policy is obtained; (iv) deriving an access condition, for which the simplified policy permit access; and (v) amending the database query by imposing said access condition and transmitting the amended query to the database.

Abstract: The disclosed subject matter provides for event driven permissive sharing of information. In an aspect, user equipment can include information sharing profiles that can facilitate sharing information with other devices or users, such as sharing location information. The information sharing profiles can include trigger values, such that when a target value transitions the trigger value, a permission value is updated to restrict access to sharable information. As such, event driven permissive sharing of information allows for designation of temporary friend information sharing with user-defined triggers.

Abstract: A cloud server includes a cloud storage for storing a folder uploaded to the cloud server, a database for storing administrative data; and a cloud service application. The cloud service application establishes a communication connection with an end point device to retrieve a user identification about the user, the end point device name, and folder name and location and stores this information in the database. A remote device communicates with the cloud server to access a folder stored on at least one of the endpoint device and the cloud storage. The cloud service application determines an authorized user and provides access to the folder by providing direct access to the endpoint device from the remote device utilizing the communication connection during uploading of the folder to the cloud, or directly to the cloud storage if the folder has been uploaded.

Abstract: File management systems and methods are presented. In one embodiment, implementation of a method for determining the accurate ownership of a file within a data system includes: identifying a first plurality of access events for a file, wherein the file is associated with a directory of related files; identifying a second plurality of access events for the related files within the directory, wherein access events in the first and second plurality of access events occur within a period; determining a pool of users accessing files within the directory within the period; and selecting a user from the pool of users as an inferred owner of the file based on access metrics related to the plurality of access events.

Abstract: An online dating danger prevention system is disclosed. The online dating danger prevention system includes a database that holds information, including geo-location data and photographs, to make online dating safer. An online dater enters a set of contacts that the system can reach in the event of an emergency.

Abstract: A method, and computer-readable media for performing the method, for managing business transactions. Electronic transaction documents are received from authenticated users and stored in a database, with system usage data regarding users' access to and use of the system captured and stored in the database. Only specified parties are afforded access to system usage data for each user.

Abstract: Read access logging is performed by tracing data accesses in all domains. The logged data is traced on metadata level with some additions identifying the exposed data records. All data relevant for read access logging is stored at first in a temporary log, which is later processed, structured, and archived.

Abstract: Systems and methods of processing database search queries are provided. A method of processing database search queries includes receiving a database query from a query source. The method also includes determining location information associated with the query source based at least partially on an Internet Protocol (IP) address associated with the database query. The method further includes determining, based at least partially on the location information, whether the query source satisfies a required source attribute. The method also includes withholding information requested by the database query when the required source attribute is not satisfied.

Abstract: The disclosed embodiments provide rapid access to information stored on a personal computing device even though the personal computing device is powered off or otherwise in a low-power consumption state such as a sleep state or hibernation state. An software component gathers user data in a location such as a non-volatile memory associated with a host computer. A browser component accesses the stored data and makes it available to the user when the host computer is powered down or otherwise in a state of low power consumption.

Abstract: The present invention re-renders data center visualizations at different levels of abstraction based on roles or activities of an avatar. Morphing of data center objects is accomplished by either combining or decomposing existing data center objects in a manner that will result in a new object that maintains its relationship to the original objects. An example of this would be when creating an application object by combining an existing infrastructure objects (e.g., a server, a network and storage) used to support the application object runtime environment. This allows for the avatar to not only relate the application object to the supporting infrastructure objects, but also provides a view of how the application object is impacted whenever the supporting infrastructure objects change or break.

Abstract: A method, computer program and database system are disclosed for guiding the development of workload group definition (WD) classifications for a database system having resources. WD classification information is provided where a workload group is a set of system requests having characteristics defined by a WD and a WD classification identifies one or more WDs with similar performance requirements. If WD classification is not acceptable, one or more of the following functions is performed until WD classification is acceptable: (a) splitting one or more WDs; and (b) merging two or more WDs.

Abstract: A system (101) for implementing redaction rules in compliance with an organization's privacy policy, where the system intercepts messages between an information source (103) and an information destination (102), modifies the message contents based on redaction rules (106) and forwards the redacted contents over to the client. The system also maintains a record of the redacted information and updates the contents of any message submitted by the client (102) in order to maintain database integrity.

Abstract: An information retrieval system having: a client adapted for accessing a plurality of file sets stored on one of a plurality of file servers; a plurality of file servers configured to operate with a federated file system namespace; and a memory for storing re-direction information accessible by the client for identifying a request issued by the client for a file set at a first location in the namespace where the file set is located at a second, different location on one of the file servers and wherein the client in examining the re-direction information in the memory, re-directs the request to the second location in accordance with the re-direction information.

Abstract: A method of geodetic information acquisition and a computer program product having computer code for performing the method are provided. The method includes identifying a file having multiple records, where the records contain spatially referenced data. The records are classified into header records and data records. Each data record is divided into fields. Patterns of fields consistent with sets of the data records are identified. The records are associated with a format based on the patterns of fields. At least some of the spatially referenced data is extracted from the records according to the format.

Abstract: A method for locking the application program includes: when running a application program stored in a terminal, it judges whether a first unlocking key of the application program exists in the terminal; in the case that the first unlocking key does not exist, the terminal generates and stores the first unlocking key, and sends it to a device; judging whether the device has locked the application program, in the case that the result of judgment is no, proceeding to the first step, otherwise proceeding to the second step: the first step, the device locks the application program, generates a second unlocking key, and notifies the second unlocking key to a user, proceeding to the second step; the second step, performing the authentication process for the user; in the case that the first unlocking key exists in the terminal, the first unlocking key is sent to the device, judging whether the device has locked the application program or not, if not, proceeding to the third step, otherwise proceeding to the forth ste

Abstract: Aspects of the invention relate to sharing content stored on an object addressable storage (OAS) system among a plurality of users of the OAS system and authenticating users to an OAS system. In some embodiments, a user may store content units on the OAS system and control access by other users to these content units. In some embodiments, when a user grants one or more other users access to a content unit stored on the OAS system, the OAS system may send a notification of grant of access to the other user(s).

Abstract: In certain embodiments, generating a hierarchy of terms includes accessing a corpus comprising terms. The following is performed for one or more terms to yield parent-child relationships: one or more parent terms of a term are identified according to directional affinity; and one or more parent-child relationships are established from the parent terms and each term. A hierarchical graph is automatically generated from the parent-child relationships.

Abstract: A system and method of performing risk assessment of a dataset de-identified from a source database containing information identifiable to individuals is provided. The de-identified dataset is retrieved comprising a plurality of records from a storage device. A selection of variables from a user is received, the selection made from a plurality of variables present in the dataset, wherein the variables are potential identifiers of personal information. A selection of a risk threshold acceptable for the dataset from a user is received. A selection of a sampling fraction wherein the sampling fraction define a relative size of their dataset to an entire population is received. A number of records from the plurality of records for each equivalence class in the identification dataset for each of the selected variables. A re-identification risk using the selected sampling fraction is calculated. The re-identification risk meets the selected risk threshold is determined.

Abstract: In accordance with embodiments, there are provided techniques for providing perceivable stimuli in an interface of a multi-tenant on-demand database system. These techniques for providing perceivable stimuli facilitate collaborative efforts of groups of users of a multi-tenant on-demand database system while maintaining access constraints amongst users associated with a common tenant.

Abstract: The method is for granting access to data of a first object that has at least one temporally access controlled public attribute and a clock capable of measuring time independently of the clocks of other objects. A request to access a value of the public attribute of the first object is received. The value of the clock of the first object is compared with the value of the clock of at least one second object. If necessary, the clock values of the first and the second objects are synchronized. Access to the value of the attribute of the first object is granted. Also an arrangement and a computer program product are disclosed.

Abstract: An IC card is configured to receive personalization commands which are used to transmit data to the IC card. An access control list is associated with the data. The data is stored in the IC card in a record structure that includes a plurality of entries. The access control list is stored in the IC card in the record structure. The personalization commands include a card personalization specification (CPS).

Abstract: Described herein are techniques for global synchronization that under various scenarios eliminate or defer the acquisition of global locks. In many cases, the need to acquire global locks is eliminated, thereby saving the overhead attendant to processing global locks.

Abstract: Role-based access controls improve user access in a computer system. A profile associated with a role is generated. The profile is enforced with respect to one or more users associated with the role. Optionally, the profile is generated based at least in part on a user interaction.

Abstract: Implementations of the present disclosure provide computer-implemented methods including generating a changelist corresponding to at least one computer code object that is digitally stored in a repository database, assigning a team to the changelist, the team comprising a plurality of members, initiating access to the computer code object using a computer that is in communication with the repository database, enabling access to the computer code object when a user of the computer is a member of the team, and prohibiting access to the computer code object when the user of the computer is not a member of the team.

Abstract: A computer readable storage medium tangibly embodying machine-readable digital data arranged to facilitate expedited searching. The data includes a plurality of words residing in a table having rows and columns, each word residing in a different row and each letter of the word occupying a different column in that row. Each continuous run of same letters in a column forms an interval. The words are positioned relative to each other to maximize lengths of the intervals, and/or optimize efficiency of compression of the columns by run length encoding.

Abstract: By having a file data storage section that stores file data of a file; a management information storage section that stores management information identifying the file, the management information being related to the file data; a control information storage section that stores control information on a file to be blocked on which a predefined specified processing is to be executed; a management information retrieval section that retrieves the management information stored in the management information storage section; a control information retrieval section that retrieves the control information stored in the control information storage section; an execution section that, when the management information retrieved by the management information retrieval section corresponds to the control information retrieved by the control information retrieval section, executes the predefined processing on the file data related to that management information, proliferation of an important file distribution of which should be

Abstract: In a storage system that manages update prohibition (WORM) information, when time management is not performed with precision, there arises a possibility that an update prohibition (WORM) attribute may be erased before a preservation period expires.

Abstract: A system and method for obtaining information responsive to a legal discovery request directed at an enterprise having a plurality of databases that potentially include information responsive to the legal discovery request, including structured databases and at least one unstructured database. A plurality of taxonomies are provided, each of which describes a structure of one of the structured databases. An ontology is provided that describes data relationships between the databases. A native application is identified, which is configured to access at least one but not all of the databases associated with the enterprise. The native application is modified to include search functionality for accessing all of the databases associated with the enterprise. A request is received from the user, via the modified native application, to search the plurality of databases associated with the enterprise for information responsive to the legal discovery request.

Abstract: A computer-implemented method for providing protection for a data file is disclosed. The method includes employing allowable location information to control access to information of the data file, wherein the allowable location information is associated with the data file The information in the data file is inaccessible if a location of a computer employed to access the data file is not within an allowable geographic area defined by the allowable location information.

Abstract: Systems and methods are provided for capturing and combining media data and geodata into a composite file. The system may include a media data capture module configured to capture media data at a plurality of geographic locations along a path in a geographic area, and to store the media data in a media data stream. The system may further include a geodata capture module configured to capture geodata indicating the geographic locations along the path at which the media data was captured. The system may also include a multiplexing module for interleaving the media data and the geodata into a composite file.

Abstract: The present invention relates to systems and methods that provide a portal user with role-based access to components on a network via portlets within the portal. The role-based access can be sharable such that one or more users with a similar role can instantiate instances of a shared portal. Sharable configurations can be stored local to the user's portal, local to another portal and/or within a networked storage medium. The access provides a user with an entry-point to components, wherein a user can monitor and control components. The user can additionally configure the portal such that the component access is further based on the user's location. Advantages of the present invention include delineation of access and administrative functionality, the ability to combine web and application servers within a similar environment, and the ability to access (e.g., controlling, collecting and analyzing data, etc.) when the user is not utilizing the portal.

Abstract: The disclosed embodiments provide rapid access to information stored on a personal computing device even though the personal computing device is powered off or otherwise in a low-power consumption state such as a sleep state or hibernation state. An software component gathers user data in a location such as a non-volatile memory associated with a host computer. A browser component accesses the stored data and makes it available to the user when the host computer is powered down or otherwise in a state of low power consumption.

Abstract: Vectors representing objects in n-dimensional space are approximated by local polar coordinates on partitioned cells of the data space in response to a query, e.g., a query data vector entered with a request to find “k” nearest neighbors to the query vector. A set of candidate near neighbors is generated using the approximations, with the local polar coordinates being independent of the dimensionality of the data space. Then, an answer set of near neighbors is returned in response to the query. Thus, the present invention acts as a filter to reduce the number of actual data vectors in the data set that must be considered in responding to the query.