Abstract: A remote browsing session is initiated between a remote browser client executing on a client device and a remote browser host executing on a remote browser server. The remote browser host receives from the client device, encrypted remote browser data of remote browser data that affects the remote browser session. The remote browser client does not have access to a decryption key for the encrypted remote browser data. The encrypted remote browser data is decrypted to reveal the remote browser data. The remote browser host is configured with the remote browser data. The remote browser host manages updates to the remote browser data during the remote browsing session. Periodically, updates to the remote browser data are encrypted and transmitted to the remote browser client for storage.

Abstract: Implementations analyze transaction data and objectively capture pre-identified desired information about the analyzed transaction data in a consistently organized manner. An example system includes a user interface that enables a user to provide static portions and dynamic portions of a template. The dynamic portions identify variables that are replaced with either data extracted from the transaction or text based on the output of classifiers applied to the transaction. An example method includes applying classifiers to scoring units of a transaction to generate classifier tags for the scoring units and generating a narrative by replacing variables in an automated narrative template with text based on at least some of the classifier tags.

Abstract: Systems and methods for managing column hiding are provided. The systems and methods receive, from a client device, a query associated with a table. The systems and methods determine an access restriction associated with the client device. The systems and methods identify a column of the table that is restricted by the access restriction associated with the client device. In response to identifying the column of the table that is restricted by the access restriction associated with the client device, the systems and methods provide a result of the query that excludes data corresponding to the column.

Abstract: The efficiency of a solid fuel burning device can be increased and the emissions can be reduced with proper monitoring and guidance. At least one memory and processor can receive information related to operating conditions of a solid fuel burning device from at least one sensor and filter that information and determine a property related to usage of the solid fuel burning device based on fitting the filtered information to a set of reference conditions. The property can be compared to a lookup table comprising triggering events and when the property satisfies one of the triggering events appropriate guidance for operation of the solid fuel burning device can be retrieved and outputted so that alterations can be made to the operating conditions of the solid fuel burning device.

Abstract: Computer-implemented methods and systems are provided for the detection of software presence remotely through the web browser by detecting the presence of webinjects in a web browser that visits a detection webpage. The methods can include delivering a detection webpage to a web browser, in which the detection webpage has detection code configured to detect a presence of the webinject in the detection webpage; and inspecting, by the detection code, rendering of content of the detection webpage in the browser to detect webinject content in the detection webpage by the webinject, the webinject content including one or more Hypertext Markup Language (HTML) components. The method can further include, if webinject content is detected, generating a fingerprint for each of the one or more HTML components; transmitting the one or more fingerprints to an external server; and classifying, by the external server, the webinject based on the one or more fingerprints.

Abstract: Some implementations generate logical queries from a canonical query, where the logical queries each reflect a modified scope of the canonical query. Implementations receive, via a personalized analytics system, a canonical query that is associated with a user. The canonical query can be analyzed to determine an intent of the canonical query. In turn, one or more implementations generate, based on the intent an anecdotal information associated with the user, a logical query that reflects a modified scope of the canonical query. In implementations multiple logical queries are generated and are processed to remove a duplicate logical query. A logical query can be used to extract data from a database associated with the personalized analytics system based on a modified scope.

Abstract: Systems, methods and non-transitory computer readable media for assigning confidence to data de-identification are provided. A data collection may be accessed to generate a de-identified copy of the data collection. A confidence level that the generated de-identified copy does not include identified information may be determined. In response to a first value of the confidence level, providing particular information based on the de-identified copy of the data collection to a first entity and to a second entity. In response to a second value of the confidence level, providing the particular information to the first entity and forgoing providing the particular information to the second entity.

Abstract: A computing system can be configured to perform operations in a define phase including receiving a component specification including a transformation function; inputting the component specification into a define function; receiving, as an output of the define function, the factory function; and receive data describing a second software component that satisfies the component specification of the first software component. In an assembly phase after the define phase, the computing system can input, into the factory function, the first software component and the second software component; and receiving, as an output of the factory function, the assembled software system including the first software component connected with the second software component according to the component specification of the first software component.

Abstract: Aspects of the disclosed technology include a method including receiving, from a user device, an identification of content; receiving, by a computing device, the identified content; accessing search engine processing logic; processing the received content using the subset of search engine processing logic, without indexing the received content to be accessed for responding to search queries from the search engine; generating a representation of a predicted search result of the received content based on the processing; and transmitting, to the user device, the representation of the predicted search result.

Abstract: The present disclosure relates to aggregating and sharing wellness data. The wellness data can be received by a user device from any number of sensors external or internal to the user device, from a user manually entering the wellness data, or from other users or entities. The user device can securely store the wellness data on the user device and transmit the wellness data to be stored on a remote database. A user of the device can share some or all of the wellness data with friends, relatives, caregivers, healthcare providers, or the like. The user device can further display a user's wellness data in an aggregated view of different types of wellness data. Wellness data of other users can also be viewed if authorizations from those users have been received.

Abstract: A computer implemented method for managing computational cluster access to multiple domains includes generating, using a ticket-based computer network authentication protocol, a primary set of keys based on remote system access credentials for a primary domain and a secondary set of keys based on remote system access credentials for a secondary domain. The method includes merging the primary set of keys with the secondary set of keys to form a merged set of keys. The method further includes activating a system daemon to provide access to the primary domain and the secondary domain by a computational cluster based on the merged set of keys. The method further includes connecting, using the ticket-based computer network authentication protocol via the system daemon, a remote computing device of the primary domain and a remote computing device of the secondary domain to the computational cluster.

Abstract: According to some embodiments, a system to facilitate hierarchical data exchange may include an aggregation platform data store containing electronic records. A data aggregation platform may collect, from a plurality of data source devices, information associated with a plurality of data sources and store the collected information into the aggregation platform data store. The data aggregation platform may also receive a data request from a data consumer device, and, responsive to the received data request, determine a precision tier associated with the data request. The data aggregation platform may then automatically calculate a resource value for the data request based on the precision tier. It may then be arranged for information from the aggregation platform data store to be modified and transmitted to the data consumer device.

Abstract: A uniform resource identifier (URI) shortening service, such as a URL shortening service, creates the shortened URI along with “synopsis” data relating to the human understandable content of the resource, such as the text and images in a typical web site. Later, when users use the shortened URI to retrieve the resource, if the synopsis data for the resource has changed too much relative to the synopsis data as created at the earlier time of the URI shortening, then the requesting users are given some type of notification or warning that the content of the resource has changed. This can save the end users from wasting time retrieving and reviewing a resource that is no longer of interest due to the changes in the content.

Abstract: Techniques are described for performing forensic assisting and tracing of transaction data from an automated teller machine (ATM) to detect suspicious activity and potential security threats. The techniques include a forensic assisting and tracing (FAST) ATM configured to intercept data packets including transaction data generated by the ATM; map, store, and index the transaction data; and analyze metadata for the transaction data to generate reports on the operation of the ATM for a higher-level hub server. In some examples, a plurality of FAST ATMs may be networked to the hub server such that the hub server receives reports from each of the individual FAST ATMs and analyzes the reports to identify larger, global trends of suspicious activity and potential security threats.

Abstract: A system and method that can include training a deep neural network using time series data that represents functions of a non-linear Kalman filter that represents a dynamic system of equipment and environment and models a pre-defined operational procedure as a temporal sequence. The system and method can also include receiving operation data from the equipment responsive to operation in the environment and outputting an actual operation as an actual sequence of operational actions by the deep neural network. The system and method can additionally include performing an operation-level comparison to evaluate the temporal sequence against the actual sequence using a distance function in a latent space of the deep neural network and outputting a score function that quantifies the distance function in the latent space. The system and method can further include controlling an electronic component to execute an electronic operation based on the score function.

Abstract: Various embodiments of the present invention provide methods, apparatuses, systems, computing devices, computing entities, and/or the like for facilitating efficient and effective execution of database management operations. For example, various embodiments of the present invention describe techniques for enabling access to anatomized data associated with a database table without using computationally expensive data anatomization techniques that use data masking and/or data manipulation and by using limited access pointers that are generated using randomized associations between database rows of a database table.

Abstract: A method includes receiving a request from an internet content provider to provide data about a subscriber associated with an IP address, where the data allows the internet content provider to maintain stateful and persistent information about an HTTP session with a user endpoint device associated with the IP address determining whether the Internet content provider is a trusted Internet content provider pre-authorized to receive at least some of the data about the subscriber, determining a subset of the data about the subscriber that is allowed to be shared with the Internet content provider, when the Internet content provider is determined to be a trusted Internet content provider, providing the subset of the data to the Internet content provider, when the subset of the data is determined, and denying the request to provide the data, when the Internet content provider is determined not to be a trusted Internet content provider.

Abstract: A system and method for protecting information managed by a content management system are disclosed herein. A first server of the content management system receives a request from a user or service to access a data item managed by the content management system. The first server determines a data type associated with the requested data item. The first server accesses a access control list to determine whether the user or service has permission to access data associated with the data type. The first server processes the request, based on a determination that the user or service has permissions to access data associated with the data type.

Abstract: A URL refreshing method, apparatus and device in a CDN, and a CDN node, relating to the technical field of data processing, and the technical problem of poor URL refreshing efficiency in a CDN. The method includes: receiving a first refreshing request, the first refreshing request comprising at least one URL to be refreshed; comparing the at least one URL with a URL stored in a local database, the local database storing a URL corresponding to a locally stored source file; and executing a refreshing operation of the URL existing in the database.

Abstract: Methods, devices and systems are disclosed for inter-app communications between software applications on a mobile communications device. In one aspect, a computer-readable medium on a mobile computing device comprising an inter-application communication data structure to facilitate transitioning and distributing data between software applications in a shared app group for an operating system of the mobile computing device includes a scheme field of the data structure providing a scheme id associated with a target software app to transition to from a source software app, wherein the scheme id is listed on a scheme list stored with the source software app; and a payload field of the data structure providing data and/or an identification where to access data in a shared file system accessible to the software applications in the shared app group, wherein the payload field is encrypted.

Abstract: Using a computer system, an instruction is received to define or modify a permission constraint corresponding to one or more files. A permission-instruction data set representing the permission constraint is stored in a data store. Subsequent to storing the permission-instruction data, a user request to access a particular file is intercepted. The data store is queried to determine whether any pending permission-instruction data set corresponds to the particular file. In response to the query, it is determined that the permission-instruction data set corresponds to the particular file. A permission constraint of the particular file is added or modified based on the permission-instruction data set. Based on the modified or added permission constraint, it is determined whether and/or an extent to which the user request is authorized. A response to the user request based on the determination as to whether and/or an extent to which the user request is authorized.

Abstract: A compilation method includes obtaining a source program code. The source program code includes a first function in a first language code and a second function in a second language code. The first language code is a native language. The second language code is a non-native language. The method also includes generating a third language code based on the source program code. The third language code includes a third function, a fourth function and a fifth function. The third function is generated based on the first function. The fourth function is generated based on the second function. The fifth function is generated based on the first function and the second function. Executing the third function invokes the fourth function via the fifth function.

Abstract: A user equipment (UE) associated with a wireless communication system is disclosed. The UE comprises a processor configured to receive a first downlink control information (DCI) for scheduling a first physical downlink shared channel (PDSCH). The first DCI includes a non-numerical (NN) value of K1 for hybrid automatic repeat request (HARQ)-ACK feedback. The processor is further configured to determine a first priority class associated with the first PDSCH, and determine K1 value and priority class associated with one or more subsequent PDSCH received from the BS, until a selected PDSCH having a numerical K1 value and a same priority class as the first priority class is identified. Further, the processor is configured to provide HARQ-ACK feedback associated with the first PDSCH using a PUCCH/PUSCH occasion indicated by a second DCI scheduling the selected PDSCH.

Abstract: Methods and apparatus are disclosed regarding an e-commerce system having social networking aspects. The e-commerce system leverages such social networking aspects to help promote the sale of products.

Abstract: Aspects include receiving a query at a data engine. The data engine includes data in a protected format stored in a secured database and a copy of the data in a clear format stored in a secured database replica. The query is received from a requestor. The query is processed at the secured database replica to generate a query response in the clear format. The query response is converted into the protected format. The converted query response in the protected format is provided to the requestor.

Abstract: A mobile device includes a file information acquiring unit, a file information display unit that displays the file information acquired on a display unit, a file presence identifying unit that determines whether or not a file specified by file information designated by a user from among the file information displayed on the display unit is stored in a storage unit, a first file transmitting unit that transmits the stored file to another mobile device when the file presence identifying unit determines that the file is stored in the internal storage unit, a file acquiring unit that downloads the file specified by the designated file information from the server when the file presence identifying unit determines that the file is not stored in the internal storage unit, and a second file transmitting unit that transmits the file acquired by the file acquiring unit to the other mobile device.

Abstract: A computing system obtain a keyword and an identifier for a user of a content authoring application. Based upon the keyword and identifier for the user, the computing system walks a user graph comprising nodes connected by edges. The walk comprises identifying seed nodes in the user graph representing at least one topic that corresponds to the keyword and identifying second level nodes in the user graph that are connected to the seed nodes. The second level nodes represent first content that is associated with the user. The computing system transmits contextual data that is based upon the first content to the content authoring application. The contextual data is processed and formatted and is included in second content presentable by the content authoring application. The contextual data may be used to autogenerate the second content without user input. The second content may be modified by the user as desired.

Abstract: According to one embodiment, a data management method performed by a computer, includes: receiving first request information for requesting to execute a first process on first data, the first data being data regarding a person; and determining whether the first process is executable, based on the first request information and consent information, the consent information including a first condition that the person consents to perform the first process.

Abstract: Methods, apparatus, and computer-accessible storage media for controlling export of snapshots to external networks in service provider environments. Methods are described that may be used to prevent customers of a service provider from downloading snapshots of volumes, such as boot images created by the service provider or provided by third parties, to which the customer does not have the appropriate rights. A request may be received from a user to access one or more snapshots, for example a request to export the snapshot or a request for a listing of snapshots. For each snapshot, the service provider may determine if the user has rights to the snapshot, for example by checking a manifest for the snapshot to see if entries in the snapshot manifest belong to an account other than the customer's. If the user has rights to the snapshot, the request is granted; otherwise, the request is not granted.

Abstract: The present invention relates to a method for creating avatars from an initial sensitive data set stored in a database of a computer system, the initial data comprising attributes relating to a plurality of individuals, the method comprising: a) choosing a number {k} of nearest neighbors to be used from all the individuals in the initial data set, b) identifying, for attributes relating to a given individual, the k nearest neighbors from among the other individuals in the data set, c) generating, for at least one attribute relating to said individual, a new attribute value from quantities which are characteristic of the attribute in the identified k nearest neighbors and weighted by a coefficient, and d) creating avatar data comprising the new attribute value(s), so as to ensure the sensitive data relating to the individual are non-identifiable.

Abstract: Systems and methods for managing membership in a private data exchange are provided herein. In one embodiment, the method includes receiving a request for access to a first listing of a data exchange, each listing of the data exchange comprising version metadata. The method further includes, in response to the request, accessing a first version of a data set referenced by the first listing, wherein the first version of the data set comprises a first structure defined by first version metadata, a second listing of the data exchange references a second version of the data set, the second version of the data set comprising a second structure defined by second version metadata, and the second structure is incompatible with the first structure.

Abstract: In one example, a method includes obtaining, by a policy controller for a virtualization infrastructure, a first profile for a first group of one or more elements, the first profile comprising a first ruleset having one or more alarms; obtaining, by the policy controller, a second profile for a second group of one or more elements, the second profile comprising a second ruleset having one or more alarms; receiving, by the policy controller, configuration data configuring an element of the virtualization infrastructure as a member of the first group of one or more elements and as a member of the second group of one or more elements; generating, by the policy controller based on the configuration data, a profile for the element comprising the first ruleset and the second ruleset; and outputting, by the policy controller to a computing device, the profile for the element.

Abstract: An apparatus and method of providing a user with a web-browser supplement is disclosed. One method includes providing access to a focal group, wherein the focal group includes at least one member having at least one association with the user. Access is provided to information associated with the at least one member having relevance to the focal group. Web browsing by the user is supplemented by the information of the members of the focal group.

Abstract: Presenting search suggestions within a messaging application that include attachments without searching messages for the attachments is provided. Messages are received at a computer and managed by a messaging application. A query for suggestions is received via the messaging application. The query is performed by the messaging application without querying the messages that have been received through the messaging application. Suggested search results are provided by the messaging application. The suggestions include attachments that were received via a message through the messaging application. In one or more aspects, the suggested search results also provide other attachments that were received by other than the messaging application.

Abstract: A system of embedding access control logic into a network gear according to an embodiment includes a plurality of access control devices including corresponding lock mechanisms configured to control access through corresponding passageways, a headend access control system configured to manage access control data associated with the plurality of access control devices, and a network switch communicatively coupled to the headend access control system and comprising a smart communication manager, wherein the smart communication manager includes an application programming interface accessible by the headend access control system and translates commands received from the headend access control system into payloads readable by the plurality of access control devices.

Abstract: Methods and apparatus to facilitate annotation projects to extract structured information from free-form text using NLP techniques. Annotators explore text documents via automated preannotation functions, flexibly formulate annotation schemes and guidelines, annotate text, and adjust annotation labels, schemes and guidelines in real-time as a project evolves. NLP models are readily trained on iterative annotations of sample documents by domain experts in an active learning workflow. Trained models are then employed to automatically annotate a larger body of documents in a project dataset. Experts in a variety of domains can readily develop an annotation project for a specific use-case or business question. In one example, documents relating to the health care domain are effectively annotated and employed to train sophisticated NLP models that provide valuable insights regarding many facets of health care.

Abstract: A method for software identification in a software asset management system is provided. The method comprises receiving software inventory data from a user terminal and processing the software inventory data, wherein processing the software inventory data comprise identifying software information based on the software inventory data. Thereby the software characteristics are identified.

Abstract: A method includes receiving a search query including clause text to be searched and executing the search query against the database. The method includes receiving a set of results, the set of results including documents that include a version of the clause text, and normalizing the set of search results. The method includes grouping the normalized set of search results into one or more groups of results, each group including documents containing a version of the clause text that is semantically equivalent to each other document in the group. The method includes receiving an indication of a selection of a particular group from among the one or more groups of results and causing display of at least a portion of the particular version of the clause text.

Abstract: The cloud-based query workload optimization system disclosed herein the cloud-based query workloads optimization system receives query logs from various query engines to a cloud data service, extracts various query entities from the query logs, parses query entities to generate a set of common workload features, generates intermediate representations of the query workloads, wherein the intermediate representations are agnostic to the language of the plurality of the queries, identifies a plurality of workload patterns based on the intermediate representations of the query workloads, categorizes the workloads in one or more workload type categories based on the workload patterns and the workload features, and selects an optimization scheme based on the category of workload pattern.

Abstract: Using a set of menu to key process mappings, historical menu usage data for an application is aggregated into aggregated key process usage data. A set of key process association rules, each comprising a consequent key process given a particular antecedent key process, is generated. From the set of key process association rules and a set of ranked menus by frequency of usage within each key process, a set of model menu recommendations is generated. According to an application usage history, a menu frequency ratio, and a confidence value of a modelled next menu, the set of menu recommendations is scored. A scored menu recommendation having a rank below a threshold rank is pruned from a set of menu items of the application ranked according to their scores. The pruned set of scored menu recommendations is presented for selection instead of the set of menu items.

Abstract: Systems and methods are provided for management of access to data by maintaining the lineage of access metadata as data is queried, processed, and stored in a computing environment. Data stored within a computing environment may be tagged or otherwise associated with metadata representing an access categorization of the data. When the data is used to create new data sets, the access categorizations of the base data are retained, and metadata representing an access categorization of the created data sets is generated based on the access categorizations of the base data. The created data may be stored in a location according to the access categorization.

Abstract: A system and method whereby an user interface editing device is used to create a user interface for a controlling device, the created user interface including user interface elements that are associated with functional operations of a virtual equivalent of an appliance. After the created user interface is transferred to the controlling device, the virtual equivalent of an appliance is caused to be linked to an intended target appliance whereupon activation of those user interface elements of the graphical user interface that were associated with functional operations of the virtual equivalent of an appliance will cause the controlling device to transmit commands to control corresponding functional operations of the intended target appliance.

Abstract: The present disclosure relates to digital experience development platforms and, more particularly, one or more components, systems and methods thereof of an intelligent digital experience development platform (IDXDP) configured to assist different users in the development, design and deployment of digital applications. A computer-implemented method includes: receiving, by a computing device of a registration system, a request from an external third party vendor to connect to an administrative portal of the computing device; assigning, by the computing device, the third party vendor a unique identifier in response to the request, wherein the unique identifier enables end users to communicate with the third party vendor through the registration system; and enabling, by the computing device, interactions between the end users and the third party vendor via the administrative portal.

Abstract: A method includes detecting, at an electronic device (ED) providing a virtual assistant (VA), an input that triggers the VA to perform a task that comprises outputting media content through an output device associated with the ED. The method includes detecting a presence of at least one registered user in proximity to the ED. Each registered user is associated with a corresponding media preferences profile. The method includes, for each detected registered user, determining whether the detected registered user is an active consumer. The method includes, in response to determining that a detected registered user is an active consumer, outputting, via the output device, media content associated with the media preferences profile of the detected registered user.

Abstract: A system includes a relational database management system component and a column-oriented data processing component. The relational database system component stores database information in a row format. The column-oriented data processing component stores the database information in a column format. In response to a database update request, the relational database management system component updates the database information stored in the row format; the relational database management system component notifies the column-oriented data processing component of the database update request; and the column-oriented data processing component updates the database information stored in said column format. In response to a query request, the column-oriented data processing component generates a query response based on the database information stored in said column format. In this manner, the system is able to generate up-to-date reports without the need for extraction, translation and loading procedures.

Abstract: Memory access circuitry 26 controls access to memory based on ownership information defining, for a given memory region, an owner realm specified from among two or more realms, each realm corresponding to at least a portion of a software processes miming on processing circuitry 8. The owner realm has a right to exclude other realms from accessing data stored within the given memory region. On activation of a target realm, it is detected whether a parameter signature derived from security configuration parameters established for the target realm matches an expected signature; and in response to detecting a mismatch between the parameter signature and the expected signature, an activation restriction is applied to the target realm to prevent the activation of target realm or prevent correct functioning of the target realm following activation.

Abstract: The disclosure is directed to systems and methods for enterprise-wide fine-grained role-based access control to a plurality of organizational assets. In various embodiments exemplary methods include receiving, via an authorization service client API, identification of an asset for fine-grained role-based access control; a definition of an asset type of the asset; a definition of an asset value; receiving, a definition of an organizational role with fine-grained role-based access control to at least one of the asset, the asset type, and the asset value. Furthermore, receiving permissions for fine-grained role-based access by the organizational role to at least one of the asset, the asset type, and the asset value. Furthermore, the exemplary method may comprise providing an authorization service user interface (UI) for enabling fine-grained role-based access control to the asset based on the fine-grained role-based access control database schema.

Abstract: The disclosed technology addresses the need in the art for a content management system that can be highly flexible to the needs of its subjects. The present technology permits any object to be shared by providing a robust and flexible access control list mechanism. The present technology utilizes a data structure that is highly efficient that both minimizes the amount of information that needs to be written into any database, but also allows for fast reads and writes of information from authoritative tables that are a source of truth for the content management system, while allowing for maintenance of indexes containing more refined data that allow for efficient retrieval of certain information that would normally need to be calculated when it is needed.

Abstract: A database system receives a query. The database system retrieves an old query execution plan (QEP), OldPlan, for the query. The database system submits the query to an optimizer. The optimizer returns a new QEP, NewPlan, for the query. The database system submits the OldPlan and the NewPlan to a machine learning classifier (ML classifier). The ML classifier predicts that executing the NewPlan will result in a performance regression as compared to executing the OldPlan. The database system executes the OldPlan instead of the NewPlan.

Abstract: In one embodiment, a processing device receives a first digital fingerprint of a media item along with a first content management rule. The processing device separately receives a second digital fingerprint of the media item along with a second content management rule. The processing device determines that the received digital fingerprints are for the same media item based upon a match between the first digital fingerprint and the second digital fingerprint. The processing device determines that all rights to the media item have been accounted for, and then determines a set of actions to be performed for hosted media items comprising the media item based at least in part upon the first content management rule and the second content management rule. Processing logic may also perform a conflict resolution process for conflicting rights claims to the media item.