Abstract: An online virtual narration method is provided. The online virtual narration method includes: acquiring, at least based on a frame image of a video being played, attribute data used for describing basic information of an element in the frame image; extracting, based on the attribute data, feature data used for representing comprehensive information related to narration in the frame image; generating candidate events based on the feature data; selecting a narration event from the generated candidate events; determining a corresponding narration text based on the selected narration event; and outputting corresponding narration content based on the narration text.

Abstract: Techniques are provided for synchronous replication based cutover. An asynchronous replication process is executed to perform asynchronous incremental transfers of data of a storage object from a first computing environment to a replicated storage object at a second computing environment until a cutover criteria is met. A synchronous replication process is executed to synchronously replicate operations, targeting the storage object, to the replicated storage object based upon the cutover criteria being met. A cutover is performed to direct operations from targeting the storage object to targeting the replicated storage object based upon the synchronous replication process reaching a steady state of synchronous replication for sub-objects of the storage object, where operations are committed to both the storage object and the replicated storage object.

Abstract: Methods, devices and systems are disclosed for inter-app communications between software applications on a mobile communications device. In one aspect, a computer-readable medium on a mobile computing device comprising an inter-application communication data structure to facilitate transitioning and distributing data between software applications in a shared app group for an operating system of the mobile computing device includes a scheme field of the data structure providing a scheme id associated with a target software app to transition to from a source software app, wherein the scheme id is listed on a scheme list stored with the source software app; and a payload field of the data structure providing data and/or an identification where to access data in a shared file system accessible to the software applications in the shared app group, wherein the payload field is encrypted.

Abstract: Technology for a user equipment (UE) operable to multiplex uplink control information (UCI) on a physical uplink shared channel (PUSCH) is disclosed. The UE can determine a symbol duration of the PUSCH. The UE can select a UCI transmission rule in accordance with the symbol duration of the PUSCH when a physical uplink control channel (PUCCH) resource carrying UCI overlaps with more than one PUSCH resource in time within a PUCCH group. The UE can multiplex the UCI on a selected PUSCH resource from the more than one PUSCH resource in accordance with the UCI transmission rule.

Abstract: Systems and methods are provided for registering with a given application. The systems and methods include operations for receiving, with a messaging application, a request to authenticate a phone number from the given application, the phone number being input by a user to register an account with the given application; determining that the phone number received in the request matches a user phone number stored in a user account associated with the messaging application; in response to determining that the phone number received in the request matches the user phone number stored in the user account, transmitting a communication from the messaging application to the given application indicating that the phone number has been authenticated; and causing the given application to register the account for the user to enable the user to log into the given application.

Abstract: According to examples, an apparatus may include a processor and a memory on which is stored instructions that may cause the processor to determine that information has been inputted into an object, the object including a child object nested within the object. The instructions may also cause the processor to generate a child-object hash value based on contents of the child object, generate a hash value for the object based on contents of the object, the contents of the object including the child-object hash value, and determine whether the generated hash value differs from a stored hash value, the stored hash value corresponding to contents of the object without the inputted information. The instructions may also cause the processor to, based on a determination that the generated hash value differs from the stored hash value, save the object including the child object nested within the object.

Abstract: Techniques are disclosed relating to a method that includes receiving, by a particular computer system included in an enterprise computer system, deployment instructions, from a user, for a particular version of a machine-learning model. One or more versions of the machine-learning model may be stored in a database. The particular computer system may select, based on the deployment instructions, a destination within the enterprise computer system for deploying the particular version. The selected destination may provide access to a particular data set. The particular computer system may schedule a deployment of the particular version from the database to the selected destination. The deployed version of the machine-learning model may operate on the particular data set. Performance data associated with operation of the deployed version of the machine-learning model is collected.

Abstract: The present teaching relates to method, system, and programming for evaluating expressions. An expression indicative of conditions and metadata associated therewith is obtained. A determination is made as to whether the expression corresponds to a modified version of an earlier expression based on the metadata. In response to a determination that the expression is the modified version of the earlier expression, a query associated with the modified expression is transmitted to a forecasting cluster so that the modified expression is to be evaluated by the forecasting cluster. In response to a determination that the expression does not have a corresponding earlier expression, the expression is evaluated.

Abstract: A system described herein may provide a technique for identifying states associated with service providers based on biometric, sensor, and/or other information associated with a set of service providers. A request for service may be received, and a particular service provider may be selected based on a particular state associated with the particular service provider, as determined based on the biometric, sensor, and/or other information associated with the particular service provider. State information associated with a requestor of the service may be identified and used as a factor in selecting the particular service provider to respond to the service request.

Abstract: Systems and methods are provided for tracking and enforcing relationships between items. A relationship interface may be provided that conveys the relationship (or link) between items, and through which a user may define the link between two or more items. Identifying a link between two items may establish a set of one or more rules to be enforced with respect to the use of one or both of the items (e.g., when the items are stored, when the items are used to create other items, when other items are associated with the items). In various embodiments, violations of one or more rules may be identified and provided via the user interface. In some embodiments, new items that conflict with one or more rules may be prevented from being committed.

Abstract: A method includes receiving, at a cloud storage system, a request to access a file from an external application on behalf of a first user account, determining, based on one or more access control lists (ACLs) associated with a shared folder, that the external application is not allowed to access the file on behalf of the first user account, and receiving, from a user device associated with the first user account, a message authorizing the external application to access the file on behalf of the first user account. The method further includes modifying the ACLs associated with the shared folder containing the file and a subfolder, and allowing the external application to access the file on behalf of the first user account based on the user information of the first user account and the application information of the external application in the modified ACLs.

Abstract: Systems and methods for using JavaScript Object Notation (JSON) Web Tokens for information security for a particular software-controlled application are disclosed. Exemplary implementations may: store information electronically, including different types of client-provided information, hardware information, key information, and permission information; provide individual JWTs that include individual expiration dates to individual users; receive a user request for continued access and/or use of the particular software-controlled application; perform different types of (automated) verification based on the client-provided information in the user request; and, responsive to particular results from the different types of verification, perform some combination of transferring a response to the user request and accepting or denying continued access and/or use of the particular software-controlled application.

Abstract: A system may include: a server comprising a rule cache; a user device communicably coupled to the server; a computer-readable medium comprising instructions that cause the server to: monitor a plurality of third-party data sources; obtain, via a queueing service, a plurality of pieces of content from the plurality of third-party data sources; for each piece of content, fetch a rule ID from a list of rule IDs on the user device, wherein the rule ID is fetched based on the content and a pre-selected setting on the user device; use the rule ID to fetch a rule from the rule cache, the rule comprising a script, the script comprising executable code; execute the script on the piece of content to determine if the piece of content matches the rule; and in response to determining that the piece of content matches the rule, send an alert to the user device.

Abstract: An information sharing method, an apparatus, an electronic device, and a storage medium are provided. The method includes: determining, in response to a file sharing request initiated by a sharing party, a file-for-sharing corresponding to the file sharing request; determining a sharing strategy for the file-for-sharing based on attribute information of the file-for-sharing; and sharing, based on the sharing strategy, the file-for-sharing within a preset sharing range.

Abstract: The disclosed technology addresses the need in the art for a content management system that can be highly flexible to the needs of its subjects. The present technology permits any object to be shared by providing a robust and flexible access control list mechanism. The present technology utilizes a data structure that is highly efficient that both minimizes the amount of information that needs to be written into any database, but also allows for fast reads and writes of information from authoritative tables that are a source of truth for the content management system, while allowing for maintenance of indexes containing more refined data that allow for efficient retrieval of certain information that would normally need to be calculated when it is needed.

Abstract: Example aspects include techniques for ordering operations in a file system having a hierarchical namespace including determining, by a first service that manages file system operations for a first entity in the hierarchical namespace, to perform a file system operation for the first entity, generating, by the first service, a first counter record for the file system operation, obtaining, based on determining to perform the file system operation and from a second service that manages file system operations on a second entity that is a parent of the entity in the hierarchical namespace, a second counter record for a last file system operation performed on the second entity, wherein the second counter record is generated by the second service, and storing, in a change feed, an indication of the file system operation along with the first counter record and the second counter record.

Abstract: A computer-implemented knowledge management platform system (KMPS) comprises at least one processor and a non-transitory memory unit that is configured to include instructions which, when performed by the processor, induce an organization of knowledge management platform items (KMPI) within a repository, wherein the KMPIs are allocated to knowledge management platform types (KMPT), which are components of a meta-modeled structure that is stored within the non-transitory memory unit and forms an object model, in particular an ontology, with at least one of the KMPTs being implemented as a core KMPT, wherein each core KMPT is attributed to each KMPI within the repository, and wherein each core KMPT defines an essential group of properties, wherein the essential group of properties of the at least one core KMPT defines lifecycle states, and wherein the meta-modeled structure is self-referential, such that each lifecycle state is stored as a KMPI within the repository itself.

Abstract: A deployable customer self-service (CSS) system is described. The deployable CSS includes a user interface, a web portal configured to load and display the user interface, a service configured to provide data to the user interface based on a system of record or third party service, and an integration connector for connecting the service to the system of record or third party service such that the service is agnostic to the format of the system of record or third party service.

Abstract: A directive based access system and method manage access permissions in systems. In one embodiment, the directive based access system and method may be used to orchestrate effective secure access control and communications in multi-cloud distributed systems. In one implementation, the directive based access system and method may include a lineage traceability enforcement engine that uses a lineage traceability. The directive based access system and method may also be implemented using other mechanisms such as blockchain based Hyperledger based system.

Abstract: Examples are provided for a column browser for navigating hierarchical data structures. The column browser can include multiple columns for displaying different levels of the hierarchical data structure and the information, options, and other data stored in nodes of the different levels. The column browser can navigate to different levels of the hierarchical data structure by traversing through parent node and child node links in the hierarchical data structure. Based on the links, the column browser can navigate up or down levels of the hierarchical data structure.

Abstract: Techniques are described herein for simulating triggers in a database. A database server receives a query that targets a database managed by the database server. The database server is registered with a plugin that determines whether the query is a particular type of query. If so, plugin sends a message to an external process that includes features of the query. The database server can also execute the query regardless of whether the particular type of query is detected.

Abstract: An example method comprises receiving, by a secure content system, an email from a sender to a recipient, scanning the contents of the email, evaluating the contents of the email based on a plurality of security rules, storing the sensitive data within a secure storage, generating a replacement email including a security link and not including at least the sensitive data, the security link providing a requester access to the sensitive data providing that a security function is satisfied, sending the replacement email including the security link to the recipient, receiving a request to access the sensitive data, the request being related to the security function challenging the requester using the security function, receiving, from the requester, a response to the security function, determining if the security function is satisfied by the response, and if the security function is satisfied, providing access to the sensitive data to the requester.

Abstract: Permissions on a resource hierarchy of a process are propagated. The resource hierarchy of the process is accessed. The resource hierarchy includes multiple nodes arranged in level and each of the nodes is associated with a separate resource from a plurality of resources. A permission for a user is propagate from a first node to one or more lower nodes arranged below the first node in the resource hierarchy. The user is enabled to interact with each resource associated with the first node and the one or more of the lower nodes based on the propagated permission.

Abstract: A computer system may be configured to access a rule including one or more conditions, providing a user interface configured for user input of a modification to a condition of the rule, receive from a user, via the user interface, a modification to a first condition of the rule constituting a first changed condition, wherein the first changed condition is associated with a modified rule, determine an output data set, based on an input data set including a plurality of past data samples, and the first changed condition of the modified rule, and update the user interface to include a visualization indicating at least some of the output data set.

Abstract: Embodiments are disclosed for a method. The method includes determining a context of a data access request for a data virtualization engine. The method also includes determining data sources that are relevant to the data access request by using a governance machine learning model trained to predict the data sources based on the request and the context. Additionally, the method includes determining data governance rules-policies that are relevant to the request, by using the governance machine learning model, further trained to predict the data governance rules-policies based on the data sources and the context. Further, the method includes generating, by using a query machine learning model, a data access command executable by the data virtualization engine and configured to retrieve data from the data sources and apply the data governance rules-policies.

Abstract: In one embodiment, a secure exchange system is described. The secure exchange system includes a virtual private cloud network and a controller. The virtual private cloud network includes a plurality of gateways, each gateway of the plurality of gateways is configured to generate one or more local directories. Each local directory of the one or more local directories representing one or more stored objects within a public cloud storage element. The controller is configured to authenticate a user prior to granting the user access to the virtual private cloud network. The gateways are accessible by the user over AWS Direct Connect, where the public cloud storage element is a S3 bucket.

Abstract: Embodiments are directed to techniques for enforcing entitlements used by data privacy pipelines. When a data consumer requests to trigger a pipeline that relies on an entitlement, an enforcement mechanism may operate to verify the data consumer's triggering of the pipeline will satisfy the entitlements. A rules engine may access all root entities of the pipeline that require an entitlement, load all contracts and/or corresponding pipelines that reference one of the root entities, and search for one valid access path through the loaded contracts/pipelines. If multiple contracts and/or multiple access paths allow access to a particular root entity, various conflict rules may be configured to choose which contract and access path to use. If all root entities have a valid access path, the constrained environment may execute the requested pipeline using the identified access path for each root entity.

Abstract: A system for data migration is disclosed. The system may receive a migration request comprising a source file path and a target file location. The system may capture source file metadata based on the source file path and the migration request. The system may transfer a source file from a first data environment to an intermediate data environment via a first transfer process. The system may transfer the source file from the intermediate data environment to a second data environment via a second transfer process.

Abstract: Techniques for providing device functionalities using device components are described. A system receives a system-generated directive from a skill system and determines a workflow to execute. The system implements a response orchestrator that operates based on the workflow that includes interception points where cross-cutting functionalities can be invoked as pluggable components. The interception points occur pre-system-generated directive, pre-device-facing directive, post-device-facing directive generation, post-device-facing directive dispatch, and the like. The system supports asynchronous execution, conditional execution, and sequential execution of components. Data determined by the cross functionality components can be used by other components for processing.

Abstract: A system and method that enables users to provide authenticated medical records (e.g., vaccination records, viral anti-body test results, etc.) to a third-party (e.g., a venue) to gain access to the third-party is provided. In this way, the third party may confirm that the user is sufficiently immune to a particular disease (e.g., COVID-19) and may thereby minimize the threat of the user introducing the contagious disease to the third party. The system includes a biometric data recognition system that authenticates the identity of a user, a medical records acquisition system that acquires the medical records of the authenticated user, and a system for the displaying or otherwise providing the medical records to the third-party for review. The system also includes a system identification card that includes the user's contact information, alphanumeric characters associated with the user's driver's license number, medical records of the user, and other elements.

Abstract: Systems and methods are disclosed for providing a secure communication between a first network and a second network. The method may include receiving, at a Secure Access Smart Hub (SASH), a signal from the first network requesting a communication connection; establishing a first connection between the first network and the SASH; establishing a second connection between the SASH and the second network; receiving, at the SASH, data from the first network having a first protocol; translating the data having the first protocol into data having a second protocol; and transmitting the data from the SASH to the second network.

Abstract: A method and system for analyzing a corpus of data artifacts is disclosed. The method comprises obtaining, by a computer, a semantic representation of the data artifacts, where the semantic representation indicates (1) entities identified in the data artifacts, and (2) semantic relationships among the entities as indicated by the data artifacts. The method further comprises clustering the data artifacts into clusters of semantically related data artifacts based on the semantic representation and inferring additional semantic relationships between pairs of the entities. The inferring comprises applying, on a cluster-by-cluster basis, a multi-tiered network of inference engines to a portion of the semantic representation corresponding to the cluster, where the multi-tiered network of inference engines includes a domain-independent inference tier and a domain-specific inference tier.

Abstract: A method for sharing data in a multi-tenant database includes generating a share object in a first account comprising a share role. The method includes associating one or more access rights with the share role, wherein the one or more access rights indicate which objects in the first account are accessible based on the share object. The method includes granting, to a second account, cross-account access rights to the share role or share object in the first account. The method includes receiving a request from the second account to access data or services of the first account. The method further includes providing a response to the second account based on the data or services of the first account.

Abstract: An online system receives information describing a request from a user to perform an action within a guest application and information identifying a host application for determining whether to allow the user to do so. The information describing the request is communicated to the host application for comparison to a set of permissions. Upon receiving information indicating the information describing the request matches a permission identifying a user allowed to perform an action within the guest application, the online system communicates, to the host application, a message for display to the user including an option allowing the user to perform the action within the guest application. Upon receiving a selection of the option at the host application, the online system receives a token allowing the user to perform the action within the guest application and communicates it to the guest application. The host and guest applications also may communicate directly.

Abstract: Methods and systems for secure storage and retrieval of information, such as private keys, useable to control access to a blockchain, include: receiving, in a cryptoasset custodial system, a request to authorize a staking operation associated with a blockchain, wherein the staking operation is associated with a private key of an asymmetric cryptographic key pair, the private key is usable to control ownership of a cryptoasset recorded in the blockchain, and the private key is securely held in the custodial system; performing, in response to the request, a portion of the proof-of-stake protocol in a hardware security module using logic designed for the protocol, wherein the logic in the hardware security module is configured to authorize the staking operation by digitally signing an associated staking transaction; and sending the digitally signed staking transaction to another computer to effect the staking operation on behalf of the user.

Abstract: A first networked device may perform operations including receiving, from a media source device, a media stream. The first networked device may be configured to use a first media playback protocol and the media source device may be configured to use a second media playback protocol. The first media playback protocol and the second media playback protocol may be incompatible. Operations may further include transmitting, to a second networked device, the media stream. The first networked device and second networked device are configured to operate in a bonded zone.

Abstract: Provided herein are systems and methods for configuring replication group objects. A system includes at least one hardware processor coupled to memory and configured to decode a replication request received from a client device of a data provider. The replication request indicates a plurality of account objects for replication. The plurality of account objects associated with a corresponding plurality of account object types. A replication group object is generated based on the replication request. The replication group object includes a manifest. The manifest lists the plurality of account objects. The replication of the plurality of account objects is performed from a source account of the data provider into at least one target account. The replication is based on the manifest of the replication group object.

Abstract: The embodiments of the present disclosure provide a private data processing method, a device and a medium, and relate to data security technologies. The method includes: initiating a user request to an intermediate server according to an input of a user to request the intermediate server to perform intermediate business processing according to the user request and to initiate a target business processing request to a business server; obtaining business result data encrypted with an account key of the user and fed back by the business server based on the target business processing request from the intermediate server; and using the account key of the user to decrypt the encrypted business result data.

Abstract: A system and method to filter potentially unwanted traffic from trackers, third-party cookies, malicious websites or other sources and present the aggregated results of said filtering to the VPN user. One of the embodiments enables a VPN user to opt-in or opt-out from the filtering activities while being able to access the aggregated information about filtering. In another embodiment, the user can choose to customize the filtering parameters to add or remove specific targets from the filtering policies.

Abstract: Aspects relate to apparatuses and methods for integrated application tracking. An exemplary apparatus includes a cloud platform, a processor, and a memory communicatively connected to the processor, the memory containing instructions configuring the processor to receive a plurality of user data related to a user, parse the plurality of user data into a key work record, generate a user metric, as a function of the key work record, based on a plurality of weighted values reflecting desirability, wherein generating the user metric includes identifying at least a negative factor in the key work record, and adjusting the plurality of weighted values as a function of the at least a negative factor and a temporal displacement of the at least a negative factor.

Abstract: Systems and methods for constructing a scheme containing one or more statements of a plurality of objectives and for using the constructed system are disclosed herein. The system receives an initial statement of a plurality of objectives related to an organization's strategy. For each objective the construction system provides access to one or more authorized users to enable the one or more authorized users to update the information on the objective; automatically analyzes the updated information to identify relationships in the objectives; automatically updates the information to include the one or more relationships; and automatically converts the updated information into a standardized format to publish the updated, converted information. The system includes storing the converted information on the plurality of components. The system then provides remote access to the updated, converted information to the one or more authorized users.

Abstract: Some embodiments provide a method for evaluating a policy for authorizing an API (Application Programming Interface) call to an application. Based on a first set of parameters available before receiving the API call, the method evaluates only a portion of the policy to produce a partially evaluated policy. The method stores the partially evaluated policy in a cache. The method then receives an API call to authorize, and determines whether the API call should be authorized by fully evaluating the policy, using the partially evaluated policy retrieved from the cache first storage, and a second set of parameters associated with the API call. The method responds to the API call with a policy decision based on the fully evaluated authorization policy.

Abstract: Dynamic data dissemination is provided. A resolved data subject identifier corresponding to a data subject is selected from a set of resolved data subject identifiers existing in rows of a data asset. In response to determining that the resolved data subject identifier does not correspond to a right to forget list, it is determined that the resolved data subject identifier corresponds to a data subject request list. The rows are transformed to anonymize existing pseudo and personal identifiers in cells of the rows that are tied to columns associated with data classes for which specific consent dimensions have been indicated as revoked by the data subject.

Abstract: Embodiments of systems and method for assistance in document composition in the context of a document editor are disclosed. Specifically, embodiments may utilize a document definition syntax that allows a user to define a document that includes a set of document sections with identifiers and definitions. A client document compositor may be integrated with the document editor and communicate with a document composition platform to obtain a data section for substitution in the document in place of a document section.

Abstract: A method and system for generating a digital profile defined by digital behavior expressed by a device includes receiving digital behavior data and identifying information defined by a device in communication with a content server, generating a device profile for the device, associating the device with at least one device population, and generating a population profile defined by the device population. The device profiles and population profiles may be made accessible to users of a social network. Related contents, including identifying information, device behavior analysis, comparative ratings, service and diagnostic information, messages and alerts may be associated with a device profile or population profile and published to the social network. A population profile may define normal digital behavior of the population, such that the population profile may be compared with the device profile of a device, to determine whether the device operation is abnormal with respect to the population profile.

Abstract: Embodiments of systems and method for assistance in document composition in the context of a document editor are disclosed. Specifically, embodiments may utilize a document definition syntax that allows a user to define a document that includes a set of document sections with identifiers and definitions. A client document compositor may be integrated with the document editor and communicate with a document composition platform to obtain a data section for substitution in the document in place of a document section.

Abstract: Systems and methods for generating a website having a decoupled composition, layout, and processing are disclosed. A method may include an event creator computer program: (1) creating an event having a plurality of attendees; (2) creating a plurality of attendee types for the plurality of attendees; (3) generating a communication template for each of the plurality of attendee types; (4) receiving an event specific welcome page for each of the plurality of attendee types; (5) receiving a website configuration file for each of the plurality of the attendee types; and (6) uploading the event specific welcome page and the website configuration file for each attendee type to a library, wherein a web site host computer program links one of the plurality of welcome pages and the website configuration file to each of the attendee types.

Abstract: Row-level security (RLS) may provide fine-grained access control based on flexible, user-defined access policies to databases, tables, objects, and other data structures. A RLS policy may be an entity or object that defines rules for row access. A RLS policy may be decoupled or independent from any specific table. This allows more robust and flexible control. A RLS policy may then be attached to one or more tables. The RLS policy may include a Boolean-valued expression.

Abstract: A method for data storage includes specifying a plurality of File Systems (FSs) for use by multiple clients, including assigning to the FSs both respective global identifiers and respective client-specific names. The plurality of FSs is managed using the global identifiers, and files are stored for the clients in the FSs using the client-specific names.

Abstract: Embodiments relate to file-based sharing of content through a content distribution network. A request is received from a source to disseminate content to a target consumer. The request does not include target consumer URL information. Based upon the request, content metadata stored in a database with content data, is referenced to generate a file including metadata comprising a portion of the content metadata. The file does not include the content data. The file is exported to the source. The source delivers the file to the target consumer through a communication channel (e.g., shared folder, email) located outside of the distribution network. The file is imported from the target consumer. The metadata of the file is processed to examine its integrity. The metadata may comprise a key for reference during this process. Upon confirming integrity of the file, the content data and the content metadata are distributed to the target consumer.