Abstract: Computer-implemented systems and methods are disclosed herein for use within secure multi-party computation. A system and method are used for storing an operation preference and a cryptographic preference. A data set is stored based on the operation preference and the cryptographic preference. A determination is made that processing the query involves performing an allowable operation on the data set based on the operation preference.

Abstract: A method includes receiving, in a data storage device, a request from a client computer for a portion of ciphertext stored in the data storage device, and providing, by a controller of the data storage device, the portion of the ciphertext to the client computer. The method also includes receiving, in the data storage device, an update token generated by the client computer from the portion of the ciphertext. The method further includes performing, by the controller of the data storage device, re-encryption of the ciphertext using the update token.

Abstract: A restricted view definition is received by a database system. The restricted view definition defines a view over a database table with one or more restrictions on use of the view. The view over the database table is generated based on the restricted view definition. A query directed at the view is received by the database system. The database system determines whether the query directed at the view is permitted based on the one or more restrictions on the use of the view.

Abstract: In accordance with embodiments, there are provided mechanisms and methods for creating, exporting, viewing and testing, and importing custom applications in a multitenant database environment. These mechanisms and methods can enable embodiments to provide a vehicle for sharing applications across organizational boundaries. The ability to share applications across organizational boundaries can enable tenants in a multi-tenant database system, for example, to easily and efficiently import and export, and thus share, applications with other tenants in the multi-tenant environment.

Abstract: A computer program product for use with dictated medical patient information resides on a computer-readable medium and comprises computer-readable instructions for causing a computer to analyze the dictated information, identify likely confidential information in the dictated medical patient information, and treat the likely confidential information disparately from likely non-confidential information in the dictated medical patient information.

Abstract: In an example embodiment, access to a data set in a data lake can be specified using several approaches, based on the metadata and information attached. The metadata may be replicated from the original data source of the underlying data, and additional metadata may be modeled and stored to construct linkage information between data types. This linkage information may be used to automatically grant access to users to additional objects that are linked to objects that the user has explicit access to.

Abstract: The disclosure relates to methods and apparatuses for controlling access relationships between entities in a computerized system. A chain of access relationships from a first entity via at least one intermediate entity to a second entity is determined. At least one direct access relationship is then created between the first entity and the second entity based on information of the determined chain of access relationships.

Abstract: A decentralized and trust-minimizing computer architecture for computing rewards for users of an advertising system includes cryptographic black box accumulators (BBA), which is a cryptographic counter that only the issuer can update. An attention application requests initialization of a BBA from a guardian and subsequently requests updates to the BBA to track interactions between a user of the attention application and ads on the attention application. The guardian signs updates to the BBA to reach agreement on the state of ad interactions. The attention application may randomize the BBA and submit requests via an anonymous channel such that no participant can link two encounters with the BBA to each other or link the BBA to a specific attention application, thus improving user privacy. Reward redemption requests can be made based on a known policy and committed to a public blockchain for verification by observers that the protocol is operating correctly.

Abstract: The disclosure is directed to systems and methods for enterprise-wide fine-grained role-based access control to a plurality of organizational assets. In various embodiments exemplary methods include receiving, via an authorization service client API, identification of an asset for fine-grained role-based access control; a definition of an asset type of the asset; a definition of an asset value; receiving, a definition of an organizational role with fine-grained role-based access control to at least one of the asset, the asset type, and the asset value. Furthermore, receiving permissions for fine-grained role-based access by the organizational role to at least one of the asset, the asset type, and the asset value. Furthermore, the exemplary method may comprise providing an authorization service user interface (UI) for enabling fine-grained role-based access control to the asset based on the fine-grained role-based access control database schema.

Abstract: A system and technique for a Request Forwarder as for a computer network architecture is disclosed to provide selective access to one or more cloud services. In some implementations, a computer system may receive a request for access to a cloud service, the request including a container credential. The computer system may determine an identification of the container using the container credential. The computer system may verify that the container requesting access to the cloud service is authorized based at least in part on stored policies. Based at least in part on the determination that the container requesting access to the cloud service is authorized: receiving instance credential from a metadata service. The computer system may include the instance credential with the request. The computer system may send the request to the cloud service. In various examples, the Request Forwarder can be provided as a service.

Abstract: An error documentation system including tools to collect and analyze application error data for individual development teams and tools to share documented defects and solutions across development teams during any stage of development cycle. The system may receive and analyze event logs for error events triggered by applications on end-user devices. The system may automatically generate defect tickets and/or ticket entries for defects identified in event logs. The system may train one or more machine learning (ML) models to correlate input with identified defects from a defects database. In response to identifying correlated identified defects, the system may generate ticket entries indicating the correlated identified defects and associated solutions for the defects. The system may provide an interface for users to query the data stored in the database.

Abstract: Techniques regarding autonomously updating a participation status of an entity with regards to a clinical trial are provided. For example, one or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory, and that can execute the computer executable components stored in the memory. The computer executable components can comprise status component that can update a participation status of an entity regarding a clinical trial based on a trust disposition value. The trust disposition value can be determined using machine learning technology and can be indicative of an expected enrichment contribution associated with the participation status.

Abstract: This disclosure provides a monitoring device, which includes a display configured to display information and a processor. The processor is configured to: display a medical advice setup area in a display interface of the monitoring device at a first moment; and display at least one of criticality level information or medical advice information of a monitored subject in the medical advice setup area at a second moment, where the second moment is later than the first moment. The monitoring device in this disclosure may provide different display interfaces for medical staff; a doctor may first configure the criticality level and medical advice information of a monitored subject on an interface so as to prompt a nurse of information that requires attention and measurements requiring execution, after that the nurse may learn the nursing matters requiring attention, which improves the cooperation efficiency between doctors and nurses.

Abstract: Aspects of the disclosure relate to edge-computing (“EC”)-based systems and methods for fraud mitigation. The systems and methods may utilize a multi-layer architecture. The architecture may include a set of N gatekeeper units, and each gatekeeper unit may be associated with an EC device. When a transaction request is received, the request may be processed at a first gatekeeper unit, and, if validated, successively processed by the set of N gatekeeper units. If any gatekeeper unit flags the request as suspicious, the unit may emit an audible alert that may be sensed by the associated EC device. The EC device may transmit a signal to one or more of the other gatekeeper units to perform additional processing for the request. When the request reaches the Nth gatekeeper unit and achieves validation, the transaction may be executed via a central server connected to a transaction network.

Abstract: Techniques regarding autonomously updating the status of a prescription are provided. For example, one or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory, and that can execute the computer executable components stored in the memory. The computer executable components can comprise a prescription component that can update a status of a prescription associated with an entity based on a trust disposition value. The trust disposition value can be determined using machine learning technology and can be indicative of an expected effectiveness of the prescription.

Abstract: Techniques regarding autonomously updating the status of a medical procedure are provided. For example, one or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory, and that can execute the computer executable components stored in the memory. The computer executable components can comprise a procedure component that can update a status of a medical procedure regarding an entity based on a trust disposition value derived using machine learning technology. The trust disposition value can be indicative of an expected efficacy associated with the medical procedure.

Abstract: According to some embodiments, a system to facilitate hierarchical data exchange may include an aggregation platform data store containing electronic records. A data aggregation platform may collect, from a plurality of data source devices, information associated with a plurality of data sources and store the collected information into the aggregation platform data store. The data aggregation platform may also receive a data request from a data consumer device, and, responsive to the received data request, determine a precision tier associated with the data request. The data aggregation platform may then automatically calculate a resource value for the data request based on the precision tier. It may then be arranged for information from the aggregation platform data store to be modified and transmitted to the data consumer device.

Abstract: Systems and methods for protection of data across multiple users and devices are disclosed. According to one embodiment, in privacy server comprising at least one computer processor, a method for protection of data across multiple users and devices may include: (1) receiving, from a first user device, a data sharing permission for the first user device and a data sharing permission for a second user device, the first user device and the second user device associated with the same user; (2) provisioning the data sharing permission for the second user device; and (3) communicating the provisioned data sharing permission to the second user device, wherein the second user device shares data with the first user device according to the provisioned data sharing permission.

Abstract: Disclosed herein are embodiments of systems and methods for partition-based scanning of external tables for query processing. In an example embodiment, a database platform receives a query that includes one or more predicates, where the query is directed at least to data in an external table that is stored in an external storage platform that is external to the database platform. The database platform identifies, based on metadata that summarizes the data in the external table, one or more partitions of the external table that potentially include data that satisfies the one or more predicates. The database platform also identifies, from the one or more identified partitions, data that satisfies the one or more predicates. The database platform sends a response to the query to the client, the response comprising the data satisfying the one or more predicates.

Abstract: Methods and systems are disclosed for processing policies. A query policy tree with expressions and combination rules is received. A second policy tree stored in a policy repository is searched to select a sub-policy in a neutral format, reflecting a structure with a combination rule and a leaf with a condition expression. A depth of the structure is reduced through removal of redundant combination rules and combinable leaf expressions. The sub-policy tree is selected from the second stored policy tree by comparing the query policy tree. The selected sub-policy tree is copied to a third policy tree. Leaves of the third policy tree are evaluated against the leaves of the query policy. The nodes of the third policy are joined against the node of the query policy. The third policy is reduced to the neutral format by combining evaluated leaves and removing redundant combination rules. Finally, a response is provided.

Abstract: A data dictionary generation system utilizes a background service that is programmed to automatically populate and update a data dictionary for listings offering shared data. A data dictionary includes metadata describing the shared data overall as well as the individual objects included in the listing, such as the individual tables, schemas, views, and functions. To generate the data dictionary, the data dictionary generation system analyzes the shared data to identify objects, identifies a set of data fields associated with each identified object and populates the set of data fields associated with each identified object based on the shared data offered by the listing. To ensure that a data dictionary for each listing remains up to date, the data dictionary generation system periodically scans the listings to identify any changes to share access granted to the listings.

Abstract: A system includes a plurality of information processing devices configured to manage, in a distributed manner, meta information indicating access authority for directories having a hierarchical structure for accessing a file, wherein at least one of the plurality of information processing devices is configured to: receive an access request to the file; respond with a confirmation result of the access authority according to confirmation of the access authority of an access request source from a higher directory of the file to the file based on the meta information; and in response to determining that creating of an access right confirmation history of the confirmation result of the access authority of the access request source from the higher directory to the file based on an access history for the file is to be performed, create the access right confirmation history in association with identification information of the access request source.

Abstract: Methods, systems, and computer programs are presented for presenting web components in a native application. One method includes operations for monitoring a first user interface (UI) presented on a native app, and based on the monitoring, determining a second UI that may be selected by a user when accessing the first UI. The second UI is based on web components downloaded from a web server. The method further includes operations for authenticating the user for accessing the web server, selecting web components associated with the UI for preloading, and preloading the selected web components. Further yet, the method includes operations for detecting that the user has selected the second UI, and causing presentation of the second UI, which includes presenting the preloaded components on the second UI and downloading and presenting in the second UI the components not preloaded.

Abstract: A system and method whereby an user interface editing device is used to create a user interface for a controlling device, the created user interface including user interface elements that are associated with functional operations of a virtual equivalent of an appliance. After the created user interface is transferred to the controlling device, the virtual equivalent of an appliance is caused to be linked to an intended target appliance whereupon activation of those user interface elements of the graphical user interface that were associated with functional operations of the virtual equivalent of an appliance will cause the controlling device to transmit commands to control corresponding functional operations of the intended target appliance.

Abstract: A method if improving the performance of any SQL query in a Massively Parallel Processing (MPP) database platform replicates a query and breaks the query down into its objects so that iterations of the query components may be analyzed for areas affecting performance. The method builds the query from the lowest part of the query (for example, a single database object may be used in the query) and rebuilds the query by iteratively adding more objects along with their related logic (joins, group by clause, select list, etc.). In each iteration, the process analyzes for the underlying causes of lower performance and fixes them.

Abstract: Methods and systems for caching and delivering data files among peer nodes in a decentralized data delivery edge network using a tracker server are disclosed. In one embodiment, a method utilized by the tracker server includes first, receiving a peer list request from a viewer peer node in the network for accessing one or more target fragments of a data file. Next, extracting, from the received peer list request, a content type of the data file, and a viewer location of the viewer peer node. Then, generating a cacher peer list by selecting, from peer nodes currently active in the network, one or more cacher peer nodes to provide access to the one or more target fragments of the data file. Finally, transmitting the generated cacher peer list to the viewer peer node. The method may be utilized in a hybrid network comprising peer-to-peer (P2P) connections implemented on top of a content delivery network (CDN).

Abstract: Techniques related to query execution against an in-memory standby database are disclosed. A first database includes PF data stored on persistent storage in a persistent format. The first database is accessible to a first database server that converts the PF data to a mirror format to produce MF data that is stored within volatile memory. The first database server receives, from a second database server, one or more change records indicating one or more transactions performed against a second database. The one or more change records are applied to the PF data, and a reference timestamp is advanced from a first to a second timestamp. The first database server invalidates any MF data that is changed by a subset of the one or more transactions that committed between the first and second timestamps.

Abstract: Examples of multi-persona account management in client devices are described. A client device can host a personal workspace, such as for personal data and applications of a user, along with a separate alternate persona workspace for work-related data and applications of the user. The client device interfaces with a management computing environment to enroll in device management services and establish the alternate persona workspace on the client device. In one example, the client device queries a management computing environment to establish an alternate persona workspace in the client device. The client device then creates the alternate persona workspace in the client device based on a response from the management computing environment, associates an alternate persona account with the alternate persona workspace, and receives a notification to install at least one application in the alternate persona workspace from an account administration environment of the alternate persona account.

Abstract: Embodiments of the present disclosure may provide a data sharing system implemented as a local application in a consumer database of a distributed database. The local application can include a training function and a scoring function to train a machine learning model on provider and consumer data, and generate output data by applying the trained machine learning model on input data. The input data can include data portions from a consumer database and a provider database that are joined to create a joined dataset for scoring.

Abstract: Systems, devices, and methods discussed herein are directed to modifying aspects of a compute instance. A user may request a change to the compute instance. The system may derive a state object indicating a future state of the compute instance were the change to be applied. A hash of a subset of the state object's attributes may be computed and provided to the requesting computing component. The system may subsequently proceed with applying the change. A current state object indicating a current state of the compute instance may be derived based on applying the change. An additional hash of the subset of the current state object's attributes may be computed and provided to the requesting computing component. The two hashes may be configured to enable the requesting computing component to verify the change to the compute instance has been implemented.

Abstract: A non-transitory computer-readable storage medium storing a program that causes a processor included in a business operator's terminal to execute a process, the process includes conversion processing and confirmation request processing. The conversion processing that converts user information acquired from an user into a management format and obtains converted user information. The confirmation request processing that calculates a first hash value obtained by hashing the converted user information with a first hash function, transmits a confirmation request including the first hash value, the first hash function, and conversion content of the conversion to the user, and requests the user to confirm validity of the user information managed.

Abstract: The present disclosure relates to systems and methods for removing electronic activities from systems of record based on filtering policies. The method includes accessing record objects of one or more systems of record. The method includes identifying a plurality of electronic activities stored in a record object of one of the systems of record. The method includes parsing the plurality of electronic activities. The method includes determining that one of the electronic activities is associated with an electronic account corresponding to a data source provider. The method includes selecting one or more filtering policies associated with the electronic account. The method includes applying the selected one or more filtering policies to the plurality of electronic activities to identify a subset of electronic activities. The method includes initiating a process to cause removal of at least one electronic activity of the subset of electronic activities from the system of record.

Abstract: Disclosed herein are methods and systems that can be used by an end-user to verify both the identity of a remote service (4) and the authenticity of a response provided by the remote service (4), even if the first authentication arrangement (2) used to interact with the remote service (4) is compromised. The end-user requests the remote service (4) to provide evidence of its identity, in the form of potentially different authentication materials. The authentication materials are then verified independently on each additional authentication arrangements (6, 7) and used to determine the authenticity of the response from the remote service (4).

Abstract: A method, a system and a machine-readable data carrier, which are intended to classify input fields and groups of input fields of a webpage, are described. The method for classifying input fields and groups of input fields of a webpage may include a browser extension that contains program elements Content Script and Background Script and a program recognition module. The method may form a hierarchy of HTML-documents of a webpage. A multicomponent system for classifying input fields and groups of input fields of a webpage may include a processor device and a storage, and a set of instructions that, when executed by the processor, control the processor to form a hierarchy with grouped fields and a report file for HTML-documents of the webpage. The instructions may also identify elements of the HTML-documents on the webpage.

Abstract: Implementations generally relate to initiating processes. In some implementations, a method includes receiving, at a server, an object from a client device. The method further includes determining an instance of a process initiation event, where the process initiation event triggers a process to initiate, and where the process initiation event is based on the object and one or more process initiation policies. The method further includes initiating the process upon the determining of the process initiation event.

Abstract: Systems and methods for managing membership in a private data exchange are provided herein. In one embodiment, the method includes generating a plurality of listings in a data exchange. A first listing of the plurality of listings may include a reference to a first version of shared data within a first database, where the first version is one of a plurality of versions of the shared data within the first database. The method further includes receiving a request from a member of the data exchange for access to the first listing and limiting, by a processing device, access for the member to the first version of the shared data of the first database referenced by the first listing.

Abstract: Methods and systems for restoring a tenant database of a multitenant database system with multiple tenant databases is provided. In response to a request to restore a first tenant database, a system verifies that the first tenant database is present in the multitenant system database system with a same identifier when a backup of the first tenant database was taken during a backup operation and when the restore request was received. A restore method is selected based on a storage type used for storing the first tenant database. The selected restore method is executed for restoring the first tenant database utilizing an internal file associated with the first tenant database, while processing requests for other tenant databases.

Abstract: Point-of-Interest (POI) data is stored according to a first, POI library as a flat file in a database. An engine is positioned between the POI library and an interface. The interface is configured to interact with data structured in a hierarchical manner and stored according to a second library (e.g., a modeling interface utilizing folders). The engine functions to wrap a POI object taken from a table of the POI library, into an augmented object recognized and handled by the second library of the (hierarchical) interface. To accomplish this, the engine augments the POI table with an additional column that is to be indexed by the second library. In this manner, embodiments may impart additional, hierarchy-based functionality to existing POI handling schemes. Particular embodiments may impart enhanced security (e.g., permissions at the data object-level) to existing POI schemes that implement permissions only at the POI-level and/or at the application-level.

Abstract: A processor may manage media modification within a participant network. A processor may generate the participant network having a participant. The participant may be associated with one or more media data. A processor may enforce one or more rules on the participant network using an artificial intelligence (AI) based governance system. The one or more rules may manage the modification of the one or more media data by the participant. A processor may restrict the participant from modifying the one or more media data based, at least in part, on the AI based governance system.

Abstract: Systems and methods for concurrent modification of content are provided. In response to a verified request received from a user content is copied to a first storage media as a first version of the content uniquely identified by a first identifier, the verified request being based on verification of the user's credentials. In response to the user editing the first version of the content, the edited copy of the content is stored in the content management system in association with a second identifier uniquely identifying the edited copy of the content as a second version of the content. In response to receiving a notification that a plurality of users no longer request access to the content stored in the content management system, the first version of the content is deleted from the first storage media.

Abstract: A close marketplace is provided where the users' institutional affiliation, identity, and/or criminal record are verified in order to become members. Although an unregistered person may browse some of the posted listings, in order to buy, sell, contact, and/or meet another member of the marketplace, a person has to be affiliated with an approved institution, the person's real life identity has to be verified, and/or the person's criminal background has to meet a pre-determined criteria. The marketplace lowers the risk for the strangers who may want to interact with each other through a close circle of professionals. When two members are going to meet through the marketplace to buy and sell items, to rent, to be roommates, to date, etc., they have an assurance that each member has gone through a validation and verification process.

Abstract: A computing device can manage installation of an application program using an agent registered with an operating system. The agent can receive a notification in response to a user request to mount a disk image. The disk image can include the application program. The agent can generate metadata associated with the disk image. An action to take can be determined based on the metadata. The application program can be installed using privileges of the agent without changing privileges of an account for the current user.

Abstract: Systems, methods and non-transitory computer readable media for determining permissions in privacy firewalls are provided. At least part of a content of a data collection may be analyzed to determine a subject matter. A permission corresponding to the data collection and at least one user may be determined based on the subject matter. A request of the at least one user to access at least part of the data collection may be received. In response to a first determined permission, the requested access to the at least part of the data collection may be provided, and in response to a second determined permission, the request may be denied.

Abstract: Described herein is a system and method of application container access, the method includes performing a foreground unlock on an application container; creating a copy of a container key of the application container; locking the application container; receiving a background unlock trigger; determining whether a background unlock is authorized; performing the background unlock on at least a portion of the application container using the copy of the container key in response to determining the background unlock is authorized; and storing data in the at least a portion of the application container while the application container is in the background unlock.

Abstract: Methods and apparatus for retrieving and delivering content in a network. In one embodiment, unique data codes representative of content are generated by a network entity. The data codes are distributed to viewers either via a physical medium or on a display of similar content. The user device requests the content from the network by reading the data code. The requested content is delivered directly to the requesting device or provided to another device identified by the requesting device or user. In another alternative, the unique data code may be representative of the user or subscriber himself. This type of data code may be generated by the network or the device, and enables the user to access content he is entitled to via another device or terminal by delivery of information contained in the data code (or the code itself) to the network.

Abstract: Methods, systems and computer program products for maintaining components of networked nodes with distributed data dependencies are described. For example, in accordance with one or more embodiments, a method can comprise identifying, by a device comprising a processor, in a group of dependent nodes of a cluster of nodes, a first portion of the dependent nodes for which an update is implicated. The method can further comprise selecting, by the device, from the first portion, a second portion of the dependent nodes that are predicted to be able to be updated with the update without affecting access to data of the group of dependent nodes. Further, the method can comprise communicating, by the device, the update to the second portion of the dependent nodes.

Abstract: A computer-based method is provided for managing a transaction including provision of a process intelligence engine comprising a workflow aligner and process tool box, receiving deal parameters at the process intelligence engine, defining transaction subjects, each requiring the participation of at least one network partner, where each transaction subject is a requirement for achieving the objective of the transaction, defining, for each transaction subject, a plurality of subject goals to be addressed by a network partner, and defining, for each subject goal at least one action item required for satisfying the subject goal. The subject goals are then sequenced by the workflow aligner by defining prerequisites for at least one subject goal and transaction modules are defined based on the sequencing. During execution of a deal using the method, subject goals are not made available until prerequisite subject goals have been completed.

Abstract: A method and system for facilitating collaboration between two groups without impairing or affecting the structure of the two groups is provided.

Abstract: An information processing apparatus includes a memory storing, in an associated form, attribute information assigned to a document and information that indicates whether the attribute information is first attribute information that a user is not enabled to assign or second attribute information that the user is enabled to assign and one or multiple processors configured to perform first search on the attribute information on the document using the first attribute information in a search formula and second search on the attribute information on the document using the second attribute information in the search formula.

Abstract: There is provided an information processing system including: a first apparatus (10a) that divides a user key (UK) of a share-source user through a secret distribution process to generate a plurality of distribution keys (S1 and S2); a second apparatus (10b) that sends a processing request to execute a predetermined process by using one of a plurality of the distribution keys generated by the first apparatus; and a third apparatus (20) that makes a determination based on one of a plurality of the distribution keys generated by the first apparatus and the processing request received from the second apparatus.