Abstract: A configuration of a security system is optimized based on revising metadata categories and one or more associated properties which comprise the metadata categories included in at least one rule used by the security system. The optimized configuration is transmitted to the security system. A current configuration of the security system is update. An indication of the update being successful is received.

Abstract: A storage system includes a first storage device that includes a first memory and a first processor coupled to the first memory; and a second storage device that includes a second memory and a second processor coupled to the second memory, wherein the first processor is configured to: when migrating data in object units, generate dummy data that corresponds to the data instead of the data in object units, and transmit management information used to manage an object and the dummy data to the second storage device, and the second processor is configured to: store the management information in a storage unit in association with the object, and discard the dummy data.

Abstract: Embodiments of the present invention relate to methods, systems, and computer program products for user behavior management. In embodiments, a group of states of a user of an application system within a previous time period may be obtained. A state in the group of states may be associated with a privilege of the user for accessing resources in the application system during the previous time period. A feature of the user may be generated based on the group of states. A privilege of the user at a current time may be managed in the application system based on the feature. With these embodiments, the user behavior may be managed according to various aspect of the user's historical states and thus the user may be managed in a more accurate and effective manner.

Abstract: A method for deduplicating data comprising: obtaining, from a metadata node and by file system client executing on a client application node, a data layout; generating, by the client application node, a fingerprint for the data stored on the client application node; generating, by a memory hypervisor module executing on the client application node, at least one input/output (I/O) request specifying a location in a storage pool, wherein the location is determined using the data layout; issuing, by the memory hypervisor module, the at least one I/O request to the storage pool, wherein processing the at least one I/O request results in at least a portion of the data being stored at the location; and after issuing the at least one I/O request to the storage pool, transmitting the fingerprint to the metadata node, wherein the metadata node attempts to deduplicate the data using the fingerprint.

Abstract: Aspects of the present disclosure relate to mapping content delivery. A client device provides, to a map management server, a request for a map of a geographic region. The client device receives, from the map management server, an identification of tiles for the map. The client device provides, to a first tile server, a request for the tiles for the map. In response to receiving the tiles from the first tile server: the client device displays the map of the geographic region based on the tiles.

Abstract: Embodiments of the invention are directed to a system, method, or computer program product structured for synthesizing and building infrastructure platforms.

Abstract: This application relates to a system for verifying data access and a method thereof. In one aspect, the system includes a service module for receiving a data access request for an original data from a client, and sending a first verification data to the client. The system also includes a verification module for receiving a first data eigenvalue corresponding to the original data from the service module, and generating a first verification fingerprint corresponding to the first data eigenvalue. The system further includes a data module for generating the first verification data by receiving the first verification fingerprint to embed into the original data, and generating a first integrity value by hashing the first verification data. The system further includes a verification database for storing data access information comprising the first data eigenvalue, the first verification fingerprint and the first integrity value in one record identified as the original data.

Abstract: In one aspect, a method includes receiving merchant profile data describing attributes of merchants; generating, using one or more machine-trained models and the merchant profile data, a respective first profile for each merchant of the merchants; generating, using the one or more machine-trained models, a respective second profile for each of the plurality of merchant services using at least one type of description for each of the plurality of merchant services, wherein the respective first profile for each merchant and the respective second profile for each of the plurality of merchant services are numerically comparable; identifying a list of merchant service recommendations for at least one of the merchants using generated first profiles and second profiles; and configuring a merchant computing device of the at least one merchant with at least one merchant service selected by the merchant from the list of merchant service recommendations.

Abstract: Approaches for a model-driven tool-agnostic reporting approach are provided. In one example, a report request is received from a business intelligence reporting application, from which a graphical template and query template are created, wherein the graphical template comprises the visual presentation of data responsive to the request and the query template specifies how the data responsive to the request is to be computed. The report created by the approaches described herein is compatible with multiple business intelligence reporting applications.

Abstract: A representation of a workflow comprising a plurality of tasks is obtained. An execution of an instance of the workflow is initiated. The execution comprises selecting, with respect to a particular task of the workflow, a particular execution resource option from a set comprising at least a first execution resource option and a second resource execution option. A result of the execution is stored.

Abstract: A record management system stores records for an organization having a plurality of members and a plurality of groups, and manages accessibility of the records for the organization according to a specified record access policy. The record management system generates an accessibility database that indicates, for each member, records that are explicitly or implicitly accessible by each member such that the records accessible for each member can be quickly determined if needed. A member has explicit access to a record if there is an explicit indication of accessibility between the member and the record. A member has implicit access to a record through membership associations to other members or groups that have access to the record. The record management system also receives search queries from members and returns records that are relevant and accessible to the members based on the accessibility database.

Abstract: The presence of new unread electronic messages received, that is, messages received since unread messages were last reviewed, is provided by indicia presented to the user. These indicia can take various forms, such as by bolding, flashing, changing the size or color of a count of unread messages, and/or the unread message icon. Alternatively, a separate indication, such as a second count representing the number of new unread electronic messages received, or some other symbol, such as an explanation point, can be displayed.

Abstract: Systems and methods include determination of a first logical page number of a first database page to be persisted, identification of a first blockmap page associated with the first logical page number, determination, from the first blockmap page, of a block number associated with the first logical page number, determination that the block number is an object key, determination, in response to the determination, that the block number is an object key, determination of a first object key to associate with the first logical page number, and writing of the first database page to the object store using the first object key.

Abstract: An industrial control system and a method of inspecting one or more communication packets in an industrial control system may be provided, the industrial control system firewall module comprising a packet accessing component configured to access a communication packet of an industrial control system; a firewall rules database, the firewall rules database configured to store one or more firewall rules; an inspection module configured to access the one or more firewall rules based on an industrial protocol associated with the communication packet; and the inspection module is further configured to perform a comprehensive inspection of all header fields and data fields of the communication packet based on the one or more firewall rules accessed based on the industrial protocol associated with the communication packet.

Abstract: Systems and methods are provided for self-learning natural language predictive searching including receiving a first input, the first input being related to the desired outcome; retrieving a first information related to the first input; determining a first output based on at least the first input and the first information; outputting the first output; receiving a second input based on the outputted first output in response to the first output being different from the desired outcome, the second input being related to the desired outcome; retrieving, by the processor, a second information related to the second input; determining a second output based on at least the second input, the second information, the first input and the first information; and outputting the second output.

Abstract: A method of data reduction in a block-based data storage system includes selecting a starting position in a block based on a deterministic function of block data content. Then for an unaligned block beginning at the selected starting position, a block digest (e.g., block hash) is generated and compared with stored block digests of stored data blocks. If there is a match, and the stored block matches the unaligned block, then a reference to the stored block is stored in place of the unaligned block, and otherwise the unaligned block and a corresponding digest are stored. The storing of references to already stored blocks, without the constraint of observing aligned-block boundaries, realizes increased savings of physical storage space.

Abstract: Methods and systems are described for prioritizing notifications based on user responses. The system may include determining a first score indicative of a first relevance of a notification to a first user at a first client device. The first score is determined based on at least metadata characterizing the notification. The notification is prioritized for the first user based on at least the first score. The notification is presented at the first client device based on at least the prioritization for the first user. A second score is determined that is indicative of a second relevance of the notification to a second user at a second client device. The second score is determined based on at least a response to the notification from the first client device.

Abstract: An identity provider (“IdP”) system maintains a framework of authentication methods and security targets that enables flexible authentication policy authoring and analysis of authentication performed by users of an organization. The IdP system generates authentication method profiles that include authentication factors and attributes, which may be further classified as required or optional. The IdP system also generates security target profiles that indicate security requirements needed to satisfy the corresponding security targets. The IdP system uses the generated profiles to determine relationships between authentication methods and security targets (e.g., a list of authentication methods that satisfy a given security target). Using these relationships, the IdP system may enable users to author policies and analyze how users' authentication behaviors comply with security targets.

Abstract: A storage cluster is provided. The storage cluster includes a plurality of storage nodes, each of the plurality of storage nodes having nonvolatile solid-state memory and a plurality of operations queues coupled to the solid-state memory. The plurality of storage nodes is configured to distribute the user data and metadata throughout the plurality of storage nodes such that the plurality of storage nodes can access the user data with a failure of two of the plurality of storage nodes. Each of the plurality of storage nodes is configured to determine whether a read of 1 or more bits in the solid-state memory via a first path is within a latency budget. The plurality of storage nodes is configured to perform a read of user data or metadata via a second path, responsive to a determination that the read of the bit via the first path is not within the latency budget.

Abstract: Migration results in specific action requests to move data from a source system instance to a target system instance. Migration may consume many resources. In an effort to monitor migration effects on source and/or target performance, one or more traffic lights are determined to monitor utilization of resources of the source and/or target. Based on the one or more traffic lights, migration is dynamically throttled. The one or more traffic light may be assigned a status based on how the migration affects performance of another data operation which may be contemporaneously operating on either the source and/or the target.

Abstract: Embodiments include receiving an indication of a data storage module to be associated with a tenant of a distributed storage system, allocating a partition of a disk for data of the tenant, creating a first association between the data storage module and the disk partition, creating a second association between the data storage module and the tenant, and creating rules for the data storage module based on one or more policies configured for the tenant. Embodiments further include receiving an indication of a type of subscription model selected for the tenant, and selecting the disk partition to be allocated based, at least in part, on the subscription model selected for the tenant. More specific embodiments include generating a storage map indicating the first association between the data storage module and the disk partition and indicating the second association between the data storage module and the tenant.

Abstract: For an updateable view that is defined for a first database, some embodiments provide an automated method for processing an update to data tuples in a second database, the update specified by reference to the updateable view. The method receives a first query from a client for modifying a particular data tuple presented in the updateable view. From a metadata storage, the method retrieves a definition of the updateable view, where the definition includes a reference to a first set of one or more objects associated with the particular data tuple in the first database. Based on the retrieved definition, the method generates a second query referencing a second set of one or more objects associated with the particular data tuple in the second database. The method executes the generated second query on the second database, to modify the particular data tuple in the second database.

Abstract: A method to exchange medical data between a cloud repository on a cloud server and a plurality of local repositories on a plurality of local servers connected to the cloud server. The plurality of local servers comprises a first local server and the plurality of local repositories comprises a first local repository on the first local server. The method includes, causing the first local server to: transmit an image retrieval request to the cloud server, receive the medical image generated by the cloud server or an instruction from the cloud server to generate the medical image locally, and display the generated medical image on a display. The image retrieval request causes the cloud server to determine whether raw image data associated with the image retrieval request is stored in the cloud repository or locally in the first local repository.

Abstract: A system of managing key entity records required by a user. The system includes a database arrangement operable to store a structured database including entity records and a processing module communicably coupled to the database arrangement. The processing module is operable to receive the structured database including entity records; determine an importance score for each of the entity records; identify key entity records based on the determined importance scores of the entity records; receive a tuning-input from the user; calculate a tuned importance score for each of the entity records based on the tuning-input from the user; and identify the key entity records required by the user based on the tuned importance scores of the entity records.

Abstract: A computing device includes a processor to generate graphics data that includes text, a display to display the graphics data, and a memory to record the displayed graphics data. A sensitive text handling engine is coupled to the processor, the display and the memory. The sensitive text handling engine is configured to perform certain steps before sensitive text within the graphics data is displayed and recorded. These steps include receive sensitive text identification settings, detect text in the graphics data and store the detected text as text images, translate the text images into text strings, and identify sensitive text within the text strings based on the sensitive text identification settings.

Abstract: The invention provides for a system and method for activity-entry reporting and activity-entry report generation by utilizing a drag and drop mechanism that allows users to merge submitted activities in order to generate new activities. These activities are contained within activity reports that can be modified and merged by other users in an effort to develop combined activity reports that maintain the traceability of the merged activities.

Abstract: A computer system may include a processor and a memory coupled thereto. The memory may include a database. The processor may be configured to randomly split the database into sub-databases and applying a database query to the sub-databases. The processor may also be configured to generate respective estimated query response values for each sub-database based upon applying the database query, calculate a median of the estimated query response values, and generate a probability distribution based upon the estimated query response values and the calculated median. The processor may further be configured to select a final estimated query response value based upon the probability distribution.

Abstract: A data management device includes a persistent storage and a processor. The persistent storage includes an object storage. The processor generates a collision free hash function based on segments stored in the object storage. The processor generates a hash vector using the collision free hash function. The processor deduplicates the segments using the hash vector. The processor stores the deduplicated segments in the object storage.

Abstract: A system for an in-memory row storage architecture can be provided. In some implementations, the system performs operations including processing a database statement comprising a first database transaction affecting one or more rows in an in-memory row store, registering the database statement at a start of execution of the database statement, the start of execution occurring at a first time, unregistering the registered database statement at an end of execution of the database statement, determining a second time at which execution of an oldest currently registered database statement was started, assigning a garbage collection thread to a second database transaction committed at a third time and affecting at least one row of the plurality of rows, and activating the garbage collection thread to reclaim memory within the in-memory row store when the third time is less than the second time. Related systems, methods, and articles of manufacture are also described.

Abstract: Embodiments of the present disclosure disclose a data processing method, apparatus, and system. The method provided in the embodiments of the present disclosure includes receiving a data processing request sent by a client and obtaining a routing table according to the data processing request. The routing table stores structure information of a relational database. The relational database includes a plurality of sub-databases. The sub-database includes a plurality of partitioned tables, and the partitioned table includes a plurality of shards. The method also includes determining a target sub-database according to the data processing request and the routing table. The method further includes sending the data processing request to the target sub-database, so that the target sub-database performs an operation according to the data processing request.

Abstract: Disclosed are methods and systems for providing cloud services to personal computing devices that store large personal files such as personal videos and personal photographs in a lossless format. The methods and systems include a cloud server that synchronizes a menu of the file system between local computing devices.

Abstract: A system and computer-implemented method for providing a load-balanced server architecture to end users and allowing software on the server architecture to be updated without downtime during a transition to the new software version. Run-time errors due to incompatibilities between datatypes, interfaces, deserialization methods, and classes loaded by class loaders in object oriented server software may be avoided by using the system to track a software version used in association with a particular task. By routing requests related to a particular task to a particular server running the same software version, compatibility is maintained and efforts to migrate data across software servers or add code to handle cross-version compatibility are unnecessary.

Abstract: Access is provided for different types of media content provided by disparate publishers, and in formats corresponding to operating characteristics of respective user devices. As consistent with one or more example embodiments herein, media content access is filtered for users requesting access via different user devices, based upon characteristics of the device to which the access is provided, user subscription data and publisher-specific criteria. A user-specific storefront interface is generated for each of a multitude of users, based upon the filtering. Each storefront interface indicates media content that can be displayed at the device to which access is requested, and identifies media content to which the user does and does not have subscription access. The user-specific storefront interfaces are presented at respective user devices, and media content is delivered to each device in response to selections made via the user-specific storefront interfaces.

Abstract: A method includes dividing dispersed storage error encoding of a data object into a plurality of operations based on at least one of the data object and available computing devices for executing the dispersed storage error encoding. The method further includes allocating the plurality of operations to the available computing devices, where a first encoding operation of the plurality of encoding operations is allocated to a first computing device of the available computing devices. The method further includes coordinating execution of the plurality of operations by the available computing devices to dispersed storage error encode the data object into a plurality of sets of encoded data slices and a corresponding plurality of sets of slice names, and write the plurality of sets of encoded data slices based on the corresponding plurality of sets of slice names to a set of storage units.

Abstract: Techniques are described for user-controlled annotation and sharing of one or more digital items. Examples of digital items that may be shared with other users include digital representations of graphic images, photographs, audio segments, songs, video segments, movies, and text (such as lists of favorites (e.g., a list of favorite books, a list of favorite movies, and a list of favorite places to visit)). A user may make a digital item available to other users of a computer network, such as an instant messaging system, a chat environment, or a subscription-based computer network. User-entered annotations, such as textual comments, may be associated with a digital item, and a user can select which other users can view and/or change all, or some, of the annotations.

Abstract: Techniques described and suggested include systems, methods, and processes for determining data-related attributes, such as size, for data and/or data containers (such as volumes and file systems) resident on distributed storage systems. For example, a shared records storage device may be utilized to gather information related to file systems stored on a distributed storage system having a plurality of storage servers. A data processor may be used to generate information records and meter data storage size for file systems resident on the distributed storage system, and such records may be provided to requestors, such as customers associated with the file systems.

Abstract: A computer system and computer-implemented method for autonomous enterprise planning for instance in a retail enterprise comprising retail planning processes such as assortment planning, regular price planning, promotional product planning, promotional pricing, inventory allocation, size/pack optimization, markdown pricing, or in an insurance enterprise comprising insurance underwriting, adjudication, fraud detection and subrogation.

Abstract: Embodiments include method, systems and computer program products for prioritizing delivery of messages across multiple communication systems. Aspects include that a conflict resolution system is configured to identify a plurality of processes. The conflict resolution system is further configured to generate a plurality of conflict rules corresponding to the plurality of processes. Based on the at least one selected process, the conflict resolution system can identify a conflict corresponding to at least one selected process of the plurality of processes in a conflict medium. In the exemplary embodiment, the conflict resolution system, applies at least one selected conflict rule of the plurality of conflict rules corresponding to the conflict, the at least one selected process, and the conflict medium. Based on the at least one selected conflict rule, the conflict resolution system modifies the at least one selected process.

Abstract: The invention provides for a system and method for activity-entry reporting and activity-entry report generation by utilizing a drag and drop mechanism that allows users to merge submitted activities in order to generate new activities. These activities are contained within activity reports that can be modified and merged by other users in an effort to develop combined activity reports that maintain the traceability of the merged activities.

Abstract: A method for executing a computational task in a data management system is provided. The method includes storing a first stored procedure in a first database management system (DBMS) including first data containers. The first stored procedure receives names of one or more of the first data containers to act as input or output data containers and includes first statements for triggering resolution of features of a respective first input or output data container. The method also includes storing a second stored procedure in a second DBMS including second data containers. The second stored procedure implements the computational task and operates on one or more of the second data containers. The method also includes receiving, by the first DBMS, a request from a client application to perform the computational task.

Abstract: Technology for analyzing and tracking states of a directory service by correlating changes from multiple different data sources related to the directory service. A first data source may be based on synchronization data of the directory service and a second data source may be based on security data of one or more domain controllers hosting the directory service. The synchronization data and security data may both correspond to changes to the directory service but may include different information. For example, synchronization data may provide the content of a modification to the directory service and the security data may provide an entity that initiated the modification. The multiple sources may be used to generate and enrich modification data of the directory service. The modification data may be used to determine a prior state of the directory service, to undue modifications initiated by a particular user, or to detect malicious activity.

Abstract: A method begins by a computing device of a dispersed storage network (DSN) selectively bringing online and taking offline storage units of a set of storage units of the DSN. When bringing a first storage unit of the set of storage units online and taking a second storage unit of the set of storage units offline in accordance with the selectively bringing online and taking offline storage units, the method continues with the computing device determining a rebuilding approach of the first storage unit and a first to second storage unit transition. The method continues with the computing device bringing the first storage unit online in accordance with the rebuilding approach and the first to second storage unit transition and taking the second storage unit offline in accordance with the first to second storage unit transition.

Abstract: Methods, computing systems and computer program products implement embodiments of the present invention that include configuring multiple servers coupled to a network as a software defined storage (SDS) grid. A first given server receives, via the network, an input/output (I/O) request from a host computer, and determines a location of data associated with the I/O request. In some embodiments, each of the servers maintains a local grid data map that store locations for all data managed by the SDS grid. Upon identifying, in its respective local grid data map, that a second given server is configured to process the I/O request, the first given server forwards the I/O request to the second given server for processing, and upon receiving a result of the I/O request from the second given server, the first given server conveys the result of the I/O request to the host computer.

Abstract: Aggregating database entry modifications for replay of database changes includes: inserting, in a journal modification table, of database entry modifications, where each database entry is associated with a relative record number; and, for each relative record number: aggregating, in the journal modification table, a plurality of the modifications into a single modification.

Abstract: An information processing apparatus includes a determination unit and an output unit. If data included in a database with an index is updated, the determination unit determines whether to perform an index update process so that the index update process will be performed with a determined probability. If the determination unit determines to perform the index update process, the output unit outputs an index update request.

Abstract: A system and method for translating and matching attributes in data records that describe travel items is provided. In an embodiment, a plurality of records is received from a plurality of data sources. Record parsing logic is used divide strings in the records into individual words and match single words in the plurality of records to attributes. Using the matched attributes, record comparison logic creates a confidence score that describes the likelihood that two records describe the same listing or inventory item. If the confidence score exceeds a given threshold, the records are determined to match. A consolidated record is then created from the two matched records.

Abstract: Throttling for network requests may be implemented. A request processing balance may be provided for processing received network requests for a given period of time. As network requests are received, processing costs may be determined for the network requests. Processing costs may be determined on-the-fly based on processing times, resources consumed, or costs incurred to process the network requests at additional systems, in some embodiments. The request processing balance may be updated according to the determined processing costs of received network requests. Network requests may be throttled based on the current request processing balance. In some embodiments, an estimated processing cost may be determined and compared with the current request processing balance to determine whether to throttle the network requests.

Abstract: Aggregating database entry modifications for replay of database changes includes: inserting, in a journal modification table, of database entry modifications, where each database entry is associated with a relative record number; and, for each relative record number: aggregating, in the journal modification table, a plurality of the modifications into a single modification.

Abstract: Embodiments relate to processing streams of encrypted data received from multiple users. A received encrypted data stream is separated into one or more encrypted data chunks, placing the data chunk(s) into a sub-stream, and decrypting the data chunks into plaintext. One or more advanced data functions are applied to the plaintext, thereby effectively transforming the plaintext. The transformed plaintext is organized into one or more data units, and each data unit is encrypted with a wrapped encryption key. The aspect of encrypting the data unit includes creating a fixed size encryption unit, whereby the wrapped encryption key comprises a master key and a private key.

Abstract: In an example, one or more processes that transform data originating in one or more of a plurality of different data sources are identified. Then, for each of the identified one or more processes, a relationship table is created, the relationship table listing objects input to the process, objects output from the process, and one or more mappings defining transformations performed on the objects input to the process to produce the objects output from the process. Dependencies are created between relationship tables by linking at least an instance of a first object input to a process in a first relationship table with at least an instance of the first object output from a process in a second relationship table. Lineage of an object in the computer system is traced by accessing one or more of the relationship tables and the dependencies.