Abstract: In one embodiment, a social-networking system accesses a social graph, receives a request to generate an advertisement of a third-party application, identifies a set of objects associated with the third-party application, wherein each identified object has been interacted with by one or more first users of an online social network, one or more second users of the online social network, wherein each second user is connected on the online social network with at least one of the first users, and sends to one or more client devices of one or more of the second users, respectively, an advertisement of the third-party application, wherein for each second user the advertisement contains a reference to at least one of the identified objects that has been interacted with by at least one of the first users.

Abstract: A technology is described for applying an encrypted customer security rule set to an application firewall. An example method may include obtaining an encrypted customer security rule from a shared data store for use by an application firewall that operates at an entry point to a computing service environment that utilizes security rules to monitor, filter, and manipulate network traffic. The customer encryption key used to decrypt the encrypted customer security rule in volatile computer memory may be obtained from a key data store and the encrypted customer security rule may be decrypted in the volatile computer memory using the customer encryption key, thereby forming a corresponding unencrypted customer security rule in the volatile computer memory. A volatile computer memory location containing the unencrypted customer security rule may be provided to the application firewall to enable the unencrypted customer security rule to be applied by the application firewall.

Abstract: A system and method for displaying data related to a content displayed through a set top box includes a second screen device generating a content information request signal requesting data corresponding to the content, communicates the content information request signal to the set top box. The set top box communicates a content information signal to the second screen device comprising a content identifier. The second screen device generates a request for related data signal corresponding to the content using the content identifier, communicates the request for related data signal through a network, receives aggregated related content data corresponding to the content from a data services center and displays the aggregated related content data.

Abstract: The present disclosure relates to apparatus, systems, and methods for analyzing characteristics of entities of interest. In particular, the present disclosure provides a mechanism for analyzing information about entities of interest and for rating or scoring the entities of interest based on the analyzed information. The rating or the score of an entity of interest can sometimes be referred to as a placerank value of an entity of interest.

Abstract: A method and system for providing remote access to a state of an application executing on a remote server. A client computer includes a client remote access program that is used to connect to a server remote access program. At the client computer, a client difference program having encoded data indicative of a change of a state of the application last received from the server computer is generated and transmitted to the server remote access program. At the server computer, the client difference program is executed to update the state of the application and a server difference program is generated having encoded a difference between the updated state of the application and the state of the application last sent to the client computer. The server difference program is transmitted to the client computer to update the state of the application since it was last received from the server computer.

Abstract: A query is received by a database server from a remote application server that is associated with a calculation scenario that defines a data flow model including one or more calculation nodes including stacked multiproviders. Subsequently, the database server instantiates the calculation scenario and afterwards optimizes the calculation scenario. As part of the optimization, the calculation scenario is optimized by merging the two multiproviders. Thereafter, the operations defined by the calculation nodes of the optimized calculation scenario can be executed to result in a responsive data set. Next, the data set is provided to the application server by the database server.

Abstract: A method of processing exchange system trading data is disclosed. In one embodiment, the method comprises receiving an order data message from a matching engine of an automated exchange. The order data message has first data format and it also comprises identification information associated with a trading entity. The received data message is then converted into a new data message of a new data format, which is different from the data format of the received order data message. Also, the trading entity from which the received order data message is originating is identified. Subsequently, the new data message having the new data format can be transmitted to a plurality of client devices associated with the identified trading entity. This may allow for all, or at least a majority of client devices, of the identified trading entity to get an overview of the total order activity of the identified trading entity.

Abstract: A method of delivering dynamic web content by a proxy server is disclosed. A plurality of responses to requests for dynamic web content at a URL (uniform resource locator) is prefetched by a proxy server from an origin server. The plurality of prefetched responses is cached by the proxy server in a one-time cache, wherein each prefetched response cached in the one-time cache is served at most once and then removed from the one-time cache. A request from a client device for the dynamic web content at the URL is received by the proxy server. One of the plurality of prefetched responses cached in the one-time cache is served by the proxy server to the client device, wherein the one of the plurality of prefetched responses is removed from the one-time cache after the one of the plurality of prefetched responses has been served.

Abstract: Provided is a method and system for managing a sliding window for a time machine function, the method including creating a virtual sliding piece array that includes information for specifying pieces from the latest point in time of live stream data to a previous point in time of a time machine available time preset to provide the time machine function; creating a streaming sliding window for specifying a preset number of continuous pieces among pieces specified in the virtual sliding piece array; shifting the streaming sliding window to a piece index of a play location requested for the live stream data, and downloading the pieces specified in the virtual sliding piece array through the streaming sliding window; and streaming stream data from a streaming client installed on an electronic device to a player installed on the electronic device using the downloaded pieces in order to provide a live streaming service.

Abstract: Methods and apparatuses enable a network of traffic control devices to be viewed as a network of services. A web client sends a query compatible with an open API to a traffic control device. The traffic control device responds to the request by providing the requested service, and indicating an additional, related service that is available externally to the responding traffic control device. Thus, the traffic control device provides network information to the web client, which is traditionally only available via a network management system. The web client can then access the external service.

Abstract: An application programming interface (API) may be provided by a service. A client of the service may provide computer instructions to the service. Configuration information may also be provided by the client. An API may be generated for the client based on the computing instructions. A number of virtual machines may be associated with the API based on the configuration information. The API may be used to process requests.

Abstract: Aspects of the subject matter described herein relate to durable program execution. In aspects, a mechanism is described that allows a program to be removed from memory when the program is waiting for an asynchronous operation to complete. When a response for the asynchronous operation is received, completion data is stored in a history, the program is re-executed and the completion data in the history is used to complete the asynchronous operation. The above actions may be repeated until no more asynchronous operations in the history are pending completion.

Abstract: A method for implementing web applications includes projecting, using a processor of a computing device, one element of a web page of a web application into a view of the web page, the view being a visual representation of a model of the web page, the model including application data and rules. A controller mediates input and converts input to commands for the view or the model. The controller transposes the one element projected in the view of the web page and another element using an insertion point that represents a defined location in a shadow document object model subtree, without affecting a document object model tree of the web page.

Abstract: A server system may include a cluster of multiple computers that are networked for high-speed data communications. Each of the computers has a remote direct memory access (RDMA) network interface to allow high-speed memory sharing between computers. A relational database engine of each computer is configured to utilize a hierarchy of memory for temporary storage of working data, including in order of decreasing access speed (a) local main memory, (b) remote memory accessed via RDMS, and (c) mass storage. The database engine uses the local main memory for working data, and additionally uses the RDMA accessible memory for working data when the local main memory becomes depleted. The server system may include a memory broker to which individual computers report their available or unused memory, and which leases shared memory to requesting computers.

Abstract: A virtual storage system and a method of sharing electronic documents within a virtual storage system that includes at least one processor that processes a plurality of electronic documents received from an external system, receives from the user computing device, a request for sharing an electronic document of the plurality of electronic documents, and input information including download information and expiration information corresponding to the electronic document, as input by a user, and creates at least one share link corresponding to the electronic document based on the input information, for sharing the electronic document with a recipient. The virtual storage system further includes a plurality of redundant physical storage devices in data communication with the at least one processor each storing the electronic documents and the at least one share link created.

Abstract: Methods, devices, and apparatuses are provided to facilitate a positioning of an item of virtual content in an extended reality environment. For example, a first user may access the extended reality environment through a display of a mobile device, and in some examples, the methods may determine positions and orientations of the first user and a second user within the extended reality environment. The methods may also determine a position for placement of the item of virtual content in the extended reality environment based on the determined positions and orientations of the first user and the second user, and perform operations that insert the item of virtual content into the extended reality environment at the determined placement position.

Abstract: Systems and methods for transferring a web content display from one container to another container are disclosed. A request to transfer a first web content display hosted in a first container having a first document object model (DOM) tree to a second container having a second DOM tree is received. The first web content display has a state comprising a plurality of state components. A second web content display hosted in the second container is created. If a first state component is dependent on a property of the first DOM tree associated with a host of the first web content display: the first state component is adjusted in the second web content display according to a corresponding property of the second DOM tree.

Abstract: An equipment control system includes an equipment control device that controls equipment provided in an office room, and an external control device that is provided outside the office room and controls the equipment provided in the office room via the equipment control device, wherein when a predetermined condition is satisfied, a control device that controls the equipment is switched from one of the equipment control device and the external control device to the other.

Abstract: A method of aiding creation of a service offer associated with a Service Delivery Framework (SDF) includes providing a plurality of reusable Application Objects (AOs) that may be associated with an Interactive Development Environment (IDE). The AOs are prototype customer facing service offers that include standardized functions supporting ordering, billing, management and monitoring. The AOs also include standardized event formats and configurable attributes that affect the behavior and pricing of service offers derived from the AOs. A Services Marketplace facilitates reuse of AOs and supports relationships between customers, application creators, service providers and OSS/BSS providers. A computer-readable medium includes instructions that when executed by a computing device aids in creation of a service offer associated with a SDF by providing a plurality of reusable Application Objects (AOs) in the context of a services marketplace.

Abstract: In one aspect, a method includes a first computing-system (i) selecting a social media (SM) content item associated with a second computing-system, (ii) based on the selected SM content item, determining a SM-platform user-profile identifier associated with the selected SM content item, (iii) using the identifier to determine that the second computing-system has installed, in its data storage unit, an application associated with the first computing-system, (iv) responsive to determining that the second computing-system has installed the application, transmitting, to the second computing-system, an instruction that causes the application to provide, via a user interface of the second computing-system, a permission request concerning use of the selected SM content item, (v) determining that the requested permission was received via the user interface, and (vi) responsive to determining that the requested permission was received via the user interface, facilitating integration of the selected SM content item int

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for support dependent post delivery. In one aspect, a method included generating transmission data for a web page served by a first server and rendered on the client device, the first sever belonging to a first domain; determining if the client device supports cross origin resource sharing; in response to a determination that the client device does not support cross origin resource sharing: defining an iFrame for the web page, the iFrame belonging to a second domain of a receiving server, and having a name value derived from the transmission data, receiving iFrame instructions from the receiving server and executing the iFrame instructions in the iFrame, the iFrame instruction causing the client device to: generate an HTTP POST request to the receiving server from the iFrame name value, the first HTTP POST request including the transmission data.

Abstract: Systems and methods are disclosed that may provide for selective multi-user uplink (UL) of data for wireless devices. For example, a first wireless device may request permission to initiate a UL transmission to a second wireless device. The first wireless device may then receive, from the second wireless device, permission to initiate the UL transmission according to a multi-user (MU) UL protocol, determine a threshold duration for the UL transmission, and transmit UL data to the second wireless device according to the MU UL protocol and the threshold duration.

Abstract: A communication device of handling communication with a network including a cellular network and a wireless local area network (WLAN) comprises instructions of receiving a radio resource control (RRC) message configuring cellular-WLAN aggregation (CWA) to the communication device from a base station (BS) of the cellular network; deriving a first pairwise master key (PMK) according to the RRC message; deriving a first encryption key for encrypting first data transmitted to the WLAN or decrypting second data received from the WLAN from the first PMK; releasing the CWA during connecting to the WLAN; performing an extensible authentication protocol (EAP) authentication and key agreement (AKA) procedure with the WLAN to derive a second PMK, when releasing the CWA; and deriving a second encryption key for encrypting third data transmitted to the WLAN or decrypting fourth data received from the WLAN from the second PMK.

Abstract: The subject matter of this specification can be embodied in, among other things, a method that includes identifying metadata related to television programming. The method further includes sending search requests that include the identified metadata to a search system for selecting at least one portable program module. The method further includes in response to a first one of the search requests, receiving first search results from the search system that identify the selected portable program module and outputting a representation of the selected portable program module to a display device for presentation concurrently with the television programming. The method further includes in response to a second one of the search requests, receiving second search results from the search system that no longer identify the selected portable program module and ceasing the output of the representation of the selected portable program module.

Abstract: A method and system for processing incoming messages. An incoming message is scanned, wherein the incoming message is an email message sent by a sender. One or more resource links in the scanned incoming message are detected, wherein the one or more resource links are in the sender's email signature in the email message. In response to detecting the one or more resource links in the scanned incoming message, it is determined that users of the computer are likely to request a content of the detected one or more resource links, based at least on: a type of the one or more detected resource links, a type of network to which the computer is connected, and a determination that the detected one or more resource links are pointing to one or more files and are not pointing to a corporate website.

Abstract: Embodiments are directed towards overprovisioning IP addresses among a plurality of traffic management devices (TMDs). A plurality of IP addresses may be distributed among a plurality of available TMDs. A corresponding mirror TMD may be determined for each IP address. The corresponding mirror TMD for an IP address may be different than the available TMD currently associated with the IP address. In various embodiments, connections associated with each IP address may be mirrored at their corresponding mirror TMDs. The available TMDs may be employed to perform traffic management tasks on received packets based on at least a destination IP address of the received packets and the IP addresses associated with the available TMDs. If a TMD becomes unavailable, the IP addresses associated with the unavailable TMD may be redistributed to at least one remaining available TMD.

Abstract: A system, method, and computer readable medium for communicating at least one real-time specially-composed bulletin message to at least one subscriber of a provider of Internet services, comprising a first device, and a second device communicably coupled to the first device, wherein the first device: accesses only subscriber upstream traffic to a destination web site requested by the subscriber, wherein the first device inter-connects between the at least one subscriber and the destination web site, identifies the at least one subscriber's identification based on the accessed subscriber upstream traffic automatically provided by the subscriber, and provides the unique subscriber identification to the second device located at the provider of Internet services providing data services and management control to the first device, wherein the second device determines the subscriber associated with the unique subscriber identification.

Abstract: A computer system, configured for bandwidth-efficient use of internet resource has a storage system, in which are stored: (i) web data selected for storage based on (a) frequency of occurrence in downloads from the World Wide Web as determined with reference to a relevant population of users over a relevant period of time or (b) relative importance to the relevant population of users over the relevant period of time; and (ii) instructions that establish a local-reference computer process, running within a web browser computer process, which, responsive to a URL entered into a browser established by the web browser computer process, first accesses the storage system to determine whether web data corresponding to the entered URL is stored in the storage system, and, if so, causes the corresponding web data to be retrieved locally from the storage system and displayed in the browser.

Abstract: Computerized systems, methods, and other embodiments associated with generating virtual map tiles according to an ad hoc specification are described. In one embodiment, a method includes defining, in response to receiving a request through an interface of a map server, virtual map tiles according to an ad hoc specification. The ad hoc specification indicates characteristics of the virtual map tiles including at least a format and map content of the virtual map tiles. The method includes computing the virtual map tiles from at least the map content specified by the ad hoc specification and according to the format indicated by the ad hoc specification. Computing the virtual map tiles includes computing the virtual map tiles in response to receiving the request. The method includes transmitting the virtual map tiles to a client device to cause the viewable region of the electronic map to be displayed on the client device.

Abstract: In a facility system, a first gateway PLC connected to first processing machines and second gateway PLCs connected to second processing machines are connected to an upper-level network. Further, the first gateway PLC and the second gateway PLCs control operation mutually associated between the first processing machines and the second processing machines on the basis of mutually associated information which is acquired from the first processing machines and the second processing machines.

Abstract: A contest method and system include a sponsor displaying an advertisement accompanied by a contest invitation in association with a spectator event. An electronically geofenced perimeter of the spectator event to electronically submit affection-demonstrating digital images for contest participation, the affection-demonstrating digital images comprising at least one still image selected from a personal photograph, a family photograph, and a pet photograph portraying demonstrations of kissing, hugging, or otherwise conveying personal affection between at least two individuals or pets. Selecting a subset of the affection-demonstrating digital images from spectators located within the electronically geofenced perimeter of the spectator event as candidates for entry into a voting stage of the contest.

Abstract: A method and associated system. A patching schedule is generated by scheduling, in W sequential time windows, P patches applicable to virtual machines in L redundancy groups. Each redundancy group includes virtual machines and independently belongs to a respective software application x of X software applications, wherein P?1, L?1, Rm?1, and X?1. The L redundancy groups collectively comprise at least 2 virtual machines. The scheduling determines xwmk for T tuples (w, m, k) defined by (w=1, . . . , W) and (m=1, . . . , L) and (k=1, . . . , Rm), by maximizing an objective function subject to constraints. Determining xwmk includes setting xwmk=1 if virtual machine k in redundancy group m is to be patched in time window w or setting xwmk=0 otherwise.

Abstract: A computer-based method for managing a plurality of computer components in an organization is provided. The method is implemented using a Component Manager (CM) computing device. The method includes receiving, from a stakeholder computing device, component data for at least one computer component of the plurality of computer components. The method also includes storing the component data in a memory block in the memory device. The method further includes assigning a first lifecycle classification, a domain, and at least one stakeholder to the at least one computer component by updating the memory block in the memory device. The method also includes causing the stakeholder computing device to electronically display an interactive dashboard that includes a graphical representation of the at least one computer component. The method further includes prompting a stakeholder to update a component utilization scheme for the computer component, by electronically displaying the graphical representation.

Abstract: Behavioral authentication is described. A mobile device records a first location of the mobile device. The mobile device records a second location of the mobile device. The mobile device determines whether a route from the first location to the second location matches an expected route. The mobile device generates an access-enabling token in response to a determination that the route from the first location to the second location matches the expected route. The mobile device enables access to an entity by a user of the mobile device based on the mobile device providing the access-enabling token to the entity.

Abstract: Systems, methods, and processor-readable media are disclosed to adaptively secure access operations with respect to electronic resources. A request from an endpoint device may be detected, and adaptive authentication may be initiated. Identifiers for the endpoint device may be generated or retrieved. An access-right indicator may be identified to facilitate determination of whether particularized access for electronic resources is to be granted. Initiation of access events by the endpoint device may be detected. Sensor-based data that is based on a first set of sensors capturing phenomena at the endpoint device may be received. A particularized specification of recognized patterns mapped to the access-right indicator may be adaptively developed. A nonconformance of additional data with respect to the particularized specification may be detected.

Abstract: A runtime capability check determines functionality supported by a client application (e.g. a browser) on a computing device. During the runtime capability check, the client application (e.g. the browser) attempts to execute different function tests to determine its capabilities. The result information from the function tests are stored. The stored result information is used by the client application during subsequent connections with the server (e.g. the cookie is passed from the mobile computing device to the server). Based on the supported functionality as determined by the stored result information, the rendering code is adapted for, generated and delivered to the computing device by the server. For example, when the client application supports the tested functionality then the server renders the content using full feature rendering. When the client application does not support all of the tested functionality then the server renders the content using limited feature rendering.

Abstract: Embodiments for a method of providing load balancing over multiple network addresses across an network address translation (NAT) network including a data storage system, that defines an interface group identifying a private network for one or more clients to communicate with a host for read/write operations, configuring, in the server, pre-NAT IP (Internet Protocol) addresses for the one or more clients and adding them to the interface group, upon receiving a client hostname, returning an interface group an IP address to the client that it can use it for a data transfer operation to the data storage system, and incrementing the pre-NAT addresses after the client starts the data transfer operation such that the least used address in the interface group is always selected for the client so as to maintain load-balance across the plurality of clients.

Abstract: A web content display system including a provided interface, a processor, a storage unit and an operation interface. The processor is coupled to the provided interface, the storage unit and the operation interface. The provided interface is for inputting a web address with an authorization data corresponding thereto. The processor acquires and analyzes at least one web content corresponding to the web address to obtain a title, an article content with a display format corresponding thereto and an original marketing content with a display format corresponding thereto. The storage unit stores analyzed information and a third party marketing content. The operation interface receives a request for the title from a user device. The processor generates an embedded code executed by a web browser to display a reorganized web content. The article contents of the reorganized web content and the web content have the same display format.

Abstract: An aircraft interface device is configured to communicate with an aircraft avionics system that includes a plurality of sensors for an aircraft includes a tablet interface module configured to communicate with the aircraft interface device and with one or more tablets. The tablet interface module includes a user interface that is configured to establish, via a wireless transceiver, a communications channel between the tablet interface module and the one or more tablets and an indicator configured to indicate if the tablet interface module is connected to the one or more tablets. The tablet interface module provides the one or more tablets with information received from the aircraft interface device and wherein the tablet interface module comprises a power supply configured to connect to a power system of the aircraft and to provide power to the one or more tablet devices.

Abstract: The embodiments disclosed herein describe ways that a browser application or other process can reduce power usage by a computing device. Methods include the process suspending one or more plug-ins on a web page by replacing them with a snapshot taken from the plug-in, and reducing processing on non-media plug-ins and non-visible portions of web pages running in the browser, but not currently in focus, such as when a tab is in the background behind a different tab, when a browser window is minimized, or when the web page is entirely or partially occluded.

Abstract: An automatic service monitor in an information technology environment is equipped to automatically identify and group recognized events based on user-defined criteria, and to automatically perform user-defined operations against the group and its members at the detection of user-specified conditions.

Abstract: An information processing system includes a terminal apparatus and an information processing apparatus that is connected to the terminal apparatus via a network. The terminal apparatus includes a storage unit configured to store a first application program configured to provide another application program executed in the terminal apparatus with an interface for transmitting request information to the information processing apparatus, wherein the first application program includes authentication information for using the information processing apparatus, and a second application program configured to transmit the request information including identification information of an application program to the information processing apparatus in response to a predetermined user's operation, wherein the identification information of the application program is recorded in the second application program.

Abstract: An automatic service monitor in an information technology environment may be equipped to automatically process machine data originating from a running IT environment to identify the entities that perform services in the environment, and to reflect the discovered entities and service associations in the control and configuration data that directs the monitoring operations performed by the system. A related user interface is taught.

Abstract: A network media device is described that pulls multimedia data from one or more sources (e.g., a multimedia website or a multimedia server computer) at a first time, stores it to long-term storage within the device and transmits the stored multimedia data to one or more designated multimedia playback devices at a second time.

Abstract: Methods, devices, and systems are described for diverting a computer hacker from a physical or other targeted production computer to a decoy software-based host emulator that emulates the physical computer. The decoy has the exact same IP address as the physical computer. In order to avoid packet collisions, a programmable physical switch and a virtual networking switch are employed, both of which can use software-defined networking (SDN). The virtual switch prevents packets from the decoy from flowing out of its virtual network until commanded. Upon a command, the physical switch redirects specific flows to the virtual switch, and the virtual switch opens specific flows from the decoy. The specific flows are those with packets containing the hacker's computer IP address, production computer IP address, and production computer port. The packets are associated with TCP connections or UDP sessions. The decoy host emulator can be a virtual machine (VM) running alongside many other VMs in a single computer.

Abstract: A system and method for generating advertisement automatically are provided. The system may comprise at least one computer-readable storage medium including a set of instructions; at least one processor in communication with the at least one computer-readable storage medium, wherein when executing the set of instructions, the at least one processor is configured to cause the system to generate a first plurality of ads, the first plurality of ads including a first plurality of advertisement elements and a first plurality of information components; transmit, via a network, the first plurality of ads to a first group of user terminals; determine at least one of a click-through rate, a number of impressions, or a conversion rate for the first plurality of ads; and analyze the at least one of the click-through rate, the number of impressions, or the conversion rate of the first plurality of ads.

Abstract: An automatic service monitor in an information technology environment is equipped to automatically identify and group recognized events based on user-defined criteria, and to automatically perform user-defined operations against the group and its members at the detection of user-specified conditions. A related user interface is taught.

Abstract: An image of system software is installed by loading an executable image of the system software using a boot loader, where the executable image includes a kernel and a plurality of files used by the kernel. The kernel of the system software is executed to generate the image of the system software that includes a copy of the kernel. Generating the image of the system software involves the steps of generating a plurality of pointers that each point to a different one of the files, retrieving the files using the pointers, and storing a copy of the kernel and the files in a storage device from which the system software is to be booted as the image of the system software.

Abstract: A method for loading a web page comprises: searching a web application for user interface change portions, execution of the user interface change portions being capable of triggering a user interface to change; marking the user interface change portions to interrupt, upon execution of the web application, the execution at least once and to execute, upon interruption, at least one of the user interface change portions.

Abstract: A method, executed by at least one processor, includes receiving a migration request for a plurality of files, assigning files of the plurality of files that are smaller than a selected size to one or more small-file secondary storage devices, assigning files of the plurality of files that are larger than the selected size to one or more large-file secondary storage devices, and initiating migration of the plurality of files from one or more primary storage devices to the secondary storage devices to which they are assigned. A corresponding computer program product and computer system are also disclosed herein.