Abstract: Systems, methods, and computer-readable media are disclosed for systems and methods for initiating automated actions using ring-shaped electronic devices. Example methods may include determining, by a ring-shaped electronic device comprising a button, a first user interaction with the button, determining that a first action associated with the first button sequence identifier is to initiate a synchronous communication, determining contact information associated with the first action, and initiating the synchronous communication using the contact information.

Abstract: A method of providing domain name system (“DNS”) eligibility is provided. The method includes obtaining, at an eligibility service comprising at least one electronic server computer communicatively coupled to a computer network, a request of an eligibility proof from a DNS client; validating, by the eligibility service, the request; providing, by the eligibility service, the eligibility proof to the DNS client; obtaining, by the eligibility service, the eligibility proof, wherein the eligibility proof is related to a registration of a domain name by the DNS client with a DNS registry; validating, by the eligibility service, the eligibility proof; applying, by the eligibility service, a promotion credit to an account of the DNS client; and providing, by the eligibility service, a confirmation of the promotion credit to the DNS client.

Abstract: An intelligent resource initiation and deployment system is provided that identifies a location of a user, identifies entities adjacent the user based on the user location, and identifies a resource application and/or the resource pools. The invention identifies a resource pool which optimizes resource grants for the user based on the desired outcome of the user and/or the entity at which the user is located. The system further includes identifying when the resource pool is active, or what additional information is needed for the user to make the optimized resource pool active. The present invention shifts the processing capacity, memory, and processing speeds related to determination and selection of a resource pool and/or validation of the resource pool during interactions from the time of the interaction to before the interaction is even initiated.

Abstract: A secure key system is described that distributes a private key of a key server to an edge server for encryption on behalf of an owner of the private key when establishing a session with a client. To distribute the private key, the key server receives from the edge server a quote generated by a secure enclave of the edge server. The quote attests to code of the secure enclave. The key server verifies the quote to ensure that the code of the secure enclave is trusted code. The key server encrypts the private key using a key of the edge server and sends the encrypted private key to the code of the secure enclave. The code of the secure enclave decrypts the private key using its key. Untrusted code of the edge server then requests the code of the secure enclave to perform cryptographic actions using the private key.

Abstract: According to one embodiment, a social information distribution apparatus apportions and accumulates, for items classified, basic information including a position of each of a plurality of information sources and social information transmitted in time series from each of the plurality of information sources, analyzes the accumulated social information, modifies and processes the social information, updates the social information as some of the items, selects social information to be broadcast, determines a broadcast format including at least classification of broadcast ranges, a broadcasting time, and a repetition count within the broadcasting time when broadcasting the selected social information, and transmits the selected social information to a designated broadcast range by a broadcast wave.

Abstract: In an approach to generating and managing personalized private roaming service set identifiers and networks, one or more computer processors generate one or more private networks based on one or more policies associated with a user and capabilities of one or more network providers in a communication proximity to the user. The one or more computer processors create one or more configuration files required to implement the one or more generated private networks on the one or more network providers. The one or more computer processors implement the one or more generated private networks by applying the one or more created configuration files to the one or more network providers.

Abstract: A method may include iterating over multiple application programming interfaces (APIs) to extract an authentication type for the multiple APIs. The method may also include, from a central repository, automatically registering a new user for access to a given API of the multiple APIs. The method may additionally include obtaining authentication data based on an authentication type for the given API, and storing the authentication data. The method may also include accessing the given API using the stored authentication data.

Abstract: A load balancer allocates requests to a pool of web servers configured to have low queue capacities. If the queue capacity of a web server is reached, the web server responds to an additional request with a rejection notification to the load balancer, which enables the load balancer to quickly send the rejected request to another web server. Each web server self-monitors its rejection rate. If the rejection rate exceeds a threshold, the number of processes concurrently running on the web server is increased. If the rejection rate falls below a threshold, the number of processes concurrently running on the web server is decreased.

Abstract: A distributed testing service for providing responsive and fault-tolerant testing computing platforms within a range of configurable testing conditions. The distributed testing service may be provide an independent worker registry service, a repository service, and multiple worker nodes. Further, the worker nodes may push, or initiate, transmissions to provide status information that may be used to determine appropriate worker nodes to client computers that are requesting worker nodes for executing test cases. The distributed testing service may provide network information for worker nodes to client computers so that communications involving executing the test cases on the worker nodes to not include the worker registry service or the repository service.

Abstract: A software deployment system includes a release module, a deployment control module, and a deployment module. The release module is configured to generate a first release object identifying a specific version of a first set of files in a version control system. The files encode deployment parameters, including a pointer to an executable form of a first application. The deployment control module is configured to promote the first release object to an environment by copying the first set of files to a location in the version control system corresponding to the environment. The deployment module is configured to, after the first release object is promoted to an environment, deploy the first release object by: configuring the environment according to the deployment parameters; copying the executable form of the first application from the pointer location to the environment; and initiating execution of the copied executable form in the environment.

Abstract: A device may generate network profile data indicating a set of network parameters detected by the device. The device may encrypt the network profile data and may transmit the encrypted network profile data to a network device, such as a router, or a server. The router or server may analyze the encrypted network profile data to determine if the device is secure. The router of server may perform one or more security measures if the device is not secure.

Abstract: Some implementations disclosed herein provide systems and methods that use an inmate-accessible electronic briefcase to facilitate an inmate's organization of significant content. Electronic documents are created and stored in an organized document storage area that may be accessed while the inmates are incarcerated and after the inmates are released.

Abstract: Apparatuses, systems, and methods related to a data center using a memory pool between selected memory resources are described. A data center using a memory pool between selected memory resources may enable performance of functions, including automated functions critical for prevention of damage to product, personal safety, and/or reliable operation, based on increased access to data that may improve performance of a mission profile.

Abstract: An information handling system may include at least one processor and a non-transitory memory coupled to the at least one processor. The information handling system may be configured to: request logging information from a target information handling system, the target information handling system including private data therein; based on blockchain credentials stored in the information handling system, create a transaction record associated with the request, wherein a plurality of nodes associated with the blockchain are configured to process the transaction record to determine whether access should be granted to the logging information; and in response to the plurality of nodes determining that access should be granted, receive the logging information.

Abstract: A system and method for server relocation in a packet data network. A transport protocol session is established between a client 20 and server 14_1 to transfer content from the server to the client in data packets. As well as transmitting data packets to the client, the server additionally transmits declarative information as signaling packets. The declarative information includes an identifier of the content being transmitted in the ongoing session. This allows other servers 14_2 with the same content to identify the existence of the session and gives them the opportunity to volunteer to take over the session, for example if they can see that the client is now closer to them than the server currently serving the content. The two servers can then coordinate transfer of the session, whereafter the session continues with the second server transmitting content to the client.

Abstract: An embodiment may involve obtaining a set of data records including features characterizing operational aspects of a communication network. Each data record may include a feature vector and performance metrics of the communication network. Each feature vector may include a multiple elements corresponding to feature-value pairs. A first statistical analysis may be applied to the set of data records and their performance metrics to identify major contributors to degraded network performance. A second statistical analysis may be applied to identify elements that negatively influence the major contributors, and to discriminate between additive effects and incompatibilities as the source of negative influence. For each major contributor, a hierarchical dependency tree may be constructed with the major contributor as the root node and influencer elements as other nodes.

Abstract: A system for improving a machine learning allergy diagnosis process is provided. The system implements a method that includes identifying databases comprising data identifying menu items served by food establishments. Allergy data defining a food products associated with potential allergens is analyzed in real time and in response, baseline allergen indication software code for defining an allergen baseline indicator is generated. Ingredients of the menu items are analyzed with respect to the allergy data and allergen baseline levels for the ingredients determined. An allergen baseline level for each menu item is determined and an allergen alert software application for alerting a user with respect to each overall allergen assessment is generated.

Abstract: Paxos transactions are pipelined in a distributed database formed by a plurality of replica servers. A leader server is selected by consensus of the replicas, and receives a lock on leadership for an epoch. The leader gets Paxos log numbers for the current epoch, which are greater than the numbers allocated in previous epochs. The leader receives database write requests, and assigns a Paxos number to each request. The leader constructs a proposed transaction for each request, which includes the assigned Paxos number and incorporates the request. The leader transmits the proposed transactions to the replicas. Two or more write requests that access distinct objects in the database can proceed simultaneously. The leader commits a proposed transaction to the database after receiving a plurality of confirmations for the proposed transaction from the replicas. After all the Paxos numbers have been assigned, inter-epoch tasks are performed before beginning a subsequent epoch.

Abstract: A method for improving a machine learning allergy diagnosis process is provided. The method includes identifying databases comprising data identifying menu items served by food establishments. Allergy data defining a food products associated with potential allergens is analyzed in real time and in response, baseline allergen indication software code for defining an allergen baseline indicator is generated. Ingredients of the menu items are analyzed with respect to the allergy data and allergen baseline levels for the ingredients determined. An allergen baseline level for each menu item is determined and an allergen alert software application for alerting a user with respect to each overall allergen assessment is generated.

Abstract: A first device that includes a processor configured to transmit/receive a trigger message to/from a second device based on wireless short-range communication. The trigger message initiates a registration process within a wireless local area network (WLAN).

Abstract: A method for processing a data request is performed by an access device, and includes receiving, from a user terminal, the data request including data information of target data, obtaining the data information from the data request, searching for a storage device identifier and first authentication information, based on the data information, and sending the first authentication information and the data information, to a storage device corresponding to the storage device identifier, to enable the storage device to perform authentication on the first authentication information, and to enable the storage device to, in response to the authentication succeeding, obtain the target data indicated by the data information. The method further includes receiving, from the storage device, the target data, and sending the target data to the user terminal, to respond to the data request.

Abstract: A computing environment is disclosed that receives from devices requests directed toward services accessible in the environment, and that forwards communications from services in the environment to devices registered with the environment. During a registration process at the environment, devices are assigned a device identifier that is used to identify and authenticate each particular device and requests communicated from and to the device via the environment. The computing environment maintains state information for each device that has been registered with the system. As the device interacts with the system, the state information is updated to reflect the changes in the device. When requests to perform functions are received from devices, the computing environment determines for the particular device and the particular function requested what processing needs to be performed by the environment in response to the request.

Abstract: The different advantageous embodiments provide a system for managing license utilization comprising a client system, a number of message transport servers, and a number of license management servers. The client system is configured to generate a number of messages having information about usage associated with a project code or a business unit. The number of message transport servers replicates the number of messages. The number of messages is transmitted to a message transport server in the number of message transport servers. The message transport server receiving the number of messages replicates the number of messages to each message transport server. The number of license management servers has a number of license management services configured to listen for updates from the number of message transport servers. The updates are the number of messages replicated across the number of message transport servers.

Abstract: The disclosed computer-implemented method includes applying transport protocol heuristics to selective acknowledgement (SACK) messages received at a network adapter from a network node. The transport protocol heuristics identify threshold values for operational functions that are performed when processing the SACK messages. The method further includes determining, by applying the transport protocol heuristics to the SACK messages received from the network node, that the threshold values for the transport protocol heuristics have been reached. In response to determining that the threshold values have been reached, the method includes identifying the network node as a security threat and taking remedial actions to mitigate the security threat. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A method includes selecting, at a content management computer, a particular content source of a plurality of content sources for media content associated with a media content item requested by a first media device. The particular content source is selected based on a network topology of an access network. The method includes sending a first instruction to the particular content source from the content management computer. The first instruction causes the particular content source to send the media content to the first media device. The method includes, after sending the first instruction, receiving, at the content management computer, a request for the media content item from a second media device. The method also includes sending a second instruction from the content management computer to the first media device. The second instruction causes the first media device to send the media content to the second media device.

Abstract: A method for resolving an IP address, includes a step of receiving an address resolution request, the request including a datum representative of a MAC address; a step of looking up, within a data structure, an IP address, depending on the datum representative of a MAC address; and a step of transmitting said IP address.

Abstract: A method and system for providing configuration information to an Internet of Things (IoT) device. The method is performed at an IoT device and includes identifying a predetermined condition. The method further includes transmitting, via a network, a first signal to a first server based on identifying the predetermined condition and receiving ownership information from the first server. The ownership information includes contact information for a second server that is configured to provide configuration information to the IoT device. The method further includes transmitting a second signal to the second server and receiving configuration information from the second server. The method further includes performing an operation based on the configuration information.

Abstract: Identifying potential network attacks on servers and protecting the servers from those potential attacks until the associated client requests can be confirmed as either legitimate or an actual attack is disclosed. Client requests for server resources are received by a network traffic management device (NTMD). The NTMD initially responds to the client requests on behalf of the associated servers. The initial responses include client side language scripts for execution by the clients. Executing the scripts causes the clients to resend their initial requests identified as a potential attack by the NTMD along with information indicating the client's legitimacy, such as the result of a computational JavaScript challenge. The NTMD receives the resent initial request, determines it was sent from a legitimate requestor and is therefore not an attack, and forwards it to the associated server.

Abstract: Example embodiments of the disclosed technology implement a brand penetration determination system using image semantic content. A geographic sub-region determination system is configured to partition a geographic area into two or more sub-regions. An image content analysis engine is configured to determine, from images captured at one or more sites within each sub-region, a number of detections of a brand within each respective sub-region. A brand penetration index generation system is configured to generate a brand penetration index for each sub-region based on the number of detections of the brand in the respective sub-region weighted by one or more factors (e.g., population factor, category factor, etc.), which is stored in memory with an indicator of each respective sub-region. In splitting the geographic area into two or more sub-regions, the number and/or boundaries of sub-regions are determined so as to ensure that the population within each sub-region is above a threshold.

Abstract: A method, apparatus and computer program product for selectively storing network traffic data are described. Network traffic is stored according to a first packet filtering policy in a first repository. The stored network traffic is scanned in the first repository according to a second packet filtering policy to identify a subset of network traffic for archiving. The identified subset of network traffic identified by the second packet filtering policy are forensically interesting packets concerning a security issue. The identified subset of network traffic from the first repository is then stored in a second repository.

Abstract: The present disclosure describes a method, system, and non-transitory computer readable medium that includes instructions that permit users of different secure communication networks to exchange secure communications. A secure communication platform includes a user database that allows users from different secure communication networks to access keys for recipients outside of their network. Additionally, the secure communication platform provides a high degree of trust regarding the sender's identity, allowing the receiving network to trust the sender.

Abstract: Embodiments of the present disclosure provide methods, systems, apparatuses, and computer program products that provide for an improved, more efficient, and more stable system of networked computing devices. The embodiments disclose an apparatus and system that enable client devices to selectively grant to third party applications permissions to access group-based communication objects of a group-based communication system. The apparatus and system further enable client devices to selectively grant to third party applications permissions to take specific actions with regards to the group-based communication objects within the system. To accomplish the improvements, the disclosed systems, apparatuses, and computing devices maintain a record of the permissions granted to third party applications in a permissions table stored in a computer storage device.

Abstract: An information processing apparatus, communicable with an intermediary apparatus communicable with a target apparatus, includes circuitry configured to receive, from a terminal device communicable with the information processing apparatus, identification information acquired by the terminal device from an external source, receive, from the terminal device, image data input at the terminal device, identify a transmission destination of the received image data, related to a service operation associated with the identification information and to be output from the target apparatus via the intermediary apparatus, based on address information of a transmission source that has transmitted the identification information to the information processing apparatus, and transmit information indicating the transmission destination of the image data to the terminal device.

Abstract: A method, computer program product, and a system where a processor(s) intercepts a query from a client targeting a database. The processor(s) analyzes the query to determine contextual data relevant to the query and determines, based on a data masking policy, if a portion of results responsive to the intercepted query should be provided to the client as masked data. When the processor(s) determines that the portion of the results should be provided to the client as masked data, the processor(s) determines computing resources managing data comprising the results responsive to the intercepted query. The processor(s) executes the query on the computing resources by obtaining the masked data via coprocessors deployed on the computing resources, where the coprocessors mask the portion of the results. The processor(s) returns query results comprising the portion of the results masked by the coprocessors, to the client.

Abstract: In one embodiment, a device in a network tracks changes in a source port or address identifier indicated by network traffic associated with a particular host in the network. The device detects an operating system start event based on the track changes in the source port or address identifier indicated in the traffic data associated with the particular host. The device provides data regarding the detected operating system start event as input to a machine learning-based malware detector. The device causes performance of a mitigation action in the network when the malware detector determines that the particular host is infected with malware.

Abstract: A gesture-based graphical user interface control system and method are provided. The method may include receiving an indication to recognize an input device gesture to be used for performing a graphical user interface action on the computer system. The method may further include training the computer system to recognize the input device gesture. The training may include receiving gesture data representative of the input device gesture to be used for performing the graphical user interface action and defining the input device gesture based on the gesture data. The method may also include mapping the input device gesture to the graphical user interface action. The mapping may include receiving an indication to define the graphical user interface action on the computer system and defining the graphical user interface action. The method may additionally include detecting performance of the input device gesture and performing the graphical user interface action.

Abstract: Systems and methods are provided to add flow identification information to packets of network traffic. Each packet can have flow identification information added based on the packet being sent to a full-proxy mode appliance. A stateful network routing service may intercept packets and determine the packets are to be sent to a full-proxy mode appliance. Based on this determination, the stateful network routing service may obtain or generate flow identification information to identify the packet. The stateful network routing service may add the information to the packet and transmit the enriched packet to a full-proxy mode network appliance. The stateful network routing service may receive a second enriched packet from the network appliance. The stateful network routing service can parse the second enriched packet for flow identification information and identify the second enriched packet based on the flow identification information.

Abstract: Methods and apparatus for providing a network attached storage system which does not require specialized hardware to operate. In one embodiment, a downloadable software package is provided via a web interface. After a user has downloaded and installed the software package, a sharable volume is created upon a host system. In one embodiment, the sharable volume is adapted to present the contents of one or more remote systems to the host system as a local file, drive, or directory. One or more processes resident in the host system are adapted to intercept a command interpretable by the host system and translate the command into one or more commands interpretable by at least one remote system. The one or more commands are then serviced by at least one remote system and a result set is generated. The result set may then be converted into a format interpretable by the host system and output accordingly.

Abstract: A method of aggregating displays of performances into an aggregate site on a network is provided. The aggregated performances originate from at least one performance site on a network. The method includes the steps of selecting a performance criterion; observing at least one performance originating from at least one performance site on a network, the performance being associated with a link; determining when at least one performance meets the performance criterion; establishing an aggregation link to the link associated with the performance meeting the performance criterion; and providing the aggregation link to an aggregate site on a network such that the performance is accessible on the aggregate site.

Abstract: The present disclosure is directed to methods for identifying a user by a demand side platform (DSP) across advertiser exchanges. The method includes establishing, by a DSP, a cookie mapping for a user. The cookie mapping includes a mapping of user identifiers for the user from advertisement exchanges to a user identifier assigned by the DSP for the user. The DSP stores to the cookie mapping a first mapping to the user identifier of the DSP, comprising a first user id received by a bidder from a first exchange and a first exchange id for the first exchange. A bidder inserts a pixel into a bid for an impression opportunity to a second exchange. The pixel includes a key to the cookie mapping and a second user id for the user and a second exchange id. The second user id is received by the bidder from a second exchange.

Abstract: Methods and systems for preventing phishing attacks using the domain name system are disclosed. A method includes: receiving, by a computing device, a domain name system (DNS) request comprising a domain name; determining, by the computing device, at least one domain name that is similar to the domain name; and sending, by the computing device, the at least one domain name that is similar to the domain name as a response to the DNS request.

Abstract: A computer-implemented method of providing content using a request-response protocol is provided. The method comprises storing a data object associated with a key, receiving a first response message from a server containing an invalidate parameter wherein the invalidate parameter includes a pattern that matches the key, and invalidating the stored data object associated with the key in response to the invalidate parameter. A computing system comprising one or more processors and non-transitory computer readable storage medium embodying programming instructions configurable to cause the one or more processors to implement a proxy cache is also provided. The proxy cache is configured to store a data object associated with a key, receive a first response message from a server containing an invalidate parameter wherein the invalidate parameter includes a pattern that matches the key, and invalidate the stored data object associated with the key in response to the invalidate parameter.

Abstract: An information processing apparatus comprises a controller configured to: (1) receive, from a first user authorized to access a resource, an access control setting applicable to a second user, the access control setting set within an authority of the first user; (2) receive, in response to a successful authentication of the second user, an access permission request for the resource from the second user; and (3) request, if what is requested in the access permission request is allowed by the access control setting, the resource to execute a process according to the access permission request.

Abstract: A method, computer program product, and system for identifying an orphan file in a shared database, wherein an owner of the orphan file no longer has access to the shared database, identifying an orphan file in a shared database, where an owner of the orphan file no longer has access to the shared database, surveying a group of one or more users, where surveying comprises a request to vote among the group for a new owner of the orphan file, and assigning ownership permission to a new owner among the one or more users within the group based on a result of the survey.

Abstract: A computer-implemented method and an interactive computer system has a user interface with computer software application tool(s) for retirement planning purposes. The user interface is generally referred to herein as an income dashboard.

Abstract: Embodiments are directed to managing communication. Credentials of a user may be provided to an authorization service such that the authorization service authenticates the user as a member of authorization groups and such that the user may be associated with a gateway on an overlay network. The authorization groups may be compared with user groups to associate the user with one or more user group. The gateway may be associated with one or more resource group based on the user groups. Policy information may be generated for the gateway based on each resource group. The policy information may be provided to the gateway to define policies associated with resources in the overlay network. The policy information may be enforced against source nodes providing overlay traffic directed to target nodes in the overlay network.

Abstract: A method includes receiving, by a token provider server, a first request for a first token that is associated with first information from a first application. The first request for the first token is part of an application session between a plurality of applications that includes the first application. The token provider server provides the first token to the first application. The token provider server receives the first token from a second application of the plurality of applications. The token provider server provides first information associated with the first token to the second application. The first information enables an action to be performed by the second application based on the first information.

Abstract: To facilitate backwards compatibility, a computing device may respond to a call from an application for information regarding a processor on the computing device by returning information regarding a different processor than the processor on the computing device.

Abstract: A system and a method for gaining access of devices based on a user's identity are disclosed. The method comprises a target device detecting a user worn accessory present in vicinity of a target device. Upon detection, the target device receives a user identity (UID) from the user worn accessory. The user worn accessory sends the UID based on verification of user's body data. Upon receiving the UID, the target device matches the UID with a list of known UID's to identify access rights assigned to the target device. Based on the identified access rights, the target device provides access to the user. Thus, the user may automatically get an access without handling the target device.

Abstract: A computer-implemented method for propagating access to assets across a plurality of datasources. The method may include receiving user input via an administrative user interface that comprises selection of the datasources. A plurality of provisionable assets including at least one provisionable asset from each of the datasources may be automatically retrieved. Asset designations of at least some of the provisionable assets may be received via the administrative user interface. A plurality of asset paths corresponding to the designated assets may be automatically determined. The asset paths may be automatically assigned to an authorized role and automatically consolidated for collective invocation in response to queries.