Abstract: Examples of the present disclosure describe systems and methods for intelligent contract analysis and data organization. In example aspects, input data may be received into the system in the form of a legal document, such as a contract. The contract may be processed by a natural-language processor, and a summarized version of the contract and/or particular contract provisions may be provided. In other aspects, a machine-learning engine may process the input data in combination with a user's decisions to accept or reject particular contract provisions. The ML engine may provide an intelligent recommendation to a user regarding whether the user should consent or not consent to a particular contract provision. In other example aspects, a data dashboard displaying how a user's personally identifiable information (PII) is shared with third parties may be displayed. Aggregated PII may further be displayed in a dashboard.

Abstract: Techniques for preventing rendering content from content delivery network (CDN) to unauthorized users are described herein. In accordance with various embodiments, a CDN includes one or more processors and a non-transitory memory. The CDN receives a request from a client device for a media content item, where the request indicates an identifier of a client. The CDN further provisions an encrypted media content item corresponding to the media content item for the client, where at least a portion of the encrypted media content item is encrypted using at least one personalized key assigned to the client. The CDN also facilitates obtaining a manifest corresponding to the encrypted media content item, where the manifest specifies encryption metadata for retrieving the at least one personalized key by the client. The CDN additionally sends the encrypted media content item and the manifest to the client device.

Abstract: Provided is a system and method which may execute a find operation on a union mount via individual find operations on the underlying file systems that make up the union mount rather than perform the find operation through the union mount itself. As a result, processing time of can be significantly reduced. In one example, the method may include receiving a request for a data item to be retrieved from a union-mounted file system comprising a plurality of layers of files which have been merged together, simultaneously executing, via a file manager, a plurality of find operations on the plurality of layers, respectively, without merging the plurality of layers together, receiving a plurality of sets of search results of the plurality of find operations from the plurality of layers in response to the executing, and merging and displaying the plurality of sets of search results.

Abstract: Provided herein is a holistic fraud cocoon that protects a user from incoming or outgoing fraud and phishing communications by capturing, analyzing and either altering, discarding or presenting communications to the user. For example, the holistic fraud cocoon captures all incoming sources (mail, in-person visits, phone, TV, radio, newspapers and internet) and the actions performed by the user, triggered by those sources. Certain actions are held in a queue to be reviewed, validated and acted upon by a third party before the actions are executed.

Abstract: An information processing device is configured to execute a management program and a print server program. The management program determines whether a non-compliant printer is connected to the information processing device, determines whether a print server program is running when the non-compliant printer is connected, starts up the print server program when the print server program is not running, and registers a print server configured by the print server program with an operating system. The print server program receives a print job designating the print server as an output destination, obtains individual print data which is printable by the non-compliant printer, and transmits the obtained individual print data to the non-compliant printer.

Abstract: Provided is a server apparatus capable of reducing a workload in a setting process. A server apparatus (10) includes: a registering unit (11) configured to register first address information set in a monitoring apparatus (30) that monitors a wireless base station (20) and VLAN setting information serving as setting information of a Virtual Local Area Network (VLAN) including the monitoring apparatus (30); a receiving unit (12) configured to receive, from the wireless base station (20), an assignment request for second address information; and a transmitting unit (13) configured to transmit the first address information, the second address information, and the VLAN setting information to the wireless base station (20).

Abstract: A computer-implemented method and a computer system are disclosed for generating and executing a software appliance comprising the steps of receiving a work request comprising metadata which indicates processing conditions for a computer processing task to be performed; determining a determined processing environment, depending on the metadata included in the work request; selecting one or more software container templates, depending on the metadata included in the work request; generating the software appliance for the determined processing environment, using the one or more selected software container templates; and deploying the software appliance for executing the software appliance on a processing computer system of the determined processing environment.

Abstract: A software operator can be automatically configured and deployed in a distributed computing environment from a package. For example, a system can receive a command specifying a package for deploying a target operator. In response to receiving the command, the system can automatically configure and deploy the target operator in a computing cluster. This may involve the system extracting a name for the target operator from the corresponding package and assigning an operator group to the target operator. The system can then subscribe the target operator to an operator management system by indicating the name and a namespace of the operator group to one or more application programming interfaces of the computing cluster. The system can also deploy an instance of the target operator in the namespace on the computing cluster.

Abstract: An apparatus comprises a processing device that is configured to obtain information about driver installations of a given driver on a plurality of computing devices and to obtain information about system failures from the plurality of computing devices. The processing device is further configured to determine a correlation between the driver installations and the system failures and to determine that the given driver is likely to cause a system failure based at least in part on the determined correlation between the driver installations and the system failures. The processing device is further configured to provide an indication that the given driver is likely to cause a system failure to a given computing device. The indication is configured to cause the given computing device to inhibit a presentation of a recommendation to install the given driver to a user of the given computing device.

Abstract: Techniques and systems are provided for providing recommendations for extended reality systems. In some examples, a system determines one or more environmental features associated with a real-world environment of an extended reality system. The system determines one or more user features associated with a user of the extended reality system. The system also outputs, based on the one or more environmental features and the one or more user features, a notification associated with at least one application supported by the extended reality system.

Abstract: Various embodiments include a mobile storage device control system. The system may include an independently operating scanning apparatus configured to: detect insertion of a mobile storage device, scan the mobile storage device to determine whether the mobile storage device poses a security threat, perform a specific operation on the mobile storage device so the specific operation is recorded in a file system log of the mobile storage device, and the record of the specific operation is used to mark whether the mobile storage device has been modified after being scanned. The system may include a control apparatus configured to: detect insertion of the mobile storage device, check whether the last record in the file system log in the mobile storage device is the record of the specific operation, if so, permit a user to access the mobile storage device and otherwise prohibit the user from accessing the mobile storage device.

Abstract: A framework referred to as COmposition fRamework for chaNge management (CORNET) may integrate re-usable abstraction, modular composition with plug-and-play capabilities, or automated translation of high-level change management intent into low-level implementations and mathematical models. CORNET may use real-world data collected from cellular networks (e.g., 4G or 5G) and virtualized services, such as virtual private networks (VPN) and software defined wide area networks (SDWAN) running in the cloud.

Abstract: An over-the-air (OTA) mobility service platform (MSP) is disclosed that provides a variety of OTA services, including but not limited to: updating software OTA (SOTA), updating firmware OTA (FOTA), client connectivity, remote control and operation monitoring. In some exemplary embodiments, the MSP is a distributed computing platform that delivers and/or updates one or more of configuration data, rules, scripts and other services to vehicles and IoT devices. In some exemplary embodiments, the MSP optionally provides data ingestion, storage and management, data analytics, real-time data processing, remote control of data retrieving, insurance fraud verification, predictive maintenance and social media support.

Abstract: In one embodiment, a method includes receiving, at a proxy application on a first computing device, a request from a first application on the first computing device to access a resource. The method further includes transmitting, from the proxy application on the first computing device, a modified version of the request to a proxy application on a second computing device and receiving, from the proxy application on the second computing device, a response comprising data from the requested resource, where the resource is on the second computing device. The method further includes transmitting, to the first application on the first computing device, a response satisfying the first application's request to access the resource.

Abstract: A vehicle controller includes: an execution unit configured to execute a control program for controlling a vehicle; a storage unit having a first program storage area to store the control program and a second program storage area to store an update program that is an updated version of the control program and created based on update data acquired from a device located outside the vehicle through a network; and an update unit that stores the update program in the second program storage area based on the update data, regardless of whether the execution unit is executing the control program.

Abstract: A cable distribution system that includes a head end connected to a plurality of customer devices through a transmission network that includes a remote fiber node that converts digital data to analog data suitable for the plurality of customer devices. The remote fiber node includes a processor. The remote fiber node receives a software image containing (i) a hardware image, (ii) a primary boot loader, (iii) a kernel, (iv) a software dataplane for a dataplane, and (v) software applications for a control plane. Based upon the file name of the software image selectively using at least some of (i) a hardware image, (ii) a primary boot loader, (iii) a kernel, (iv) a software dataplane for a dataplane, and (v) software applications for a control plane, in resetting the remote physical device.

Abstract: A new device executing an application on a new central processing unit (CPU), determines whether the application is for a legacy device having a legacy CPU. When the new device determines that the application is for the legacy device, it executes the application on the new CPU with selected available resources of the new device restricted to approximate or match a processing behavior of the legacy CPU, e.g., by reducing a usable portion of a return address stack of the new CPU and thereby reducing a number of calls and associated returns that can be tracked.

Abstract: Generally described, one or more aspects of the present application relate to an instance cloning service for cloning a running virtual machine instance and configuring the resources of the new virtual machine instance created by cloning the running virtual machine instance. For example, the instance cloning service can create the new virtual machine instance and attach it to a storage volume to which the original virtual machine instance is attached. The instance cloning service may subsequently move the new virtual machine instance to another storage volume (e.g., based on a user request or based on the performance of the instances). Alternatively, upon cloning, the instance cloning service may attach the new virtual machine instance to a new storage volume. For example, the instance cloning service may use copy-on-write to provide the new virtual machine instance with its own storage volume.

Abstract: A method includes determining a system aspect of a system for asset management evaluation. The method further includes determining at least one evaluation perspective for use in performing the asset management evaluation on the system aspect. The method further includes determining at least one evaluation viewpoint for use in performing the asset management evaluation on the system aspect. The method further includes obtaining asset management data regarding the system aspect in accordance with the at least one evaluation perspective and the at least one evaluation viewpoint. The method further includes calculating an asset management rating as a measure of system asset management maturity for the system aspect based on the asset management data, the at least one evaluation perspective, the at least one evaluation viewpoint, and at least one evaluation rating metric.

Abstract: A chip set for a terminal comprises at least one secure processor, in which a one-time programmable memory is integrated. At least one terminal serial number of the terminal is stored in the chip set. Information for securing the terminal serial number against tampering is stored in the one-time programmable memory.

Abstract: Embodiments described herein are capable of preventing the installation of unwanted software bundled with a desired application at runtime, while allowing the installation of the desired application to continue as expected. For example, the embodiments described herein create a decoy in memory that preempts unwanted code. The decoy attracts any illegitimate code and diverts it into a dead end (e.g., the code is isolated, thereby preventing it from properly executing), while installation of the legitimate code (i.e., the desired application) flows as expected. The foregoing detects that a reflective loading process of DLL associated with the unwanted application has occurred, identifies the entity that attempted to perform the reflective loading process, and prevents the entity from completing the reflective loading process without terminating the main installer.

Abstract: An electronic device, a setting method, and an information processing system. The electronic device installs an application, displays on a display, a screen for receiving input of a setting value for a setting item based on setting information that includes one or more setting items for executing the installed application, and control to set the setting value for the setting item received on the screen.

Abstract: A secure programming system and method for provisioning and programming a target payload into a programmable device mounted in a programmer. The programmable device can be authenticated before programming to verify the device is a valid device produced by a silicon vendor. The authentication process can include a challenge-response validation. The target payload can be programmed into the programmable device and linked with an authorized manufacturer. The programmable device can be verified after programming the target payload by verifying the silicon vendor and the authorized manufacturer. The secure programming system can provision different content into different programmable devices simultaneously to create multiple final device types in a single pass.

Abstract: In an API conversion device 100, an API conversion unit 140 receives an API conversion instruction from an API-version-number management unit 120, acquires API definitions 21 to 23 and an API conversion program 24 with an API conversion DB access unit 150, converts a received API into a new version number, when the API conversion program was not successfully acquired, extracts a difference between acquired API definitions of new and old version numbers, and, when a new parameter is present in an API definition of the new version number, requests a service provision system 10 to give insufficient information, generates an API conversion program 25 of the new version number based on the insufficient information acquired from the service provision system 10 and the API definitions 21 to 23 of the new and old version numbers acquired from an API conversion DB 20, and converts the received API into the new version number based on the API definitions 21 to 23 and the API conversion program 25.

Abstract: One example method includes transmitting a request for a container image to a registry, receiving metadata associated with the container image, wherein the metadata allows a controller to mount an empty filesystem on a host machine, starting a container from the container image without receiving all files associated with the container image, receiving files, from a container server, needed by the container based on an access sequence associated with the container. This allows a container to be started without downloading the entire container image and also conversed bandwidth by providing the files as needed based on the manner in which the container accesses files during execution.

Abstract: An application configured to be dynamically and/or incrementally updated to tailor capabilities of the application to areas of interest of a user is disclosed. The application receives one or more task-specific modules for enhancing a task-specific capability of the application. The one or more task-specific modules are identified from among a plurality of task-specific modules, based on user data indicative of interaction of the user with an electronic marketplace. The one or more task-specific modules are used to update a general module configured to implement the task-specific capability of the application to create a customized application. The customized application is used to perform a task-specific operation based on an input provided by the user, and a result of the task-specific operation to be presented to the user.

Abstract: A control system includes a controller configured to control communication between or among plural vehicle devices that control operation of a vehicle via a network that communicatively couples the vehicle devices. The controller also is configured to control the communication using a data distribution service (DDS) and with the network operating as a time sensitive network (TSN). The controller is configured to direct a first set of the vehicle devices to communicate using time sensitive communications, a different, second set of the vehicle devices to communicate using best effort communications, and a different, third set of the vehicle devices to communicate using rate constrained communications.

Abstract: Techniques for implementing a systematic installation of software extensions are disclosed. In some embodiments, a computer system performs operations comprising: detecting a request to open a target file of a base computer program on a client machine, the target file residing on a server machine; determining that the target file includes a target version of a software extension; determining that a user of the client machine is part of a user group having administrative permission for the base computer program; determining that a systematic installation criterion from a group of systematic installation criteria is satisfied; and installing the target version of the software extension on the client machine based on the determining that the target file includes the target version, the determining that the user is part of the user group, and the determining that the systematic installation criterion is satisfied.

Abstract: A data processing system for artificial intelligence-based setting of controls in an evaluation interface comprising a data store storing: a plurality of transactions; a plurality of completed evaluations, each completed evaluation including an indication of a transcript portion associated with an evaluation answer. The system determines a word or phrase common to a first set of transcript portions associated with the evaluation answer; creates a first set of auto answer parameters that includes the word or phrase; auto answers the question for a set of test transactions to generate an auto answer for each test transaction; and based on a determination that the first set of auto answer parameters auto answered the question with a threshold level of accuracy, configures an evaluation system to use the first set of auto answer parameters to preset an answer control in an evaluation operator interface.

Abstract: Techniques enable an application for execution in a heterogeneous computing environment including an on-premise server and a Software-as-a-Service (SaaS) provider. A scaffold defining assets usable by the application and configuration details therefor is developed. At least one scaffold map is generated. Each specifies target servers where individual assets are located and/or to be located. Different scaffold maps are generated for different user-specifiable environments to which the application is deployable. An application manager helps generate agent manifests based on the scaffold and one or more scaffold maps. The agent manifests are usable to configure respective target servers. A package manager helps provision the target servers based on the agent manifests. The provisioning includes distributing to corresponding target servers, and processing thereon, the agent manifests. The processing includes rolling back the distribution responsive to an occurrence of a defined exception case.

Abstract: Described herein are systems, methods, and software to handle requests to an application file shared by a plurality of applications on a computing system. In one implementation, a method of handling request for an application file shared by a plurality of applications on a computing system includes identifying a request for the application file on the computing system, wherein each application in the plurality of applications is associated with an individualized version of the application file, and wherein the plurality of applications is stored on separate application storage volumes attached to the computing system. The method further provides identifying an application associated with the request, and identifying an application storage volume in the application storage volumes that stores the application. Once identified, the method also includes retrieving the application file from the identified storage volume to support the request.

Abstract: A technique for sharing an application between devices is discussed. Embodiments of the present invention transmit information about an application from a source computing device to a target computing device. An application sharing service on the target computing device then automatically searches the target computing device for a resident corresponding application or its equivalent and if a corresponding application is not found, searches an application store or repository for the corresponding application. If the application or its equivalent is found in the application store or repository, a user may be prompted to download the application or the application may be downloaded automatically. If the corresponding application was found on the target computing device originally, a check may be performed to determine if the most recent update is installed and, if the most recent version is not installed, it may be downloaded from the application store.

Abstract: An example operation includes one or more of receiving a software update at a first component in a target transport, parsing the software update by a second component in the target transport into a first portion of critical updates and a second portion of non-critical updates, verifying the first portion, by the second component, based on a source of the software update, running, by the second component, the verified first portion with a dedicated process on the target transport for a pre-set period of time, and responsive to positive results over the period of time, running the verified first portion with other processes on the target transport.

Abstract: Systems, methods, and computer media for visualizing data are provided herein. The described examples allow one-dimensional data visualizations generated using visualization tools and backend components to be displayed in response to a request to view data that includes one or more sets of Cartesian columns. A data visualization request can specify data for inclusion in a data visualization and properties for the visualization, including transpose factors for data sources. The data sources having transpose factors can be cloned to represent respective combinations of the data source with each transpose factor, and then joined to other cloned or non-cloned data sources to generate the resulting one-dimensional visualization.

Abstract: Methods, systems, and devices for memory health status reporting are described. A memory device may output to a host device a parameter value, which may be indicative of metric or condition related to the performance or reliability (e.g., a health status) of the memory device of the memory device. The host device may thereby determine that the memory device is degraded, possibly prior to device or system failure. Based on the parameter value, the host device may take preventative action, such as quarantining the memory device, deactivating the memory device, or swapping the memory device for another memory device.

Abstract: A licensing system and related methods are described utilizing aspects of distributed ledger technologies to facilitate trusted and verifiable licensing transactions for creative works. A client device can include an asset editing tool for incorporating an asset selected from a plurality of licensable assets into a new creative work. The selected asset can be downloaded for incorporation into the new creative work. The new creative work incorporating the selected asset can be analyzed to determine an amount that the selected asset contributed to the new creative work, or an amount that the new creative work is attributable to the selected asset.

Abstract: Various examples are directed to systems and methods for providing software services to one or more consumer systems. A cloud service provider system accesses a software service build comprising a first feature and a first feature toggle for selectively enabling or disabling the first feature. The cloud service provider system configures the first feature toggle of the software service build to disable the first feature and deploys the software service build to a first environment accessible by a first consumer system. A toggle routine determines that a first toggle condition for the first feature has occurred and modifies the software service build deployed at the first environment to configure the first feature toggle to enable the first feature.

Abstract: Methods, apparatus and articles of manufacture for custom interface specification in a cloud management system are disclosed. An example cloud management system includes: a first interface to communicate with a second interface external to the cloud management system; and a host to manage requests from the second interface and allocate resources to the second interface as a reverse proxy for the second interface with respect to a backend. The example host is to at least: add, at the request of the second interface, an endpoint with respect to the second interface; fetch, at the request of the second interface, data for the endpoint from the backend, the backend identified for the endpoint based on metadata in a component registry; and provide the data from the backend to the second interface.

Abstract: Systems and techniques for computing cluster configuration standardization are described herein. Configuration data obtained for a plurality of computing systems may be evaluated. A first computing cluster may be identified based on first configuration data for a first set of computing systems. A second computing cluster may be identified based on second configuration data for a second set of computing systems. A score may be calculated for the second computing cluster based on an evaluation of the second configuration data using the first configuration data. The second computing cluster may be associated with the first computing cluster based on the score. A standard configuration may be selected to be applied to the first set of computing systems and the second set of computing systems using the first configuration data.

Abstract: Automatically updating operating system and application programs in a large-scale network using Gold image data. An asset update process receives validation by a user for use of an updated program comprising new Gold image data. The process automatically updates the previous version of the updated version with the updated program to generate new user content data, without requiring further user intervention by using a defined tag linking the new Gold image data with previous Gold image data for the older version of the program. The Gold image data is stored in a central data protection target storage separate from data protection target storage for the user content data.

Abstract: A method for converting an electronic flash storage device having a byte addressable storage (ByAS) and a block addressable flash storage (BlAS) to a single byte addressable storage includes receiving, by a host, a request for memory allocation from the ByAS, the receiving being from a first application among of a plurality of applications running on a processor; deallocating, by the host, a least relevant page allocated to at least one second application among the plurality of applications; moving, by the host, a content to the BlAS at a first BlAS location, the content related to the least relevant page, the moving based on the deallocation; allocating, by the host, the least relevant page to the first application; and updating, by the host, a cache metadata and a page lookup table of the first application and the at least one second application based on the deallocation and allocation.

Abstract: Aspects of the disclosure relate to cloud service automation of common image management. An image update orchestrator may receive a request to upgrade a virtual machine image. The image update orchestrator may spin up an instance of a virtual machine and provision the instance of the virtual machine with a virtual machine image and cause to install a plurality of software updates to the instance of the virtual machine. The image update orchestrator may take a snapshot of the instance of the virtual machine and generate a sealed master image. Finally, the image update orchestrator may cause to deploy, to one or more policy managed devices, the sealed master image.

Abstract: The invention relates generally to a system and method for implementing a one to many configuration management tool using runtime injection to replace hard coded values. An embodiment of the present invention is directed to addressing configuration management challenges, enhancing software quality and improving operation performance.

Abstract: A device processes a communication between a source and user equipment. The user equipment is one of a plurality of user equipment connected to a network and the user equipment is associated with an entity. The device determines that the communication is associated with an anomalous traffic pattern. The device implements a provisional blocking of traffic between the source and the plurality of user equipment connected to the network and generates a filtering rule based on determining the anomalous traffic pattern, where the filtering rule prescribes that traffic between the source and the second user equipment is to be blocked. The device transmits a notification to the entity associated with the user equipment that requests that the entity affirm the filtering rule, and the device blocks traffic between the source and the user equipment based on the entity affirming the filtering rule.

Abstract: Provided is a method for securing an item of device use information of a device, having the following steps: —determining the item of device use information; —generating transaction data depending on the item of device use information; —generating a blockchain data structure which is based on a cryptocurrency and includes the transaction data or a checksum of the transaction data; —sending the generated blockchain data structure to at least one blockchain node. The item of device use information of a device according to the described method is change-protected by a decentralized security structure. Thanks to the distributed blockchain database, the item of device use information of the device cannot be manipulated subsequently. The use of the decentralized blockchain technology also advantageously means that no central trusted point or party is necessary.

Abstract: A containerisation orchestrator (26) is controlled by an analysis system (20, 21, 22) which assesses an application and a device for compatibility to have a candidate application installed on the device using the orchestrator. The analysis includes an assessment of the vulnerability of the installed application to failure or malicious attack, and a risk assessment of the consequences of such an event. The candidate containerised configuration (20) for the application is also assessed for compatibilities and vulnerabilities.

Abstract: One method for fleet management of robotic surgical systems includes receiving, by a management server from a robotic surgery system, a provisioning request; in response to receiving the provisioning request: generating an encryption key pair for the robotic surgery system, the encryption key pair comprising a private key and a public key, communicating the private key to the robotic surgery system, and communicating a set of secure certificates to the robotic surgery system, at least one of the secure certificates enabling secure communications between the robotic surgery system and the management server; receiving from the robotic surgery system, and using the at least one secure certificate enabling secure communications, a message indicating one or more software packages, each software package indicating a version of an installed software package on the robotic surgery system; communicating one or more software updates to the robotic surgery system based on the message; and registering, at the management

Abstract: A method for managing a client environment includes obtaining, by a device emulation orchestration engine in an emulation system, an upgrade estimation time request associated with an application upgrade, in response to the upgrade estimation time request: performing a device emulation container analysis to determine a client device that requires the application upgrade, wherein the client device executes in the client environment, initiating an upgrade emulation using a device emulation container corresponding to the client device, obtaining, from a device emulation agent executing in the device emulation container, an upgrade estimation, and providing the upgrade estimation to the application upgrade monitoring agent.

Abstract: An apparatus includes a memory and a hardware processor. The memory stores a plurality of conversion rules. The processor receives a first log from a server. The first log indicates that the server attempted to install a software patch. The processor converts, based on the plurality of conversion rules, the first log into a different format to produce a second log. The processor also determines, based on the second log, that the software patch install failed and determines a cause for the software patch install failure. The processor further determines a series of steps to remedy the cause and perform the series of steps to remedy the cause.

Abstract: An electronic device and method are disclosed herein. The electronic device includes a communication module, a display, a memory and a processor which implements the method. The method includes receiving access point (AP) information from at least one AP through the communication module, generating an AP list including an AP communicatively connectable with the electronic device based on the received AP information, storing the AP list in the memory, identifying a state of the electronic device, determining an arrangement criterion for arranging a display order of Aps included in the AP list based on state information about the electronic device, and controlling the display to arrange the AP list according to the determined arrangement criterion.