Approaches for managing application access rights of project roles to maintain security of client identifying data are disclosed. In an implementation, role information associated with a project may be obtained. The role information may indicate one or more roles associated with the project. One or more applications for the one or more roles may be determined. The one or more roles may comprise a role. The one or more applications may comprise an application that is to be used by the role. The application may have an access right that facilitates fulfillment of the role. A determination of whether the access right allows access to CID may be effectuated. The role may be limited to one or more domains in conjunction with enabling the access right for the role in response to a determination that the access right allows access to CID. The access right for the role may be enabled without limiting the role to the one or more domains in response to a determination that the access right does not allow access to CID.
An approach for facilitating client identifying data (CID) target-state-compliant computer-executable applications is disclosed. In some implementations, a CID questionnaire that includes one or more requests for information relating to CID exposure associated with an application may be provided to a first user. One or more inputs to the one or more information requests may be received from the first user. Current state information associated with the application may be determined based on the one or more inputs and one or more CID-related criteria. The current state information may include risk information indicating current CID exposure associated with the application. Target state information associated with the application may be received. Remediation information associated with the application may be provided to one or more users. The remediation information may be determined based on the current statement information and the target statement information.
An approach for facilitating preparation of client identifying data (CID) indexes is disclosed. In some implementations, a first CID set of a plurality of CID sets may be received. The first CID set may include first data subsets that are respectively associated with clients. A first CID type of a plurality of CID types that corresponds to the first CID set may be determined. One or more indicators may be assigned to each one of the first data subsets based on the first CID type and the respective client associated with the one first data subset. The one or more indicators assigned to the one first data subset may indicate (i) a first flag relating to the respective client and (ii) a first threshold relating to a detection of data that corresponds to the respective client.
An approach for facilitating secured use of short-range wireless tokens is disclosed. In some implementations, a short-range wireless token may be wirelessly powered based on the short-range wireless token being within a powering range of an electromagnetic field of a user device. The short-range wireless token may be configured to generate output signals while being powered. The output signals of the short-range wireless token may be disabled while the short-range wireless token continues to be powered by the electromagnetic field based on a predetermined condition determined by the short-range wireless token. The output signals of the short- range wireless token may be re-enabled based on a discontinuing of the powering of the short-range wireless token by the electromagnetic field and then a resuming of the powering of the short-range wireless token by the electromagnetic field.
Described are computer-based methods and apparatuses, including computer program products, for a platform verification portal. A plurality of configuration items are storedwith each comprising a plurality of verification commands capable of being executed by a verification scanning engine executing a verification scan on a target server to compare a set of actual software or configuration settings of the software against a desired software stack. A plurality of configuration item rules isstored. Execution of one or more verification scanning engines across a selected set of target servers is remotely initiated. A request for configuration items is received from each of the target servers. For each of the target servers a set of configuration items applicable to the target server is dynamically selected. For each of the target servers, a list identifying the set of configuration items is transmitted to the target server for execution by the verification scanning engine.
A computer-implemented database caching system is proposed for a network comprised of several node computers each comprising at least one data retrieving application. The system comprises a highly available, persistent data base system including one or more data bases for storing the data to be retrieved, said one or more data bases having a minimum access time; a non-persistent physical shared memory system comprising a data space system, separate and distinct from said data bases and being organized as one or more data space system segments (clipboards) and having a minimum access time which is lower than the minimum access time of said data bases; an address space for a data space manager for managing the data space system; and multiple address spaces for clipboard users for retrieving data stored in the clipboards based on a retrieving demand from a database application.
A system and method for monitoring the storage estate of an organization using an interactive website that is configured to produce and display a novel set of key performance indicators (KPIs) related to the storage estate, including KPIs related to data collected from at least one of storage area network data and network attached storage data. In one embodiment, the novel set of KPIs includes one or more of protection efficiency, application efficiency, and snapshot overhead, where protection efficiency is calculated as a ratio of logical addressable data storage volume to total physical volume of data storage for storage area network data of the organization, application efficiency is calculated as a fraction of disk storage allocated to end user devices that is actually used by the end user devices for storage area network data, and snapshot overhead is calculated as a ratio of a volume of storage allocated for replicated copies of data to allocated storage for network attached storage data.
Methods and systems provide a commodity index for investing. In one implementation, a method selects a commodity component for inclusion in the commodity index and calculates a target weight of the commodity component. The method further selects a time interval for maturity of the commodity component to be fixed at from a current date. Financial instruments may be purchased corresponding to the commodity component.
The invention relates to a system that can be configured and to a method for controlling the generation and/or distribution of publications, particularly for the use by a financial institution, for example a bank, comprising the following steps: (a) Providing a plurality of different text elements, and/or graphic elements, and/or table elements (202, 203, 204) or data representing the respective elements (202, 203, 204); (b) Using at least one of the elements (202, 203, 204), or the data representing the at least one element (202, 203, 204) for generating a plurality of different publications that can be configured.
A method for execution in a computer network comprising a plurality of front-end computers and a plurality of program components, which are instantiated on one of the front-end computers in a distributed manner, and comprising predetermined input parameters for activating a functionality of this program component, and comprising predetermined output parameters following execution, wherein by means of communication with these program components status information of software program resources, and/or by means of communication with hardware resources in the computer network, which is to say via the architecture of the computer network, the equipment status of the hardware resources of the computer network, event and error messages of the hardware resources of the computer network, the development status, or the version of the software program components, the run time behavior of the software program components, events and errors of the software program components, the data flow between individual software program components, and/or hardware resources of the computer network, and/or implementation and modification requirements and information regarding the hardware resources of the computer network or of the software program components, are detected using chronological, spatial, functional, and/or structural descriptors, stored in a database, and output in one or more standardized output formats as a function of queries.
The invention relates to a method for operating a computer network, a computer network, and an apparatus for use in the network. According to an aspect of the invention, a method for operating a computer network (1) comprises the steps: (a) from a first device (2) of the network (1), requesting access to a second device (4) of the network (1); (b) redirecting the request to a third device (5) of the network (1); (c) detecting location information associated with the first device (2) by use of the third device (5); (d) redirecting the request to the second device (2).
The invention relates to a computer-implemented system for administering a database system comprising structured data records. Said system comprises two separate internal databases, an interface for an input of at least parts of a structured data record into one of the databases, and at least one interface for communication with an external database system in order to communicate between the internal databases and the external database. When a new data recorded is implemented into the first database, a new corresponding data record is only implemented into the second database once a confirmation on the successful implementation of a corresponding new data record into the external database has been received from the external database. If the new data record in the first database deviates from a presumably corresponding new data record of the external database, the external database assigns, depending on the degree of deviation, a probability to the presumably corresponding new data record. The external database extracts a data record from other data records which data record has a higher probability of being the correct corresponding new data record.
A technique is described for supplying a data warehouse while ensuring consistent data visibility. The system comprises an interface for reception of data elements which are associated with individual transactions and require processing before being supplied to the data warehouse. Furthermore, a process control component is provided in order to analyse the data elements for the respective association with specific processing activities and for controlling the distribution of the data elements to associated processing paths. At least one first buffer store for temporary storage of the distributed data elements is arranged downstream from the process control component, with time control information being associated with each stored data element. The data elements read from the at least one buffer store are processed in two or more parallel processing paths, with the data elements being processed independently of the time control information in a first mode, and with prioritized processing of specific data elements, based on the time control information, being ensured in a second mode. A transfer component is arranged downstream from the processing paths and transfers the processed data elements to the data warehouse.
The invention relates to a system for managing data and which comprises a basic function configurator which defines a generic basic function, whereby the function is represented in a basic function by means of a descriptive attribute and associated values or value ranges which are required for processing the basic function. The function is represented on a data set which is associated with a distribution rule. A data set defines, with the respectively associated distribution rules, a generic basic function. The data sets which define the generic basic functions are contained in a basic function list, with the distribution rules thereof for accessing a product presentation configurator. The product presentation configuration combines one or several basic functions and transfers them into a product presentation, wherein the generic basic functions are mutated to specific basic functions for the respective product presentation, by transferring or limiting the values. A product presentation comprises one or several basic functions which are associated with the product. A product presentation having specific basic functions is used as a basis for contractual relations with a partner. The structure of the product presentations are contained in a product presentation list enabling the access of a contract manager.
The invention relates to a system for managing data and which comprises a basic function configurator which defines a generic basic function, whereby the function is represented in a basic function by means of a descriptive attribute and associated values or value ranges which are required for processing the basic function. The function is represented on a data set which is associated with a distribution rule. A data set defines, with the respectively associated distribution rules, a generic basic function. The data sets which define the generic basic functions are contained in a basic function list, with the distribution rules thereof for accessing a product presentation configurator. The product presentation configuration combines one or several basic functions and transfers them into a product presentation, wherein the generic basic functions are mutated to specific basic functions for the respective product presentation, by transferring or limiting the values. A product presentation comprises one or several basic functions which are associated with the product. A product presentation having specific basic functions is used as a basis for contractual relations with a partner. The structure of the product presentations are contained in a product presentation list enabling the access of a contract manager.
In a server-client computer network system for carrying out cryptographic operations between a client computer workstation and a cryptography server computer system, a computer software programs for communication therebetween are installed in the client computer workstation and in the cryptography server computer system. Said computer software programs are executed in such a way that, when the client computer workstation transmits a request for carrying out a cryptographic operation to the cryptography server computer system, said computer workstation receives an answer therefrom. For this purpose, the cryptography server computer system requests a strong authentication from the client computer workstation. In response, the client computer workstation engages the key of the user thereof for producing said strong authentication. In the case of the successful authentication, the client computer workstation receives a release for initiating one or several cryptographic operations with the aid of the private key. According to said invention, the privet key is stored in the cryptography server computer system and cryptographic operation(s) is (are) authorised for a fixed short time after the successful authentication for carrying out the cryptographic operation(s) requested by the computer software program operating on the client computer workstation. At the same time, the client computer workstation puts at the disposal of the application software program the result of the cryptographic operation(s).
Systems and methods are provided for supporting financial reporting obligations, such as legal or regulatory reporting requirements. In accordance with one implementation, a computer-implemented method is provided for monitoring financial positions of an entity on an aggregated basis. The method comprises the steps of providing netting rules to define how to aggregate financial positions of the entity, and providing holding rules to define what financial positions are reportable in each jurisdiction where the entity holds a financial position. The method may also comprise the steps of receiving financial position data from a plurality of source systems, and aggregating the financial position data to determine the financial positions of the entity on an aggregated basis. In the method, the financial position data may be aggregated in accordance with the netting and holding rules.
Systems and methods are provided for supporting financial reporting obligations, such as legal or regulatory reporting requirements. In accordance with one implementation, a computerized system is provided for monitoring financial positions of an entity on a group-wide basis. The system includes one or more user interfaces for defining netting and holding rules. The holding rules define financial positions that are reportable in each jurisdiction where the entity holds a financial position. The netting rules define how to aggregate financial positions. The computerized system may also comprise a plurality of source systems for electronically storing and transmitting financial position data of the entity, and a calculation engine adapted to electronically receive the financial position data transmitted from each of the plurality of source systems and to aggregate the financial position data in accordance with the netting and holding rules.
A formula for workflow-based data processing is disclosed, with a number of display pages interactively run through by means of workflow-control commands within the context of the workflow. A suitable computer system comprises at least one user terminal with a user interface for the page displays (802) and for the input of user data and workflow control commands, one or more base systems with corresponding base databanks in which base data is contained, at least one cache databank in which the user data and a selective base data excerpts are cached (806), one or more service systems with services (810) for carrying out data processing steps on the basis of data drawn from the cache databank and a mechanism (804) for the generation of a request for the call-up of at least one service (810) as reaction to a workflow control command, wherein the service (810) is called up asynchronously with regard to the display of a new display page, when the make-up of the new display page is independent of the result from the service (810) called up by the request.
The invention relates to a method for configuring a transaction-based host environment for migration to a new system platform. The method comprises the following steps: providing at least one database of a first type and at least one database of second type on the current system platform, which have a different migration behavior. In addition, a first transaction type is provided that, on the current system platform, accesses both the first type of database as well as the second type of database. In order to prepare for the migration, the first transaction type in the host environment is replaced by a second transaction type and by a third transaction type, the second transaction type exclusively accessing the first type of database and the third transaction type exclusively accessing the second type of database. The method also comprises the initiation of transactions of the second and third type when requesting a transaction of the first type from a decentralized environment.
In order to identify files that are unnecessarily created or are no longer necessary and to carry out a reliable file versioning in a batch processing-oriented environment, a dynamic batch processing system (100) is provided. The system (100) comprises a batch processing control component (12) for processing batch processing control statements (14), which contain the call of at least one program, and a database (16) containing files each having a physical file name. The system (100) also comprises a component (24) for providing program-specific file definition information that defines, by abstract selection criteria, files necessary during a program run. The physical file names of the files created for the program runs are registered in a file register (22) in the form of register entries, which assign at least one selection attribute to each physical file name. A service component (20), which communicates with the control component (12), has access to the file register (22) and the file definition component (24). File definition information is selected and/or created by the service component (20) based on the file definition information assigned to the program to be called.
The invention relates to a data processing method for time-optimally calculating a large number of result data sets at a time interval end, wherein said data are used as base data for calculation. In order to optimally use a calculation capacity of a used computer system, the inventive method consists (1) in determining a period of time (10) for taking base data into account, (2) in determining, for each result data set, a probability of modification of the base data between the result data set calculation time and the end of the time interval (9), (3) in calculating the result data set within the period of time (10), those result data sets whose data having a low modification probability are calculated prior to the result data sets whose data have a high modification probability, (4) in recording result data sets, (5) in determining for each result data set, shortly before the end of the time interval (9), whether the base data items are modified after calculation and in optionally calculating a correction, in particular, carrying out a new calculation for the corresponding result data set.
A template-driven system for generating platform-specific artifacts, such as program code, from platform-independent service models is described. The system comprises a template storage (102) with platform-specific templates, each template including platform-specific model transformation information; a repository (104) with a plurality of at least essentially platform-independent service model elements and one or more service models modeled from the model elements; and a generator (106) adapted to generate platform-specific artifacts by applying the transformation information included in the templates to the service models.
The invention relates to a computer network system for establishing a second database from and/or synchronizing it with a first database. At least the first database is accessed by work units of at least one application work station, thereby generating contents of the database, changing or deleting them. The network system also comprises at least one first server for making available and managing the first database, said first server being connected to at least one application work station, and at least one second server for making available and managing the second database, at least one data link interlinking the two servers. A software component can be used for calling, when an application work station initiates a transaction on the first database, a related transaction on the second database, and vice versa. When seen from the application work station, the related transaction on the second database end is carried out in analogy to its counterpart on the first database end.
G06F 17/30 - Information retrieval; Database structures therefor
G06F 11/14 - Error detection or correction of the data by redundancy in operation, e.g. by using different operation sequences leading to the same result
26.
COMPUTER NETWORK SYSTEM FOR THE ESTABLISHMENT SYNCHRONISATION AND/OR OPERATION OF A SECOND DATABANK FROM/WITH A FIRST DATABANK AND PROCEDURE FOR THE ABOVE
The invention relates to a computer network system for the establishment and/or synchronisation of a second databank from/with a first databank, whereby, at least on the first databank, access by work units of at least one application working station are carried out to generate, change or erase databank content, with at least one first server for hosting and maintaining the second databank, at least one data connection connecting the both servers, whereby the access by the working units to the first databank is carried out by means of a capsulation module, embodied and programmed such that the working units are transferred thereto, the transferred working units are resolved into one or more messages, the messages are written in the first databank and transmitted to the second databank.
G06F 17/30 - Information retrieval; Database structures therefor
G06F 11/14 - Error detection or correction of the data by redundancy in operation, e.g. by using different operation sequences leading to the same result
27.
COMPUTER NETWORK SYSTEM FOR SYNCHRONIZING A SECOND DATABASE WITH A FIRST DATABASE AND CORRESPONDING PROCEDURE
The invention relates to a computer network system for establishing a second database from and/or synchronizing it with a first database. At least the first database is accessed by work units of at least one application work station, thereby generating contents of the database, changing or deleting them. The network system also comprises at least one first server for making available and managing the first database, said first server being connected to at least one application work station, and at least one second server for making available and managing the second database, at least one data link interlinking the two servers. The works units access the first database by means of an encapsulation module which is adapted and programmed for the work units to be handed over to it, disassemble work units taken over to give one or more messages, entering the messages into the first database and transmitting the messages to the second database.
The invention relates to a computer network system for establishing a second database from and/or synchronizing it with a first database. At least the first database is accessed by work units of at least one application work station, thereby generating contents of the database, changing or deleting them. The network system also comprises at least one first server for making available and managing the first database, said first server being connected to at least one application work station, and at least one second server for making available and managing the second database, at least one data link interlinking the two servers. A software program is adapted and programmed to carry out a comparison between the first and second database in order to obtain information on whether the level of the information content of the two databases is equal. On the basis of said data comparison, an error log file is created regarding the deficient or missing data records. An error detection and error recovery routine corrects the deficient or missing data records.
Computer systems and methods for reporting and analyzing grants equity- based compensation (e.g., employee stock option grants). The systems and methods store information regarding grants down to each individual grant level. The system and methods are capable of producing reports 'as of particular dates (i.e., transaction dates, creation dates, and accounting date) that are compliant with Financial Accounting Standards Board standards and other accounting standards governing reporting of equity-based compensation without having to manually process large amounts of data.
The invention relates to a method for control of data-processing software modules (4, 5, 6, 7), whereby the data for processing is organised in files and the processing occurs in several sequential processing sections and the files are processed by at least one software module (4, 5, 6, 7) in a processing section. According to the invention, the continuation and spread of anomalies occurring during the processing in the software modules (4, 5, 6, 7) into subsequent processing sections may be avoided, whereby in the software modules (4, 5, 6, 7) of the processing sections, information about the processed data is recorded and signalled to a control system (8) which compares the signalled information and stops the processing in a subsequent processing step if during the comparison of the information it is determined that a given permitted maximum deviation is exceeded.
The invention relates to a control system (8), for the control of data-processing software modules (4, 5, 6, 7), whereby the data is organized into files comprising data sets and the processing occurs in several sequential processing sections and in a processing section the files are each processed by at least one software module (4, 5, 6, 7), characterised in that the control system (8) compares recorded information signalled by the software modules (4, 5, 6, 7) of the various processing sections about the processed data amongst themselves and with planned values and generates an acoustic and/or optical alarm for an operator when the control system (8) determines a maximum permissible deviation has been exceeded.
patents
