International Business Machines Corporation

Workday, Inc.

Artem Spector

Iddo Levin

Ishai Borovoy

Todd Eric Kaplinger

Anton Aleksandrov

Ron Perry

Raanan Avidor

Yoav Bodor

Yaron Goldberg

Ran Enriko Magen

Amit Ben-Sheffer

Gal A Shachor

Haim Schneider

Andrew Dwight Dingsor

Michael R Rheinheimer

Noam Slonim

Ranit Aharonov

Ilya Shnayderman

David Konopnicki

Ella Rabinovich

Benjamin Sznajder

Lena Dankin

Uri Zonens

Liat Ein-Dor

Tomer Vilensky

An example system includes a processor to receive a list of sentiment carrying discourse markers. The processor is to select sentences in a text corpus that begin with a discourse marker from the list of sentiment carrying discourse markers followed by a comma. The processor is to remove each discourse marker and comma from a beginning of the selected sentences and labeling each of the sentences with a sentiment associated with to a corresponding removed discourse marker to generate a weakly labeled dataset. The processor is to inter-train a pretrained language model using the generated weakly labeled dataset to generate a sentiment model.

Generating sentiment models using weak labels generated from discourse markers

Method and apparatus for training and using a classifier for words. Embodiments include receiving a first plurality of sentences comprising a first word that is associated with a class and a second plurality of sentences comprising a second word that is not associated with the class. Embodiments include training a classifier using positive training data for the class that is based on the first plurality of sentences and negative training data for the class that is based on the second plurality of sentences. Embodiments include determining a measure of correlation between a third word and the class by using a sentence comprising the third word as an input to the classifier. Embodiments include using the measure of correlation to perform an action selected from the following list: selecting content to provide to a user; determining an automatic chat response; or filtering a set of content.

Classification engine for learning properties of words and multi-word expressions

Updating web resources includes extracting web resources from the application to local files, and querying an external server for web resource updates specific to at least one operating condition of the client device. A client device includes at least one processor to execute computer readable instructions to extract a web resource from an application downloaded to a native container of a client device, and query a server for web resource updates with a query that comprises a native container identification. A server includes at least one processor to execute computer readable instructions to generate an update bundle for web resources downloaded in an application package by a client device, the update bundle comprising at least one update that is specific to an operating condition of the client device, and, in response to a request from the client device, send the update bundle to the client device.

Updating web resources

Updating web resources includes extracting web resources from an application to local files in response to an initial start-up of the application, downloading updates to the web resources to the local files from an external server; and running the application using contents from the local files.

Updating web resources includes extracting web resources from the application to local files, and querying an external server for web resource updates specific to at least one operating condition of the client device. A server includes at least one processor to execute computer readable instructions to generate an update bundle for web resources downloaded in an application package by a client device, the update bundle comprising at least one update that is specific to an operating condition of the client device, and, in response to a request from the client device, send the update bundle to the client device such that an application on a client device may receive web resource updates that are specific to operating conditions of the client device in order to accomplish a reduction in application start-up time.

Examples of techniques for authenticating mobile applications are described herein. A method includes receiving, via a first server, a key pair and a policy file associated with a mobile service from a second server. Authentication of the mobile application is performed based on the key pair and the policy file. A scope token is generated with an application scope in response to authenticating the mobile application. Authentication of a client device is performed corresponding to the mobile application and a user to generate a doubly-authenticated scope token including a device scope and application authenticity scope. The doubly-authenticated scope token is sent to a security gateway for user authentication. A trebly-authenticated scope token is received with a grant token request and a grant token is sent to the mobile application. The grant token is received from the mobile application. An access token is generated and sent to the mobile application.

Authenticating mobile applications using policy files

Examples of techniques for authenticating mobile applications are described herein. A method can include receiving, by a processor, a key pair and a policy file associated with a mobile service. The processor can receive a service request from a mobile application at a security gateway. The processor can detect that the service request includes an invalid or missing access token. The processor can redirect the mobile application to request a grant token from an authorization end point on a server. The processor can receive a grant token request from the mobile application and forward the grant token request to the server based on a policy file, the policy file including a list of: a plurality of security objects to be authenticated, a plurality of computing devices to authenticate the security objects, and an order of authentication.

Examples of techniques for authenticating mobile applications are described herein. A method includes receiving, at a first server, a key pair and a policy file associated with a mobile service on a second server, the policy file includes a plurality of security objects to be authenticated, a plurality of computing devices to authenticate the security objects, and an order of authentication. The method includes distributing the key pair and the policy file to a security device. The method also includes receiving, at the first server, an authentication request from a mobile application. The method further includes creating an authenticity challenge as specified in the policy file and sending the authenticity challenge with a response to the mobile application.

Updating web resources includes downloading an application to a client device, extracting web resources from the application to local files, and querying an external server for web resource updates specific to at least one operating condition of the client device.

Embodiments of the present invention provide a method, system and computer program product for workload deployment density management for a multi-stage architecture implemented within a multi-tenant computing environment. The method includes receiving different requests from different tenants of a multi-tenant computing environment to deploy respectively different application instances of respectively different computer programs into different nodes of the host computing system. The method also includes determining from each request an associated stage of a software lifecycle for a corresponding one of the application instances. Finally, the method includes deploying each of the application instances into a particular one of the nodes depending upon an associated stage of each of the application instances so that each of the nodes hosts different application instances for different tenants of a common stage of the software lifecycle.

Workload deployment density management for a multi-stage computing architecture implemented within a multi-tenant computing environment

Examples of techniques for validating access tokens are described herein. An example computer-implemented method includes receiving, via a processor, a pushed event at a server. The method includes adding, via the processor, a value of the pushed event to a black list of recently disabled users, devices, applications, or any combination thereof. The method also includes receiving, via the processor, a request to access a resource on the server, the request including an access token. The method further includes comparing, via the processor, a field value of the access token with the black list. The method further includes declining, via the processor, the request based on a match of the field value of the access token with a value of the pushed event in the black list.

Growing community of inventors

Rishon Le-Zion, Israel

Artem Spector