Salesforce Com, Inc.

Microsoft Technology Licensing, LLC

Brendan O'Connor

Giovanni Lorenzo Thione

Yoel Gluck

Robert Charles Fly

Barney Pell

Lukas A Biewald

James L Cavalieri, Iii

Chad P Walters

Scott A Prevost

Systems and methods for providing concurrent access to a resource via multiple user identities via a single client entity. A first authenticated session is established with an instance of a browser. The first session is associated with a first identity of a first user. A request to access the resource with an intermediate identity concurrently with the first session is detected. The intermediate identity is mapped to a target identity of a target user to be emulated. A second authentication session is established with the browser instance. The second session is associated with the intermediate identity. The request to access the resource is translated into a request to access the resource with the target identity. The translated request is forwarded to the resource. The response from the resource is translated to a response to the browser instance accessing the resource utilizing the target identity and returned to the browser instance.

Methods and systems for accessing a resource with multiple user identities

Systems and methods for providing concurrent access to a resource via multiple user identities via a single client entity. The client entity is allowed access to the resource utilizing a first user identity. An attempt to access the resource with the client entity utilizing a second user identity is detected. The second user identity is a child identity of the first user identity. The attempt to access the resource is restructured as an attempt to access the resource with a third user identity that is not a child identity of the first user identity. The restructured request is forwarded to the resource using the third user entity to access the resource. A response from the resource is restructured as a response to the client entity accessing the resource utilizing the second user identity. The restructured response is sent to the client entity accessing the resource utilizing the second user identity.

Methods and systems for maintaining the confidentiality of data provided by an organization for storage on a third party database system are provided. The data can be encrypted on an internal network of the organization and sent to the third party database system for storage. The third party database system can associate metadata with the encrypted data and can store the encrypted data. Accordingly, when a request for the encrypted data is received from a computing device communicating with an internal network of the organization, the encrypted data and associated metadata can be sent to the computing device. A key that is stored on an internal network of the organization can be called through an applet, which utilizes information within the metadata to locate the key on the internal network of the organization.

Enhanced system security

Methods and systems for secure client-side communication between multiple domains is provided. Such methods and systems can provide for decreased communication latency particularly effective for dynamic multi-domain and/or multi-tenant environments while allowing for granular security or specific security of messages and operations with regard to users, user sessions, groups, organizations, permissions sets, applications, or any other logical delineation. Such methods and systems may involve a variety of security components, for example, at least one set of instructions including a plurality of defined instruction to be utilized by users of the set of instructions to communicate, and cryptographic construct data in order to verify the data integrity and the authenticity of messages sent and received using the secure client-side communication between multiple domains.

Secure client-side communication between multiple domains

A role tree having nodes corresponding to semantic roles in a hierarchy is defined. A posting list is generated for each association of a term and a semantic role in the hierarchy. The posting lists are stored contiguously on a physical storage medium such that a subtree of the hierarchy of semantic roles can be loaded from the storage medium as a single contiguous block. The posting lists for a subtree of the hierarchy are retrieved by obtaining data identifying the beginning location on the physical storage medium of the posting lists for the term at the top of a desired subtree of the hierarchy and data identifying the length of the posting lists of the desired subtree of the hierarchy. A single contiguous block that includes the posting lists for the desired subtree of the hierarchy is then retrieved from the beginning location through the specified length.

Efficient storage and retrieval of posting lists

Computer-readable media, computerized methods, and computer systems for conducting semantic processes to present search results that include highlighted regions which are relevant to a conceptual meaning of a query are provided. Initially, content of document(s) is accessed and semantic representations are derived by distilling linguistic representations from the content. These semantic representations may be stored at a semantic index. Also, a proposition is derived from the query by parsing search terms of the query, and distilling the proposition from the search terms. Typically, the proposition is a logical representation of the conceptual meaning of the query. The proposition is compared against the semantic representations at the semantic index to identify a matching set. Regions of the content within the document, from which the matching set of semantic representations are derived, are targeted. Accordingly, highlighting may be applied to the targeted regions when presenting or displaying the search results.

Growing community of inventors

San Francisco, CA, United States of America

Brendan O'Connor