Workday, Inc.

Avalara, Inc.

Ati International Srl

Denis Gulsen

Erol Guney

Eric James Ranstrom

Amir Ali Afghani

Gregory T Kavounas

Mark Janzen

Naveen Kumar Agrawal

Thomas Goldschmidt

Bilkay Rose

Scott Seely

Kayla Marie Kimura

Tracy Barney

Thomas Monir Ghali

Yvonne Seidl

Ankit Aggarwal

Chandni K Dhanjal

John S Yates, Jr

Sandeep Nijhawan

Heidi Genest

Erik Van Der Hoeven

In embodiments, a method for an Online Software Platform (OSP) computer system includes receiving datasets having dataset values that represent relationship instance data of relationship instances between a client primary entity and other secondary entities, selecting digital rules responsive to these dataset values, producing resources for the datasets by applying the selected digital rules to the dataset values, deriving a total value of the produced resources, generating a report document that mentions at least the derived the total value, and preparing an instantiation that enables viewing a data record that substantiates the derived total value. The method may further include making this instantiation available for viewing to a domain entity that has access to the report document and wants to confirm the derived total value.

Online software platform (OSP) deriving resources, producing report document about them, and creating gallery with data substantiating the report document for viewing by third party

In embodiments, an Online Software Platform (OSP) is configured to receive datasets having dataset values that represent relationship instance data of relationship instances between a client primary entity and other secondary entities, select digital rules responsive to these dataset values, produce resources for the datasets by applying the selected digital rules to the dataset values, derive a total value of the produced resources, generate a report document that mentions at least derived the total value, and prepare an instantiation that enables viewing a data record that substantiates the derived total value. The OSP may further make this instantiation available for viewing to a domain entity that has access to the report document and wants to confirm the derived total value. For instance, the OSP may provide an access instruction for viewing the instantiation, or even augment the report document itself with such an access instruction.

A system for determining a calculation utilizing differential privacy including an interface and a processor. The interface is configured to receive a request to determine result data of a calculation using multitenanted data. The multitenanted data comprises tenant data associated with a plurality of tenants. The processor is configured to: determine the result data by performing the calculation on the multitenanted data; determine whether a deterministic modification is needed to ensure privacy based at least in part on whether a number of participants in the result data is less than a threshold; and in response to determining that the deterministic modification is needed to ensure privacy: determine the deterministic modification; numerically modify the result data using the deterministic modification to determine modified result data; and provide the modified result data.

Differential privacy security for benchmarking

A system for secure commingling of tenant isolated data includes a commingling storage unit, an interface, and a processor. The interface is configured to receive an indication of tenant data to be commingled. The processor is configured to determine one or more instances of sensitive data included in the tenant data, and transfer the tenant data to the commingling storage unit without transferring the one or more instances of sensitive data, wherein an index identifier is transferred to be stored in the commingling storage unit in place of an instance of sensitive data of the one or more instances of sensitive data.

Secure commingling of tenant isolated data

A system for analytics security includes processor(s) and a readable medium. The readable medium causes the system to perform operations comprising receiving a request for analytics data; determining the analytics data based on the request (the analytics data comprises result(s) of an analytic calculation performed on commingled data and the commingled data comprises tenant data shared by a tenant and other tenant data shared by other tenant(s)); determining security information associated with the analytics data (the security information associated with the analytics data is based on the commingled data used for determining the analytics data); determining permissions associated with the requestor based on the tenant; determining whether the requestor is credentialed based on the security information associated with the analytics data and the permissions associated with the requestor; and providing the analytics data to the requestor based on a determination that the requestor is credentialed.

Security system for benchmark access

A system for determining a calculation utilizing differential privacy including an interface and a processor. The interface is configured to receive a request to determine a result of a calculation using multitenanted data. The processor is configured to determine result data by performing the calculation on the multitenanted data; determine a deterministic modification in the event that the deterministic modification is needed to ensure privacy; modify the result data using the deterministic modification to determine modified result data; and provide the modified result data.

A system for an analytic database includes a commingling storage unit, an interface, and a processor. The interface is configured to receive an indication to build an analytic database. The processor is configured to transfer data to build the analytic database stored in the commingling storage unit, and build the analytic database using the data.

Stateless analytics for commingled tenant isolated data

A system for using a user-defined benchmark calculation includes an interface and a processor. The interface is configured to receive an indication to use the user-defined benchmark calculation from a user associated with a tenant. The processor is configured to perform the user-defined benchmark calculation on commingled data stored in a commingled data storage unit to determine a user-defined benchmark calculation result, where the commingled data storage unit stores tenant data associated with the tenant and other tenant data associated with other tenants. The processor is configured also to provide the user-defined benchmark calculation result.

Benchmark definition using client based tools

A system for performing a computation includes an interface and a processor. The interface is configured to receive an indication of a computation from a tenant associated user. The processor is configured to determine a set of computational steps for performing the computation, where each computational step of the set of computational steps adheres to a pipelining criterion. The processor is configured to determine associated processors for subsets of the set of computational steps, where the associated processors include a tenant associated processor or a commingling associated processor. The processor is configured to cause execution of the set of computational steps using the associated processors.

Flexible modular pipelined analytics

A system for a metadata driven catalog definition includes an interface and a processor. The interface is configured to receive an indication to generate a catalog. The processor is configured to traverse a set of data to generate a set of metadata tags, determine a set of sub-categories, wherein a sub-category of the set of subcategories comprises a group of metadata tags associated with the sub-category, and determine a set of categories. A category of the set of categories comprises a group of sub-categories associated with the category. The processor is also configured to provide the catalog comprising a set of filters for filtering data according to the set of categories and the set of sub-categories.

Metadata driven catalog definition

A system for analytics security includes an interface and a processor. The input interface is configured to receive a request for analytics data, where the request is associated with a requestor. The processor is configured to determine security associated with the analytics data, where security associated with the analytics data is based at least in part on commingled data used for determining the analytics data. The processor is also configured to determine permissions associated with the requestor, determine whether the requestor is credentialed based at least in part on the security associated with the analytics data and the permissions associated with the requestor, and in the event it is determined that the requestor is credentialed, provide the analytics data to the requestor.

A system for summary based privacy security for benchmarks including an interface and a processor. The interface is configured to receive an indication to opt-in to a benchmark category from a tenant, where opting-in includes a privacy level. The interface is also configured to provide a benchmark data request to a tenant system, where the benchmark data request includes a requirement to summarize tenant data for the benchmark data request compatible with the privacy level. The processor is configured to combine summarized tenant data with prior commingled benchmark data to update a commingled benchmark database, where the commingled benchmark database includes data from a plurality of tenants. The processor is also configured to determine a benchmark compatible with the privacy level using the commingled benchmark database.

Summary based privacy security for benchmarking

A system for secure commingling of tenant isolated data includes a commingling storage unit, an interface, and a processor. The interface is configured to receive an indication of tenant data to be commingled. The processor is configured to determine one or more instances of sensitive data included in the tenant data, and indicate to transfer the tenant data to be stored in the commingling storage unit without transferring the one or more instances of sensitive data.

The present invention provides an apparatus and a method for variable size pages using fixed size TLB (Translation Lookaside Buffer) entries. In one embodiment, an apparatus for variable size pages using fixed size TLB entries includes a first TLB for fixed size pages and a second TLB for variable size pages. In particular, the second TLB stores fixed size TLB entries for variable size pages. Further, in one embodiment, an input of an OR device is connected to the second TLB to provide a cost-effective and efficient implementation for translating linear addresses to physical addresses using fixed size TLB entries stored in the second TLB.

Growing community of inventors

Redwood City, CA, United States of America

Denis Gulsen