Palantir Technologies Inc.

James Ding

Anshuman Prasad

Ranajay Sen

Andrew Poh

John Holgate

Shuo Zheng

Thomas Playford

Gonçalo Silva Santos

Richard Helzberg

Alexander Rilee

Various systems and methods are provided for performing soft entity resolution. A plurality of data objects are retrieved from a plurality of data stores to create aggregated data objects for one or more entities. One or more retrieved data objects may be associated with the same entity, based at least in part upon one or more attribute types and attribute values of the data objects. In response to a determination that the one or more of the retrieved data objects should be associated with the same entity, metadata is generated that associates the data objects with the entity, the metadata being stored separately from the data objects, such that the underlying data objects remain unchanged. In addition, one or more additional attributes may be determined for the entity, based upon the data objects associated with the entity.

Focused probabilistic entity resolution from multiple data sources

A system for managing custom code within a data computing platform determines that a request for one or more uniform resource identifiers external to the platform is being made by custom code executing in the platform. In response to the determination, the system checks a whitelist of allowable external URIs against the requested one or more URIs and allows access to the requested one or more URIs if a match is detected with the whitelist, otherwise access by the custom code to the requested one or more URIs is denied. In addition, or alternatively, the system checks a blacklist of disallowed external URIs against the requested one or more URIs and denies access to the requested one or more URIs if a match is detected with the blacklist, otherwise access by the custom code to the requested one or more URIs is allowed. The blacklist can override the whitelist.

Systems and methods for managing custom code in a data computing platform

A database is configured to analyze user queries to dynamically partition the database according to a partition scheme. User queries can be rewritten based on the partition scheme so that, in response to queries, partitions including relevant data are read while partitions including irrelevant data can be skipped, reducing latency. Files can be named according to the partition scheme and stored on respective partitions so that low partition management can be implemented by underlying systems. Blocks within files can be sorted and statistics can be determined. The statistics can be used to find and read relevant blocks and skip irrelevant blocks.

Workflow driven database partitioning

Systems and methods are provided for determining an access request provided by an entity that seeks to interact with one or more backend systems through a middleware system, the access request including a genuine access token. The entity can be authenticated based on the genuine access token. When a client request is made to the middleware system with a genuine access token, the request can be made through a smart ingress and egress proxy which intercepts the request and replaces the genuine access token with an invalid access token. The middleware system can subsequently make authorized requests to downstream systems on behalf of the middleware system's client by treating the smart proxy as an egress proxy for those subsequent requests, and the smart proxy replaces the invalid access token with a genuine one.

Approaches for securing middleware data access

Systems and methods are provided for determining an access request provided by an application that seeks to interact with one or more backend systems through a computing system. One or more predefined restrictions can be enforced on the application, the computing system, or the one or more backend systems.

Approaches for managing restrictions for middleware applications

A method, performed by processors, includes providing code representing a plurality of data processing elements of an executable data transformer, the data processing elements being configured to receive datasets and to produce transformed datasets. The method may include executing a sub-portion of the code up to an inserted breakpoint and displaying a result of the executed code sub-portion up to the breakpoint on datasets in an analysis window, receiving test code in a console window and executing the test code to apply a transformation on the data sets transformed by the code sub-portion up to the breakpoint to generate an updated result of a test transformation in the analysis window, and/or inserting the test code received in the console window to the code of the data transformer, responsive to user selection, the test code being inserted after the breakpoint.

Growing community of inventors

New York, NY, United States of America

James Ding