Emc IP Holding Company LLC

Emc Corporation

Norman M Miles

Scott E Joyce

Bruce Rabe

Timothy J Cox

Donald Labaj

Munish T Desai

Yingying Wang Martin

Dan Yuan

Peter Cheng Chen

Kendra Marchant

Sreenath Rajagopal

Rhon L Porter

Hongzhen Zhang

Nancy Welch

Pauline Chen

Scott R Akerman

Techniques are provided to implement distributed application programming interface (API) whitelisting for access control of a computing system. For example, an API gateway receives a client API request to access an application comprising a distributed microservices architecture. The API gateway initiates a whitelisting validation operation determine if the client API request is permitted. The whitelisting validation operation includes comparing an API endpoint of the client API request to a whitelist of permitted API endpoints of registered microservices of the application to determine whether the API endpoint of the client API request comprises a permitted API endpoint in the whitelist. The API gateway routes the client API request to a target microservice of the application, in response to the whitelisting validation operation determining that the client API request is permitted.

Distributed application programming interface whitelisting

Techniques are provided to implement application programming interface (API) security validation testing for system integration testing (SIT) in a continuous integration environment. For example, a SIT tool detects a change in master code associated with an application comprising a plurality of microservices and an API gateway to route client API requests to the microservices of the application. The SIT tool obtains a listing of API endpoints exposed by the microservices of the application. The SIT tool performs an automated API security test validation process to determine whether an API security test file has been created for each API endpoint in the listing of API endpoints. The SIT tool fails the API security test validation process in response to determining that an API security test file has not be created for one or more API endpoints in the listing of API endpoints.

Application programming interface security validation for system integration testing

Techniques are provided for automatically testing and verifying the functionality of push notification services of a cloud computing system. For example, a computing system performs an automated push notification test to test a push notification service of the computing system. The computing system sends a test push message over a communications network to a plurality of test devices that are located in different geolocations. The test devices are configured to automatically generate a response message in response to receiving the test push message. The computing system determines if a response message is received from each test device within a predefined response timeout period associated with the test device. The computing system determines that the push notification test fails in response to determining that a response message is not received from at least one test device within the predefined response timeout period associated with the at least one test device.

Automated testing of push notification service in cloud computing system

Described are methods, systems, and apparatus, including computer program product for selectively utilizing demonstration data based on dynamically determining feature availability on computer systems. A first request is received from a client device for computer system feature data related to a computer system feature. A second request is sent to a computer system to invoke by the computer system the computer system feature. Response computer system feature data including feature status information is received. The computer system feature data is formed based on the response computer system feature data, if the feature status information indicates that the computer system feature is available on the computer system. The computer system feature data is formed based on demonstration data, if the feature status information indicates that the computer system feature is not available on the computer system. The computer system feature data is sent to the client device.

Utilizing demonstration data based on dynamically determining feature availability

Techniques for determining a view state for a user interface element are described. A first value for a feature key associated with the user interface element is determined in accordance with feature level criteria and a current context. The first value denotes a first view state for the user interface element. A second value for a second view state for the user interface element is determined in accordance with user interface element level criteria and the current context. A final view state for the user interface element is determined in accordance with the first view state and the second view state. The user interface element is rendered in a user interface in accordance with the final view state.

Simplified feature management

Described are techniques for customizing a help system. A help system may be received providing help for a product. A proficiency level for a user may be determined in accordance with one or more proficiency criteria including one or more previous interactions of the user with any of the help system and performing an operation using a non-help feature of the product. A customized help system for the user may be determined for the user in accordance with the proficiency level for the user, wherein the customized help system is a modified version of the help system.

Adaptive help system

Described are techniques for processing a request. Data storage system configuration information is provided which is used by a simulator that simulates a data storage system configuration of a data storage system. A request is received to perform an operation with respect to the data storage system configuration being simulated. The request identifies an object included in the data storage system configuration information used to simulate the data storage system configuration. First processing is performed to simulate servicing the request using the data storage system configuration information and the first processing includes determining, at run time while processing the request, whether the object includes a first object property that is a reference to an embedded object.

Simulation mode modification management of embedded objects

Described are techniques for rendering a user interface display of an application. Inputs are provided to a mapping engine. The inputs may include environmental inputs, profiles (including customized user maps), capabilities, storage management patterns or maps, and historical data. The mapping engine determines, in accordance with the inputs, a set of operations relevant to a user that interacts with a user interface of the application at a current point in time. The set of operations may define a subset of functionality of the application customized for the user. A set of user interface elements may be rendered where the user interface elements rendered correspond to the set of operations relevant to the user.

Techniques for rendering user interface displays

Described are techniques for displaying a user interface of an application. A property file identifies a user interface element included in the user interface and specifies a first value for a first property of the user interface element. Executing the application includes: creating the user interface element having a set of properties and a default value for each property in the set; obtaining and processing the property file, setting the first property to the first value rather than the default value, wherein if the first value is not specified in the property file, the first property is set to the default value; and displaying the user interface including the user interface element in accordance with the first value.

Centralized support for application user interface elements

A method provides automatic layout of GUI screens based on contents of a response to a resource request. A display format is selected based on whether a resource in the response includes only a single data object (form display format) or an array of data objects (table display format). A specification is then created for a display object of the selected display format to be rendered on a GUI screen. For the form display format, the specification includes label:value pairs and location information specifying locations for the pairs in form columns. For the table display format, the specification includes a table definition (number of columns, column headings etc.) and row data values for the data objects of the array. Values are arranged in a display order of the resource fields in the response.

Automatic layout of graphical user interface screens from object data

A method delivers a help process customized for a particular operating environment using a help system that initially has more generic content. The method includes obtaining system-specific information about a target system. A wrapper is instantiated by invoking it with the system-specific information as invocation parameters, the wrapper providing wrapper methods for modifying help content files of the help system that initially store the more generic content. The wrapper then (1) instantiates the help system, and (2) uses the wrapper methods to modify the help content files based on the invocation parameters to include the system-specific information instead of or in addition to the more generic content. The help system subsequently uses the help content files as modified in subsequent operation. In operation, the help system reflects the system-specific information, providing desirable customized functionality while leveraging automated design tools used to generate the more generic help system content.

Custom help systems by runtime modification of generic help files

Described are techniques for processing inputs. A plurality of rules engines is provided. Each of the rules engines is written in a different programming language. Input validation processing is performed of a first set of one or more inputs by a first of the plurality of rules engines using a first portion of a set of validation rules. Input validation processing is performed for the first set of one or more inputs by a second of the plurality of rules engines using the first portion of validation rules.

Input validation techniques

A client device of a data storage system is configured to generate an aggregate object class request, or view class request, that relates to multiple objects stored by an object storage device. The aggregate object class request represents a view of the object model stored by the object storage device in a format that is specific to the perspective of the client device. In response to receiving the aggregate property file, such as from the client device, the object storage device accesses the property files associated with each of the metadata tags, retrieves the corresponding object data, and identifies the object data to the client device. With such a configuration, use of the aggregate object class request allows the client device to receive object data associated with multiple object classes with a single request or call to the object storage device.

Object building for an aggregate object class request

A computerized device filters a set of first data objects each including primitive-valued fields and object-valued fields each specifying a respective second data object as an embedded object. A filter object specifies filter criteria as a set of filter expressions. Each first data object and its respective embedded second filter objects are processed according to the filter expressions. The processing includes iterated execution of a filter expression loop, a first iteration producing a first filter test result for each primitive-valued field of the first data object and initiating a second iteration for each object-valued field of the first data object, and the second iteration producing a second filter test result for each primitive-valued field of the respective embedded second filter object. A given first data object is included in a final set of filtered objects only if both the first and second filter test results are success test results.

Iterative filter expression processing for filtering embedded data objects

A method is provided of displaying a GUI of a first dialog. The method includes, for a localizable display element of a set of localizable display elements of the first dialog, each element having an element name, (a) searching through a first chain of properties files of the first dialog for a display term mapped to by the element, (b) in response, determining that the display term is not found within the first chain, (c) in response, further searching through a second chain of properties files associated with a second dialog for the display term, the first chain being pre-configured to inherit properties from the second chain, and (d) when the display term is found within the second chain, displaying the display term found within the second chain in place of the localizable display element of the first dialog box on the GUI of the first dialog.

Growing community of inventors

Bedford, MA, United States of America

Norman M Miles