Microstrategy, Inc.

Amazon Technologies, Inc.

Micostrategy Incorporated

Quan Jia

Siamak Ziraknejad

Liang Chen

Feng Xia

Timothy Lang

Saurabh Abhyankar

Jiao Xu

Boyu Li

Raul De Leon

Yohanes Santoso

Bing Xia

Kiran Thunga

Matthew Engskow

Methods, systems, apparatus, and computer-readable media for generating and presenting customized information cards. In some implementations, an indication of a data set is received. Data indicating a selection of an element of the data set is received. An indication of items in the data set that are associated with the selected element is received. Data is received indicating a selection of one or more of the items that are associated with the selected element of the data set. Card data defining an information card for the selected element of the data set is stored. The card definition data can indicate the selected one or more items and a reference to the data set.

Generating and presenting customized information cards

Methods, systems, and apparatus, including computer programs stored on computer-readable media, for inline and contextual delivery of content, which may include content selectively determined using private database content. In some implementations, interface data indicating text of a user interface of a electronic device is obtained. A particular term in the text of the user interface of the electronic device is determined to satisfy one or more criteria. Based on determining that the particular term satisfies the one or more criteria, the particular term is annotated to alter the appearance of the particular term in the user interface. After annotating the particular term, user interaction with the annotated term is detected and a card is provided for display in the user interface. The card can include information that corresponds to the term and that was determined using content from a private database for an organization of the user.

Inline and contextual delivery of database content

Methods, systems, and apparatus, including computer programs stored on a computer storage medium, for providing a dynamic contextual library. In some implementations, an interactive element is provided for display in a user interface. Context data that indicates a context of one or more computers is generated. Document data indicating a subset of documents from a document collection associated with a user is obtained, with the subset of documents being selected from the document collection based on the context data. After obtaining the data indicating the subset of documents, data indicating user interaction with the interactive element is received. Data identifying the subset of documents for display is provided in response to receiving the data indicating user interaction with the interactive element.

Dynamic contextual library

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based access. In some implementations, a computing device detects an attempt to access the computing device while the computing device is in a secured state. In response to detecting the attempt to access the computing device, the computing device sends a first message to a server system over a network. After sending the message, the computing device receives a second message from the server system over the network, the second message comprising authentication data for the computing device. The computing device determines that a mobile device that was previously designated as an authentication factor for accessing the computing device is located within a predetermined level of proximity of the computing device, and the computing device grants access to the computing device.

Proximity-based access

Systems and methods are provided for domain name system (DNS) resolutions in a network environment that includes multiple virtual private clouds (VPCs) attached indirectly to each other via a transit gateway that serves as a hub in a hub and spoke model. An administrator of a VPC may specify rules for resolving DNS resolution requests at the given VPC, and the rules may be taken into account by DNS resolvers at other VPCs attached to the same transit gateway based on information propagated by the transit gateway.

Domain name resolution in environment with interconnected virtual private clouds

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based access. In some implementations, an electronic device receives a first message over a network over a first communication channel. In response to receiving the first message, the electronic device increases a frequency that the electronic device scans for messages over the second communication channel. After increasing the frequency that the electronic device scans for messages over the second communication channel, the electronic device receives a second message from a secured resource over the second communication channel. The electronic device determines that the electronic device is located within a predetermined level of proximity to the secured resource, and in response, sends authentication data to the secured resource over the second communication channel.

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based device access. In some implementations, a first electronic device receives, over a wireless communication link, a message from a second electronic device in proximity to the first electronic device. The first electronic device determines that the second electronic device has been previously associated with the first electronic device as an authentication factor for accessing the first electronic device. The first electronic device receives an encrypted form of a password from the second electronic device over the wireless communication link. The first electronic device determines the password from the encrypted form of the password and provides the password to software executing on the first electronic device to enable access to the first electronic device.

Proximity-based device access

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based logical access. In some implementations, a method includes receiving, by a mobile electronic device, a request from a server system to approve a session for a logical resource accessed by a second electronic device. In response to receiving the request, the mobile electronic device, initiates communication over a wireless communication link using a radio of the mobile electronic device. The mobile electronic device receives data from the second electronic device over the wireless communication link, the received data from the second electronic device indicating a session identifier. After receiving the data from the second electronic device, the mobile electronic device provides a response to the server system that indicates approval of the session and indicates the session identifier.

Proximity-based logical access

Methods, systems, and apparatus, including computer programs encoded on a computer-readable storage medium, for automatically providing a user with access to a secured resource. In some implementations, a client device detects that a second device that has been designated as an authentication for a user is within a predetermined level of proximity to the client device. The client device sends data indicating that the second device is within the predetermined level of proximity of the client device to a server system. The client device receives data indicating an attempt to access a resource using the client device while the second device is within the predetermined level of proximity to the client device. The client device sends an authentication request to the server system. The client device receives data indicating approval of the authentication request and provides access to the resource.

Growing community of inventors

Oakton, VA, United States of America

Quan Jia