Sap Se

Sap Ag

Robert Lorch

Frederik Thormaehlen

Paul El Khoury

Volker Wiechers

Patrick Zimmer

Frank Mock

Gabor Faludi

Robert Foldvari

Ruth Groene

Volker Stiehl

Martin Czekalla

Peter Csontos

Marton Pinter

Pia Kinkel

Bela Tolvaj

Gergely Pap

Csaba Hegedus

Sebastian Speck

Berhard Fuhge

Disclosed herein are system, method, and computer program product embodiments for performing threat detection on a monitored system. The monitored system may periodically send artifacts (e.g., database records, binaries, program code, business data) to a repository for storage and creation of a snapshot. This repository is typically held in a cloud-based system. The cloud-based system can compare a snapshot of the artifacts against prior snapshots, and generate a change log. This change log can then be provided to a threat detection system for analysis. By this approach, an intrusion can potentially be detected even when system logs cannot be trusted, due to tampering or other inaccuracies.

Threat detection using artifact change analysis

The disclosure relates to a telecommunication method for authenticating a user with respect to a computer system, the computer system comprising an authentication system including a user interface and an interface for connecting the computer system to a digital, cellular telecommunication network, the authentication being carried out by way of a mobile telecommunication terminal, the mobile telecommunication terminal comprising an interface for the communication network, the computer system comprising a memory in which a communication address for the telecommunication terminal is stored, comprises: the user identifies himself or herself with respect to the authentication system of the computer system by entering login information via the user interface; after successful identification of the user on the authentication system, the authentication system accesses the communication address stored in the memory and transmits an activation request via the communication network to the mobile telecommunication terminal; the mobile telecommunication terminal automatically ascertains at least one piece of information that is required for activating the computer system for the user by way of a program that is stored on the mobile telecommunication terminal and/or by way of an interface of the mobile telecommunication terminal; the mobile telecommunication terminal automatically checks whether the ascertained information meets at least one predefined criterion that is stored on the mobile telecommunication terminal; the mobile telecommunication terminal transmits activation information for the user on the computer system via the communication network to the authentication system if the ascertained information meets the stored criterion; upon receipt of the activation information, the authentication system issues an authentication signal indicating the authentication of the user to the computer system. The disclosure further relates to a system for carrying out such a method.

Telecommunication method for authenticating a user

An encryption manager may encrypt mobile data associated with a mobile application executing on a mobile device, where the mobile application is configured to interact with a remote application executing on a remote server, and the mobile data is encrypted using a mobile password. A mobile password recovery manager may encrypt the mobile password, using a remote password used to access the remote application executing on the remote server, and may recover the mobile data, in case of loss of the mobile password, including decrypting the encrypted mobile password using the remote password.

Password recovering for mobile applications

A hardware security agent may include a request inspector configured to receive an alias at the hardware security agent by way of a network interface of an untrusted computer, and a mapper configured to map the alias to corresponding protected data stored within the hardware security agent. The hardware security agent may further include a substitution manager configured to provide the corresponding protected data from the hardware security agent over a network to a target network site.

Hardware security agent for network communications

According to some embodiments, a selection of a pre-determined user interface element type from a plurality of potential types is received from a user. An input rating value to be associated with a user interface element of the selected type may be received from the designer. The user interface element may, for example, receive data content in a graphical user interface. A pre-determined condition to be associated with the user interface element may also be received from the design. A user interface element may then be created to receive data content in the graphical user interface. According to some embodiments, it may be automatically determined if data content received from a user via the user interface element satisfies the pre-determined condition. Based on the determination, the input rating value may be automatically applied to a user input rating score associated with the graphical user interface.

User interface element for data rating and validation

A computer-implemented system and method for implementing a value help search that includes receiving a value help search criteria from a user and sending the value help requests to multiple backend systems using a server computer system in a service oriented architecture system. Sending the value help search criteria may include a specific search help name to one of the multiple backend systems. The value help search service receives both metadata and result data from said one of the multiple backend systems. The metadata describes the structure of a search results. The value help search service may generate a search result table from the result data received from the backend system.

Value help search system and method

Systems and methods are provided for enabling communication between a composite system providing additional functionality not contained in existing legacy systems and other existing systems using different commands, variables, protocols, methods, or instructions, when data may be located on more than one system. In an embodiment, multiple software layers are used to independently manage different aspects of an application. A business logic layer may be used in an embodiment to facilitate reading/writing operations on data that may be stored locally and/or on external systems using different commands, variables, protocols, methods, or instructions. A backend abstraction layer may be used in an embodiment in conjunction with the business logic layer to facilitate communication with the external systems. A user interface layer may be used in an embodiment to manage a user interface, a portal layer to manage a user context, and a process logic layer to manage a workflow.

Composite system to integrate process systems using secondarily created process objects for local database operations and inter process system communications

Growing community of inventors

Bad Schönborn, Germany

Robert Lorch