Symantec Corporation

Cisco Technology, Inc.

Mapped Inc.

Shaun P Cooley

Keith Newstadt

Bruce McCorkendale

Brian Hernacki

Jose De Castro

Jason Koh

William E Sobel

Brian C Powell

Paul Agbabian

Charles Andrew Payne

Zulfikar Ramzan

Mark Spiegel

Andrew Biggs

Matt Miller

Sourabh Satish

Petrus Johannes Viljoen

Timothy Gorden Brown

Pieter Viljoen

Clifton J Barker

Chandrasekhar Cidambi

George Stahl

Rowan Trollope

Srinivas Chillappa

Vijay Bhaskar Perumal

Sean Whitsell

Michael W Lo

Mahesh Kamsala

Gary Zhong

Randall Richards Cook

Michael Spertus

Alfred C Hartmann

Jeffrey Wilhelm

Adam Schepis

Hua Cui

Martin Fréchette

Ian Remmel

Henry Schaup

Josephine Gibney

Laura Garcia-Manrique

Described are platforms, systems, and methods to combine counts of activity correlations over time with a link salience method to identify collections of digital devices in an automated environment to identify sub-systems comprised of portions of the overall environment. The platforms, systems, and methods detect activity in a plurality of data sources associated with an automation environment; determine correlation in the detected activity between two or more of the data sources; store records of determined correlation in the detected activity over time in a data storage system; apply a link salience algorithm to the stored records of determined correlation in the detected activity to determine a salience property; and identify one or more subsystems in the automation environment based on the salience property.

Automatic discovery of automated digital systems through link salience

Described are platforms, systems, and methods to automatically discover, extract, map, merge, and enrich data found in on-premises in automated industrial and commercial environments and cloud systems for purposes of providing developers access to normalized, merged, and enriched data through an API. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; retrieve data from at least one of the identified data sources; apply a first algorithm to map the retrieved data to a predetermined ontology; merge the mapped data into a data store comprising timeseries of the mapped data; apply a second algorithm to identify patterns in the merged data and enriching the data based on one or more identified patterns; and provide one or more APIs or one or more real-time streams to provide access to the enriched data.

Automated data integration pipeline with storage and enrichment

Described are platforms, systems, and methods to discover relationships among equipment in automated industrial or commercial environments by looking for synchrony in state changes among the equipment. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; detect one or more events or one or more state changes in the data sources; store the detected events or state changes; detect synchrony in the detected events or state changes by performing operations comprising: identifying combinatorial pairs of data sources having an event or state change within a predetermined time window; and conducting pairwise testing for each identified combinatorial pair of data sources by applying an algorithm to the stored detected events or state changes; and determine one or more relationships for at least one identified combinatorial pair of data sources.

Automatic discovery of relationships among equipment through observation over time

Described are platforms, systems, and methods to discover relationships among equipment in automated industrial or commercial environments by cycling each individual piece of equipment while observing sensors in all other equipment in order to measure how each part reacts to each other part. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; issue one or more commands to cycle a current data source in the a plurality of data sources; monitor the automation environment for events or state changes in the data sources; detect one or more events or one or more state changes in one or more other data sources in the a plurality of data sources; and determine one or more relationships between the current data source and the one or more other data sources.

Automatic discovery of relationships among equipment through automated cycling and observation

Described are platforms, systems, and methods for mapping data found in connected equipment from a manufacturer's selected schema, format, and protocol to a normalized data model. The platforms, systems, and methods identify a plurality of data sources associated with an automation environment; retrieve data from at least one of the identified data sources; generate a plurality of data source mapping profiles, each data source mapping profile specific to a particular data source configuration; maintain a data store comprising the plurality of data source mapping profiles; select a data source mapping profile specific to the at least one identified data source configuration; and apply an algorithm to map the retrieved data to a predetermined ontology based on the selected data source mapping profile for the at least one identified data source.

Data mapping based on device profiles

Described are platforms, systems, and methods to discover subtended devices through introspection of executive or supervisory controllers. The platforms, systems, and methods maintain a plurality of introspection directives, each introspection directive comprising a sequence of instructions specific to a communications protocol, the sequence of instructions comprising instructions to send at least one command to at least one controller associated with an automation environment in accordance with the communications protocol, instructions to receive a response to the at least one command, and instructions to parse the response; identify an appropriate introspection directive for the at least one controller; and execute the sequence of instructions with respect to the at least one controller to perform operations comprising: sending at least one command to at least one controller; receiving a response; and parsing the response.

Subtended device mapping through controller introspection

Described are platforms, systems, and methods for real-time enrichment of vertices, edges, and related data within a graph database. The platforms, systems, and methods maintain a graph database comprising a representation of a current state of an automation environment comprising a plurality of data sources, wherein the data sources are represented as vertices in the graph database and relationships between the individual data sources are represented as edges in the graph database; operate a plurality of software agents, each software agent configured to perform operations comprising: applying an algorithm to identify patterns in the graph database; and generating a specific data enrichment based on one or more identified patterns; and contribute the generated data enrichment back to the graph database.

Graph data enrichment

Techniques are disclosed for providing a device-based PIN authentication process used to protect encrypted data stored on a computing system, such as a tablet or mobile device. A client component and a server component each store distinct cryptographic keys needed to access encrypted data on the client. The mobile device stores a vault encryption key used to decrypt encrypted sensitive data stored on the mobile device. The vault key is encrypted using a first encryption key and stored on the mobile device. The first encryption key is itself encrypted using a second encryption key. The second encryption key is derived from the PIN value.

Device-based PIN authentication process to protect encrypted data

Techniques are presented herein for receiving a hash value of a file computed by a collaboration client prior to the collaboration client uploading the file to a collaboration server in an attempt to share the file with another collaboration client. The collaboration server may query an internal file storage system of file hashes for a hash value of a previously uploaded file that matches the hash value of the file to be uploaded. In response to the collaboration server receiving a notification that a matching hash value was not found in the file storage system, the collaboration server queries a first connector service that is in communication with a first service that has access to at least a first file storage system that is external to the collaboration server. The collaboration server queries the first connector service with the hash value of the file to be uploaded.

Instant file upload to a collaboration service by querying file storage systems that are both internal and external to the collaboration service

Techniques are provided for augmenting the capabilities of the standard OAuth2 authorization framework in such a way as to allow clients to consume the services of multiple resource servers residing in disjoint security domains while requiring only a single one-time user authentication. An access token that provides access to resource services distributed across a plurality of security domains is partitioned into a plurality of reduced-scope access tokens. Each reduced-scope access token is limited to a subset of authorization scopes of the access token, providing access to a resource service in a particular security domain based upon the subset.

Token scope reduction

A method and apparatus for using a remote delegate is described. In one embodiment, the method comprising evaluating information that identifies at least one of software packages resident in a client computer or licenses associated with the software packages using a remote delegate and enabling use of a resource at the client computer based on the information through use of the remote delegate.

Method and apparatus for remotely managing a resource at a computer

A system and method for achieving authorization in confidential group communications in terms of an ordered list of data blocks representing a tamper-resistant chronological account of group membership updates. This method permits ad-hoc and decentralized group definition, dynamic and decentralized membership updates, open sharing, tamper resistance, and tracking of membership history. There are many applications of these techniques. One such application is enabling end-to-end encryption of instant messaging, content sharing, and streamed media.

Group membership block chain

A portable hardware device such as a USB memory stick is used to provide parental locking functionality to a computer. When the device is coupled to the computer, the computer is unlocked and allowed to operate normally. When the device is not coupled to the computer, the computer is locked, and some or all of the computing functionality is blocked. This enables parents to lock and unlock a child's computer with a 'key.' A detecting module detects the coupling and uncoupling of devices to the computer. When a device is coupled to the computer, an identifying module identifies the device by reading its unique identifier, and determining whether the coupled device is the one being used as the key. If so, the computer is unlocked, and allowed to operate. If not, a blocking module blocks at least some capabilities of the computer.

Commodity hardware based parental control device

An end-to-end secure cloud-hosted collaboration service is provided with a hybrid cloud/on-premise index and search capability. This approach includes on-premise indexing and search handling, while relying on the cloud for persistent storage and search of the index. The on-premise indexer receives a copy of an encrypted message from the cloud-hosted collaboration service. The encrypted message has been encrypted with a conversation key. The indexer receives the conversation key from an on-premise key management service, and decrypts the encrypted message with the conversation key. A set of tokens are extracted from the decrypted message, and subsequently encrypted with a secret key, different than the conversation key, to generate a first set of encrypted tokens. The first set of encrypted tokens is transmitted for storage in a search index on the cloud-hosted collaboration service.

External indexing and search for a secure cloud collaboration system

Growing community of inventors

Huntington Beach, CA, United States of America

Shaun P Cooley