SECURE SIDECAR CONTAINER
    21.
    发明公开

    公开(公告)号:US20240330031A1

    公开(公告)日:2024-10-03

    申请号:US18191343

    申请日:2023-03-28

    Applicant: SAP SE

    CPC classification number: G06F9/45558 G06F8/63 G06F9/547 G06F2009/45595

    Abstract: A secure side car (SSC) manager reads development artifacts and an application configuration file. Stubs and skeletons are created for inter-process communication between a main application and one or more SSC library containers, the stubs and skeletons based on SSC configurations specified in the application configuration file. Main application code is compiled for the main application. An application container image is created for the main application and a SSC image for each of the one or more SSC library containers. An application container corresponding to the application container image and a SSC library container corresponding to each SSC image or each of the one or more SSC library containers is deployed. A service mesh proxy, which controls network access for libraries within each SSC library container, is configured.

    COORDINATED SHUTDOWN OF CLOUD COMPUTING APPLICATIONS WITH SESSION HANDOVER

    公开(公告)号:US20240155036A1

    公开(公告)日:2024-05-09

    申请号:US17983045

    申请日:2022-11-08

    Applicant: SAP SE

    Inventor: Peter Eberlein

    CPC classification number: H04L67/148 H04L45/22 H04L67/143

    Abstract: In an implementation, a shutdown coordinator sends an instruction to a router to no longer assign new sessions to an application instance, where the application instance is to be shut down. The shutdown coordinator sends a request to the application instance to export associated sessions for handover to a new application instance. The shutdown coordinator receives an indication from the application instance that no further requests can be processed by the application instance since all associated sessions have been exported to an external session storage. The shutdown coordinator instructs the router to redirect requests to the application instance to the new application instance. The shutdown coordinator shuts down the application instance. The shutdown coordinator deletes remaining sessions of all associated sessions from the external session storage after a defined timeout period.

    ROLE MANAGEMENT SYSTEM BASED ON AN INTEGRATED ROLE RECOMMENDATION ENGINE

    公开(公告)号:US20240143798A1

    公开(公告)日:2024-05-02

    申请号:US17979423

    申请日:2022-11-02

    Applicant: SAP SE

    CPC classification number: G06F21/604 G06F2221/2113 G06F2221/2141

    Abstract: In an implementation, a request to compute a new machine-learning model for storage in a data lake is received by a role management system (RMS). A role history data is read by the RMS from a role management application and trace history data from a trace application. Metadata read from a plurality of persistencies is stored into the data lake as metadata history. The historic data and metadata history is read by a role recommendation engine (RRE) integrated into the RMS. The RRE, computes the new machine-learning model.

    Machine learning on distributed customer data while protecting privacy

    公开(公告)号:US11797879B2

    公开(公告)日:2023-10-24

    申请号:US16410076

    申请日:2019-05-13

    Applicant: SAP SE

    CPC classification number: G06N20/00 G06F12/0802 G06F2212/10

    Abstract: Computer-implemented systems and computer-implemented methods include the following. A request to train a machine-learning (ML) model is received at a training broker. Anonymized data for training the model is obtained by the training broker from each individual data source of a plurality of data sources. The anonymized data is accessed through a data science schema being provided by anonymization of sensitive information of production data from each individual data source. Access to the anonymized data is provided to a data vendor for training the ML model using the anonymized data.

    Secure calls between applications
    25.
    发明授权

    公开(公告)号:US11693945B2

    公开(公告)日:2023-07-04

    申请号:US15355379

    申请日:2016-11-18

    Applicant: SAP SE

    CPC classification number: G06F21/44 G06F16/951 G06F21/629

    Abstract: A security configuration file is received from a first application, the security configuration file including information of an authority. The first application assigns the authority to a second application to enable the second application to trigger jobs at the first application, and the second application provides shared services to a plurality of applications including the first application. A query is received from the second application and in response the authority is sent to the second application. A request for a token is received from the second application, the request including the authority. A token including the authority is sent to the second application. The second application sends the token to the first application when the second application triggers jobs at the first application.

    Correlating experience data and operations data without compromising anonymity

    公开(公告)号:US11687670B2

    公开(公告)日:2023-06-27

    申请号:US16923243

    申请日:2020-07-08

    Applicant: SAP SE

    CPC classification number: G06F21/6254 G06F17/15 G06F17/16

    Abstract: Methods, systems, and computer-readable storage media for determining an initial distribution based on a set of survey boundaries and historical O-data, the historical O-data being generated through execution of a computer-implemented service, the historical distribution including a first set of parameter ranges and a second set of parameter ranges defining a set of range cells, adjusting one or more parameters ranges of at least one of the first set of parameter ranges and the second set of parameter ranges, determining an adjusted distribution defining a range space for a computer-based survey, receiving X-data from a set of users participating in the computer-based survey, the X-data including responses of users in the set of users provided to the computer-based survey, providing a set of X-data to O-data range vector correlations, and executing analytics of the computer-implemented service based on the set of X-data to O-data range vector correlations.

    VENDOR ASSISTED CUSTOMER INDIVIDUALIZED TESTING

    公开(公告)号:US20220391305A1

    公开(公告)日:2022-12-08

    申请号:US17888937

    申请日:2022-08-16

    Applicant: SAP SE

    Abstract: In an example embodiment, first a system is provided that enables tests created by a second entity to run with first entity data and configurations. A test module is able to assess test results with dynamic input (e.g., rule-based assessments). Second, a system is provided to run and test these test modules on the first entity system with first entity configuration and let the first entity define the test input and interpret the test results. This is not performed on all available tests, but only on the tests that are related to the change to be implemented.

    Sensitivity in supervised machine learning with experience data

    公开(公告)号:US11481676B2

    公开(公告)日:2022-10-25

    申请号:US16552088

    申请日:2019-08-27

    Applicant: SAP SE

    Abstract: In an example embodiment, a process is introduced into a machine learned model where additional results are output by the machine learned model in addition to those results that would be obtained through use of the trained model itself. In some example embodiments, these additional results may be random or semi-random to introduce results that might otherwise not have been recommended by the machine learned model. By introducing such additional results in a controlled way, it becomes possible to reduce biases caused by a self-reinforcing feedback loop while still presenting users with accurate machine learned model results.

    SELECTIVE RECOMMENDATION AND DEPLOYMENT OF EXTENSIONS IN LOW-CODE APPROACH

    公开(公告)号:US20220335031A1

    公开(公告)日:2022-10-20

    申请号:US17231076

    申请日:2021-04-15

    Applicant: SAP SE

    Abstract: Implementations include querying metadata of data objects to define a sub-set of data objects, each data object in the sub-set of data objects including a generic text field and/or an attachment field, and, for each data object in the sub-set of data objects, processing historical data of a data object to identify a set of data types, the historical data stored within a field of a table of a database system, providing a recommendation for a first extension corresponding to a first data type, and receiving user input indicating acceptance of the recommendation for the first extension and, in response, automatically providing extension code that is executable to add a field extension to the table and to modify a UI of an application for input of values corresponding to the first data type, and executing the extension code to deploy the extension and to modify the UI.

    Co-locating microservice persistence containers within tenant-specific database

    公开(公告)号:US11409719B2

    公开(公告)日:2022-08-09

    申请号:US15661849

    申请日:2017-07-27

    Applicant: SAP SE

    Inventor: Peter Eberlein

    Abstract: A platform's central instance manager (IM) receives microservice requests issued to a common application shared between various tenants. Embodiments function to co-locate within a same database, the persistence containers of different microservice instances of a specific tenant. The central IM associates a corresponding tenant identifier with microservice request instances created. Referencing this assigned tenant identifier, the central IM maintains an external configuration file comprising a mapping of services (m) and tenants (n), to relevant persistence container service instances. Such mapping permits the allocation of tenant-specific microservice data for storage within persistence containers of a particular database. This co-location of data promotes flexibility, allowing tenants to furnish database structures tailored to their individual needs. Consolidating microservice persistence containers within a tenant-specific database may also facilitate: the efficient backup of data, the isolation of individual tenant data for security purposes, and/or the provision of access to individual tenant data by extension application(s).

Patent Agency Ranking