International Business Machines Corporation

Globalfoundries Inc.

Andreas Schade

Reto Josef Hermann

Thomas Gschwind

Carl Binding

Michael Baentsch

Dirk Husemann

Francois Bernard Dolivo

Richard J Cardone

William F Trautman

Paolo Scotton

Michael Moser

Daniela Bourges-Waldegg

Tamar Eilam

John G Rooney

Michael Elton Nidd

Peter Buhler

Luis Garcés-Erice

Guenter Karjoth

Florian Rosenberg

James F Riordan

Stefan G Hild

David Clerc

Christoph Adrian Miksovic Czasch

Christian Hoertnagl

Reto Hermann

Christian Hörtnagl

Katsiaryna Mirylenka

Kjell Beisland

Mike Nidd

A given query entity of a query database and a set of reference entities from a master database are accessed; each entity accessed corresponds to an entry in a respective database, which is mapped to a set of words that are decomposed into tokens. For each reference entity, a closest token is identified therein for each token of the given query entity, via a given string metric. A number of closest tokens are thus respectively associated with highest scores of similarity between tokens of the query entity and tokens of each reference entity. An entity similarity score is computed based on said highest scores. A reference entity of the master database is identified, which is closest to said given query entity, based on the entity similarity score. Records of the given query entity are linked to records of the master database, based on the closest reference entity identified.

Similarity matching systems and methods for record linkage

A computer to boot from a user trusted device, the user trusted device comprising a connection interface enabling connection with said computer, the method comprising: enabling said computer to start booting from the user trusted device upon connection of the user trusted device with said computer via said connection interface; instructing a processor of the computer to execute virtualization sensitive code and issue completion data upon completion of execution, which completion data depends on the virtualization sensitive code and its execution by the processor; determining, based on said completion data, whether the execution was not performed in a virtualized environment; and enabling said computer to complete booting from the user trusted device upon determining that the execution was not performed in a virtualized environment. The invention is further directed to a user trusted device enabling this method and to related systems.

User trusted device for detecting a virtualized environment

Methods and apparatus are provided for provisioning an operating system image from a server () to an untrusted user terminal () via a data communications network (). A trusted device () such as a pocket USB device has tamper-resistant storage () containing bootloader logic, for controlling booting of a user terminal, and security data. On connection of the trusted device () to an untrusted user terminal (), the user terminal is booted via the bootloader logic on the trusted device. Under control of the bootloader logic, a connection is established to the server () via the network () and the server is authenticated using the security data on the trusted device (). An operating system boot image is received from the server () via this connection. The boot image is used to provision an operating system image from the server () to the user terminal () for execution of the operating system at the user terminal ().

Provisioning of operating systems to user terminals

The present invention is notably directed to a user trusted device (), comprising: a connection interface () enabling connection (S) with a computer (); and a persistent memory () storing modules (), which are configured, upon connection of the user trusted device () with said computer () via said connection interface (), to: enable said computer () to start booting (S, S) from the user trusted device (); map (S) firmware data to a code, the firmware data comprising program code of an initialization firmware and/or data accessible by the initialization firmware () of the computer while starting to boot; attest (S-S) trustworthiness of the code; and enable (S) said computer () to complete booting from the user trusted device () if the code is attested. The present invention is further directed to related systems and methods.

User trusted device to attest trustworthiness of initialization firmware

The present invention is notably directed to a method for enabling a computer () to boot from a user trusted device (), the user trusted device () comprising a connection interface () enabling connection (S) with said computer (), the method comprising: enabling (S) said computer () to start booting from the user trusted device () upon connection (S) of the user trusted device with said computer () via said connection interface (); instructing a processor () of the computer () to execute (S) virtualization sensitive code and issue (S) completion data upon completion of execution, which completion data depends on the virtualization sensitive code and its execution by the processor (); determining (S-S), based on said completion data, whether the execution was not performed in a virtualized environment; and enabling (S) said computer () to complete booting from the user trusted device () upon determining that the execution was not performed in a virtualized environment. The invention is further directed to a user trusted device enabling this method and to related systems.

Various embodiments monitor a distributed software system. In one embodiment, at least one monitoring policy associated with a distributed software system is selected. A policy type associated with the monitoring policy is identified. An installer is selected based on the policy type associated with the monitoring policy. Monitoring software is installed in a computing environment utilizing the installer. The monitoring software is configured to monitor the distributed software system based on the monitoring policy.

Flexible and modular load testing and monitoring of workloads

A system and method for providing a consistent view of data stored therein, which can change dynamically in an uncoordinated way, includes a client program and a snapshot server program. The snapshot server program permits one or more client programs to request snapshots of data from the snapshot server program such that the data included in or referenced by a snapshot originates from one or more host server programs and the data is accessible to the snapshot server program, but is managed independently of the snapshot server program.

Consistent snapshots of dynamic heterogeneously managed data

The present invention relates to a context-based service look up, wherein a service instance, having a scope includes at least one service instance data set having a hierarchy of levels. A service consumer data set, having a hierarchy of levels is received from a service consumer, having a situation. Comparisons are made of each service consumer data set with each service instance data set, for the same level. Dependent on results of the comparisons, it is determined whether said situation of said service consumer matches said scope of said service instance.

Method and apparatus for a context-based service look up

A computer implemented access control system, the system includes a database for storing a serialized version of an XACML permissions hierarchy. The system also includes a memory for storing an original version of the XACML permissions hierarchy, and an XACML serialization engine configured to convert the XACML permissions hierarchy into the serialized version, wherein the serialized version contains a listing of at least a portion of the predicates possible in the XACML permission hierarchy and the effect on each of the portion of the predicates.

Serialization of XACML policies

A method of acquiring tags using web search includes receiving a search query in a search engine, processing the search query and returning a list of candidate resources corresponding to the search query, determining a candidate resource out of the list of candidate resources, extracting tags from the search query, and tagging the candidate resource with the extracted tags.

Tagging system using internet search engine

A system and method for processing of markup language information, such as extensible markup language (XML) based control information is disclosed. The system comprises a compression sender entity and a decompression receiver entity. The sender entity uses its internal, binary representation derived from textual XML-based protocol header and encodes the binary representation as a tag-length-value (TLV) binary value. The TLV binary value is embedded as encoded data in a specifically marked comment, which may be detected by the receiver entity. The receiver entity builds up an internal, binary data structure based on the encoded data representing the original XML data. The system avoids the usage of string data to represent a small set of well known strings and uses a more compact binary encoding which reduces space and time to process the data.

System and method for processing of markup language information

A method for tracking a plurality of containers each joined to an electronic tracking device having routing capabilities and a WPAN-enabled radio receiver/transmitter configured to attempt to connect to a pre-configured WPAN upon being activated comprises activating the radio receiver/transmitter of each tracking device joined to a container being loaded onto a cargo vessel; receiving an indication from each tracking device that fails to connect to the WPAN; intermittently performing a network scan to locate each WPAN-connected tracking device; intermittently configuring the WPAN to include each WPAN-connected tracking device in a hybrid tree-mesh network topology; intermittently configuring routing information stored on each WPAN-connected tracking device to maintain mutual communication with each WPAN-connected tracking device and enable mutual communication between each WPAN-connected tracking device; receiving transport-related data from each WPAN-connected tracking device; transmitting the transport-related data to a control station through a LAN on the vessel; broadcasting a request to be routed between the WPAN-connected tracking devices in a depth-first traversal of the network topology that directs each WPAN-connected tracking device to enter a low-power mode when the depth-first traversal backtracks from the tracking device; and receiving an acknowledgment of the request communicated from each WPAN-connected tracking device when the tracking device enters the low-power mode.

Growing community of inventors

Langnau am Albis, Switzerland

Andreas Schade