International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Andrew Russell Low

Prashanth K Nageshappa

Travis R Winter

Balbir Singh

Peter Duncan Shipton

Curtis E Hrischuk

Graeme Johnson

Angela Lin

Wei Zhang

Marcel Mitran

Hugh Edward Hockett

Rohith Kottamangalam Ashok

Roy Frank Brabson

Michael H Dawson

John Joseph Stecher

Peter Wiebe Burka

Graham Alan Chapman

Trent Gray-Donald

Saket Saurabh

Hai Hong Xu

John Duimovich

Shivasheesh

Gianni S Duimovich

Lin Sun

Aaron J Quirk

Kevin Alexander Stoodley

Malgorzata Steinder

Seetharami R Seelam

Ali Ijaz Sheikh

Daniel J Heidinga

Paolo Dettori

Michael Joseph Spreitzer

Michael S Fulton

Sean Christopher Foley

Karl Michael Taylor

Sathiskumar Palaniappan

Rohit Bahl

Torsten Teich

Charles Robert Gracie

Ashutosh Mehra

Gavin Rolleston

Kishor V Patil

Prasanna K Kalle

Henry W Adams, Iii

Patrick James Mueller

Zachary Charles Beckett Pywell

Daihee Kim

Sangwoo Ju

Theresa Louise Mammarella

Ivan Sham

Parker Lees

El Houcine Boudoukha

Francis Bogsanyl

Ryan Andrew Sciampancone

Zi Jian Lin

Dusan Boskovic

Gordon Duzhou

Troy E Fisher

James McConnell

Nathan James Roane

DNS request obfuscation includes generating decoy domain name system (DNS) requests for obfuscating DNS request activity being handled by a private DNS server for an organization, and sending the decoy DNS requests to external DNS server(s) for resolution, receiving a DNS request seeking a DNS lookup for a client device, obfuscating the DNS request by sending, to an external DNS server of the external DNS server(s), the DNS request interspersed with at least some of the generated decoy DNS requests sent to the external DNS server, receiving, from the external DNS server, a DNS response to the sent DNS request, and providing the DNS response to a source of the DNS request.

DNS request obfuscation

Techniques for privacy centric data security. A request to permit a data processor to access private data associated with a user is received at a cloud data privacy service. The request includes a request for a data access block relating to the private data, and a data filter describing one or more access parameters. The cloud privacy data service generates the first data access block, based on the private data and the data filter. The first data access block is transmitted from the cloud privacy service to a user device, which is configured to transmit the first data access block to the first data processor. The cloud data privacy service receives a request for the private data that includes the first data access block. The cloud data privacy service determines that the first data access block is valid, and grants the first data processor access to the private data.

Privacy centric data security in a cloud environment

Optimizing containerized applications includes receiving managed runtime code, creating a first container within a managed runtime environment, and executing the managed runtime code in the first container within the managed runtime environment. Responsive to a determination that the managed runtime environment has performed at least one optimization of the managed runtime code to create optimized managed runtime code during a first lifetime of the managed runtime environment, the first container is checkpointed into a first memory image to create a first checkpointed container including the optimized managed runtime code. The first checkpointed container is stored.

Checkpointing and restoring containers to optimize containerized managed runtime applications

An approach is provided in which the approach uses a scrolling agent to detect when a browser application requests a set of content from a content provider in response to the browser application receiving a request from a user. The scrolling agent issues a number of browser scroll commands to the browser application and receives sets of next content from the content provider accordingly. The approach searches the sets of next content based on a request invoked by the user and generates a set of search results that the approach provides to the user.

Infinite scrolling search

Disclosed embodiments provide systems, methods, and computer program products for associating mobile devices with identities of individuals, and tracking such individuals using the location of respective devices. Initially, a user registration process is performed to register an individual for a tracking list. A unique identifier is wirelessly detected from a mobile device in proximity to the individual. The unique identifier is added to the tracking list. The location of the mobile device within the venue is tracked using the unique identifier. When the individual exits the venue, the departure is recorded, and the unique identifier is removed from the tracking list.

Matching and tracking of individual and mobile device

Techniques are described for a system for providing expert information by verified experts in response to currently circulating assertions such as social media postings. In one example, a method includes identifying one or more authors of respective contents issued by one or more registered expert content sources as verified experts associated with tagged topics that are tagged in association with the respective contents. The method further includes detecting, in one or more media, a media content related to a topic of interest that corresponds to one or more of the tagged topics with which one or more of the verified experts are associated. The method further includes outputting the media content related to the topic of interest to a response interface made available to one or more of the verified experts associated with the one or more of the tagged topics that correspond to the topic of interest.

Management of information from verified experts

Using a metadata of a layer, a prediction factor including a level of participation of the layer in a set of container images is computed. Each container image includes a corresponding set of layers and is usable to configure a container in a container-based virtualized data processing environment. Using a set of levels of participation corresponding to a set of layers, and using a condition in a prediction algorithm, a subset of layers that have to be pre-provisioned at a node is predicted. The subset of layers is adjusted, to form an adjusted subset of layers, by looking ahead at a container requirement of a workload that is planned for processing at a future time. The adjusted subset of layers is caused to be provisioned on the node prior to the future time.

Predictive layer pre-provisioning in container-based virtualization

A method, system and computer program product for sharing class data among virtual machine applications running on one or more guests in a virtualized environment. A control program in a virtual operating system is used to manage the user portions of the virtual operating system, each commonly referred to as a guest. A guest operating system runs on each guest and applications can run on each guest operating system. A memory management facility manages shared memory which includes a class cache configured to store class data. The shared memory may be mounted onto each guest using a cluster file system or accessed via an API interface thereby allowing the class cache to be shared across the guests. By sharing the class cache among the guests, multiple copies of the same class data are no longer necessary thereby optimally using the physical memory on the host.

Sharing of class data among virtual machine applications running on guests in virtualized environment using memory management facility

Responsive to detecting a call from a first user into a call system, a user identifier associated with the first user by the call and user information associated with the user identifier can be added to respective user information stored in an e-meeting data structure associated with the call. Responsive to determining the call system recognizes the voice of the first user, the first user can be identified based on the voice of the first user. Responsive to determining that the user information associated with the user identifier contains information not related to the identified first user, the information not related to the identified first user can be removed from the e-meeting data structure. An e-meeting for the call can be generated, the e-meeting including as participants the first user and at least a second user.

Gathering information for members of call

The present invention discloses an application instance staging method and apparatus. The method comprising: obtaining a list of functional services bound to an application program; determining a buildpack corresponding to the bound functional service; and performing, by the determined buildpack, application instance staging of the application program. With the technical solution according to embodiments of the invention, an application program can be automatically extended during application instance staging, such that it can interact with the bound service.

Application instance staging

An application instance staging method comprises installing a runtime environment for an application program pushed to a cloud client; installing dependency of the application program; reading an environment variable of the application program to identify a functional service bound to the application program; modifying the application program based on the functional service bound to the application program; and packaging the modified application program, runtime environment, and dependency into an executable droplet.

Responsive to detecting a call from a first user into a call system, a user identifier associated with the first user to can be added to respective user information stored in an e-meeting data structure associated with the call. A determination can be made as to whether the call system recognizes the user identifier associated with the first user and, responsive to determining the call system does not recognize the user identifier associated with the first user, a determination can be made as to whether the call system recognizes a voice of the first user. If the call system does not recognize the voice of the first user, a location of the first user can be identified by processing the user identifier. The location of the first user can be added to respective user information stored in the e-meeting data structure. An e-meeting can be generated for the call.

A method, system and computer program product for optimizing memory usage associated with duplicate string objects in a Java virtual machine. The method comprises scanning a heap of the Java virtual machine at the end of the start-up process of the virtual machine to identify duplicate strings associated with the virtual machine, storing the identified strings in a string cache file, and determining whether a new string that needs to be created during start-up already exists in the string cache file. The duplicate strings are added to an interned strings table. A reference to a duplicate string is returned if a string to be created is already in the string cache file.

String cache file for optimizing memory usage in a Java virtual machine

Growing community of inventors

Ottawa, Canada

Andrew Russell Low