International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Arup Acharya

Ashish Kundu

Zon-Yin Shae

Xiping Wang

Dilip Dinkar Kandlur

Nilanjan Banerjee

Dinesh C Verma

Kirk Alan Beaty

Dipanjan Chakraborty

Koustuv Dasgupta

Edith H Stern

Aameek Singh

Anees Abdul Shaikh

Archan Misra

Justin Gregory Manweiler

Shachi Sharma

Puneet Jain

Charles P Wright

Renu Tewari

Rong Nickle Chang

James Edward Christensen

Rose Marie Williams

Chandrasekhar Narayanaswami

Richard Harold Boivie

Erich Miles Nahum

Vijay Krishnarao Naik

Reiner Sailer

John Michael Tracey

Raymond Byars Jennings, Iii

Debanjan Saha

Zhen Xiao

Stefan Berger

Maria Rene Ebling

Prashant Pradhan

Mandis S Beigi

Charles W Wright

William Cornejo

Piyush Sarwal

Khalil S Amiri

Sean Donnellan

Priya Mahadevan

Chetan Desai

A computer-implemented method of obfuscating communication traffic patterns may include detecting, at a first communications device, data communication sessions with a second communications device via the computer server using a network protocol. At the first device, a first traffic pattern is accessed based on the data communication sessions over a first predefined time period. At the first communications device, a second traffic pattern is accessed based on the data communication sessions over a second predefined time period that occurs after the first predefined time period. At the first communications device, based on a randomization process, a dummy data communication pattern is generated for transmission to the second communication devices, whereby the dummy data communication pattern is appended to the second traffic pattern for obfuscating a traffic pattern change between the first and the second traffic pattern at the computer server used to establish the communication sessions.

Anonymization of traffic patterns over communication networks

A computer-implemented method of obfuscating communication traffic patterns occurring over a cloud-based communication infrastructure includes detecting first data communication sessions between a first communications device a second communications device via a first computer server using a network protocol. An information content threshold value associated with the first data communication sessions is accessed. A traffic pattern based on the first data communication sessions is also accessed, whereby the traffic pattern determines communication occurrences between the first and the second communication devices over a predefined time period. An information content value associated with the accessed traffic pattern is determined. Using the network protocol, the first data communication sessions via the first computer server is re-routed to a second data communication session via a second computer server based on a detection of the information content value associated with the accessed traffic pattern exceeding the information content threshold value.

Filtering a set of social messages received in real time to yield a sub-set likely to relate to some first substantive content subject (such as a video available online). For each message in the sub-set, a respective social message sender, and a corresponding social influence value for each respective social message sender is determined. A prediction of the extent of the spread of the substantive content subject is made based on the social influence values of the social message senders.

Method for real-time viral event prediction from social data

A method for clustering images includes acquiring initial image data including a scene of interest. A 3D model is constructed of the scene of interest based on the acquired initial image data. Additional image data including the scene of interest is acquired. The additional image data is fitted to the 3D model. A line-of-sight of the additional image data is estimated based on the fitting to the 3D model. The additional image data is clustered according to the estimated line-of-sight.

Clustering crowdsourced videos by line-of-sight

A cloud access manager obtains input regarding access control for at least one application deployed on a plurality of virtual machine instances in a cloud computing environment; the virtual machine instances are divided into at least first and second access zones. A cloud access manager registrar located in the cloud computing environment registers internet protocol addresses of external clients as seen from the cloud computing environment; at least some of the addresses are assigned to the clients via network address translation (NAT). Session traversal utility for NAT (STUN) is carried out to determine public internet protocol addresses assigned to the clients via NAT. The cloud access manager controls (i) access of the external clients to the plurality of virtual machine instances; and (ii) access of the plurality of virtual machine instances to each other, based on the registered internet protocol addresses, in accordance with the access zones.

Network-level access control management for the cloud

A method and structure for a cloud service includes an API (application programming interface) as tangibly embodied in a set of computer-executable instructions and selectively executable on a computer on a network. The API provides a user interface for a cloud environment comprising one or more virtual machines to be selectively instantiated on at least one computer in the network upon a user request. A library is accessible via the API, the library providing definitions of components available to be instantiated in the cloud environment. The API automatically instantiates an image of a virtual network of components, as defined by a user input request and provides at least one cloud portal providing the user an access to exercise the instantiated virtual network image.

Method and apparatus for providing a test network as an IP accessible cloud service

Systems, methods, apparatuses and program products configured to provide a topology-service tool are described. A presence-federation solution asset is leveraged to address topology-federation problems. A network topology tool takes as input network endpoints, for example caller and callee telephone numbers, determines a network service flow used to connect the network endpoints, and develops a network topology view of the service flow along with associated network device related information.

Systems and methods for service assurance using virtualized federated presence infrastructure

Systems and associated methods for providing scalable presence subscriptions in federated presence environments are described. Embodiments provide for intelligent addition of subscriptions to a presence system. Embodiments identify if a virtualized presentity (corresponding to a new query) can be composed from existing virtualized presentities, and if so, corresponding query processing cells (QPCs) (servicing existing queries) are reused to retrieve the presence information (partially or fully) for the new incoming query. Embodiments organize the existing QPCs into a hierarchy such that a QPC/virtual presentity at a higher layer fetches presence information of all or some presentities from QPCs/virtual presentities at lower layer(s) to service the new query.

Systems and methods for creating scalable presence subscriptions in federated presence environments

Growing community of inventors

Nanuet, NY, United States of America

Arup Acharya