International Business Machines Corporation

Boas Betzler

Neil A Katz

Meng Ye

Zi Yu Zhu

Rick A Hamilton, Ii

Oliver Benke

Thomas Lumpp

Sheng Lu

Xing X Fang

Eberhard Pasch

Brian M O'Connell

Paul Edward McKenney

Jeffrey Alan Frey

Paul Brian Moody

Matthias Seul

Orran Yaakov Krieger

Tim Uwe Scheideler

Michael D Williams

Holger Karn

Dong Jun Lan

Petra Sabine Buehrer

Steffen Rost

Andreas Kuehmichel

Volker Nachtwey

Klaus-Thomas Schleicher

Vinod S Chavan

Ingo Dressler

Clifford A Pickover

Kulvir Singh Bhogal

Jenny S Li

Peter George Finn

Utz Bacher

Gang Wang

Dieter Buehler

Jeffery J Van Heuklon

Ramamohan Chennamsetty

Marc-Arthur Pierre-Louis

Suzanne Carol Deffeyes

Georg Ochs

Dietmar Kuebler

Sean Leo Dague

Ansgar Schmidt

Mark Dettinger

Werner Ederer

Thomas Brackhahn

Sandra L Kearney

Tanaz Sowdagar

Hagen R Wenzek

Bernd Beyrodt

Robert J Etkins

Holger J Macho

Christian Hendrik Lemke

Yu Hui Wu

Frank Schrode

Thang G Pham

Sophie Wrobel

Jeremy R Bauer

Methods, computer program products, and systems are presented. The methods include customer specific information exchange and an adjustment of the privacy level of this information. For this purpose an abstraction layer and an obfuscation module are introduced. Using a 'fraud vector' a risk assessment is performed on the obfuscated transaction data.

System and method for enforcing granular privacy controls during transaction fraud screening by a third party

A computer-implemented method for migrating a source container with a running application to a target container may be provided. The method includes providing a source container motion daemon being executed in the source container management system, and a target container motion daemon being executed in the target container management system, and creating a host container hosting an encapsulated container environment in the target container management system. The host container is executing a host container motion daemon and the target container. The method also includes connecting a container motion controller to the source container motion daemon, the target container motion daemon and the host container motion daemon, and copying content of a source memory of the source container to a target memory via the source container motion daemon and the host container motion daemon under control of the container motion controller.

Stateful container migration

Automated approval of a non-compliance of a modified configuration of a computer system includes performing a compliance check by a compliance management system. The modified configuration results from deploying a pre-approved modification pattern by a package management system modifying an initial configuration of the computer system. The modification pattern is provided by a software package that specifies at least one modification to be applied to the initial configuration and at least one compliance exception pre-approval specifying pre-approved non-compliances of modifications with compliance rules. Responsive to detecting a non-compliance, the non-compliance is compared with the pre-approved non-compliances. In response to determining that the detected non-compliances are not matching any pre-approved non-compliances, a compliance exception approval is requested. The detected non-compliance is approved in response to receiving the compliance exception approval for the detected non-compliances.

Automated compliance exception approval

A method and associated computing system. A first computing environment receives data that includes first sensitive data. The first computing environment includes a hypervisor, a virtual machine running on the hypervisor, and a compliance gateway coupled to the virtual machine and the hypervisor. The compliance gateway intercepts the request. The compliance gateway inspects the intercepted request, does not find sensitive data in the request from inspecting the intercepted request, and forwards the request directly to the virtual machine in response to not finding sensitive data in the request. The virtual machine receives the request from the compliance gateway and in response. The virtual machine initiates performance of an operation indicated in the request. The hypervisor determines that the performance of the request requires the first sensitive data that is sensitive, and in response the hypervisor prevents the virtual machine from completing performance of the operation, by intercepting the operation.

Protection of sensitive data from unauthorized access

The invention relates to a computer-implemented method for automated approval of a non-compliance of a modified configuration of a computer system with one or more compliance rules, the method comprising: receiving by a package management system a pre-approved modification pattern in form of a software package, deploying a modification pattern of the software package and providing compliance exception pre-approvals of the software package to a compliance management system, performing a compliance check of the resulting modified configuration of the computer system, in response to detecting a non-compliance with a compliance rule, comparing the detected non-compliance with the one or more pre-approved non-compliances, in response to a matching of the detected non-compliance with one or more of the respective pre-approved non-compliances, automatically approving the detected non-compliance by the compliance management system.

A method and associated computing system. Data received by a computing environment includes a mixture of non-sensitive data and sensitive data along with related metadata indicative of a sensitivity of the sensitive data. The computing system includes the computing environment. An operation is performed on the sensitive data in the computing environment by: (a) determining that the data used for the operation are sensitive data, (b) intercepting the operation on the sensitive data, and (c) registering newly created sensitive data, as a result of the operation, with metadata indicating one or more addresses of the sensitive data. An external access to the sensitive data in the computing environment is intercepted. A compliance firewall rule is applied to the sensitive data intended to leave the computing environment. The compliance firewall rule defines an action to be applied to the sensitive data such that the sensitive data are protected against unauthorized access.

The present invention describes a method and system for governing a physical device or application service in a real world through a virtual device in a virtual world. The physical device or application service registers at least one virtual adaptor of the physical device or application service to a virtual device broker. A user creates or composes the virtual device with the at least one virtual adaptor in the virtual device broker. The user commands to the virtual device through a user interface of the virtual device. The at least one virtual adaptor in the virtual device translates the command to a controlling signal to the physical device or application service. The controlling signal operates the physical device or application service according to the command to the virtual device.

Method and system for dynamic composing and creating 3D virtual devices

A system and method for using an encoding module in a virtual world server for: receiving scene data including a description of at least one virtual object and underlying terrain associated with the scene; organizing the description of the at least one virtual object into a first track segmented by virtual object time slots, organizing the description of the underlying terrain into a second track segmented by terrain time slots; and storing the descriptions in persistent storage as separate files where users can retrieve and render the separate files.

Getting snapshots in immersible 3D scene recording in virtual world

Techniques for training a system to identify state changes in objects in virtual worlds. Base events transmitted by a virtual world engine are observed. Statistical analysis of the observed base events is performed. Based at least in part on this statistical analysis, a computer processor determines that a group of one or more of the observed base events is correlated to a first identified higher-level event. Optionally, the determination is based in part on a frequency of occurrence of the group of base events, on generated rules, or both. A candidate higher-level event including the group of base events thus determined is stored. User input is received about the candidate higher-level event. If so specified by the received user input, the candidate higher-level event is stored as a second identified higher-level event. As a result, the system is advantageously trained to identify higher-level events which represent abstract situations.

Training with complex event processing engine to identify semantic meaning of virtual world object state changes

A system and method enabling the search for a three-dimensional virtual world object across the universe of virtual worlds by utilizing a two-step search process to first identify the object and second, to actively locate and generate a URI to all presently manifest instances of that object.

System and method for object searching in virtual worlds

Computer method and apparatus render views of a computer generated virtual world to a remote viewer. The invention method and apparatus establish an avatar of a resident user as a proxy on behalf of the remote viewer. The computer node of the resident user exports proxy avatar views of the virtual world to the remote viewer. The remote viewer computer renders the exported virtual world views without executing virtual world application programs.

Computer method and apparatus providing interactive control and remote identity through in-world proxy

Embodiments of the present invention provide a method, system and computer program product for composing and managing a presentation in a virtual world. In an embodiment of the invention, a method for composing and managing a presentation in a virtual world can include arranging a set of slides in a presentation, selecting a location in a portion of a virtual world for displaying the slides and also for attendee avatars viewing the slides, composing movements and gestures of a presenter avatar in coordination with a display of slide content of the slides, and presenting the presentation in the location of the virtual world at the location selected for displaying the slides for the attendee avatars placed the selected location for the attendee avatars while applying the composed movements and gestures of the presenter avatar coordinated with a display of slide content of the slides.

Virtual world presentation composition and management

A system for managing topologies includes a topology data datastore that stores topology information. A topology computer element interfaces with the topology data datastore to create and update a topology of resources. A subscription computer element generates notifications to a user based on at least one of the creating and the updating of the topology of resources and further based on subscription data.

Expressing manageable resource topology graphs as dynamic stateful resources

A mechanism is provided for providing compartmentalized security in product reviews. A central authoritative state module within a compartmentalized security mechanism identifies a clearance level associated with a user that has been authenticated. Responsive to the clearance level of the user being sufficient to access the information, the central authoritative state module determines whether the information requires a simulation to be executed. Responsive to the information failing to require execution of a simulation, a coordination module in the compartmentalized security mechanism retrieves the information. A display and input interaction module on a client system then displays the information in accordance with the clearance level of the user thereby forming displayed information. Displaying the information in accordance with the clearance level of the user comprises displaying in detail only portions of the information of the product that the user has access to.

Providing compartmentalized security in product reviews

Growing community of inventors

Magstadt, Germany

Boas Betzler