International Business Machines Corporation

Brad L Brech

Hubertus Franke

Chung-Sheng Li

Pratap Chandra Pattnaik

Matt Richard Hogstrom

Nagui Halim

Michael D Williams

Scott W Crowder

Radha P Ratnaparkhi

Randal Craig Swanberg

Dimitrios Pendarakis

David Bruce Lindquist

Gary Scott Delp

Jeffrey Alan Frey

Steven Leonard Roberts

Josyula R Rao

Kevin J Reilly

Balachandar Rajaraman

Rodney A Smith

Stefan Pappe

Sunil Jeevananda Kamath

Michael E Daley

Leslie Png

Alise Spence

Murthy V Devarakonda

Bret W Lehman

Albert Alfonse Slane

Stacey C Ramos

Renato John Recio

Hendrik F Hamann

Jonathan Lenchner

Yu-Cheng Hsu

Jeffrey Owen Kephart

Jonathan W Byrn

Thomas M Brey

Rajarshi Das

Dilip Dinkar Kandlur

Christopher L Molloy

Mark William Branstad

Kenneth Dale Aaker

Rafael M Montalvo

Tony A Bentivegna

There is a computer program product and computer system that includes program instructions programmed to establish a security container describing a workload and a set of resources in a software-defined environment, the security container including a set of sub-containers that are self-describing sub-containers having associated metadata describing content of a respectively corresponding sub-container, each sub-container of the set of sub-containers respectively corresponds to a resource-divisible portion of the workload, the set of resources being required by the workload, wherein a sub-container of the set of sub-containers is an operating system sub-container; monitor the workload and the set of resources for security events; and responsive to identifying a security event, adjust isolation mechanisms provided by the plurality of sub-containers at various layers of a stack. The set of sub-containers represents an end-to-end run time environment for processing the workload using the set of resources.

Security within a software-defined infrastructure

There is a computer program product and computer system that includes program instructions programmed to identify, in a software-defined environment, a security container describing a workload and a set of resources required by the workload, the security container including self-describing sub-containers having associated metadata describing content of a respectively corresponding sub-container; determine, for the workload, a set of resource-divisible portions of the workload including a compute-resource portion; generate a plurality of sub-containers within the security container, a sub-container within the plurality of sub-containers being a self-describing sub-container having associated metadata describing the content of the sub-container representing only one resource-divisible portion, the sub-container being an operating system sub-container; and responsive to identifying a security event while processing the workload, adjust a security mechanism associated with the security container. The plurality of sub-containers represents an end-to-end run time environment for processing the workload.

Outcome-based adjustment of a software-defined environment (SDE) includes determining a business operation and a corresponding set of tasks to be performed in a software defined environment (SDE), establishing a first resource configuration to perform the corresponding set of tasks to achieve a business outcome target, determining a first resource cost for performing the corresponding set of tasks, assigning a priority level to tasks within the corresponding set of tasks, determining a set of performance indicators corresponding to a task having a first priority level, monitoring the SDE to identify a triggering event, responsive to identifying the triggering event, establishing a second resource configuration based, at least in part, on a performance level of a performance indicator in the set of performance indicators, the second resource configuration addressing the triggering event, and determining a second resource cost for performing the corresponding set of tasks according to the second resource configuration.

Outcome-based software-defined infrastructure

A method and system for outcome-based adjustment of a software-defined environment (SDE) that includes establishing a link between a business outcome and a first resource configuration from software defined environment, establishing a monitoring mechanism for continuously measuring a current state of the SDE, using a behavior model of the SDE to anticipate, or forecast, a triggering event, and responsive to the forecast of a triggering event, using the behavior model to determine a second resource configuration to achieve the business outcome. The link includes at least one of a utility of services for the business outcome, a cost of a set of resources consumed by the first resource configuration, and a risk of the set of resources becoming unavailable.

There is a method and system that includes establishing a security container that describes a workload and a set of resources that corresponds to the workload in a software-defined environment, determining a set of security criteria for the security container, monitoring the workload and the set of resources for security events based, at least in part, upon the set of security criteria, and responsive to identifying a security event, adjusting one or more security mechanisms. The steps of monitoring and adjusting are operated within the software-defined environment.

An electronic product can be configured by a method that includes attaching a machine-readable identification (ID) tag containing an ID code to a hardware unit of the electronic product. The ID code is associated with a particular configuration of the electronic product, and can be read or scanned with a mobile device configured to send the ID code to a provider server device. In response to receiving the ID code, the provider server device can send product configuration instructions and a product configuration application to the mobile device. The product configuration instructions can guide a user through a customized series of electronic product configuration operations. The product configuration application can assist the user in performing configuration operations, can provide customized configuration help, and can establish a wireless link between the mobile device and the electronic product, allowing the user to interact with the electronic product.

Customized electronic product configuration

There is a method and system for capability-based resource allocation in a software-defined environment that performs the following steps (not necessarily in the following order): (i) determining a set of capability characteristics for a plurality of workload resources within a software-defined environment; (ii) determining a set of workload components for a specified workload; and (iii) identifying a set of workload resources from the plurality of workload resources to allocate to the specified workload based, at least in part, on the set of capability characteristics corresponding to each workload within the set of workload resources. A workload component of the set of workload components has a unique set of workload characteristics.

Capability-based abstraction of software-defined infrastructure

Pre-caching may decrease the response time necessary for a wireless communication network to fulfill a user request. Pre-caching includes predicting what data the user will request next and preemptively fetching that data from a network (e.g., the Internet). Additionally, the wireless communication network may predict the geographic location of the mobile device when it makes the request. Instead of pre-caching the data in the memory of the mobile device, the data may be stored at a wireless access point that has a radiation pattern that covers the predicted geographic location of the mobile device. Once the wireless access point receives the request from the mobile device for the pre-cached data, the pre-cached data may be transmitted wirelessly to the mobile device, thereby avoiding having to forward the request to rest of the communication network.

Data services using location patterns and intelligent caching

Techniques are described for scheduling received tasks in a data center in a manner that accounts for operating costs of the data center. Embodiments of the invention generally include comparing cost-saving methods of scheduling a task to the operating parameters of completing a task&#x2014;e.g., a maximum amount of time allotted to complete a task. If the task can be scheduled to reduce operating costs (e.g., rescheduled to a time when power is cheaper) and still be performed within the operating parameters, then that cost-saving method is used to create a workload plan to implement the task. In another embodiment, several cost-saving methods are compared to determine the most profitable.

Optimizing energy use in a data center by workload scheduling and management

Growing community of inventors

Rochester, MN, United States of America

Brad L Brech