International Business Machines Corporation

Bryan Daniel Osenbach

Christopher Michael Bosko

Alan Byrne

Paul Connolly

David Mark Ogle

Jeffrey B Sloyer

Chelsea Christine Beerse

Jeffrey S Sloyer

Michael L Wiles

A system, method and computer program product obtains user data relating to a plurality of system users, who have previously been granted access to a resource in a context without complying with a ruleset defining criteria for automatically accessing the resource in the context. A combination of two or more user data properties having common values in user data of a subset of two or more of the plurality of system users is identified. A determination of whether the number of system users in the subset exceeds a predetermined threshold is made. If the number of system users in the subset exceeds the predetermined threshold, the ruleset is updated to include criteria based on the identified combination of two or more user data properties.

Dynamically changing access rules for context-sensitive access control

The method includes receiving, by one or more computer processors, data that includes at least one of audio data, video data, and optical data. The method further includes identifying, by one or more computer processors, keywords from the received data. The method further includes generating, by one or more computer processes, Internet search terms based upon the identified keywords. In some embodiments, the method further includes searching the Internet based upon the generated Internet search terms.

System for suggesting search terms

The present invention provides a computer implemented method, a system, and a computer program product of monitoring service policy management. In an exemplary embodiment, the computer implemented method, the system, and the computer program product include (1) receiving, by a computer system, a user-id when a new user logs onto a target network, (2) in response to the receiving, fetching, by the computer system, a rule associated with the new user, and (3) replacing, by the computer system, an active rule in a network monitoring service with the fetched rule such that the network monitoring service is configured to use the fetched rule, instead of the replaced active rule, for monitoring network events and creating an alert.

Monitoring service policy management

Multi-tenant and single-tenant methodologies are blended into a single solution to provide cost savings of multi-tenancy along with data security and privacy of a single-tenant environment. The cloud infrastructure is partitioned to include a first set of servers, and a second set of servers. The first set of servers are dedicated to a first operation, such as data presentation, while the second set of servers are dedicated to a second operation, such as data processing. The first set is operated in a multi-tenant operating mode, while the second set is operated in a single-tenant operating mode. Thus, the first set is available for general use, presenting data from any of the server(s) in the second set. The second set, in contrast, is dedicated to individual tenants. Preferably, each tenant has dedicated server(s) in the second set, which functions like a traditional, single-tenant environment providing inherent security and privacy guarantees.

Multi-tenant secure separation of data in a cloud-based application

An approach is provided for smart order management. Smart utensils measure consumption of a meal by a customer. The smart utensils include at least one processor to perform the measuring and a transmitter that transmits data corresponding to the measured consumption. The smart utensils transmit the measurement to a restaurant data collection device. The approach predicts, based on the measuring, a completion time of the meal by the customer and notifies restaurant staff members of the predicted completion time.

Smart order management

A terminal device associated with a participant of the multipoint session can be identified. The multipoint session can be associated with a video and an audio stream. The terminal device can be a computing device comprising of an audio and video input, and a video output. The multipoint session can be a conference associated with a telephony session. The location of the terminal device and a conferencing device can be determined. The conferencing device can be associated with an audio input and output. If the terminal device is proximate to the conferencing device, a terminal device audio stream can be terminated and a conference device audio stream can be received. A video stream and an audio stream can be simultaneously presented upon the audio and video output of the conferencing device and terminal device. The video and the audio stream can be a synchronized stream of the session.

Multipoint conference scalabilitiy for co-located participants

Multipoint conference scalability for co-located participants

Under the present invention, a method, system, and program product for providing advanced Virtual Private Network (VPN) routing that includes classifying a network transmission, between a user and a host, wherein the classification is based upon a destination port, protocol, and the like, for routing the communication either via the VPN or not via the VPN and selectively routing the network transmission based upon the classifying of the transmission.

Growing community of inventors

Cary, NC, United States of America

Bryan Daniel Osenbach