International Business Machines Corporation

Calvin Stacy Powers

Martin J Presler-Marshall

Martin Oberhofer

Sushain Pandit

Ivan Matthew Milman

David Gerard Kuehr-McLaren

Wayne Francis Tackabury

John H Walczyk, Iii

Timothy G Shoriak

Manish Anand Bhide

Jan Leonard Camenisch

Mark Charles Davis

Mukesh Kumar Mohania

Sachindra Joshi

Xuan Liu

Ajay Gupta

Rema Ananthanarayanan

Matthias Schunter

Michael Waidner

Edith Gail Schonberg

Kathryn Ann Bohrer

Charles Campbell Palmer

Arthur Miles Gilbert

Elsie A Van Herreweghen

Steven B Adler

Nigel Howard Julian Brown

Dogan Kesdogan

Adam Charles Nelson

Michael Schnyder

Endre Felix Bangerter

Michael Robert McCullough

Matthew P Leonard

A computer-implemented method for the placing of information assets, including: discovering information about a new or changed information asset; determining one or more characteristics of an ideal location for the information asset; determining one or more characteristics of one or more locations in an information technology environment; determining the compatibility of the information asset with the location(s) by comparing the characteristic(s) of the ideal location to the characteristic(s) of the actual location(s); reporting the compatibility to a user; and optionally suggesting alternative placement locations. The locations may be part of one or more locational schemas.

Information asset placer

Gap analysis is performed on security capabilities of a computer system compared to a desired or targeted security model according to one or more security requirement by providing a data structure of security capabilities of a computer system under analysis, wherein each capability is classified in a formal security capability reference model with a mean having a set of attributes and a goal; determining the security capabilities of the deployed system-under-analysis; matching the security capabilities of the deployed system-under-analysis with the security capabilities defined in the data structure; determining one or more gaps in security capabilities between the deployed system and a security reference model goal; and displaying the gaps to a user in a report.

Security capability reference model for goal-based gap analysis

Parties involved in transacting business in an E-marketplace (E-marketplace participants) each identify and submit to the E-marketplace their P3P policy and/or other relevant characteristics related to their privacy policy needs (those that they adhere to, referred to as 'privacy policies'; those that they require, referred to as 'privacy preferences', or both). Submitted with the privacy policy is a digital signature that is tied to the owner of the web objects to which the privacy policy pertains. Using a digital signature assures the integrity of the privacy policy since it travels with the privacy policy and thus refers back to the original sender of the policy rather than the middleman (the E-marketplace), and if the document (the privacy policy) to which it is attached has been tampered with, the digital signature will be invalidated.

Method, system, and computer program product for digital verification of collected privacy policies in electronic transactions

Methods, systems and computer program products for automatically enforcing obligations in accordance with a data-handling policy are disclosed. Requests by users for accessing data stored in a data repository are intercepted. A determination is made whether any obligations apply to each data item requested in accordance with the data handling policy. The determination may relate to whether rules having associated obligations identified in the data-handling policy apply to data items requested by a user. The obligations are automatically executed at an appropriate time after access of the data. Association of a data item requested by the user with an obligation may be recorded and tracked to determine the appropriate time for executing the obligation.

Automatic enforcement of obligations according to a data-handling policy

A system for automatically managing information privacy includes an input system for receiving a request that includes a call for information in a bean and a purpose for the call, which indicates a manner an information requestor intends to use the information, wherein the call is to a method within the bean referencing at least one privacy control rule, which governs access and/or use of the information, that is packaged with the bean, the privacy control rule being additional to the information and methods of the bean and being packaged as an element of a deployment descriptor; and a privacy control system for automatically determining whether the request should be granted by comparing the purpose to the at least one privacy control rule to determine whether the purpose is valid, wherein the request is granted if the purpose complies with the at least one privacy control rule.

System and program product for automatically managing information privacy

In a computer, a first set of object classes are provided representing active entities in an information-handling process and a second set of object classes are provided representing data and rules in the information-handling process. At least one object class has rules associated with data. The above-mentioned objects are used in constructing a model of an information-handling process, and to provide an output that identifies at least one way in which the information-handling process could be improved. One aspect is a method for handling personally identifiable information. Another aspect is a system for executing the method of the present invention. A third aspect is as a set of instructions on a computer-usable medium, or resident in a computer system, for executing the method of the present invention.

Using an object model to improve handling of personally identifiable information

A request including a call for the information in a bean and a purpose for the call is received. Upon receipt, the purpose is compared to a privacy control policy that is packaged with the bean. If the purpose complies with the privacy control policy, the requested access and/or use of the information is permitted.

Method for automatically managing information privacy

Parties involved in transacting business in an E-marketplace (E-marketplace participants) each identify and submit to the E-marketplace relevant characteristics related to their privacy policy needs. When it is determined that two or more participants are collaborating in a transaction (e.g., a supplier and a shipper; two suppliers; three buyers), the privacy policies of the collaborative group are aggregated to produce a single policy that represents the primary policies of the collaborative transaction being presented by the collaborative group.

Method, system and computer program product for identifying and implementing collected privacy policies as aggregate privacy policies in electronic transactions

Systems, methods and computer program products for two-party key authentication provide additional security against intruders that might gain access to the password database of a server. The client verifies his clear password over an encrypted channel, rather than merely verifying the encrypted password, prior to receiving secure traffic.

Systems, methods and computer program products that use an encrypted

Growing community of inventors

Chapel Hill, NC, United States of America

Calvin Stacy Powers