International Business Machines Corporation

Carlos Eduardo Seo

Juscelino Candido De Lima Junior

Breno H Leitao

Gabriel M Kozma

Lucas Goncalves Franco

Leonardo Rangel Augusto

Antonio Joao Schwartz Soares

Camilla Da Graca Portes Ogurtsova

Rodrigo Ceron Ferreira De Castro

Juscelino C Candido De Lima, Jr

Luis Gustavo P Machado

Jose Gilberto Biondo, Jr

Virtual memory address space is divided according to areas of the virtual memory address and allocating some areas to low-cost volatile memory (such as RAM) when the memory areas are not required by an application to be stored in non-volatile memory, such as NVDIMM. A loader mechanism creates and maintains a layout address table in non-volatile memory for recovery from an unexpected reset.

Split virtual memory address loading mechanism

A technique for mitigating against return-oriented programming (ROP) attacks that occur during execution of an application includes receiving source code to compile into an executable application. During a compilation of the source code, one or more functions within the source code that are associated with gadgets in an ROP attack are determined, each of the one or more functions is assigned to one or more protected pages of memory for the executable application, and a tag is assigned to each of the one or more functions. The tag for each function maps to the protected page of memory to which the function is assigned.

Enhancing memory safe programming using a page frame tag mechanism

A service request for an automobile is detected. The service request includes a service version number. A first integrated circuit of the automobile is verified. The verification of the first integrated circuit is in response to detecting the service request. A component version number of the first integrated circuit is determined in response to verifying the first integrated circuit. The service version number is compared to the component version number of the first integrated circuit. The comparison is based on the determining the component version number. A service operation regarding the automobile is performed. The service operation is performed based on the comparing the service version number to the component version number.

Physical modification of circuits for automotive security

Embodiments of the present invention provide a computer system, a computer program product, and a method that comprises identifying at least a first physical sensor and a second physical sensor within a computing device, wherein each physical sensor is associated with a respective count; performing a predetermined operation within the computing device; authenticating the received command of at least the first physical sensor and the second physical sensor identified within the computing device; and automatically halting the operation of the computing device.

Securing external communication ports in automated teller machines

Memory management that includes allocating physical memory having an append-only permission associated therewith to requesting user space applications is described. If a page frame is append-only, then data written to the page frame cannot be overwritten. Rather, any new data written to an append-only page frame must be written beginning at the next available write location within the page frame. An MMU determines whether a write request is requesting an append-only page frame, in which case, the MMU reserves the append-only page frame for the write request and consults a corresponding entry in a page table append to determine whether an offset associated with the write request is larger than a stored value in the entry that indicates the next available write location in the page frame. If so, the write request is executed and the data is written to the page frame beginning at the next available write location.

Page frame security

Managing file transfers is provided. In response to receiving a request from a user of a first mainframe to transfer a data file to a second mainframe using a file transfer protocol, the request is intercepted to perform a comparison of the request with data maintained in a file transfer matrix of predetermined criteria that includes a set of policies. In response to determining that a match exists between the request and the data maintained in the file transfer matrix based on the comparison, the request is identified as eligible for an object storage file transfer protocol. An object storage file transfer is initiated by pausing processing of the file transfer protocol. Copy and dump of the data file on a cloud object-based storage system is executed using the object storage file transfer protocol. The request is replaced with a dummy request.

Dynamically performing managed file transfer based on policies

Embodiments are disclosed for managing a non-volatile dual in-line memory module (NVDIMM) storage system. The techniques include loading an executable to a volatile random access memory. The techniques also include in response to a store operation attempted by the executable, determining that a target address of the store operation is not mapped from an address in the random access memory to an address in an NVDIMM. The techniques further include mapping the target address from the address in the volatile random access memory to the address in the NVDIMM. Additionally, the techniques include performing the store operation in the address in the NVDIMM based on the mapping.

Non-volatile dual in-line memory module storage

A computer-implemented method includes identifying two or more user devices. Each of the two or more user devices are configured to receive push notifications. The method includes receiving a push notification request from a push notification server. The method responds to receiving the push notification request from the push notification server by determining whether at least one of the two or more user devices is active. The method responds to at least one of the two or more user devices being active by marking the active user devices as being an active user device. The method includes generating a push notification based on the push notification request. The method includes sending the push notification to the active user device.

Generating push notifications

A computer-implemented method, a computer program product, and a computer system for journaling on an appendable non-volatile memory module. A kernel receives a request for a write operation of a file on a disk. The kernel instructs a memory management unit to perform an access control list verification. The memory management unit determines whether a user associated with the write operation is permitted to write a filesystem journal onto a non-volatile dual in-line memory module, by performing the access control list verification. The memory management unit writes the filesystem journal onto the non-volatile dual in-line memory module, in response to that the user associated with the write operation is permitted to write the filesystem journal. The kernel writes the file onto the disk.

Journaling on an appendable non-volatile memory module

Multifactor authentication is a method to secure data and accounts and to prevent unauthorized access. A first factor can be information that the user knows, such as a username and password combination. A second factor can be something that the user possesses, such as a token generator or a trusted device. The present invention enables a user to present multiple authentication factors through a single biometric input using stored credentials and tokens generated by a secure element.

Single-input multifactor authentication

An HVAC system includes a grid of intersecting ducts having one or more inlets, outlets, and intersections. Air may be received into the inlets and directed through the outlets into one or more zones of a building. One or more HVAC units may be connected to the inlets and mechanical valves may be located at the intersections to control the air flow through the grid. A control system may be provided to control the temperature of each zone by adjusting the mechanical valves (and/or turning selected HVAC units 'on' or 'off'). In certain embodiments, the HVAC system includes at least one reading device to read temperature preference information associated with an occupant of a zone. The control system may then align the temperature of the zone with the temperature preference information when the occupant is inside the zone. A corresponding method and apparatus are also disclosed herein.

Intelligent grid-based HVAC system

The present invention can increase the odds of choosing the right people for a team by considering their 'rate of interest/knowledge' in multiple topics. Given a known contacts network, represented by nodes interconnected by links, several different sub-networks are identified within it, corresponding to different topics or areas of expertise required to a specific project. For each sub-network, there will be nodes with an associated grade, based on that person's knowledge/interest for the topic related to that sub-network. As such, each node/person receives a grade for each topic. Using these grades, a weight of each link between the nodes is calculated. This process is performed for every node for each topic and associated grade. After that, a superposition of all sub-networks is made and a multiple interest network is yielded.

Growing community of inventors

Sao Paulo, Brazil

Carlos Eduardo Seo