International Business Machines Corporation

Carole Rhoads Corley

Janani Janakiraman

Lorin Evan Ullman

Cristi Nesbitt Ullmann

Xiping Wang

Jorge Lobo

Mark Wallace Johnson

Lorraine Phyllis Vassberg

Brian Chow

Lorin Evan Ullmann

A computer-implemented method, a computer system and a computer program product secure access to a restricted area. The method includes capturing, by a camera, a first image of a face of a first person and a second image of a face of a second person. The method also includes determining whether the face of the first person is included in a database of persons authorized to access the restricted area. The method further includes determining whether the second person is in proximity to the first person. In addition, the method includes determining whether the second person is authorized to access the restricted area. Finally, the method includes transmitting a signal that the second person is authorized to access the restricted area in response to determining that the second person is in proximity to the first person and the second person is authorized to access the restricted area.

Securing access to restricted areas from visitors

A method and apparatus for determining time-varying thresholds for measured metrics are provided. With the method and apparatus, values of a given metric are captured over time. The behavior of the metric is analyzed to determine its seasonality. Correlated historical values of the metric and additional related metrics (cross-correlation) are used as inputs to a feed-forward back propagation neural network, in order to train the network to generalize the behavior of the metric. From this generalized behavior, point-by-point threshold values are calculated. The metric is monitored and the monitored values are compared with the threshold values to determine if the metric has violated its normal time-varying behavior. If so, an event is generated to notify an administrator of the error condition.

Determining time varying thresholds for monitored metrics

Methods and apparatus for providing role-based access control of a resource by a subject in an access control system are provided. The system comprises one or more roles capable of association with one or more subjects, and a plurality of permission sets. One or more of the plurality of permission sets are associated with each of the one or more roles. The system further comprises a plurality of resources. One or more of the plurality of resources are associated with each of the one or more permission sets, and each of the plurality of resources is associated with a set of one or more subjects. A given subject in a set of one or more subjects for a given resource and having a role-permission association with the given resource is provided access control of the given resource.

Methods and apparatus for scoped role-based access control

A method, system, apparatus, or computer program product is presented for securing computational resources in a data processing system. A first user uses a first computational device, and a user security level is associated with the first user. Likewise, a second user uses a second computational device, and a user security level is associated with the second user. The computational resources on the first computational device are automatically reconfigured based on the second user security level of the second user. A computational security level may be assigned to a computational resource on the first computational device, and the computational security level is dynamically adjusted in response to detected network activity by the second computational device that is being used by the second user. Modified security-related parameters for reconfiguring computational resources on the first computational device are reconfigured based on the adjusted computational security level.

Growing community of inventors

Cedar Park, TX, United States of America

Carole Rhoads Corley