International Business Machines Corporation

Carolyn A Brodie

Peter Kenneth Malkin

John Karat

Nigel Brown

Clare Marie Karat

Clare-Marie Karat

Seraphin Bernard Calo

Charles Philippe Tresser

Maroun Touma

David Alson George

Mandis S Beigi

Joel Wolf, Legal Representative

Method and system of providing an association between a system's meta-tagged data objects and a list of terms, the association indicating which objects are and are not covered by a given policy, in one aspect, may comprise obtaining a list of terms and a policy that includes one or more of the terms; identifying a plurality of meta-tags used in a system; developing one or more mappings between the terms and the meta-tags; identifying system data objects in the system having one or more meta-tags; creating for each meta-tag of each system data object identified, an association between the system data object and the one or more terms to which the meta-tag is mapped, the association indicating whether the system data object is or is not covered by the policy.

Privacy ontology for identifying and classifying personally identifiable information and a related GUI

A system and method for determining policy coverage and generating a suggested policy for gaps in the policy coverage includes determining policy coverage for one or more policies in a policy coverage space and determining regions uncovered by the policy coverage in the policy coverage space. Suggested policies are generated to cover the regions uncovered by the policy coverage. The policy coverage is supplemented with the suggested polices to complete coverage of a policy set.

System and method for automatically generating suggested entries for policy sets with incomplete coverage

A method and system enable a user to develop domain-specific policy workbench. Domains may include, but are not limited to security, autonomic computing, workload management and systems management. The method and system in one aspect determines syntax of a policy in a selected domain and creates an instance of policy workbench specific to the selected domain. In one aspect, the instance of policy workbench includes at least machine-readable encodings of the selected policy and associated mapping. The instance of policy workbench also includes a compliance auditing tool enabled to check events logged at a target system against the selected policy and associated mapping to determine if one or more policy rules have been complied with. In another aspect, domain-specific policy workbench creation machine is provided that automatically creates an instance of domain-specific policy workbench.

Extending the sparcle privacy policy workbench methods to other policy domains

A system, method, service method, and program product for defining and/or managing entitlements and/or authentication entitlements to resources in a computer networking environment is disclosed. Upon receiving one or more dynamic events, the invention verifies one or more users (a selected user) has (entitlement) attributes that satisfy one or more access criteria to access one or more resources. The invention then permits and/or provides access to one or more resources for the selected user over one or more networks without revealing the identity of the selected user to the resource provider.

System, method, service method, and program product for managing entitlement with identity and privacy applications for electronic commerce

Growing community of inventors

Briarcliff, NY, United States of America

Carolyn A Brodie