International Business Machines Corporation

Shanghai Wuqi Microelectronics Co., Ltd.

Other

Boe Technology Group Co., Ltd.

Ordos Yuansheng Optoelectronics Co., Ltd.

Da Li Liu

Qi Feng Huo

Lei Li

Yuan Wang

Yan Song Liu

Jing Xing

Yue Wang

Dong Jun Zong

Min Fang

Duo Chen

Jian F Zhang

Zhiyong Xu

Jinyi Pu

Xue Fei Duan

Xiaojing Liu

Ren Wei

Jonathan D Dunne

Qi Cheng Li

Yong Wang

Nan Zhang

Jie Liu

Yong Tian

Juan Liu

Jiang Yu

Mark E Wallace

Shu Chao Wan

Yohei Ueda

Xiong Zhao

Na Fei Yang

Dan Qing Huang

Feng Luo

Dong Ji

Ming Xia Guo

Guoliang Liu

Wei Lei

Zixiang Wu

Baojun Han

Tian Xiaoyi

Yabo Yan

Jiangjun Zhou

Suochao Fu

Xian Wu

Zhijie Tang

Xiaodong Fang

Jialin Huang

Guoqiang Zhao

Cdl Lei Li

A computer-implemented method to limit access to sensitive information by filtering log files. The method includes deploying a first pod on a node of a cloud computing system, where the first pod includes a first container configured to run an application. The method also includes generating a first log file for the first container, where the first log file includes a set of actions performed by the application for a period of time. The method further includes filtering, by a filter, the first log file wherein the filter is configured to remove a type of sensitive data from the first log file. The method includes exporting, in response to the filtering, the first log file to the node. Advantageously, this can prevent various parties from accessing sensitive data that is contained in log files.

Filtering sensitive data in cloud native application logs

Virtual machine management is provided. A virtual machine is started automatically based on a custom resource definition of the virtual machine in response to the receiving the custom resource definition of the virtual machine. A container is generated to run an application workload in the virtual machine based on a container configuration file in response to the virtual machine starting. The application workload is deployed on the container automatically based on a container image corresponding to the container. The application workload is run on the container automatically in accordance with a definition of the application workload.

Virtual machine management

A wireless audio monitoring method and a wireless audio system. The wireless audio monitoring method includes: establishing a first communication link between a primary audio device and a sound source device, so that the primary audio device acquires characteristic parameters of the sound source device; using, by the primary audio device, the characteristic parameters of the sound source device to masquerade as the sound source device and become a pseudo sound source device; establishing a second communication link between the pseudo sound source device and a secondary audio device, so that the secondary audio device acquires communication parameters of the first communication link; and monitoring, by the secondary audio device, the first communication link according to the communication parameters of the first communication link. The secondary audio device can acquire part of information in the communication parameters of the first communication link when the second communication link is established.

Wireless audio monitoring method and wireless audio system

An approach is provided for securing a secret for usage by an application utilizing a client to retrieve secrets. A request is sent from a client in a workload container within a trusted execution environment (TEE) to retrieve an encrypted secret from an application programming interface (API) server outside the TEE. The request is hooked and sent to the API server by a proxy or a secret proxy plugin within the TEE. The secret is received from the API server by the proxy or secret proxy plugin. An agent within the TEE is called to request a private key. The agent obtains the private key. The secret is decrypted by using the private key. The decrypted secret is returned to the client by the proxy or secret proxy plugin, which ensures that a plain text version of sensitive information in the decrypted secret is not accessible outside the TEE.

Securing sensitive data in a container management system

Embodiments are directed to using remote pods. An intermediary software is instantiated in a worker node virtual machine and is used to cause a pod virtual machine to be created, the pod virtual machine being remote from the worker node virtual machine. An overlay network is established between the intermediary software in the worker node virtual machine and a pod space in the pod virtual machine. The overlay network is used to cause containers to be created in the pod virtual machine, where the worker node virtual machine is configured to use the overlay network to manage communications with the pod virtual machine.

Using a remote pod in kubernetes

Glove

Cognitive determination of whether a message is suitable for sending over a data communications network can include extracting tokens from the message prior to transmitting the message. One or more intended recipients of the message can be determined from the tokens. A machine learning classification model corresponding to the one or more recipients of the message can be selected. The machine learning classification model can be constructed based on tokens extracted from prior messages, which are combined to create a plurality of documents for training the machine learning classification model. The one or more tokens extracted from the message can be classified using the machine learning classification model. An alert message can be generated in response to determining based on the classifying that the message is unsuited for sending.

Cognitive determination of message suitability

Portable refrigerator

A wireless data transmission method includes sending by an external device a data packet; receiving by a primary device and a secondary device the data packet sent by the external device. When the secondary device does not receive the data packet sent by the external device correctly, sending by the secondary device a feedback signal to the primary device. When the secondary device receives the data packet sent by the external device correctly, not sending the feedback signal. The method further includes detecting by the primary device if the secondary device has sent the feedback signal. When the primary device receives the data packet successfully and detects that the secondary device has not sent the feedback signal, sending by the primary device an ACK signal to the external device; otherwise, sending by the primary device a NACK signal to the external device.

Wireless data transmission system and method

Embodiments are directed to a container storage system in remote pods. A worker node virtual machine determines that a volume is available for attachment to the worker node virtual machine. An intermediary software of the worker node virtual machine causes a pod container storage interface to attach the volume to a pod virtual machine. in response to attaching the volume to the pod virtual machine, the intermediary software of the worker node virtual machine causes the pod container storage interface to mount the volume to the pod virtual machine such that the volume is available for use by the pod virtual machine.

Container storage system in remote pods in Kubernetes

A rapid Bluetooth networking method is applied to a Bluetooth communication system, the Bluetooth communication system includes Bluetooth earphones and a terminal, and the Bluetooth earphones include a master earphone and a slave earphone. The rapid Bluetooth networking method includes: when the master earphone is started and in an idle state, carrying out frequency hopping to a preset channel; carrying out, by the master earphone, carrier detection on a preset channel to detect whether the preset channel is idle, and if yes, transmitting an identifier (ID) packet to the slave earphone, an initial frequency of the slave earphone being the preset channel; and automatically entering, under the condition that the slave earphone is started and receives the ID packet, a subsequent process that Slave receives the ID packet transmitted by Master in a Page process, the slave earphone being the Slave, and the master earphone being the Master.

Rapid Bluetooth networking method and system and Bluetooth earphones

Described are techniques for modifying existing driver plugin behavior using a plugin wrapper to enable driver compatibility with an unsupported container deployment model. The techniques include intercepting, by a plugin wrapper operating as part of a container orchestration system, an allocation request intended for a driver plugin, where the allocation request is for allocating a computing resource to a containerized application deployed using a container deployment model not supported by the driver plugin. The techniques further include modifying, by the plugin wrapper, the allocation request to correspond to specifications of the container deployment model, thereby forming a modified request to allocate the computing resource to the containerized application. The techniques further include sending, by the plugin wrapper, the modified request to the driver plugin to allow the driver plugin to allocate the computing resource to the containerized application using the specifications of the container deployment model.

Driver plugin wrapper for container orchestration systems

In a method for encryption of sensitive data, an encrypted user private key is received in a Trusted Execution Environment (TEE) in a worker node in a container management system, the encrypted user private key being an encrypted version of a user private key for decrypting a message from a user in the container management system. The user private key is obtained in the TEE, and the encrypted user private key being decrypted into the user private key with a provider private key that is received from an encryption manager for managing the container management system. With these embodiments, the user private key may be transmitted to the worker node safely, such that the worker node may use the user private key to decrypt messages from the user. Therefore, the security level of the container management system may be increased.

Sensitive data encryption

Growing community of inventors

Beijing, China

Da Li Liu