International Business Machines Corporation

Daniel Blum

Timo Kussmaul

Thomas Steinheber

Richard Jacob

Stefan Schmitt

Andreas Stay

Oliver Then

Jan Paul Buchwald

Uwe Karl Hansmann

Klaus Rindtorff

Kai Brennenstuhl

Timo Kußmaul

Request flow log retrieval can include extracting one or more keywords from a natural language description of an action, the action being a system response to a user request submitted to a resource-provisioning system during a user session. Request flow log retrieval can also include determining a classification of the action based on a correlation value generated by a classifier model trained using machine learning to classify actions performed by the resource-provisioning system, the classification based on the one or more keywords. Additionally, request flow log retrieval can include automatically identifying a request flow associated with the action based on the classification of the action and returning at least one system log entry corresponding to the request flow.

Request flow log retrieval

The invention relates to a method for preventing search fraud in a content management system. For an update of a content item of a search index of a search service provided by the content management system ranking metrics are calculated using a set of one or more search queries from a collection of search queries previously received by the search service. At least one statistic is computed using the calculated ranking metrics and compared with at least one statistic provided by a statistics history database. Depending on the result of the comparing, the update of the content item is flagged as fraudulent or as non-fraudulent.

Preventing search fraud

A computer-implemented method for consolidating log file entries may be provided. The method comprises receiving a first log file and a second log file, determining a first characterizing feature set of a first log file entry of the first log file and a second characterizing feature set of a second log file entry of the second log file, and determining a correlation factor value of a correlation between the first log file entry and the second log file entry by classifying a relationship of the first log file entry and the second log file entry using the characterizing feature sets. The method further comprises upon determining that the correlation factor value is above a predetermined correlation factor threshold value, determining that the first log file entry and the second log file entry relate to each other and belong to a same action flow.

Correlating logs from multiple sources based on log content

Providing software-as-a-service to a plurality of clients includes: visually rendering a first virtual portal and a set of portal resources according to a portal-resource association specified in a resource association matrix; identifying a set of server resources accessible from a portal server, the set of server resources excluding the set of portal resources; determining a score for a first resource of the set of server resources; visually rendering the first resource; and associating the first resource with the first virtual portal in the resource association matrix by adding an identifier of the scored resource.

Building a multi-tenant portal application

Providing software-as-a-service to a plurality of clients includes: selecting a first virtual portal, determining a score for a first resource to generate a first scored resource, determining a set of scored resources, visually rendering the first virtual portal and the set of portal resources, visually rendering the set of scored resources, and selecting a scored resource from the set of scored resources to be associated with the first virtual portal by updating the resource association matrix with an identifier of the scored resource. The score is selected to represent a usefulness factor of the first resource. Each scored resource of the set of scored resources is selected to be different than each portal resource of a set of portal resources associated with the first virtual portal by a resource association matrix.

In a method of and system for enforcing authentication strength for remote portlets, a portlet is provided by a producer portal and consumed as remote portlet by a consumer portal. The producer portal defines an authentication strength level requirement for the portlet. A user requests the remote portlet from the consumer portal. The consumer portal authenticates the user with a particular authentication method that implies a particular authentication strength level. The producer portal authenticates the consumer portal with a particular authentication method that implies a particular authentication strength assertion level. The consumer portal requests the portlet from the producer portal with an assertion of the authentication strength level of the user. The producer portal rejects the request from the consumer portal if the authentication strength level of the user is less than the authentication strength level requirement for the portlet. The producer portal also rejects the request from the consumer portal if the authentication strength assertion level of the consumer portal is not high enough to assert the authentication strength level of the user. The producer portal accepts the request from the consumer portal only if the authentication strength level of the user is not less than the authentication strength level requirement for the portlet and the authentication strength assertion level of the consumer portal is high enough to assert the authentication strength level of the user.

Method of and system for enforcing authentication strength for remote portlets

A client system is controlled for accessing protected remote resources via a Web Application using a rewriter proxy that supports relative URLs. In one configuration, the Web application can be a Portal application. A URL utility module can be provided for a rewriter proxy that splits an absolute URL into a base part (the URL string up to the resource) and the resource part. A security module computes an authentication identifier for the base part. This can occur by applying a secure hash algorithm and/or secret key. The URL utility module then constructs the rewritten URL by concatenating the URL encoded base part, the authentication identifier, and the resource part as separate path elements.

Controlling access of a client system to access protected remote resources supporting relative URLs

A method of handling cookies defines a scope attribute, which is in addition to a domain attribute and path attribute. The method allocates separate storage areas for cookies according to identified scopes and a global storage area for cookies with unidentified scopes. The method determines if a cookie received with a response includes an identified scope. If so, the method stores the cookie in the storage area allocated to the identified scope of the cookie. If the cookie has an unidentified scope, the method stores the cookie in the global storage area. The method determines a scope, domain and path for an outgoing request. The method retrieves and attaches to the outgoing request cookies from the global storage area having the determined domain and path. If the outgoing request is associated with an identified scope, the method additionally retrieves all cookies having the determined domain and path from the storage area allocated to the scope of the outgoing request and attaches the retrieved cookies to the outgoing request.

Growing community of inventors

Stuttgart, Germany

Daniel Blum