International Business Machines Corporation

Daniela Kern Mainieri Trevisan

Kurt A Rybczyk

Bernhard Julius Klingenberg

Nathan B Best

Mikael H Lindström

Sergio Varga

Thiago Cesar Rotta

Christopher C Bode

Edson Gomes Pereira

Lisa A Shepard

Thiago Rodrigues De Souza Costa

Techniques are provided for selectively granting access credentials through the use of a machine learning model. Embodiments include collecting data from one or more sources related to user access of an information technology (IT) infrastructure. Based on the collected data, a machine learning model is created for authenticating a request from a client device to access the computer system within the IT infrastructure based on the collected data, based on the machine learning model. An access credential is generated upon processing the user identifier as an input to the machine learning model, and the access credential is provided to the client device.

Cognitive user credential authorization advisor

A method, apparatus, system, and computer program product for deduplicating data. Data is stored by a computer system in storage domains in a storage system. Deduplication is performed by the computer system within each storage domain in the storage domains using a hash table that includes entries for all of the storage domains. Cross-deduplication between the storage domains is avoided in the storage system.

Deduplicated storage with multiple storage domains

A method, apparatus, system, and computer program product for dynamically directing data in a deduplication backup system. A computer system identifies a data type for the data. The computer system determines whether the data is suitable for deduplication in the deduplication backup system based on the data type identified for the data and a policy. The computer system directs the data to a deduplication storage pool responsive to the data having the data type that is suitable for deduplication, reducing storage usage issues for backing up the data in the computer system.

Dynamically directing data in a deduplicated backup system

A specification of a target network environment including target devices is received. The specification includes an identity of each of the target devices and a compression feature requirement, a deduplication feature requirement, and an encryption feature requirement of the target network environment. A performance parameter corresponding to each of the requirements is computed based on the specification. Possible combinations of the target devices and enabled features in the target devices are determined to meet the specification. Each possible combination is compared to a knowledge base to determine a performance reduction for each of the enabled features based upon the performance parameters. A desired combination of the enabled features is determined from the possible combinations for each target device based upon the comparison. The desired combination includes a combination having a performance reduction that does not exceed a threshold value for data reduction in one or more enabled features.

Optimizing data reduction, security and encryption requirements in a network environment

Growing community of inventors

Porto Alegre, Brazil

Daniela Kern Mainieri Trevisan