International Business Machines Corporation

Davide Fazzone

Luigi Lombardi

Gianluca Gargaro

Raffaele Giulio Sperandeo

Andrea Tortosa

Vinicio Bombacino

Rossella De Gaetano

Simone Bonetti

The present disclosure relates to facilitating a recertification of access control information. A corresponding method comprises collecting network traffic information relating to a network. Context information is estimated from the network traffic information for accesses to the software application relating to invocations over the network of services contributing (at least in part) to implement the software application. For example, the context information is estimated by an estimation engine that is configured incrementally during a migration of the software application from a module architecture to a service architecture (according to the network traffic information and to corresponding log information). A computer program and a computer program product for performing the method are also proposed. Moreover, a system for implementing the method is proposed.

Recertification of access control information based on context information estimated from network traffic

A solution is proposed for facilitating a maintenance of an access control system. A corresponding method comprises evaluating one or more trigger policies according to one or more policy parameters; the policy parameters of the trigger policies in part relate to risks of the access control system and/or to countermeasures for mitigating the risks. A revision of the access control system, comprising a corresponding mining activity, is triggered according to a result of the evaluation of the trigger policies. A computer program and a computer program product for performing the method are also proposed. Moreover, a system for implementing the method is proposed.

Revision of access control system triggered by policies based on risks and/or countermeasures thereof

A solution is proposed for controlling access to data that are broadcast over a telecommunication medium. A corresponding method comprises validating by a plurality of validator devices an access request that is submitted by an access device for accessing the data. The validator devices update a blockchain by adding a new block comprising an indication of the access request in response to a positive result of its validation. A provider system transmits cryptographic information for decrypting the data to the access device in response to the new block. A corresponding method for broadcasting data by a provider system and a corresponding method for accessing broadcast data by an access device are proposed. Corresponding computer programs and computer program products for performing the methods are also proposed. Moreover, corresponding structure, provider system and access device are proposed.

Access to data broadcast in encrypted form based on blockchain

A solution is proposed for controlling backups of objects in an information technology system. A corresponding method comprises determining change categories of changes of the objects being changed since a previous backup thereof; backups of the changed objects are triggered according to corresponding trigger indicators based on change categories of their changes and on relevance weights thereof.

Triggering backups of objects based on relevance of categories of changes thereof

A method, computer program product and a computer system for facilitating a maintenance of access control information for controlling access to one or more resources of an information technology system by one or more subjects. One or more trigger policies are evaluated according to one or more policy parameters relating to the resources, the subjects and/or the access to the resources by the subjects. A revision of the access control information including a mining activity for mapping the subjects to the resources is triggered according to a result of the evaluation of the trigger policies. A computer program and a computer program product for performing the method are also proposed.

Policy-based triggering of revision of access control information

Embodiments of the present invention disclose a method, computer program product, and system for accessing a network by one or more client devices via a plurality of access devices of wireless type. An access device receives a hand-over request for performing a hand-over from one of the client devices accessing the network via the access device, the hand-over request comprising an indication of one or more candidate access devices of the other access devices for performing the hand-over. The hand-over between the access device and a target access device of the candidate access devices is negotiate in response to the hand-over request. A further hand-over is negotiate of a further client device accessing the network via a source one of the other access devices between the access device and the source access device. The access device enables the further client device to access the network.

Growing community of inventors

Baiano, Italy

Davide Fazzone