International Business Machines Corporation

Evren O Baran

Ashwin Venkatraman

Eli M Dow

Tara Lynn Astigarraga

Christopher V Derobertis

Michael E Browne

Gary Allen Fisher

Kyle M Smith

Kieron D Hinds

A system includes a network adapter operable to interface with one or more computer networks. The system also includes a processing system operably coupled to the network adapter and configured to perform a plurality of operations. The operations include monitoring for a request to transfer data from a file including a self-destruction indicator, determining a targeted destination of the data based on detecting the request to transfer the data from the file including the self-destruction indicator, and determining whether the targeted destination is within an allowed network list associated with the file. The system prevents the transfer of data from the file to the targeted destination through the network adapter based on determining that the allowed network list excludes the targeted destination.

Data transfer prevention

A data processing system having a host computer including a key manager, a control unit connected to the host computer, a data storage unit (such as a tape drive) controlled by the control unit, and data storage medium for storing data thereon to be written to or read from by the data storage unit. The key manager stores a data structure having at least one record having a volume serial number, as start location, a length entry, and a key for encrypting and decrypting data on the data storage medium. A data storage medium (such as data tape) is mounted on the data storage unit, and a volume recorded on the tape is retrieved. The control unit retrieves the data structure from the key manager and matches the volume serial number recorded in the retrieved data structure with the volume serial number retrieved from the data storage medium. It they match, the control unit passes to the data storage unit, commands to turn on or turn off encryption dependent upon the location where data is written by the data storage unit onto the data storage medium, or to turn on or turn off decryption dependent upon the location where data is read by the data storage unit from the data storage medium.

Mapping encrypted and decrypted data via key management system

A method, system, and computer program product for in-band communication with virtual machines via a hypervisor message bus are provided. The method includes establishing communication between a hypervisor and a plurality of virtual machines via a hypervisor message bus, where the hypervisor manages resources in a shared system. The method further includes transmitting a message from the hypervisor to the virtual machines using the hypervisor message bus. The method also includes translating the message within the virtual machines into a display-formatted message for in-band display on one or more user systems, and relaying the display-formatted message from the virtual machines to the one or more user systems to provide in-band communication of the message to one or more users.

In-band communication with virtual machines via a hypervisor message bus

Growing community of inventors

Ulster, NY, United States of America

Evren O Baran