International Business Machines Corporation

Fan Ye

Zhen Liu

Frederick Douglis

Hao Yang

Seraphin Bernard Calo

Michael J Branson

Douglas Morgan Freimuth

Hui Lei

Raghu Kiran Ganti

Minkyong Kim

Bradley William Fawcett

Han Chen

Ming Li

Raheleh B Dilmaghani

Zachary Adam Garbow

Liangzhao Zeng

James J Fan

Keith William Grueneberg

Honghui Xia

Kyriakos Karenos

William Waller

Dimitrios Pendarakis

Anton Viktorovich Riabov

Kun Bai

David R Vyvyan

Leslie S Liu

Xinxin Zhu

Thomas J C Berman

Bin Rong

Lu Su

Bo An

Hongui Xia

Hoa Yang

A common infrastructure collects data from a plurality of mobile devices and traditional sensors at Internet scale to respond to natural language queries received at different applications. The infrastructure includes a semantic interpreter to translate the natural language query to a data request specification that is processed by the data collection system. The data collection system includes a phenomenon layer that expresses data and information needs in a declarative fashion and coordinates data collection and processing for queries. An edge layer manages devices, receives collection requirements from the backend layer, configures and instructs devices for data collection, and conducts aggregation and primitive processing of data. This layer contains network edge nodes, such as base stations in a cellular network. Each node manages a set of local data generating networked devices. The device agent data layer using common agents on the networked devices receives data collection instructions and performs data collection.

QA based on context aware, real-time information from mobile devices

A system and method for protecting streams in a mixed infrastructure includes determining processing elements that are to access a data stream in a stream processing environment and determining a security level for each processing element. Keys are generated per stream per processing element in accordance with the security level. The keys are associated with processing elements in an access control list in a location accessible by producing and consuming processing elements. The stream is decrypted for processing using keys released upon authenticating processing elements in accordance with the access control list. At security boundaries, the stream is re-encrypted in accordance with a next processing element.

System and method for encryption key management in a mixed infrastructure stream processing framework

In at least one embodiment, a method and a system include a node potentially having information responsive to an information request distributed into, for example, a federated coalition network where the node receives at least one information request packet, conducts a search of information at the node to determine if requested information is present, when the requested information is present, then the node sends an acknowledgement to a requesting node, linear network codes the requested information into m packets where m is greater than or equal to k, which is the number of packets needed to be received by the requesting node to reconstruct the requested information, selects multiple paths between the node and the requesting node such that no third party will see more than k&#x2212;1 different packets, and transmits the m packets distributed over the selected paths. In a further embodiment, the method and system include operation of the network to have the capability to provide responsive information in a protected way.

Privacy preserving query method and system for use in federated coalition networks

A system may include an overlay network linking a plurality of publishers, a plurality of subscribers, and a plurality of brokers. The overlay network may include a first computer network having a first network protocol carried by a second computer network having a second network protocol. The system may also include an agent carried by each of the publishers, the subscribers, and the brokers that adjust the network's topology based upon collected runtime data of condition of each link within the network and/or broker availability to any publisher and subscriber.

Publish/subscribe overlay network control system

A system and method are disclosed for an elastic and scalable publish/subscribe scheme. Subscription information is received at a dispatcher node. A plurality of matching nodes are selected in an overlay network to store the subscription information on a computer readable storage medium. Upon receiving an event at a dispatching node, at least one of the matching nodes with the stored subscription information is selected to process the event.

Elastic and scalable publish/subscribe service

A system and method are disclosed for an elastic and scalable publish/subscribe scheme. Subscription information is received at a dispatcher node. A plurality of matching nodes is selected in an overlay network to store the subscription information on a computer readable storage medium. Upon receiving an event at a dispatching node, at least one of the matching nodes with the stored subscription information is selected to process the event.

A system and computer program product for guideline-based food purchase management include generating a personalized set of nutrition guidelines for a user, generating a user profile for the user, wherein the user profile comprises health information and nutrition preferences, and using the personalized set of nutrition guidelines and the user profile to generate a guideline-based shopping list for the user.

Guideline-based food purchase management

A mobile device indexing system includes a plurality of edge nodes in communication with each other across a communication network and a plurality of mobile devices configured to communicate with the edge nodes. Each mobile device has both computing and communication functionalities. A separate mobile device index is maintained at each one of the plurality of edge nodes. Each mobile device index is a geographical spatio-temporal index having entries for a unique set of mobile devices derived from the plurality of mobile devices. Each unique set contains only mobile devices registered to the edge node associated with that mobile device index.

Multi-tier indexing methodology for scalable mobile device data collection

A common infrastructure collects diverse data and information from large numbers of mobile devices and traditional sensors at Internet scale to support multiple different applications simultaneously. The infrastructure includes a backend phenomenon layer that provides high level abstractions to applications such that they can express their data and information needs in a declarative fashion and coordinate the data collection and processing activities for all applications. An edge layer that manages devices, receives collection requirements from the backend layer, configures and instructs devices for data collection, and conducts aggregation and primitive processing of the data. This layer contains network edge nodes, such as base stations in a cellular network. Each node manages a set of local data generating networked devices. The device agent data layer using common agents on the data generating networked devices receives data collection instructions from the edge layer, performs data collection.

Data capture system

Data collection from networked devices

A cooperative data stream processing system is provided that utilizes a plurality of independent, autonomous and possibly heterogeneous sites in a cooperative arrangement to process user-defined job requests over dynamic, continuous streams of data. A method is provided to organize the distributed sites into a plurality of virtual organizations that can be further combined and virtualized into virtualized virtual organizations. These virtualized virtual organizations can also include additional distributed sites and existing virtualized virtual organizations and all members of a given virtualized virtual organization can share data and processing resources in order to process jobs on either a task-based or goal-based allocation mechanism. The virtualized virtual organization is created dynamically using ad-hoc collaborations among the members and is arranged in either a federated or cooperative architecture. Collaborations between members is either tightly-coupled or loosely coupled. Flexible management of resources is provided with resources being provided under exclusive control or based on best-effort access.

Method for the interoperation of virtual organizations

A system and method for packet traceback in a network includes maintaining an identity number (ID) for each node in a network and generating a signature (e.g., a message authentication code (MAC)) using a secret key shared between each node on a forwarding path and a sink. Each forwarding node leaves a mark by appending its ID and a signature in the packet, either in a deterministic manner or with a probability. Upon receiving a packet at the sink, correctness of the signatures included in each packet is verified in the reverse order by which these signatures were appended. A last valid MAC is determined in the forwarding path to determine the locations of compromised nodes that collude in false data injection attacks.

Method and system for resilient packet traceback in wireless mesh and sensor networks

A cooperative data stream processing system is provided that utilizes a plurality of independent, autonomous and potentially heterogeneous sites in a cooperative arrangement to process user-defined inquiries over dynamic, continuous streams of data. The system derives jobs from the inquiries and these jobs are executed on the various distributed sites by executing applications containing processing elements on these sites. Therefore, components of a given job can be executed simultaneously and in parallel on a plurality of sites within in the system. The sites associated with a given job execution have the need to share data, both primal and derived. A tunnel mechanism is provided that establishes tunnels between pairs of sites within the system. Each tunnel includes either a sink processing element on an originating site and a source processing element on a destination site or a gateway processing element on each site and a network connection between the sink and source processing elements. The sink and source processing elements are in communication with application processing elements on their respective sites and facilitate the exchange of data between these application processing elements. Tunnels can be establish on demand or in accordance with a prescribed plan and can be job specific of generic to any job executing on a given pair of sites.

Growing community of inventors

Yorktown Heights, NY, United States of America

Fan Ye