International Business Machines Corporation

Frank J Degilio

Mohammad Abdirashid

Joseph L Temple, Iii

Michael E Baskey

Snehal S Antani

Ann C Merenda

Sean M Swehla

Timothy I Morrison

Rajesh P Ramachandran

John F Brady

Christian F Rohrbach

Embodiments include method, systems and computer program products for securing enterprise data in a mobile computing environment. Aspects include receiving, by an application disposed on a mobile computing device, a request to access the enterprise data stored on the mobile computing device in an encrypted format and determining whether the mobile computing device is in communication with an enterprise network. Based on determining that the mobile computing device is in communication with the enterprise network, aspects include transmitting a decryption request to an encryption application disposed on the enterprise network, receiving the enterprise data in an unencrypted format from the enterprise network and granting access to the enterprise data in an unencrypted format to the application. Based on a determination that the mobile computing device is not communication with the enterprise network, aspects also include denying the request to access the enterprise data.

Securing enterprise data on mobile devices

Embodiments include method, systems and computer program products for securing enterprise data in a mobile computing environment. Aspects include receiving a request to access the enterprise data stored on the mobile computing device in an encrypted format and determining whether a decryption key is stored in a cache memory of the mobile computing device. Based on determining that the decryption key is not stored in a cache memory of the mobile computing device, aspects include transmitting a request to an enterprise network for the decryption key and receiving the decryption key and storing the decryption key in the cache memory. Aspects also include decrypting the enterprise data using the decryption key and deleting the decryption key from the cache memory based on a determination that the decryption key has not been accessed for a period of time greater than a threshold time.

A central configuration server is provided for managing user-specified configuration data for a configurable device. The central configuration server, which is separate from a configurable device to be configured, and which services a plurality of users, obtains a user identification and device information from the configurable device. Responsive to this, the central configuration server accesses an account database and uses the user identification and device information to retrieve, for the identified user, user-specified configuration data for the configurable device. The central configuration server then forwards the user-specified configuration data from the account database to the configurable device for use in automatically configuring the configurable device pursuant to the user-specified configuration data.

Centrally managing user-specified configuration data for a configurable device

Provisioning and management resources are drawn from an overall pool of resources. Management and managed resources are then dynamically associated on the network to securely perform requested on-demand management functions. Since the managing system controls the networking between the devices that are managed or provisioned, the linkage of resources incurs a minimal amount of network overhead. Since provisioning resources are themselves dynamically built and automatically associated with the resources being managed, a dramatically reduced management overhead is achieved.

Method for dynamic information technology infrastructure provisioning

A partitioned processing system is disclosed wherein a workload calculation is implemented for at least one partition. CPU utilization and I/O throughput information is used in calculating resource control parameters which is indicative of resource usage for the partition. The system collects and analyzes the computer system capacity data in a partition which determines a sizing metric. The system includes a manager in the computer system which issues a command to obtain throughput information of a computer system first partition, and issues a command to obtain resource utilization information of the computer system first partition. The manager then calculates a resource control parameter using the information obtained. The system includes a monitor which indicates resource allocation responsive to the resource control.

Growing community of inventors

Poughkeepsie, NY, United States of America

Frank J Degilio