International Business Machines Corporation

Bloomreach Inc.

Gagandeep Singh

Akshar Kaul

Manish Kesarwani

Sameep Mehta

Diptikalyan Saha

Hong Min

Pranay Kumar Lohia

Rema Ananthanarayanan

Samiulla Zakir Hussain Shaikh

Aniya Aggarwal

Prasad G Naldurg

Sandeep Hans

Manish Anand Bhide

Ashutosh Garg

Krishnasuri Narayanam

Prasad Manikarao Deshpande

James Willis Pickel

Ronald Peter Luijten

Praveen K Patnala

William Uppington

Vache Moroyan

Renuka Khandelwal

Siddharth Balwani

Maksim Zanko

Jayant R Haritsa

Joost VandeVondele

Methods, systems, and computer program products for generating a data migration plan for in-place encryption of data are provided herein. A computer-implemented method includes receiving, from a user, a request to generate a migration plan for performing in-place encryption of data within a database, wherein the migration plan indicates periods of time in which portions of the data are to be encrypted; determining a set of constraints for performing the in-place encryption; generating the migration plan based at least in part on the set of constraints; and performing the in-place encryption of the data in accordance with the migration plan such that only a single copy of each of the portions is maintained during the in-place encryption, wherein the single copy comprises one of a plaintext copy of data corresponding to the portion, and an encrypted copy of data corresponding to the portion.

Generating data migration plan for in-place encryption of data

One embodiment provides a method, including: receiving, from a user, a dataset for encryption before its storage at a data storage location, wherein the dataset comprises a plurality of portions; identifying (i) attributes of the dataset and (ii) dataset dependencies; generating a recommendation for an encryption scheme to be used for the dataset, wherein the generating comprises (i) generating, based upon the attributes and the dataset dependencies, a recommendation of an encryption scheme for each portion of the dataset and (ii) identifying, based upon the dataset dependencies, a key label for each portion of the dataset, wherein the key label identified for a portion of the dataset that is dependent on another portion of the dataset is the same as the key label identified for said another portion of the dataset; and providing, to the user, (i) the generated recommendation and (ii) a description identifying reasons for the generated recommendation.

Encryption scheme recommendation

Methods, systems, and computer program products for improving trustworthiness of artificial intelligence models in presence of anomalous data are provided herein. A method includes obtaining a machine learning model and a set of training data; determining one or more anomalous data points in said set of training data; for a given one of said anomalous data points, identifying attributes that decrease confidence with respect to at least one output of said machine learning model; determining that a root cause of said decreased confidence corresponds to one of: a class imbalance issue related to said at least one attribute, a confused class issue related to said at least one attribute, a low density issue related to said at least one attribute, and an adversarial issue related to said at least one attribute; and performing step(s) to improve said confidence based at least in part on said determined root cause.

Trustworthiness of artificial intelligence models in presence of anomalous data

Methods, systems, and computer program products for domain aware explainable anomaly and drift detection for multi-variate raw data using a constraint repository are provided herein. A computer-implemented method includes obtaining a set of data and information indicative of a domain of said set of data; obtaining constraints from a domain-indexed constraint repository based on said set of data and said information, wherein the domain-indexed constraint repository comprises a knowledge graph having a plurality of nodes, wherein each node comprises an attribute associated with at least one of a plurality of domains and constraints corresponding to the attribute; detecting anomalies in said set of data based on whether portions of said set of data violate said retrieved constraints; generating an explanation corresponding to each of the anomalies that describe the attributes corresponding to the violated constraints; and outputting an indication of the anomalies and the corresponding explanation.

Domain aware explainable anomaly and drift detection for multi-variate raw data using a constraint repository

Methods, systems, and computer program products for generating a data partitioning strategy for secure and efficient query processing are provided herein. A computer-implemented method includes obtaining at least (i) a database schema associated with a database and (ii) a query workload associated with the database; and generating, based at least in part on the database schema and the query workload, a distributed database structure for the database that (i) stores a first set of columns of the database within a private cloud environment in a plaintext format and (ii) stores a second set of columns of the database in a public cloud environment, wherein the second set of columns is stored in either a plaintext format or an encrypted format based on whether the second set of columns comprises sensitive data.

Generating a data partitioning strategy for secure and efficient query processing

A coarse-grained reconfigurable array accelerator for solving partial differential equations for problems on a regular grid is provided. The regular grid comprises grid cells which are representative for a physical natural environment wherein a list of physical values is associated with each grid cell. The accelerator comprises configurable processing elements in an accelerator-internal grid connected by an accelerator-internal interconnect system and memory arrays comprising memory cells. The memory arrays are connected to the accelerator-internal interconnect system. Selected ones of the memory arrays are positioned within the accelerator corresponding to positions of the grid cells in the physical natural environment. Thereby, each group of the memory cells is adapted for storing the list of physical values of the corresponding grid cell of the physical natural environment.

CGRA accelerator for weather/climate dynamics simulation

Methods, systems, and computer program products for dynamically managing predicate expression columns in an encrypted database are provided herein. A computer-implemented method includes dynamically parsing a query into multiple query predicate expressions; determining that one or more of the query predicate expressions require materialization in an encryption scheme compatible with operations in the predicate expressions; comparing (i) an amount of storage capacity to be consumed by materializing the one or more query predicate expressions to (ii) an amount of available storage budget for materialized columns in one or more databases; upon a determination that the amount of storage capacity to be consumed exceeds the amount of available storage budget, removing at least one existing materialized column from the databases; materializing the query predicate expressions by materializing one or more rows required for execution of the query; and executing the query based on the materialized query predicate expressions.

Dynamically managing predicate expression columns in an encrypted database

Techniques for performing content performance analytics are disclosed in accordance with some embodiments. In some embodiments, a process for performing content performance analytics includes receiving content on a web site; performing content performance analytics of content available on the web site using a processor; generating a report that includes a recommended action based on the content performance analytics for the content on the web site; and automatically performing a recommended action based on the content performance analytics for the content on the web site.

Content performance analytics

One embodiment provides a method, including: receiving, at a data service provider, a request from an information purchaser, wherein the request comprises (i) a budget identifying an amount of money to be spent on information and (ii) an objective function identifying a type of information that the information purchaser is requesting; accessing at least a subset of at least one information set of at least one information seller, wherein each of the at least one information sets comprises an information set available for purchase from the information seller; identifying whether at least one accessed information set that fulfills the received request; and providing, if at least one accessed information set fulfills the received request, a recommendation of an information set for purchase by the information purchaser, wherein the provided recommendation comprises at least one of the identified information sets that fulfills the received request.

Information set purchase recommendations

One embodiment provides a method, including: receiving, from a data owner, an input string of plaintext data comprising a plurality of characters for storage in a database of a third-party storage provider; arranging the plurality of characters of the input string as a half pyramid, wherein the half pyramid comprises a plurality of rows, each row comprising at least one more character than a preceding row; encrypting, using a secure encryption scheme and based upon a key, each row of the half pyramid independently from each other row of the half pyramid; and storing, in the database of the third-party storage provider, the encrypted rows of the half pyramid. Other aspects are claimed and described.

Half-pyramid data encryption

Methods, systems, and computer program products for enabling distance-based algorithms on data encrypted using a 2DNF homomorphic encryption scheme with inefficient decryption are provided herein. A computer-implemented method includes generating multiple versions of a data point, wherein each of the multiple versions of the data point comprises a distinct value corresponding to a distinct Euclidean space; encrypting each of the multiple versions of the data point; storing the multiple encrypted versions of the data point across multiple databases; and executing one or more distance-based algorithms on the multiple encrypted versions of the data point by using a finite decryption table across the multiple databases, wherein the finite decryption table stores a set of plaintext-ciphertext mappings between (i) multiple plaintext values and (ii) multiple encrypted ciphertext values corresponding to the multiple plaintext values.

Enabling distance-based operations on data encrypted using a homomorphic encryption scheme with inefficient decryption

Methods, systems, and computer program products for secure distance computations are provided herein. A computer-implemented method includes transforming a set of multiple data points, thereby creating a multiple-dimension representation of the set of data points; storing multiple distinct portions of the multiple-dimension representation of the set of data points across multiple distinct cloud infrastructures; transforming a query point, thereby creating a multiple-dimension representation of the query point; sending multiple distinct portions of the multiple-dimension representation of the query point to the multiple distinct cloud infrastructures; calculating a distance between each of the stored distinct portions of the multiple-dimension representation of the set of data points and each of the sent distinct portions of the multiple-dimension representation of the query point; determining a total distance value by summing the calculated distances; and outputting the total distance value to at least one user.

Secure distance computations

Methods, systems, and computer program products for securely processing range predicates on cloud databases are provided herein. A computer-implemented method includes separately encrypting a set of plain text data using two or more encryption functions, thereby producing an encrypted domain comprising at least two distinct groups of encrypted data items; converting a range query over plain text data items into a query over at least one of the distinct groups of encrypted data items; and combining results from the query over the distinct groups of encrypted data items, thereby generating a final encrypted result to the range query.

Growing community of inventors

Bengaluru, India

Gagandeep Singh