International Business Machines Corporation

Govindaraj Sampathkumar

David Gerard Kuehr-McLaren

Li Fu Chen

Kwabena A Mireku

David Louis Kaminsky

Yongcheng Li

Hari Shankar

Pratik Gupta

Sumit Taank

Vincent C Williams

Ryan Urquhart

Ranjan Kumar

Sharon L Cutcher

Lori M Pilgrim

Brian A Stube

Al Chakra

Gregory Richard Hintermeister

Henri Fouotsop Meli

Randall Avery Craig

Jeffrey Alan Calcaterra

Mark William Hubbard

Andrew L Hanson

Deanna M Shaw

Daniel P Julin

Brian Brandenburg

Virginia D Hill

Janette Siu Jong Wong

Janette S Wong

A method, system, and computer program product for work plan based access control are provided in the illustrative embodiments. For a portion of the work plan, a physical space is determined. Access to the physical space is used in a task in the portion. At least one workflow is initiated to determine whether to grant the access to the physical space. Responsive to the workflow granting the access to the physical space, the access to the physical space is configured for a first duration for a first user performing the task. Responsive to an indication of closing of the portion, the access to the physical space for the first duration for the first user performing the task is revoked.

Work plan based control of physical and virtual access

A method, program product and apparatus for controlling access to profile information, multi-media resources or social network functions of a first user by a second user not listed on a friend or group listing of the first user. An application retrieves a threshold criteria for access control and social network statistics in response to an attempted access by an entity without an appropriate privilege. The application compares the statistics to the threshold. Then, if the statistics meet the threshold criteria, the application allows access.

Using social networking thresholds in access control decisions

A system to apply persona styles to written communications. The system includes a communication analyzer and a modification engine. The communication analyzer receives an element of original content of a written communication. The communication analyzer also receives a selection of a persona style. The selected persona style defines a communication style. The modification engine presents a substitute element to a user in response to a determination that the element of the original content of the written communication is incompatible with the selected persona style. The substitute element is compatible with the selected persona style.

Persona management system for communications

Systems and methods of confirming an addressee of an email message include receiving an email message addressed to one or more forwarding addresses. At least one email address associated with each of the one or more forwarding addresses is obtained. A potential discrepancy in the email message is detected in response to the at least one obtained email address. Before sending the email message, an alert is issued to a sender of the email message. The alert provides a recommendation regarding whether to continue with sending the email message and identifies content associated with the email message that led to detecting the potential discrepancy.

Electronic mail messaging system and method

A system to apply persona styles to written communications. The system includes a communication analyzer and a modification engine coupled to the communication analyzer. The communication analyzer identifies an element of original content of a written communication and determines that the element of the original content of the written communication is incompatible with a selected persona style. The selected persona style defines a communication style. The modification engine modifies the original content of the written communication to replace the element of the original content with a substitute element that is compatible with the selected persona style.

The Custom Access Controller adds a custom security hierarchy to the organizational data in the View Processor of WEBSPHERE Virtual Member Manager. Whenever an entity or application attempts to access a resources the access control engine starts the View Processor to identify the organizational data and assigned security policy for the resource. The assigned security policy is applied to a delegated administration path which is part of the delegated administration hierarchy but includes the appropriate path and security policy for the resource. The delegated administration path is sent to an access control engine that grants or denies access to the resource. A View Processor Interface allows network administrators to create and modify custom security hierarchies.

Method and apparatus for creating custom access control hierarchies

An apparatus, system, and method are disclosed for defining normal usage of a computing system resource. A method for defining normal usage of a computing system resource includes receiving a repeating schedule that represents system usage of one or more computing resources and receiving one or more demand events that will affect the system usage of the one or more computer resources. The method also automatically creates a predictive temporal profile that represents the system usage of the one or more computer resources from information comprising the repeating schedule and the one or more demand events. The predictive temporal profile is displayed for the user to review.

Method, system, and computer program product for automatically applying a predictive temporal profile to computer resource management decisions

Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.

Automatic policy generation based on role entitlements and identity attributes

Data for a first time period in a primary data sequence is compared with data for a second time period in each of a set of secondary data sequences. The durations of the first and second time periods are correlated, and the first time period is different from the second time period. A ranking is assigned to each secondary data sequence based on the corresponding data for the second time period. The ranking for each of the set of secondary data sequences is written to a computer useable medium. The primary data sequence and the set of secondary data sequences are adjusted based on a request to change the primary data sequence to one of the set of secondary data sequences. The comparing, assigning, and writing are repeated for the adjusted primary data sequence and set of secondary data sequences.

Data comparison using different time periods in data sequences

An abstraction layer associates a party-focused object, a security-focused object, or both, with an abstraction object. The party-focused or security focused object has one or more properties. The properties are presented in the abstraction object defined by the mapping schema. The abstraction layer converts a set of repository objects to at least one abstraction object.

Method and apparatus for presentation of a security-focused repository with a party-focused repository

A method and system for selecting master nodes to manage a target node group in a computer network having multiple nodes and overlapping node groups. The system includes determining a hamming distance for node pairs within the network. The node pair includes two node pair members and the hamming distance is the number of node groups the node pair members do not share in common. A participation index for nodes within the network is determined at a determining operation. The participation index is the number of node groups the node belongs to. An availability potential for node pairs is also determined. The availability potential is the sum of the participation indexes of the node pair members subtracted by the hamming distance of the node pair. An optimal combination of node pairs is found by searching for the maximum total availability potential for the network. A master node pair for the target node group is selected from the optimal combination of node pairs. If a master node pair does not exist for the target node group, a master node belonging to the target node group is selected for the target group.

Growing community of inventors

Cary, NC, United States of America

Govindaraj Sampathkumar