International Business Machines Corporation

Battelle Memorial Institute

Jian Yin

Arun Kwangil Iyengar

Hidayatullah Habeebullah Shaikh

David Michael Chess

Haixun Wang

Mudhakar Srivatsa

Daniel Manuel Dias

Ian N Whalley

Steve Richard White

Isabelle Marie Rouvellou

Chang-Shing Perng

Giovanni Pacifici

James Edwin Hanson

Philip Shi-lung Yu

Philip Shilung Yu

Alla Segal

Alberto Giammaria

Xiaolan Zhang

Louis Degenaro

Lei Gao

Vasanth Bala

Darrell Christopher Reimer

Todd W Mummert

Thomas Arthur Mikalsen

Bowen L Alpern

Glenn S Ammons

Sean Leo Dague

Ronald T Goering

Bora A Akyol

Robert L Orr

Ian Gorton

Mudhakar Srivalso

Mona Attariyan

A system and method of managing time-series data for smart grids is disclosed. Data is collected from a plurality of sensors. An index is modified for a newly created block. A one disk operation per read or write is performed. The one disk operation per read includes accessing and looking up the index to locate the data without movement of an arm of the disk, and obtaining the data. The one disk operation per write includes searching the disk for free space, calculating an offset, modifying the index, and writing the data contiguously into a block of the disk the index points to.

Method and system for managing power grid data

Improved access control techniques for use in a service-oriented computing environment are disclosed. For example, one method for authenticating a client in a service-oriented environment, wherein the service-oriented environment includes a plurality of services, includes the following steps. At least one service of the plurality of services is invoked. State information is associated with the at least one service invoked. The state information is used to authenticate a client with at least one service. Further, a method for access control in a service-oriented environment, wherein the service-oriented environment includes a plurality of services, includes the following steps. A rule specification language is provided. At least one rule is specified using the rule specification language. A verification is performed to determine whether or not the client satisfies the at least one rule. The client is granted access to a service when the client satisfies the at least one rule.

Methods and apparatus for access control in service-oriented computing environments

A method for managing a virtual machine image includes receiving a request to change a package configuration of a machine, processing an image action received in the request, wherein the processing the image action received includes, opening the image action with associated action inputs, comparing the opened image action inputs with inputs associated with action instances in a database, determining whether the compared opened image action inputs match the inputs associated with action instances, retrieving from the database, image difference data associated with the image action responsive to determining that the compared opened image action inputs match the inputs associated with action instances in the database, and applying the image difference data to an image to transform the image, determining whether each image action in the request has been processed and processing a second image action responsive to determining that each image action has not been processed.

Scalable package management for virtual-machine images

Techniques are disclosed for automatically determining one or more configuration parameters associated with one or more programs executable by a computing system. For example, in a system including at least one application and at least one parameter which affects a behavior of the at least one application, a method for determining a frequency for invoking the at least one application includes the following steps. The method estimates a cost which includes overhead resulting from invoking the at least one application. The method estimates an improvement in the behavior resulting from modifying the at least one parameter based on invoking the at least one application. The method selects the frequency based on the cost and the improvement.

Methods and systems for automatically determining configuration parameters

A method, information processing system, and computer readable medium for managing virtual machine imaging. The method includes receiving a request for an imaging operation associated with at least one virtual machine. A notification is sent to at least one operating system associated with the at least one virtual machine of the request for the imaging operation. The operating system is determined to be in a state for the virtual machine to be imaged. The request for the imaging operation is granting in response to determining.

Hypervisor with cloning-awareness notifications

Upgrading a multi-tiered application is provided. In response to receiving a request to upgrade a multi-tiered application, wherein components of the multi-tiered application are deployed across a plurality of virtual machines, an appropriate integrated patch is selected for the upgrade. The selected integrated patch includes an integrated set of patches for the components of the multi-tiered application, state update data, and order constraints. The components of the multi-tiered application specified in the selected integrated patch are upgraded by using the integrated set of patches and order constraints. In addition, the state of the components of the multi-tiered application are updated by using the state update data. Then, the updated state of the multi-tiered application is saved to storage.

Upgrading virtual resources

Managing a distributed software application is provided. Metadata describing a set of dependencies of a set of software components is identified in the distributed software application from data associated with the set of software components. Then, a sequence for changing an operational state of the set of software components of the distributed software application is identified from the metadata to form an identified sequence. Thereafter, the operational state of the set of software components is changed using the identified sequence.

Specifying an order for changing an operational state of software application components

A computer implemented method, data processing system, and computer usable program code are provided for creating a set of virtual machine image for software. A virtual software resource template is retrieved. Metadata associated with the virtual software resource template is copied and the copy of the metadata is modified to generate personalized metadata for each virtual machine image in the set of virtual machine images. Then, the set of virtual machine images is deployed using the personalized metadata.

Virtual resource templates

According to an embodiment of the invention, a system for processing a plurality of service requests in a client-server system includes a challenge server for: presenting a cryptographic challenge to the client; initializing a trust cookie that encodes a client's initial priority level after the client correctly solves the cryptographic challenge; computing a trust level score for the client based on a service request wherein said trust level score is associated with an amount of resources expended by the server in handling the service request such that a higher trust level score is computed for service requests consuming less system resources; assigning the trust level score to the client based on the computation; and embedding the assigned trust level score in the trust cookie included in all responses sent from the server to the client. The system further includes an application server coupled with a firewall.

Protecting against denial of service attacks using trust, quality of service, personalization, and hide port messages

Improved load balancing techniques are disclosed. For example, in one illustrative aspect of the invention, a method of satisfying requests in a system comprised of a plurality of servers comprises the following steps. At least one load balancer is provided for routing requests to the plurality of servers. At the at least one load balancer, a request sent from a client is obtained. At the at least one load balancer, the request is examined. Costs of satisfying the request by at least two of the plurality of servers are estimated. The estimation is based on at least one of a number and a cost of at least one remote access for satisfying the request. The request is routed to a server of the plurality of servers with a low estimated cost of satisfying the request.

Systems and methods for content-aware load balancing

Techniques for efficiently authenticating multiple objects and clustering objects based on access patterns are provided. For example, in an illustrative aspect of the invention, a technique for generating and/or reading authentication information, wherein the authentication information provides evidence that a plurality of objects were one of generated and sent by an entity, comprises using one or more object access patterns indicative of whether at least two of the plurality of objects are accessed within a similar time period to group objects together to reduce an overhead for at least one of generating and reading the authentication information.

Systems and methods for efficiently authenticating multiple objects based on access patterns

Deploying a set of virtual software resource templates to a plurality of nodes is provided. The process identifies a set of virtual machine images and metadata to form a set of virtual software resource templates. The process creates a model that indicates a performance metric based on a number of nodes on which a number of virtual machine images is deployed. The process receives a quality of service requirement. The process determines, using the model, a sufficient number of virtual software resource templates in the set of virtual software resource templates and a sufficient number of nodes in the plurality of nodes to fulfill the quality of service requirement. The process deploys the sufficient number of virtual software resource templates on the sufficient number of nodes using the metadata.

Method and apparatus for deploying a set of virtual software resource templates to a set of nodes

A method, system and computer program product for confirming the validity of data returned from a data store. A data store contains a primary data set encrypted using a first encryption and a secondary data set using a second encryption. The secondary data set is a subset of the primary data set. A client issues a substantive query against the data store to retrieve a primary data result belonging to the primary data set. A query interface issues at least one validating query against the data store. Each validating query returns a secondary data result belonging to the secondary data set. The query interface receives the secondary data result and provides a data invalid notification if data satisfying the substantive query included in an unencrypted form of the secondary data result is not contained in an unencrypted form of the primary data result.

Integrity assurance of query result from database service provider

A computer implemented method, system, and computer usable program code for classifying a data stream using high-order models. The data stream is divided into a plurality of data segments. A classifier is selected for each of the plurality of data segments. Each of a plurality of classifiers is clustered into states. A state transition matrix is computed for the states. The states of the state transition matrix specify one of the high-order models for classifying the data stream.

System and method for classifying data streams using high-order models

According to an embodiment of the invention, a method for processing a plurality of service requests in a client-server system includes server steps of receiving at least one request for service from a client and providing a level of service based on a trust level provided in the at least one request. According to another embodiment, a method of authenticating messages includes steps of: embedding authentication information into a message at the application level; downloading a script from a computer for sending the message; running said script to send said message to a server; and checking said message by said server at the network level.

Growing community of inventors

Bronx, NY, United States of America

Jian Yin