International Business Machines Corporation

Juan Galiana Lara

Mark Crosbie

Olgierd Stanislaw Pieczul

Mark Alexander McGloin

Jason Flood

Javier Marcos De Prado

David S Kern

Patrick Joseph O'Sullivan

Brent Allan Hepburn

Ralph L Topete

Annette Suzanne Hoag Riffe

Collaboratively editing a document in a system of sharee clients includes creating a document change, generating a document token for encrypting the document change, encrypting the document change with the document token, making the encrypted document change available to the other sharee clients, and generating a plurality of copies of the sharee document token. Each sharee document token is encrypted with a respective sharee's public key. Each encrypted sharee document token is distributed to respective sharee clients. Each sharee client is configured to: decrypt a sharee document token using a respective private key, decrypt the encrypted document change using the share document token, and consolidate the document change into a document.

Secure sharing and collaborative editing of documents in cloud based applications

Embodiments of the present invention include determining whether a cryptographic certificate can be trusted. A cryptographic certificate is received at a client device. The client device performs a first check on a first set of attributes of the cryptographic certificate. In addition, the client device sends the cryptographic certificate to a central verification server, which performs a second check on a second set of attributes of the cryptographic certificate. In the case that the first set of attributes passes the first check, and the second set of attributes passes the second check, the client device determines that the cryptographic certificate can be trusted.

Determining trustworthiness of a cryptographic certificate

A method and associated systems for isolating a source of an attack that originates from a shared computing environment. A computer-security system tags outgoing packets originating from within the shared computing environment in a tamper-proof manner in order to identify which tenant of the shared environment is the true source of each packet. If one of those tenants transmits malicious packets to an external recipient, either because the tenant has malicious intent or becomes infected with malware, the transmitted malicious packets' tags allow the recipient to determine which tenant is the source of the unwanted transmissions. The recipient may then block further communications from the problematic tenant without blocking communications from other tenants of the shared environment.

Isolating a source of an attack that originates from a shared computing environment

A method, and an associated computer system and computer program product. A login request is received from a user, to log into a computing resource, wherein the login request includes a password and a user identifier of the user. The received password is compared with a stored password to determine whether to grant access to the computing resource. Responsive to determining that the received password does not match the stored password, an authenticity of the login request is determined, based on one or more characteristics of the user and/or one or more checks performed against the received password. A score is calculated based on the determined authenticity of the login request. The login request is denied. Based on the calculated score, it is decided whether to lock the user and deny the user further access to the computing resource.

Accessing a computing resource

A method, computer program product, and system for redacting content in online meetings is described. A method may comprise receiving, via one or more computing devices, a selected portion of content to redact in a first online meeting. The method may further comprise determining, via the one or more computing devices, if a participant of the first online meeting is in an un-trusted location. The method may additionally comprise, in response to determining that the participant of the first online meeting is in the un-trusted location, redacting, via the one or more computing devices, the selected portion of content from content available to the participant in the first online meeting.

Growing community of inventors

Ashtown, Ireland

Juan Galiana Lara