International Business Machines Corporation

Vmware, Inc.

Lan Luo

Li Long Chen

Wen Rui Zhao

Li Ni Zhang

Li Jiang

Jing Bo Jiang

Yu Xin Zhao

Jian Dong Yin

Jian Zhang

Stephanie J Hazlewood

Mohammad Khatibi

Amira Nancy Taiyab

Susanna W Tai

Yu Zhao

Li Jun Xia

Yan Du

Li Xia

Donghai Han

Fang Wang

Jin Zhang

Yang Wang

Pei Jian Liu

Vanessa V Michelini

Ann Corrao

Jianjun Shen

Wenfeng Liu

De Shuo Kong

Mei Rui Su

Xu Hui Bai

Phillip Luiz Viana

Jun Li Zhao

Ye Yu

Xu Teddy

Chun Qing W Wu

Jiajing Hu

Yuan Bin Teng

Liu Xiaojin

Systems and methods for exchanging network information between member clusters include configuring a gateway pool of a member cluster, the gateway pool comprising a plurality of gateway nodes, the member cluster comprising the plurality of gateway nodes and one or more nodes, configuring a gateway node of the plurality of gateway nodes as an active gateway node for the member cluster, writing member cluster information to a storage, the member cluster information indicating address information of the gateway node, reading second member cluster information from the storage, the second member cluster information indicating address information of a gateway node of a second member cluster, establishing a tunnel between the gateway node and the second gateway node based on the second member cluster information, and communicating network traffic from at least one node of the member cluster to at least one node of the second member cluster via the tunnel.

Cross cluster connectivity

In an approach to improve workload orchestration in a multi-cloud environment, embodiments orchestrate and manage a workload in a decentralized multi-cloud environment using one or more smart contracts. Additionally, embodiments measure, by a competency measurement component, competency of cloud services based on one or more predefined cloud benchmarks, a consensus network, and the one or more smart contracts, and generate an orchestration plan that is a best fit for the workload. Furthermore, embodiments validate and update, by the consensus network and the one or more smart contracts, the generated orchestration plan, and executing the generated orchestration plan.

Workload orchestration in a multi-cloud environment

Managing security access in real-time to a computer system using control lists includes detecting a security event at a computer system. The security event is analyzed including an analysis of a historical corpus having historical data of security events. An access control list is generated based on the security event. A determination is made when the security event includes abnormal behavior based on the analysis of the security event and the historical corpus. The security event is published to a monitoring system for controlling access to the computer system, in response to the security event.

Data access control management computer system for event driven dynamic security

Techniques are described for linked blockchains that allow computing devices to access information from an acceptance blockchain about acceptance reports stored in an enterprise delivery blockchain that are also linked to a product blockchain that stores information of the products of the acceptance reports. An acceptance report is indicative of operability of a product in a service provided by a service provider. A processor is configured to access the block in the enterprise delivery blockchain, retrieve the acceptance report from the block in the enterprise delivery blockchain, determine an identifier, identified in the block in the enterprise delivery blockchain, to a block in an acceptance blockchain, access the block in the acceptance blockchain via the determined identifier, retrieve from the block in the acceptance blockchain contextual information of the acceptance report, and output the acceptance report and contextual information of the acceptance report.

Linked blockchain structures for accelerated multi-chain verification

Methods and systems for metering computing resources in cloud computing environments are disclosed. A method includes: executing, by a computing device, computing tasks on computing resources; determining, by the computing device, an amount of time and an amount of power used in the executing the computing tasks on the computing resources; determining, by the computing device, a number of standard units consumed by the computing tasks based on the determined amount of time and the determined amount of power; and metering, by the computing device, the computing resources based on the determined number of standard units consumed by the computing tasks.

Metering computing resources in cloud computing environments

Managing network interactions by engaging a networked information broadcast service, receiving information from the networked information broadcast service, filtering the information according to a profile, and sending information according to the filtered information using another network communications connection.

Smart edge network management

A computer-implemented method, computer system, and computer program product for blockchain enabled service reservation and delegation. The present invention may include receiving one or more first or second trigger conditions defined by a user, detecting an occurrence of the one or more first trigger conditions, deploying a smart contract based on the received one or more first trigger condition, detecting an occurrence of the one or more second trigger conditions, and deactivating the smart contract based on the received one or more second trigger conditions. The present invention may include receiving a subject registration, the subject is the user, a service, or a device. The one or more first trigger conditions may be a condition that upon its occurrence may initiate the deployment of the smart contract. The one or more second trigger conditions may be a condition that upon its occurrence may initiate the deactivation of the smart contract.

Blockchain based service reservation and delegation

Methods and systems for selecting a tool for a project is described. In an example, a processor can run a machine learning model to generate a set of requirements to implement a project. The processor can identify a keyword from the set of requirements. The processor can search for the keyword on a search engine. The processor can receive a search result from the search engine corresponding to the keyword. The processor can identify, based on the search result, a tool that can be used to implement the project, where the tool can be in compliance with the set of requirements.

Machine learning for technical tool selection

In an approach to blockchain management of cloud service provisioning failures, one or more computer processors capture one or more application programming interface (API) calls associated with a service provision. One or more computer processors submit the captured one or more API calls to a blockchain ledger. One or more computer processors detect a system failure during the service provision. One or more computer processors extract the submitted one or more API calls from the blockchain ledger. Based on the extracted one or more API calls, one or more computer processors identify a problematic system associated with the system failure.

Blockchain management of provisioning failures

Embodiments of the present invention provide methods, computer program products, and systems to for dynamically modifying a generated route that enables peer to peer navigation. Embodiments of the present invention can be used to receive input that specifies one or more terms pertaining to a target that is a location of interest from a user. Embodiments of the present invention can pair the user with the target of interest; generating a route to the target and dynamically modify the generated route to the target according to positional information of the location and changes in positional information of the user.

Peer to peer route guidance

Resource sharing is provided. Cryptographic key, resource, and payment information is exchanged between a respective other resource provider having a best matching smart contract response and a particular resource provider selling unused resources. The exchanged cryptographic key, resource, and payment information is verified. The unused resources of the particular resource provider are isolated for dedicated use by the respective other resource provider having the best matching smart contract response. A transaction is performed by sharing the unused resources of the particular resource provider with the respective other resource provider having the best matching smart contract response according to smart contract terms.

Decentralized smart resource sharing between different resource providers

A processor may identify that an application is being downloaded to a computing device. The processor may generate an authorization that regulates data that can be used by the application. The processor may prompt a user to select a first set of addendums for the authorization. The first set of addendums indicate specific data that can be used by the application. The processor may receive a request from the application to access a first specific datum. The processor may determine whether the application is authorized to access the first specific datum.

Intelligent authorization and protection of user data

An approach is provided for generating a scaling plan. Plans for onboarding first tenant(s) a cloud computing environment and offboarding second tenant(s) of the cloud computing environment are received. Historical data about behavior of tenants of the cloud computing environment is received. Based on the received plans and the historical data, a scaling plan for scaling computer resources of external systems during the onboarding and the offboarding is generated. The scaling plan specifies a timeline indicating dates and times at which changes in workloads associated with the external systems are required for the onboarding and the offboarding. Based on the scaling plan, a scaling is determined to be needed for computer resource(s) of one of the external systems. Responsive to determining that the scaling is needed, the scaling for the computer resource(s) is triggered at a date and a time indicated by the timeline.

Generating a scaling plan for external systems during cloud tenant onboarding/offboarding

Approaches presented herein enable generation of a multi-dimensional tag metric in a cloud resource management environment. More specifically, a tagging namespace is provided for managing a resource in the cloud resource management environment. This namespace comprises at least two dimensions and a plurality of positions. A set of tags associated with the resource are received into the tagging namespace. A match of each tag of the set of tags to a position within the namespace into which that tag was received is verified and an alert is triggered in the case verification fails. Alternatively, in the case verification is successful, the tag-containing namespace is validated as a multi-dimensional tag metric.

Multi-dimensional tagging namespace for cloud resource management

Methods, computer program products, and systems are presented. The method computer program products, and systems can include, for instance: obtaining, by a container host node, container image configuration data that defines a specified container image configuration, wherein the container host node includes an associated container image repository for storing container images; multicasting, by the container host node, a request for one or more image of first through Nth specified container images to a set of container host nodes; receiving, by the container host node, at least one container image from at least one container host node of the set of container host nodes in response to the multicasting; building, by the container host node, a specified container image according to the specified container image configuration using the at least one container image received by the receiving; and running, by the container host node, the specified container image built by the building to define a runtime container.

Growing community of inventors

Beijing, China

Lan Luo