Red Hat, Inc.

Leigh Griffin

Stephen Coady

Pierre-Yves Chibon

Luigi Zuccarelli

Paolo Antinori

Andrea Cosentino

Cathal O'Connor

Sanja Bonic

Janos Bonic

Leonardo Rossetti

Ali Ok

Srinivasa Bharath Kanta

Maja Massarini

Pierre-Yves Chiben

Anne Mulhern

Rachel Elizabeth Sibley

Florence Renaud

Julia Bley

Christopher Foley

Anthony Carroll

Aoife Moloney

Laura Fitzgerald

Eric Curtin

Brendan O'Farrell

David Ffrench

A system and method of Byzantine fault prevention in mesh networks. The method includes detecting a consensus operation among a plurality of node devices of a network for a blockchain operation of a blockchain within the network, wherein each consensus operation includes a vote transmission associated with the blockchain within the network, wherein detecting the consensus operation includes examining an approval status of a particular vote transmission associated with a particular consensus operation. The method includes controlling, by a processing device responsive to detecting the consensus operation, content of a proxy vote transmission provided by a proxy device corresponding to at least one node device of the plurality of node devices by setting the content of the proxy vote transmission based on the approval status of the particular vote transmission. The method includes causing the proxy device to transmit the proxy vote transmission.

Byzantine fault prevention in mesh networks

A system and method of a distributed and partitioned state machine for mesh devices. The method includes obtaining a first capability dataset indicating capabilities of a first mesh node of a first mesh network system to provide a first service for a first object. The method includes obtaining a second capability dataset indicating capabilities of a second mesh node of a second mesh network system to provide a second service to a second object. The method includes generating a set of NFSM models for the first object and the second object, each NFSM model to provide the first service for the first object or the second object. The method includes providing the set of NFSM models and a partition dataset to cause a first gateway device and a second gateway device to use a single NFSM model to provide the first service to the second object.

Distributed and partitioned state machine based rule engine for mesh devices and edge devices

Systems and methods include storing, in a first base boot partition, an image of a first base operating system; storing, in a first overlay boot partition, a first overlay file system comprising a first encrypted file; configuring the first overlay boot partition to boot the image of the first base operating system from the first base boot partition and install the first overlay filesystem; and responsive to detecting an attempt to access the first encrypted file, designating the first base boot partition as an active boot partition.

Dynamic booting of operating system by designating first base boot partition as active boot partition responsive to detecting unauthorized attempt to access first encrypted file

Processing logic may provide a first container having a first software version. Processing logic may create a second container having a second software version within the first container. Processing logic may replace the first container with the second container, in response to testing of the second container satisfying one or more criteria.

Inheritance container service

A computing device determines that an action should be performed on a first edge device operating in a computing system. The computing device accesses a data structure that identifies values of computing resources of the first edge device and computational requirements of performing the action on the first edge device. The computing device determines, based on the data structure, that the first edge device lacks a computing resource to meet the computational requirements of performing the action on the first edge device. In response to determining that the first edge device lacks the computing resource to meet the computational requirements of performing the action on the first edge device, the computing device inhibits the action from being performed on the first edge device.

Minimum viable charge exchange for service operations in edge devices

Performing qubit manipulation using push notifications is disclosed herein. In one example, a quantum computing device comprises a system memory and a processor device communicatively coupled to the system memory. The processor device is to receive a push notification that includes an identifier of a qubit and a push notification payload, such as a data value to be written to the qubit and/or one or more qubit manipulation commands to be performed using the qubit. Upon receiving the push notification, the processor device obtains write access to the qubit, and then applies the push notification payload to the qubit, for example by writing the data value to the qubit and/or by executing the one or more qubit manipulation commands using the qubit.

Push notification qubit manipulation

An access request to allow a requestor process to access a protected resource is received. A qubit authentication state that identifies a desired state of a qubit is sent to the requestor process. It is determined that the requestor process has caused the qubit to have the qubit authentication state. Based at least in part on determining that the requestor process has caused the qubit to have the qubit authentication state, the requestor process is granted access to the protected resource.

Quantum authentication of protected resources

An access control process executing in a declarative container orchestration system receives a notification that the declarative container orchestration system has received a configuration file that identifies a desired future state that includes a creation of an object. Prior to allowing the declarative container orchestration system to create the object, the configuration file is analyzed. Based on the analysis, it is determined that the configuration file includes a key/value pair that is to be associated with the object. The access control process determines that a user associated with the configuration file lacks authorization to request the key/value pair. In response to determining that the user associated with the configuration file lacks authorization to request the key/value pair, the declarative container orchestration system is prevented from creating the desired future state identified in the configuration file.

Key/value pair metadata authentication for declarative process orchestration environments

A method includes determining characteristics of nodes of a mesh network and selecting one or more nodes of the mesh to receive a payload in view of the characteristics of the plurality of nodes of the mesh network. The method further includes pushing the payload to the one or more selected nodes of the mesh network, wherein the one or more nodes propagate the payload to remaining nodes of the mesh network.

Service download optimization for nanotech mesh

It is determined that a container image comprising a plurality of container image layers generated by a container build engine is to be transmitted from a container image repository to a target computing device. It is determined that a first container image layer of the plurality of container image layers is a sensitive container image layer to be encrypted prior to transmission to the target computing device. A first key generated by a quantum computing system that uses a quantum key distribution protocol, a plurality of qubits and a quantum communication channel to generate the first key is obtained. The first container image layer is encrypted using the first key to generate a first encrypted container image layer. The first encrypted container image layer is transmitted to the target computing device.

Eavesdropper identification and container image layer invalidation

An interface in a first unit of software instructions is identified, the interface being configured to be invoked by an invoking unit of software instructions and when invoked, to invoke a function in a second unit of software instructions. A plurality of other units of software instructions are analyzed to identify a set of units of software instructions that are configured to invoke the interface. Based on the set of the units of software instructions and at least one criterion, data descriptive of modifications that modify the first unit of software instructions to remove software instructions that implement the interface is provided.

Identification and removal of redundant interfaces

A query is received from an application. A data store is accessed and a set of data items are extracted from the data store based on the query. Access to the set of data items is provided to the sidecar process. Based on a criterion, the sidecar process causes the set of data items to be modified by at least one of adding additional information to the set of data items, deleting a data item from the set of data items, or altering a data item in the set of data items to generate a modified set of data items. The modified set of data items is provided to the application.

Sidecar data services for enforcing data policies

Biases on quantum bits can be dynamically adjusted based on events. For example, a system can detect an event related to a service executing in a computing environment. The service can rely on a state of a quantum bit of a quantum computing subsystem in performing a computing operation. The system can determine an amount of bias to apply to the quantum bit based on the event. The amount of bias can be configured to modify a result of the computing operation. The system can transmit a control signal configured to cause the quantum computing subsystem to apply the amount of bias to the quantum bit (e.g., while the service is executing).

Dynamically adjusting biases on quantum bits based on detected events

A package delta that identifies differences between a first software package and a second software package is accessed. It is determined that the package delta is to be securely communicated to a second quantum computing system upon the occurrence of a first condition. It is determined that the first condition has occurred. In response to determining that the first condition has occurred, the package delta is transferred to the second quantum computing system using superdense coding.

Superdense coding of software package deltas

Software builds can be constructed based on previously recorded modifications to metadata. For example, a computing device can record modification logs. Each of the modification logs can be associated with a modification to metadata for a software repository. The computing device can also receive, from a client device, a request for the metadata for the software repository at a particular time. The computing device can provide access, for the client device, to one or more modification logs of the modification logs associated with the particular time. The one or more modification logs can be used by the client device to produce a software build having characteristics of the metadata at the particular time.

Growing community of inventors

Waterford, Ireland

Leigh Griffin