International Business Machines Corporation

Leonardo Rosati

Alice Guidotti

Fabio Cerri

Bernardo Pastorelli

Paolo Salerno

Elia Tufarolo

Antonio Perrone

Stefano Sidoti

Mauro Arcese

Francesco Maria Carteri

Marco Imperia

Marco Mattia

Genoveffa Nacchia

Roberto Ragusa

Rosario Gangemi

Cristina Bonanni

Francesco Lecciso

Francesco Lupini

Andrea Di Maio

Andrea Durastante

Agostino Sturaro

Roberto Raffo

Alberto Novello

Fabrizio Petriconi

Anna Filomena Bufi

Tracking software usage through the following operations: calculating current digests of common libraries used by software programs and obtaining digital signatures of tracking information of the software programs comprising identifiers of their common libraries and the corresponding current digests; responses are returned to calls for the software programs in association with the corresponding tracking information and digital signatures. A corresponding method under the control of a client comprises receiving a response to a call for a software program in association with the corresponding tracking information and digital signature. The common libraries of the software program are tracked according to a verification of the digital signature and of the current digests against corresponding reference digests. Computer programs and computer program products for performing the methods are proposed. Moreover, corresponding server computing system, client computing system and computing infrastructure are proposed.

Tracking usage of common libraries by means of digitally signed digests thereof

A solution is proposed for reviewing a control of access in an information technology system. A corresponding method comprises retrieving an indication of granted accesses to objects, being granted to subjects according to policies based on attributes. Virtual roles (each defined by one or more of the attributes) are determined according to a correlation among access types of the granted accesses and the attributes of the subjects being granted them. A computer program and a computer program product for performing the method are also proposed. Moreover, a system for implementing the method is proposed.

Revision of access control process according to virtual roles of subjects based on attributes thereof

Methods provide cognitive management of multiple subaccounts wherein processors are configured to determine an expense type for an input of an expense event to a linked account structure that links subaccounts that are each associated to different respective ones of a plurality of group members. In response to determining that the input expense event expense type most-strongly matches an expense type of a nearby in time calendar expense, methods allocate expense costs of the input expense to member subaccounts pursuant to a first expense allocation rule utilized in the nearby calendar event for allocating expenses. In response to determining that the input expense event expense type does not match the expense types of a nearby calendar events, methods further allocate the input expense event costs pursuant to a second expense allocation rule selected as a function matching the input event expense type to behavior data of a member.

Cognitive management of multiple subaccounts

Embodiments of the present disclosure describe selective discovery, management, and deletion of personal data. The method accesses a set of data on a networked resource. The data is formed of a plurality of data elements which are arranged in at least one data table. The method identifies one or more sensitive data elements within the set of data related to one or more individuals. The method determines a sensitivity level of the one or more sensitive data elements and generates a catalogue including at least one new data element representative of the one or more sensitive data elements and based on the sensitivity level of the one or more sensitive data elements. The method tags the one or more sensitive data elements within the catalogue based on the sensitivity level of the one or more sensitive data elements corresponding to the new data element.

Automated discovery and management of personal data

Provided are techniques for automatically correcting touchscreen errors. A first location input is received from a user touching a global touchscreen of a global device, where the first location input is a location relative to a display surface of the global touchscreen. It is determined that movement of the global device is different from movement of a local device. Motion information of the local device is retrieved. The first location input is corrected to a second location input based on the motion information. In response to the second location input, an operation is performed.

Automatically correcting touchscreen errors

A driving mode decision support for a decision to select a driving mode of driving on at least one road segment is provided to a user of an autonomous vehicle. A driver driving profile of a user is received. Segment information defining the at least one road segment is queried. The segment information includes at least a model driver driving profile associated with the at least one road segment. A driving mode decision support for the user is determined for the at least one road segment based on the driver driving profile of the user and the model driver driving profile. An indication of the driving mode decision support is provided to the user. The driving mode decision support includes a recommended driving mode of driving on the at least one road segment.

Driving mode decision support

A solution is proposed for managing one or more industrial products. A method, computer system, and computer program product for creating a reference model providing a formal representation of reference policies according to reference artifacts and creating corresponding activity models providing a formal representation of activities (to be performed on the industrial products) according to corresponding activity artifacts; alignment indicators indicative of an alignment of the activities with the reference policies are calculated according to a comparison between the corresponding activity models and the reference model.

Managing activities on industrial products according to compliance with reference policies

A cognitive system collects online behaviors of a user and an affinity group of users who are related (e.g. by relationship, or behavioral similarities) to the user. A knowledge base of behavior and sentiment patterns is produced and maintained. If real-time data for the user shifts in behavior and/or sentiment and significantly deviates from established patterns, the system looks for a similar behavior and/or sentiment pattern shift among members of the affinity group. If the affinity group patterns shift in a manner similar to the first user's pattern shift, the cognitive system, in response, updates the knowledge base with information related to the shift, thereby adding knowledge to the long-term patterns. If the cognitive system finds that the user's behavior and/or sentiment pattern shift differs significantly from the affinity group, the system generates an empathy fostering alert message and sends it to one or more recipients.

Empathy fostering based on behavioral pattern mismatch

A webpage notification control system is provided. A computing device monitors a plurality of website content stored on a database. A computing device identifies one or more anchor contents associated with the plurality of website content stored on a database. A computing device detects changes made to one or more data contents associated with the plurality of website content stored on a database. A computing device generates an alert based, at least in part, on the detection of a change made to one or more data contents associated with the plurality of website content.

Webpage modification alert system

A tool for distress management. The tool determines a level of distress associated with a user. The tool identifies a next action to be performed by the user. The tool determines a level of distress associated with the next action. The tool determines whether the associated level of distress exceeds a predetermined threshold. Responsive to a determination that the associated level of distress exceeds the predetermined threshold, the tool alerts the user of an impact to the level of distress associated with the user.

Detecting non-evident contributing values

The invention relates to a method for distributing a software upgrade to client computing devices, the software upgrade being assigned to a software program, the client computing devices being communicatively coupled via a network, a target client of the client computing devices being adapted for executing the software program, the software program being adapted, when executed by the target client, for causing the target client to send via the network a signature specific to the software program, the method comprising intercepting network traffic from the client computing devices. The method comprises of detecting the signature in the intercepted traffic. The method comprises of collecting a network footprint from the intercepted traffic, the footprint being associated with the detected signature, the footprint comprising an identifier of the target client, the detected signature having been received from the target client. The method comprises of using the footprint for distributing the upgrade.

Distribution of a software upgrade via a network

A method and system for controlling operation of a computing device. One or more applicable settings among settings of one or more features of the computing device are determined. The settings are indicated by policies provided by two or more providers according to priorities of corresponding providers for application of corresponding policies of the providers. The policies include an indication of corresponding settings of the one or more features of the computing device. The providers are validated with at least one authority. The at least one authority certified the priorities of the providers and permissions of the providers to set the features of the policies. The computing device is configured to operate according to the applicable settings of the features.

Controlling operation of computing devices

In one implementation, the present invention is directed to a method for controlling access to a software application using one or more processors configured by code, the method comprising repeating a usage verification cycle continually during a usage session of the software application, wherein each repetition of the usage verification cycle includes receiving a digital image of an access area used to access the software application, identifying a representation of one or more persons in the digital image, estimating an age of each one of the persons within the digital image, and comparing the estimated age of each one of the persons within the digital image to a predetermined age value provided in a usage policy dataset associated with at least of one of the persons within the digital image. The method further comprises interrupting the usage of the software application in response to the age of at least one of the persons within the digital image exceeding the predetermined age value provided in a usage policy dataset.

Access control of software applications based on biometric identifiers

A method and system for controlling operation of a computing device. An indication of policies provided by providers having corresponding priorities are received. The policies include an indication of corresponding settings of one or more features of the computing device. The providers are validated with at least one authority having certified the priorities and permissions of the providers to set the features of the policies. One or more applicable settings among the settings of the features of the policies are determined according to the priorities of the corresponding providers. The computing device is configured to operate according to the applicable settings of the features.

An embodiment directed to a method for providing a specified state at a premises to which a user travels. Comprises determining a time of operation needed by a device located at the premises to provide the specified state, after device activation. One or more positions of the user are detected when the user is within a boundary, the boundary being determined in part by the time of operation. Detected user positions are used to determine a time of arrival of the user at the premises. A time to activate the device is computed from the arrival time and time of operation, collectively, wherein activating the device at the computed time causes the specified state to be provided at a time that coincides with arrival of the user at the premises.

Growing community of inventors

Rome, Italy

Leonardo Rosati