International Business Machines Corporation

Mahesh Shivram Paradkar

Bhooshan Prafulla Kelkar

Rinkesh I Bansal

Sanjay B Panchal

Chintan Thaker

Raghuraman Seshadri

Shiv S Jha

Liam S Harpur

Lin Sun

Aaron J Quirk

Lisa M Bradley

Vivek Jain

Sagar Deshpande

Ragineni Sathyanarayana

Nagendra Ramamurthy Pattavardhanam

Aaliyah Ahmed

Neha Tirumalasetti

Vedangi Rajesh Kirtane

Varsharani Hawanna

Amrin Maria Khan Adawadkar

Radha Shridhar Marathe

An approach is disclosed that receives a request from a requestor over a computer network, the request including a set of encrypted user data that includes interest vectors pertaining to a set of users. A homomorphic encryption processing of the encrypted user data is performed using a distance function that utilizes an encrypted lookup table. This results in a set of distance results. An encrypted distance array is then generated from the distance results. The encrypted distance array describes similarities between the users in the set of encrypted data. A set of encrypted recommendations are returned to the requestor. The recommendations returned are derived from the encrypted distance array.

Recommendation engine using fully homomorphic encryption

A level of classification for each piece of data of one or more pieces of data is determined. A layer of encryption for each piece of data of the one or more pieces of data is determined. A type of encryption for each piece of data of the one or more pieces of data is determined. Other mechanisms applied to each piece of data of the one or more pieces of data is determined. A first constant for the layer of encryption, a second constant for the type of encryption, a third constant for the other mechanisms applied is determined. A risk factor for each piece of data of the one or more pieces of data is determined.

Data risk heat maps

Evaluating risk of sensitive data associated with a target data set includes a computer system receiving a pattern that defines sensitive data and a selection of a data set as the target data set for evaluating. The system determines portions of the target data set from which to select sample data sets and determines, responsive to a confidence limit and sizes of the respective portions of the target data, a size of a sample data set for each respective target data set portion. The system randomly samples the target data set portions to provide sample data sets of the determined sample data set sizes and determines whether there is an occurrence of the sensitive data in each sample data set by searching for the pattern in the sample data sets. The system determines a proportion of the sample data sets that have the occurrence of the sensitive data.

Sensitive data evaluation

A method, computer program product, and system for human resource analytics using profile data is described. The method includes receiving historical project data, wherein the historical project data includes at least one profile of at least one historical project team member. Psychometric data associated with the at least one historical project team member is received. Updated historical project data is generated, in which, at least in part, psychometric data associated with the at least one historical project team member is added to the at least one profile included in the historical project data.

Human resource analytics with profile data

A service interface of an SSL application hosted on at least one computer system in a hosted network selecting at least one authorized cipher suite. An SSL socket of the SSL application negotiating with another SSL socket of another SSL application in the hosted network for a mutual cipher from among the at least one authorized cipher suite and a shared key to encrypt information exchanged during a secure session. Responsive to establishing a security connection between the SSL socket and the another SSL socket using the selected mutual cipher, the service interface sends to a centralized service an identifier of the selected mutual cipher. Responsive to the service interface receiving a revoked cipher alert from the centralized service, the service interface revokes one or more sessions of the SSL application using a revoked cipher in the revoked cipher alert matching the selected mutual cipher.

Dynamically managing, from a centralized service, valid cipher suites allowed for secured sessions

At a centralized service in a hosted environment, a permission list is established of at least one cipher suite valid for secure connections across multiple network environments. Responsive to the centralized service receiving a request from a socket indicating the socket is negotiating a secure connection with another socket, the centralized service sends the permission list to the socket, wherein the socket negotiates for a mutual cipher suite specified in the permission list with the another socket. Responsive to the centralized service identifying that a particular cipher suite matching the mutual cipher suite used in an ongoing secure session for the socket is revoked, the centralized service notifies the socket that the mutual cipher suite is revoked.

Access to a secure resource is controlled. Data relating to social media history information, demographic information, and psychometric information regarding a user having access to a secure resource is mined by a computer system. Mined data that indicates a potential security risk that meets a predefined security criteria with respect to the secure resource is identified by the computer system. A security risk level based on the identified data is determined. A level of access to the secure resource by the user computing device is set, based on one or more predetermined threshold values that are met, in response to a determination regarding such. Access is granted to the secure resource in accordance with the set level of access, in response to receiving a request to access the secure resource by the computer system.

Secure resource access based on psychometrics

A computer software program is used to capture configuration values of predetermined parameters of vendor software and an operating system on which the vendor software is installed. Configuration values of predetermined parameters can be collected from more than one computer in a networked environment. A collated report of configuration values from the customer computer systems is sent to the vendor for diagnosis of the technical problem experienced by the customer.

Growing community of inventors

Pune, India

Mahesh Shivram Paradkar