International Business Machines Corporation

Institute for Information Technology Advancement

Marcel Catalin Rosu

Chandrasekhar Narayanaswami

Mandayam Thondanur Raghunath

William Eric Hall

Eric M Foster

Charanjit Singh Jutla

Hugo M Krawczyk

Daniel Mark Coffman

Michael Steiner

Barry Leiba

Charles D Cash

Stanislaw Jarecki

Hanghang Tong

Dinesh C Verma

Richard Harold Boivie

David R Safford

Guerney D H Hunt

Paul Ashley Karger

Daniela Rosu

Suzanne K McIntosh

Mark F Mergen

David Claude Toll

A method for searching in an encrypted database includes the following steps. A search is formulated as a conjunct of two or more atomic search queries. One of the conjuncts is selected as a primary atomic search query. Search capabilities are generated for a secondary atomic search query using the primary atomic search query and the secondary atomic search query.

Masking query data access pattern in encrypted data

A method comprises receiving a first cryptographic token for one search term and a second cryptographic token is generated using the one search term and at least another search term. A first search is conducted using the first cryptographic token to generate a first result set, and the second cryptographic token is used for computing a subset of results of the first result set.

Conjunctive search in encrypted data

A method for encrypting a database includes the following step. Keywords in the database are encrypted to obtain encrypted search tags for the keywords. A table of reverse indices is generated for the encrypted search tags. A table of cross keyword indices is generated. A method for searching in an encrypted database includes the following steps. A search is formulated as a conjunct of two or more atomic search queries. One of the conjuncts is selected as a primary atomic search query. Search capabilities are generated for a secondary atomic search query using the primary atomic search query and the secondary atomic search query. Such methods mask query data and the actual composition of the database to reduce computation complexity and privacy leakage.

A simplification of the process of deploying public services for mobile users Particular refinements in this vein involve the dynamic configuration of client software using available context information and the optimization of software provisioning based on historical usage information, which includes services accessed together with the location and time of access.

Context-aware code provisioning for mobile devices

A system and method for configuring client access to a network includes at a first port, accessing a first server on a first local area network associated with the first port. An authorized local area network other than the first local area network is determined to which an authorized connection can be properly made based on information in a client request. The first port is assigned to the authorized local area network. Communications are handled with a new client configuration in the authorized local area network.

System and method for virtualized resource configuration

A system to address resource management and security in a computer system may include an operating system kernel executing on a computer processor. The system may also include a data processing application and a mediator configured to execute on the computer processor. The mediator may operate between the operating system kernel and the data processing application. The mediator may control access of user generated state data of the data processing application and may restrict access of the operating system kernel to the user generated state data.

Resource management and security system

Disclosed are a processor and processing method that provide non-hierarchical computer security enhancements for context states. The processor can comprise a context control unit that uses context identifier tags associated with corresponding contexts to control access by the contexts to context information (i.e., context states) contained in the processor's non-stackable and/or stackable registers. For example, in response to an access request, the context control unit can grant a specific context access to a register only when that register is tagged with a specific context identifier tag. If the register is tagged with another context identifier tag, the contents of the specific register are saved in a context save area of memory and the previous context states of the specific context are restored to the specific register before access can be granted. The context control unit can also provide such computer security enhancements while still facilitating authorized cross-context and/or cross-level communications.

Processor and data processing method with non-hierarchical computer security enhancements for context states

An embodiment of the invention pertains to a weighted directed graph comprising multiple nodes and edges that each extends between two nodes. The embodiment includes processing edges to generate a forward and reverse edge corresponding to each edge. Forward and reverse edges are processed to generate indirect edges, each comprising two edge components, and extending between two nodes. One node associated with each forward edge, each reverse edge, and each indirect edge is selected to be the key node of its associated edge. All forward, reverse and indirect edges having a particular node as their respective key nodes are placed into a group. All edges of the group are then selectively processed to provide information pertaining to an egonet of the graph that has the particular node as its egonode.

Efficient egonet computation in a weighted directed graph

A system to implement user-level filesystem related calls instead of an operating system kernel may include data processing applications executing via a computer processor. The system may also include a plurality of user-level filesystems, each one of which is associated with at least one of the data processing applications. The system may further include a user-level library in communication with the data processing applications, the user-level library configured to implement user-level filesystem related calls instead of an operating system kernel executing via the computer processor.

Filesystem management and security system

A system, method and computer program product for communicating Web-Services (WS) messages. First there is allocated an identical amount of a cache history storage at each sender and receiver device for storing a history of communicated WS message strings. At the sender, there is generated an intermediate data representations of each message being built, the corresponding message string stored in the cache history storage. The message is communicated as a serialized data string according to the built data representation. For each subsequent message to be communicated, the method comprises identifying identical portions in intermediate data representations of a current message being built and replacing each identified portion in message strings with a reference indicator to a location in the cache history storage corresponding to an identical character string portion associated with a prior message that has been communicated. At the receiver device, the references are identified in received message strings and one or more intermediate data representations locally stored at the receiver device are substituted in the message to complete a build of the received message.

System and method for history driven optimization of web services communication

The exemplary embodiments of the present invention provide a method for searching a metadata repository and visualizing the results of the search, wherein the metadata in the metadata repository is associated with a plurality of media content, and wherein each media content including at least one audio track. The method comprises retrieving the media contents used to generate the metadata terms satisfying a search criteria, and generating a ranked list of search results. The method further includes visualizing the ranked list of media contents, and displaying relevant metadata and corresponding associations for the media contents to enable navigation of the at least one audio track included in the media contents.

Systems, methods and computer program products for indexing, searching and visualizing media content

The exemplary embodiments of the present invention provide a method for generating metadata for media content that includes a digital media file and includes retrieving a media content subset from a media content source, saving the received media content subset at a computing system, and generating metadata by processing the media content using the computing system. The method further includes associating generated metadata with media content to facilitate the visualization and navigation of the media content, and adding the metadata to at least one metadata repository designed for efficient retrieval of metadata elements.

Systems, methods and computer program products for generating metadata and visualizing media content

The exemplary embodiments of the present invention provide a method for generating an annotation for media content, that includes retrieving a media content subset from a media content source, saving the received media content subset at a computing system, and generating an annotation for association with the media content subset using the computing system. The method further includes associating the annotation with media content to facilitate the visualization and navigation of the media content and adding the annotation to at least one annotation repository designed for efficient retrieval of annotation elements.

Systems, methods and computer program products for the creation of annotations for media content to enable the selective management and playback of media content

Growing community of inventors

Ossining, NY, United States of America

Marcel Catalin Rosu