International Business Machines Corporation

Mariusz Sabath

Dimitri Kanevsky

Alexander Zlatsin

Jan Sedivy

Alaa Salah Youssef

Hai Huang

Michael Joseph Spreitzer

Ali Kanso

Jia Jun Brandon Lum

Sara H Basson

Malgorzata Steinder

Paolo Dettori

Clifford A Pickover

Asser Nasreldin Tantawi

Daniel Pittner

A processor may generate one or more encrypted policies associated with a policy creator. A processor may generate token metadata associated with a user utilizing the one or more encrypted policies. A processor may encrypt the token metadata to form encrypted token metadata. A processor may send the one or more encrypted policies and the encrypted token metadata to a policy evaluator. The policy evaluator may evaluate the one or more encrypted policies and the encrypted token metadata. The processor may return a response. The response may be based on the evaluation by the policy evaluator.

Maintaining confidentiality in decentralized policies

Techniques regarding the use of digital identity tokens describing a computer application to obtain authorization to confidential data based on one or more policies are provided. For example, one or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory, and that can execute the computer executable components stored in the memory. The computer executable components can comprise a trusted platform module component that can generate a digital identity token that is bound to a computer application process. The computer executable components can also comprise a key authenticity component that can compare the digital identity token to a security key to retrieve a security credential.

Distribution of security credentials

According to one or more embodiments of the present invention, a computer-implemented method includes uploading, by a first instance of an integrated development environment (IDE), a first source-code change to a change log of a version control system. A second instance of the IDE is used to upload a second source-code change to the change log of the version control system. A determination is made that the second source-code change conflicts with the first source-code change. Based on the determination that the second source-code change conflicts with the first source-code change, generating a notification of the second source-code change is generated in the first instance of the IDE.

Collaborative software development tool for resolving potential code-change conflicts in real time

Aspects of the invention include selecting a node for an infrastructure update. The selected node is included in a cluster of nodes executing workloads that include containers. A future workload is prevented from being scheduled on the selected node. A workload currently executing on the selected node is migrated to another node included in the cluster of nodes. Infrastructure code on the selected node is updated, and in response to the updating, the ability to schedule a future workload on the selected node is enabled.

Automated infrastructure updates in a cluster environment that includes containers

Techniques are provided for automated employment of respective quota managers for framework instances, where the respective quota managers can negotiate amongst themselves to manage usage of a resource of a shared computing system in relation to a quota for the resource for a tenant of the shared computing system. This can allow tenants to share their quota among multiple frameworks, enable quota exchange between multiple frameworks, and choose a quota with a minimum costs, and thus maximize savings.

Quota management protocol for shared computing systems

A system for enabling the transmission of a prepared message to multiple intended recipients, wherein the information contained in the message is substantially the same as received for all the recipients but differs in parts or portions for certain recipients comprising: a module containing the entire message which includes both the common and unique information to be transmitted and the instructions for selectively providing the information to different recipients; and scheme for sending together from the module all the parts or portions of the information to all recipients, but including means responsive to the instructions, for having selectively different parts or portions of the information received by the different recipients.

Transmitting common and unique information selectively to different recipients

A system and method that provides data messages to a passive device. A passive device, for example watch, is registered together with the telephone number of a cellular telephone of a subscriber to the data message service. Since the cellular telephone periodically transmits a beacon signal, the wireless network knows its cell location. Accordingly, the system determines the cell location of the cellular telephone and establishes a communication of the subscribed data to the watch via the local cellular provider for the same cell location as that of the subscriber's cellular telephone.

Efficient communication with passive devices

A method and system that permits the purchase of a license to make a limited number of copies of a book. At the time of purchase, the purchaser or user is given a key that contains the ability to obtain the limited number of copies on demand. The key contains a web address that can be used to obtain the authorized copies. In some embodiments, the key is a label in a machine readable form that is readable by a label reader, such as a bar code reader or a magnetic reader. In other embodiments, the key is merely a web address that the user may contact. At the point of sale, the key or record is formed, affixed to the book and also sent to copy tracker. The copy tracker then keeps track of the copies as made and processes each request to make a copy. If permitted, a database is enabled to send an electronic image of the requested copy to the user.

Smart book

Methods and system to progressively degrade a trial version of software products in various ways so as to permit the user to continue to use the product until the user becomes reliant on the product and becomes so frustrated that the user purchases the product. This approach, it may be noted, is also useful for discouraging illegal use of software without proper licenses. The trial or demonstration version of the software program may degrade in any one or more of a number of ways. For instance, the brightness may fade, the application window may shrink, the font may degrade, features may drop out, the display quality may degrade, the sound quality may diminish, the processing speed may decrease, or the network bandwidth may decrease.

System and method for software selling

The invention uses a recognition system of gestures that maps sequences of gestures to keys strings. In the practice of this invention, a user produces gestures without keyboards. Many experienced typists can type without looking at keyboards, and typists can make gestures, in the absence of a keyboard, that are similar to gestures that would be made if there were a keyboard. The gesture recognition system captures gestures for example, (via cameras) and interprets them as pressing an invisible keyboards, as if a keyboard were actually placed in a certain location under the typists hands. To coordinate the invisible keyboard in the correct place under the hands, the user may be provided with feedback. He or she can either view the results of the gestures via a display or hear sounds, via speakers, indicating the results of the gestures.

Virtual invisible keyboard

A method and system for forming a virtual network. The method comprises the steps of providing each of a plurality of mobile objects with a transceiver, and transmitting a cellular/radio signals from a source. At least a first of the mobile objects is located in an area where the transceiver of the first mobile object does not receive the signal directly from the source, while a second of the mobile objects is in a position where the transceiver of the second mobile object receives the signal directly from the source. The transceiver of the second mobile object is used to receive the signal directly from the source and to transmit the signal to the transceiver of the first mobile object.

Virtual cooperative network formed by local clients in zones without cellular services

A system for controlling access to electronic information packages including e-mail messages communicated from a sending device to a receiving device at one or more destination locations. The system and method includes determining fulfillment of one or more certain conditions at the destination location; and, implementing control in response to detection of a fulfilled one or more certain conditions to enable access to content provided in a communicated package. The access includes enabling a user to perform certain operations on the package content at the destination location, or, preventing certain operations from being performed. A mechanism is included for enabling automatic destruction of the e-mail messages immediately after being read by an authorized recipient, or, after a predetermined time interval from receipt of the message. A verification system is employed enabling a sender to verify users attempting to access the e-mail.

Growing community of inventors

Scarsdale, NY, United States of America

Mariusz Sabath