International Business Machines Corporation

Globalfoundries Inc.

Toshiba Global Commerce Solutions Holdings Corporation

Mark A Nelson

Kevin H Peters

Louis R Ruggiero

John C Dayka

Thomas Edwin Murphy, Jr

Richard Henry Guski

Walter Barlett Farrell

Birgit Monika Pfitzmann

Eric David Rossman

Matthias Schunter

Guenter Karjoth

Wayne Erwin Rhoten

Michael P Waidner

Linda Nancy Betz

Anuja Deedwaniya

Cecilia Carranza Lewis

George E Corbin

John R Eells

Anthony Grech

Donald W Schmidt

Anthony Thomas Sofia

Donna N Dillenberger

Timothy James Hahn

Patrick S Botz

Eric Rosenfeld

Deborah F Mapes

Margaret K LaBelle

John J Petreshock

Alan P Dooley

Arthur L Fitzpatrick, Iii

Russell D Hardgrove

Christine A Marusek

Nadine Ellison-Marion

Nadine M Ellison-Marion

A computer-implemented method according to one embodiment includes identifying a creation of a container within a system, selecting a security policy for the container, based on one or more attributes, identifying a key label associated with the security policy for the container, retrieving a data encryption key, utilizing the key label, and encrypting the container, utilizing the data encryption key. This may enable a highly granular level of automatic container-level security within the system that may be transparently implemented within the system, which may streamline container security and reduce an amount of stored data and processing necessary for implementing container security, and may thereby improve the performance of the system.

Implementing policy-based container-level encryption

Embodiments are directed to a computer-implemented method for determining whether a program has been modified. The method can include determining that a first instance of the program is loaded in main memory. The method can further include determining a starting memory location of the first instance of the program. A second instance of the program is loaded into main memory. The second instance of the program is loaded such that memory references in the second instance of the program are resolved as if the second instance were loaded at the starting memory location of the first instance of the program. The first instance of the program is compared with the second instance of the program.

Determining whether two programs are identical

A computer-implemented method according to one embodiment includes identifying a first request from a user to access a container, determining whether the user has a first authorization to access the container, allowing the user to access the container, in response to determining that the user has the first authorization to access the container, identifying a second request from the user to access content within the container, where the content is encrypted, retrieving a key label associated with the container, determining whether the user has a second authorization to access the key label, retrieving a data encryption key, utilizing the key label, in response to determining that the user has the second authorization to access the key label, and allowing the user to access the content that is encrypted by performing one or more decryption actions, utilizing the data encryption key.

Implementing a separation of duties for container security

Embodiments include a method, system, and computer program product for acquiring a data repository, the data repository being associated with a log configured to receive metadata. Then, a content of the log with respect to at least one manipulation of the data repository is modified by adding first metadata of the metadata. Further, signatures that identify control statements configured to govern the at least one manipulation of the data repository are collected by adding second metadata of the metadata into the log.

Establishing a chain of trust in a system log

An intelligent switching method and system. The method includes retrieving by a computer processor of an intelligent switching device, detection data indicating that an individual is located within a specified proximity of an apparatus. The intelligent switching device is lockably attached to the apparatus. The computer processor receives a request from an individual for enabling the apparatus. The computer processor determines that the individual is in compliance with safety procedures associated with operating the apparatus and generates an enable signal. The enable signal enables a power signal for the apparatus. The computer processor indicates that the apparatus has been enabled and is operational.

Intelligent switching

Embodiments include a method, system, and computer program product for acquiring a data repository, the data repository being associated with a log configured to receive metadata. Then, a content of the log with respect to at least one manipulation of the data repository is modified by adding first metadata of the metadata. Further, signatures that identify control statements configured to govern the at least one manipulation of the data repository are collected by adding second metadata of the metadata into the log

Embodiments of the disclosure relate to processing email having symbolic variables in the address. Aspects include receiving, by an email server, an email comprising an email address for an intended recipient and determining whether the email address includes a symbolic variable. Based on determining that the email address includes the symbolic variable, the symbolic variable from the email address are extracted, an email address for an additional recipient by querying a database based on the symbolic variable is identified, and the email is transmitted to the email address of the intended recipient and the email address of the additional recipient. Based on determining that the email address does not include the symbolic variable, the email is transmitted to the email address of the intended recipient.

Symbolic variables within email addresses

An automated secure record management system and method that receives a plurality of digitally signed records subsequent to a resetting of a running counter. In response to each received digitally signed record, the automated secure record management system and method increments the running counter. Further, upon receiving an accumulation record, automated secure record management system and method compares a value of the running counter and a signature record number of the accumulation record, such that a notification is generated whenever the comparison detects that the value of the running counter is not equal to the signature record number.

Detection of deleted records in a secure record management environment

An attachment detection method and system. The method includes receiving, by a computer processor of a computing system, attachment data describing different devices associated with and attachable to an electro/mechanical apparatus. The computer processor retrieves first data describing a first attachment device currently attached to the electro/mechanical apparatus and analyzes the attachment data with respect to the first data. In response to the analysis, the computer processor determines specified protective gear required for operation of the electro/mechanical apparatus and the first attachment device. The computer processor generates indication data specifying required usage of the specified protective gear and presents the indication data to a user.

Attachment detection

A system and method of for performing an action at a device is disclosed. A first signal is sent into a first zone from a first light source, wherein the first signal identifies the first zone. The first signal is received at the device when the device is in the zone. The device determines from the received first signal that the device is in the first zone and performs the action at the device based on the device being in the first zone. A second variable light source may send a second signal into a second zone, wherein the second signal identifies the second zone. Triangulation may be performed to determine a location of the device using the first signal and the second signal. Alternately, a parameter of motion of the device may be determined using the received messages.

Object location in three dimensional space using LED lights

A safeguard method and system. The method includes receiving and analyzing apparatus data associated with an electro/mechanical apparatus. A type, mode, and state of the electro/mechanical apparatus are determined and a list of associated safeguard devices is generated and presented to a user. A selection for a safeguard device is received and it is determined if the safeguard device is currently present. In response, a specified action is executed.

Apparatus safeguard

Growing community of inventors

Poughkeepsie, NY, United States of America

Mark A Nelson