International Business Machines Corporation

Michael James Kelly

Todd Weston Arnold

Elizabeth A Dames

Carsten D Frehr

Richard Victor Kisley

Eric David Rossman

Eric B Smith

Kenneth B Kerr

Lucina L Green

Phil C Yeh

Randall J Easter

Robert S DeBellis

Vincent A Spano

Edward J D'Avignon

Eli M Dow

Peter Grimm Sutton

Ronald Morton Smith, Sr

Andrew Gregory Kegel

Steven A Bade

Ronald M Smith

Thomas J Dewkett

Phil Chi-Chung Yeh

Mark D Marik

Michael L Passow

Harry Roger Kolar

Linda Nancy Betz

William Lee Terrell

William A Merz

Kurt S Jacobsen

Jesper Wiese

Donald B Johnson

Stephen M Matyas

Bernd Nerz

Erika Dawson

Klaus Meissner

An V Le

Wayne Erwin Rhoten

Jon Arthur Lynds

Richard Henry Guski

Christopher J Holloway

Keith Joseph Miller

Julian Thomas

Robert C Elander

Andrew Nelson Wilt

James D Randall

John Bouzakis

Paul G Lubold

Cecelia Carranza Lewis

Michael J Falcetano

In an approach for dynamically generating correctly formatted Extensible Markup Language (XML) based off of a subset of data from a database, a processor receives an input pointing to a subset of data. A processor collects the subset of data from existing sources. A processor modifies the subset of data using wildcarding to generate a modified subset of data. A processor generates a set of XML files from the modified subset of data. A processor creates an immutable record of the subset of data, the modified subset of data, and the set of XML files. A processor outputs the set of XML files.

XML production through database mining and blockchain

A system for mapping a thermocline in a body of fluid includes a thermocline detection and monitoring module, a persistent data storage module; and a plurality of distributed sensors, including intelligent sensors, connected with the at least one thermocline detection and monitoring module and the persistent data storage module by one or more control-level programming and communication methods. The thennocline detection and monitoring module can monitor the thermocline at sampling intervals to collect and fuse measurement data from the plurality of sensors to capture thermocline changes as events, correlate measurement data and events, store measurement data in the persistent data storage module along with previously acquired measurement data for comparison and tracking, characterize the thermocline as a function of spatial location, depth, and time, create and maintain reports that describe the thermocline characteristics, status, trends, and provide multimodal notifications of events to different users.

Intelligent/autonomous thermocline mapping and monitoring for marine and freshwater applications

An aspect of the disclosure includes a method, a system and a computer program product. The method includes measuring a first data with a sensor, the sensor and operatively coupled computing resources having at least two power states, an operating power state and a low power state, the low power state consuming less energy than the operating power state. A first time period is determined for measuring a second data, the first time period being based at least in part on the first data. The sensor is operated, and operatively coupled computing resources at the low power state during the first time period, wherein no data measurements are acquired during the first time period. The sensor is changed to the operating power state at an expiration of the first time period.

Dynamic time sliced sensor sampling for reduced power consumption

According to one embodiment, a method for implementing secure key management is provided. The method includes populating a section of information associated with a key, the section being populated with information relating to how the key was created. The method also includes populating the section with information relating to how the key was acquired by a secure module; and binding the section to the key, wherein the key is encrypted.

Secure key management

According to one embodiment, a method for implementing computer security is provided. The method includes creating a token and populating a payload section of the token with key material and selecting a wrapping method that specifies how the key material is securely bound to key control information, wherein a structure of the key control information in the token is independent of the wrapping method. The method also includes wrapping the key material and binding key control information to the key material in the token, wherein the key control information includes information relating to usage and management of the key material.

A system for implementing computer security is provided. The system includes a computer processor and an application configured to execute on the computer processor, the application implementing a method that includes creating a token and populating a payload section of the token with key material and selecting a wrapping method that specifies how the key material is securely bound to key control information. A structure of the key control information in the token is independent of the wrapping method. Implementing computer security also includes wrapping the key material and binding key control information to the key material in the token. The key control information includes information relating to usage and management of the key material.

Secure key management includes populating a section of information associated with a key, the section of information being populated with information relating to a level of protection of the key accumulated over time. Secure key management further includes securely binding the section of information to the key, wherein the key is encrypted.

A computer program product for secure key management is provided. The computer program product includes a tangible storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for creating a token and populating the token with key material, and binding key control information to the key material. The key control information includes information relating to usage of the key material populating one or more key usage fields that define attributes that limit actions that may be performed with the key material.

Key usage policies for cryptographic keys

A computer program product for secure key management is provided. The computer program product includes a tangible storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for creating a token and populating the token with key material, and binding key control information to the key material. The key control information includes information relating to management of the key material populating one or more key management fields that define attributes that limit distribution of the key material.

Key management policies for cryptographic keys

A computer program product for secure key management is provided. The computer program product includes a tangible storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method. The method includes creating a token and populating the token with key material, and binding key control information to the key material. The key control information includes information relating to usage of the key material populating one or more key usage fields that define attributes that limit actions that may be performed with the key material.

A computer program product for secure key management is provided. The computer program product includes a tangible storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method. The method includes creating a token and populating the token with key material, and binding key control information to the key material. The key control information includes information relating to management of the key material populating one or more key management fields that define attributes that limit distribution of the key material.

Provided are a method, system, and article of manufacture for configuring host settings to specify encryption and a key label referencing a key encrypting key to use to encrypt an encryption key provided to a storage drive to use to encrypt data from the host. User settings are received to configure a data class having data attributes with encryption settings. The data class is stored with the received user encryption settings. A job is received indicating a data set to store to a removable storage medium. A data class is determined having data class attributes matching data attributes of the data set indicated in the job. A determination is made from the determined data class whether to encrypt the data. The data set and a command to encrypt the data set are transmitted to a storage drive in response to determining that the determined data class indicates to encrypt the data, wherein the command to encrypt the data set causes the storage drive to encrypt the data sets written to the removable storage medium with an encryption key.

Configuring host settings to specify an encryption setting and a key label referencing a key encryption key to use to encrypt an encryption key provided to a storage drive to use to encrypt data from the host

A system for implementing secure key management is provided. The system includes a computer processor and an application configured to execute on the computer processor, the application implementing a method. The method includes populating a section of information associated with a key, the section being populated with information relating to how the key was created. The method also includes populating the section with information relating to how the key was acquired by a secure module; and binding the section to the key, wherein the key is encrypted.

A system for secure key management is provided. The system includes a computer processor and an application configured to execute on the computer processor, the application implementing a method. The method includes populating a section of information associated with a key, the section of information being populated with information relating to a level of protection of the key accumulated over time. Secure key management further includes securely binding the section of information to the key, wherein the key is encrypted.

Protection of cryptographic keys is converted between one level of security and another level of security. The one level of security is different from the another level of security, and the another level of security includes the components of the one level of security.

Growing community of inventors

Staatsburg, NY, United States of America

Michael James Kelly