International Business Machines Corporation

Michiharu Kudoh

Tomio Amano

Hiroaki Nakamura

Takayuki Katsuki

Masayuki Numao

Hiroshi Maruyama

Fumiko Satoh

Kento Tamura

A method including receiving designation of an input node for which a node value is generated from collected data, an option node to which a node value is arbitrarily provided, and an estimation target node to be a target of a node value estimation, in a graph including nodes and directional edges; and identifying a directional edge for which a conditional probability is to be acquired to measure the node value of the estimation target node, from among the directional edges, by traversing a directional edge that can propagate an effect to a node value from the estimation target node. The identifying includes, for the option node, traversing both a directional edge that can propagate an effect if a node value is provided to the option node and a directional edge that can propagate an effect if a node value is not provided to the option node.

Probabilistic estimation of node values

A method and system are provided for estimating a skill level of a user regarding a software program executed by the user on a computer processing system. The software program has workbenches that each include commands corresponding thereto. The method includes creating at least one special command set for user skill level estimation by including the commands that exist in various ones of the workbenches and that are executed at least a predetermined percentage of times by the user and excluding the commands which are common to at least two of the workbenches. The method further includes creating partial command sequences from the commands in the at least one special command set. The method also includes determining frequent command execution patterns by applying pattern mining to the partial command sequences. The method additionally includes estimating the skill level of the user based on frequencies of the frequent command execution patterns.

Extracting skill-level-based command execution patterns from CATIA command log

A method and system for generating contexts of targets to estimate a high-order context. The system includes: a detection device including: a sensor for detecting a target; module for extracting the target and a primary context of the target based on data detected by the sensor; and module for encrypting the primary context with a key corresponding to the target; a storage device for recording encrypted primary context from the detection device; and a processing device including: module for receiving the encrypted primary context from the storage device; module for receiving the key corresponding to the target involved in the encrypted primary context; module for decrypting the encrypted primary context using received key; and module for estimating a high-order context using the decrypted primary context; where the processing device further includes a module for requesting the detection device to delete information on a key corresponding to a specific target.

Processing context information

It is one object of the present invention to provide an access control system that employs an access control rule and that does not distinguish between data and the access control rule, so that the same flexible access control that is available for the data can also be provided for the access control rule. An access control system comprises: an access controller 200 for, in accordance with the access request, employing an access control rule defining an access right for the object to determine whether or not access to the object should be permitted; and an object storage unit 500 for storing a set of access control rules as objects equivalent to common data objects, wherein, upon the receipt of a request to access an access control rule, the access controller 200 determines whether or not access to the access control rule should be permitted.

Access control system and methods

The present invention provides access control methods, apparatus and systems that employ an access control rule and that does not distinguish between data and the access control rule, so that the same flexible access control that is available for the data can also be provided for the access control rule. In an example embodiment, an access control system comprises: an access controller for, in accordance with the access request, employing an access control rule defining an access right for the object to determine whether or not access to the object should be permitted; and an object storage unit for storing a set of access control rules as objects equivalent to common data objects, wherein, upon the receipt of a request to access an access control rule, the access controller determines whether or not access to the access control rule should be permitted.

The present invention provides digital signature techniques using an information terminal, such as a portable terminal, having limited calculation resources. In one embodiment, a signature demandant generates a document to be signed, and an agent receives this document. The agent generates summary text for this document, and transmits the summary text to a signatory, and the signatory displays the summary text using his or her information terminal. The signatory confirms the contents, employs a private key stored in his or her terminal to sign (encrypt) the summary text. The signatory thereafter transmits a signature value to the agent, who generates a signed document that includes the signature value. Finally, the signature demandant verifies (decrypts) the received signed document using the public key of the signatory and confirms the contents.

Digital signature system, digital signature method, digital signature mediation method, digital signature mediation system, information terminal and storage medium

It is one object of the present invention to use an access control process to evaluate under a specific condition an access permission request. An access control system comprises a resource document in which a policy description is stored; a policy evaluation module for receiving an external request for accessing the data file, for extracting, from the resource document the policy description that is associated with target data for the access request and for evaluating the policy description to determine whether or not the access request is to be permitted; an enforcement function verification module for, when an existing condition can not be evaluated using only the information included in the policy evaluation module determining whether the condition can be evaluated or can be established; and an enforcement module for evaluating or establishing the condition that, in accordance with the enforcement function verification module can be evaluated or established.

Growing community of inventors

Kanagawa-ken, Japan

Michiharu Kudoh