International Business Machines Corporation

Paolo Bianchini

Fabrizio Loppini

Marco Melillo

Andrea Tortosa

Flavio Pinzauti

Carlo Di Domenico

Furio De Nardis

In an approach, a processor retrieves an indication of a plurality of service computing systems storing corresponding information bunches, pertaining to a subject, that are available to a third party. A processor collects the corresponding information bunches from the service computing systems. A processor generates enriched information pertaining to the subject according to a combination of the corresponding information bunches. A processor verifies the enriched information against a security rule. A processor outputs a result of the verification of the enriched information to the subject.

Controlling information stored in multiple service computing systems

An approach is provided for securing communication between a server computer and a client computer. A first string is sent to the client in response to a request to permit an application being executed by the client computer to access a first function. A second string that includes a parameter of a second function is received. The second string is a result of a conversion of the first string to a command and an execution of the command by the client. A result of an execution of the second function is matched with code information obtained from files of the application. Based on the match to the result of the execution of the second function and without requiring an implementation of native code which checks the authenticity of the application, the server validates the authenticity of the application and permits the application to access the first function.

Protecting a web server against an unauthorized client application

An approach is provided for securing communication between a server computer and a client computer. A first string is sent to the client in response to a request to permit an application being executed by the client computer to access a first function. A second string that includes a parameter of a second function is received. The second string is a result of a conversion of the first string to a command and an execution of the command by the client. The second string is converted into a call to the second function. Using the call, the server executes the second function. Based on a result of the execution of the second function and without requiring an implementation of native code, the server determines whether to (i) permit the application to access the first function or (ii) prevent the application from accessing the first function.

A method () and system for transmitting sensitive information from a client computer to a service provider operating in the INTERNET. The sensitive information (for example a credit card number for carrying out an e-commerce transaction) is split () into several chunks, which are meaningless when taken alone. Each chuck is inserted () into a corresponding data frame, adding noise information. Information about how to extract each chunk from the corresponding data frame and how to use the chunks to reconstruct the original sensitive information is inserted () into a control frame. The data and control frames are distributed () to different interface computers of the INTERNET; the frames are then forwarded () to the server computer, which is not connected to the INTERNET directly but communicates through a secure private network with the interface computers. The server computer extracts () the chunks from the data frames and recombines them into the original information according to the content of the control frame.

Method and system for transmitting sensitive information over a network

A method and system for assisting a user of a data processing system () in browsing a file system (AAA-LLL,aaa-eee) by means of a browsing program (). A browsing history database () is created by intercepting () browsing events from the browsing program, the database including browsing starting locations (STRLOCa&#x2013;STRLOCq) and links to associated browsing target locations (TRGTa&#x2013;TRGTak,TRGTb&#x2013;TRGTbp,TRGTqTRGTq) reached by the in the browsing. When the user starts a browsing, the current browsing starting location is intercepted from the browsing program. The intercepted browsing starting location is searched in the database. If the intercepted browsing starting location is found in the database, a list of links to the browsing target locations associated with the intercepted browsing starting location is retrieved from the database, and the list is proposed to the user the retrieved list of links in the form of shortcuts, which the user can activate for speedily reaching the desired browsing target location.

Growing community of inventors

Rome, Italy

Paolo Bianchini