International Business Machines Corporation

Pu Liu

William F Phillips

Patrick Joseph Callaghan

Paul E Rogers

Patrick J Clas

Timothy V Bolan

Stephen M Sweeney

Victor M Lourenco

Timothy M Sexton

Anthony M Cocuzza

Shayne M Grant

Timothy R Seeger

A set of root keys is loaded as a first part of a secure boot process of a secure system. a first trusted key from a set of trusted keys is verified using a first root key from the set of root keys as a second part of the secure boot process. The set of trusted keys is loaded when an affirmative verification for a subset of trusted keys is received. The subset of trusted keys includes the first trusted key. As a third part of the secure boot process, an immutable portion of a file is validated using the first trusted key. As a fourth part of the secure boot process, the file is loaded when each portion of the file is successfully validated. The first, second, third, and fourth parts of the secure boot process occur before an integrity management configuration takes over the secure boot process.

Securing and changing immutable data in secure bootup

A computer-implemented method for protecting a kernel for secure boot of an operating system includes preparing a kernel component with a signature for a secure boot. A processing unit modifies a machine owner key (MOK) file to include a trusted certificate. The MOK is separate from the kernel file. The processing unit validates the kernel component using a modified Grub file, a modified Shim file, and the MOK, and executes a secure boot using the validated kernel component. The kernel is unchanged by the secure boot process. The kernel component that is protected may be either a program executable (PE) file or a non-PE file.

Portable executable and non-portable executable boot file security

A system and method for compressing that comprises establishing attributes or elements to build a schema that is utilized to generate a record that includes the connection descriptions, building a set of substitution rules by using range expressions and substitution variables, and utilizing the set of substitution rules to associate value assignments that compress the connection descriptions within the record.

Defining pairing rules for connections

Techniques are provided for performing automated operations to construct XML documents from source data based on user annotations of source data. A document received from a user includes source data and one or more annotations by the user regarding at least one subset of the source data. The received annotated document is parsed based on the user annotations. Parsing the received document includes generating data structures corresponding to the subsets of the source data based on the user annotations, and constructing a target XML document based on the generated data structures that includes information extracted from the annotated subsets of source data.

Method and system to convert document source data to XML via annotation

A system extends functionality of Java architecture for XML binding. Represents non-generic elements of a markup language (for example, XML) document in an object oriented programming language (for example, Java). The elements are represented as objects in the programming language. Objects are changed in the programming language representation and the original markup language document is then updated with updated objects translated back as updated elements of the document. The entire document infoset is preserved.

Mapping non-generic markup language elements to generic object-oriented programming language objects

A system extends functionality of Java architecture for XML (extensible markup language) binding, (JAXB). Represents non-generic elements of a markup language (for example, XML) document in an object oriented programming language (for example, Java). The elements are represented as objects in the programming language. Objects are changed in the programming language representation and the original markup language document is then updated with updated objects translated back as updated elements of the document. The entire document infoset is preserved.

A mapping system and method that receives a query identifying an encoded document, reconfigures the encoded document into a hybrid structure by parsing information from the encoded document and mapping the information as elements into the hybrid structure according to attributes of the information, and extracts the elements matching the query from the hybrid structure.

Mapping information into hybrid structure enabling efficient querying of the information

A method comprises creating a first node, determining whether an indicator associated with a head node is present, and designating the first node as a head node, defining and associating a head node identifier with the first node, define a link from the first node to the first node, and create and save an indicator associated with the head node responsive to determining that the indicator associated with a head node is not present.

Growing community of inventors

Vestal, NY, United States of America

Pu Liu