International Business Machines Corporation

Visa International Service Association

Hcl Technologies Limited

Ravi Krishnan Muthukrishnan

Nataraj Nagaratnam

Sreekanth Ramakrishna Iyer

Kaushal Kiran Kapadia

Jeffrey Robert Hoy

Aaron J Quirk

Rahul Ghosh

Xianjun Zhu

William R LaRiccia

Corville O Allen

Sulakshan Vajipayajula

Oleg Gryb

Xian Jun Zhu

William R Lariccia

Akshay Bhaskaran

Jonathan D Dunne

Albert Alexander Chung

Abdolreza Salahshour

Subramanian Kumaraswamy

Prakash Kalaiah

Ramakrishna Boggarapu

Nishit Shah

Sherk L Walker

Krishnaprasad Kumbalath

Shakti Nilesh

Raghavendra Ganlaparthi

Rohit Lawange

Soujanya Yalal

Systems and methods for securing user location data are described. A method includes receiving, by a location server computer, an encrypted location from a mobile device. The encrypted location is a location of the mobile device encrypted with a public key. The method then includes receiving, by the location server computer, a location request message from an interaction processing server and partially decrypting, by the location server computer, the encrypted location with a first private key share to form a partially decrypted location. The method further includes transmitting, by the location server computer to the interaction processing server, a location response message with the encrypted location and the partially decrypted location. The interaction processing server then uses the partially decrypted location and the second private key share to form a decrypted location.

System and method for protecting location data

Embodiments of the disclosure are directed to methods, systems, and devices for the use of portable devices, such as a vehicle driven by a user, that are distinctive physical objects and can be presented to an authentication system for authentication purposes. More specifically, the portable device may be used as a source of information for the authentication system that can be verified. Images may be captured of the portable devices in order to determine their distinctive features for comparison to other physical objects registered to the user. The portable devices may also be a source of metadata, or additional contextual information associated with those portable devices or their interaction with the authentication system. The image data and/or the metadata associated with a portable device can be verified for fraud or risk analysis.

System and method for fraud risk analysis in IoT

A system comprises a processor configured to execute instructions to receive an indication of an occurrence of a human gesture and to perform an analysis of the indication of the occurrence of the human gesture to determine contextual criteria having a relationship to the occurrence of the human gesture. The processor may determine a meaning of the human gesture based at least in part on the contextual criteria and a plurality of possible intended meanings for the human gesture. The processor also may execute an instruction respective to determining the meaning of the human gesture, wherein at least a portion of the instruction is dependent upon the meaning of the human gesture.

Dynamic determination of human gestures based on context

A method, apparatus and computer program product for managing a plurality of VPN tunnels between a first cloud and a second cloud in a hybrid cloud environment is described. In a first virtual private network (VPN) manager a request is received from a first cloud application resident in the first cloud. The request includes a first set of requirements for a first VPN tunnel in the plurality of VPN tunnels. The VPN manager sends a first VPN manager request to a first system in a first cloud, wherein the first system creates the first VPN tunnel according to the first set of requirements. The VPN manager receives a request from a second cloud application resident in the first cloud. The request includes a second set of requirements for a VPN tunnel in the plurality of VPN tunnels. The VPN manager sends a second VPN manager request to the system in a first cloud, wherein the second VPN manager request contains the second set of requirements. The second VPN manager request is either tuning the first VPN tunnel according to both the first and second set of requirements if the first and second requirements are compatible or creating a second VPN tunnel between the first node and the second node if the first and second requirements are not compatible, the second VPN tunnel created by the first system.

Dynamically defined virtual private network tunnels in hybrid cloud environments

A management system receives inputs over a period of time from outputs of one or more sensors placed within a proximity to a service area, the one or more sensors for detecting at least one of at least one weight and at least one sound. The management system dynamically estimating, based on a rate of a percentage of change of the at least one weight over the period of time and types of sounds of the at least one sound for the service area, one or more wait times until a completion of use of the service area. The management system dynamically generating one or more wait time estimates in real time for the service area based on the one or more wait times and a current number of users waiting in a queue for the service area.

Real-time wait estimation and prediction via embedded sensors

A data object is parsed into payload data packets so that each data packet is capable of being represented in a matrix barcode, sometimes referred to as a QR code. A matrix barcode is generated for each payload data packet and accompanying metadata used to reconstruct the data object. A matrix barcode movie is assembled from individual matrix barcodes. The resulting movie can be projected to a reader that captures the video sequence, examines each frame to extract payload data and corresponding metadata from each frame. The reader then assembles the separate payload data back into the original data object using the metadata and determines an action to take responsive to the data object. For example, a movie may be played, an image displayed, a file opened, or other action may be taken based on the file type and instructions in the metadata.

Video matrix barcode system

In response to an attempt to install an instance of a container in a production environment, a set of security criteria associated with the container and features of the production environment are compared. Based on the comparison, a determination is made as to whether the features of the production environment satisfy the set of security criteria.

Enforcing security policies for software containers

This disclosure provides the ability for a cloud application to specify its security requirements, the ability to have those requirements evaluated, e.g., against a specific cloud deployment environment, and the ability to enable the application to control a cloud-based security assurance service to provision additional security technology in the cloud to support deployment (or re-deployment elsewhere) of the application if the environment does not have the necessary topology and security resources deployed. To this end, the application queries the service by passing a set of application-based security rights. If the security capabilities provided by the security assurance service are sufficient or better than the application's security rights, the application functions normally. If, however, the security environment established by the security assurance service is insufficient for the application, the application is afforded one or more remediation options, e.g., issuing a request to upgrade the security environment, or the like.

Application-based security rights in cloud environments

A user state tracking and anomaly detector for multi-tenant SaaS applications operates in association with a log management solution, such as a SIEM. A given SaaS application has many user STATES, and the applications often have dependencies on one another that arise, for example, when a particular application makes a request (typically on behalf of a user) to take some action with respect to another application. The detector includes a mapper that maps the large number of user STATES to a reduced number of mapped states (e.g., 'red' and 'green'), and a dependency module that generates user-resource dependency graphs. Using a dependency graph, a SaaS modeler in the detector checks whether a particular dependency-based request associated with a SaaS application is valid. State and dependency information generated by the mapper and dependency module are reported back to the log management solution to facilitate improved logging and anomaly detection.

User state tracking and anomaly detection in software-as-a-service environments

Using mobile devices in a gesture based security system is described. An image based feed is received from a camera incorporated in a first mobile device. The first mobile device is in communication with the gesture based security system. The camera has a view of one of a plurality of secured areas monitored by the gesture based security system. A gesture is recognized within the feed. Non-gesture metadata from the mobile device is associated with the recognized gesture. The non-gesture metadata is used to determine that the image based feed is a view of a first secured area of the plurality of secured areas. The determination whether the recognized gesture is an approved gesture within the first secured area is made according to non-gesture metadata associated with the recognized gesture.

Augmenting gesture based security technology using mobile devices

A method, apparatus and computer program product manage a plurality of VPN tunnels between a first cloud and a second cloud in a hybrid cloud environment is described. A first virtual private network (VPN) agent manages a first VPN tunnel in a plurality of VPN tunnels. The first VPN tunnel provides communication for traffic between a first node in a first cloud and a second node in a second cloud in a hybrid cloud environment. The agent receives a request from a VPN manager which includes a first set of requirements for a first cloud application for the first VPN tunnel in the plurality of VPN tunnels. The agent creates the first VPN tunnel according to the first set of requirements. Next, the agent receives a modification request from the VPN manager containing a second set of requirements for a second cloud application. The modification request comprises a request either to tune the first VPN tunnel according to both the first and second set of requirements if the first and second requirements are compatible. Alternatively, the request may include creating a second VPN tunnel between the first node and the second node if the first and second requirements are not compatible. The second VPN tunnel is managed by the VPN agent.

This disclosure provides systems, methods, and apparatus, including computer programs encoded on computer-readable media, for controlling a display screen brightness level for an electronic device. In one embodiment, the electronic device receives a plurality of ambient light levels from a plurality of light sensors. At least a first ambient light level is received from a wearable device separate from the first device. The electronic device determines an aggregate ambient light level based, at least in part, on the plurality of ambient light levels. The electronic device adjusts a display screen brightness level of a display in the first device based, at least in part, on the aggregate ambient light level.

Optimized screen brightness control using multi-point light intensity input

A computer-implemented method for intelligent chat governance, is provided. The computer-implemented method includes analyzing an incoming message based on relationship between a plurality of users, content of the incoming message, and metadata of the incoming message. The computer-implemented method further includes calculating a plurality of prioritization metrics of the incoming message based on a comparison of the analyzed message to a knowledge base, wherein the knowledge base includes behavioral tendencies of users of the incoming message, patterns of interaction of the users, and situational awareness of the users. The computer-implemented method further includes the transmitting the incoming message to a client interface of, in response to a determination that at least one of the plurality of prioritization metrics are greater than a threshold level.

Growing community of inventors

Bengaluru, India

Ravi Krishnan Muthukrishnan