International Business Machines Corporation

Richard James McCarty

Herman Rodriguez

Dustin C Kirkland

Gordan G Greenlee

Peter Daniel Birk

Cesar Augusto Rodriguez Bravo

Doga Tav

Ching-Yun Chao

Heather Maria Hinton

Patrick M Goal

Vishwas Chouhan

Pradeep Kadiyala

Clifton Steve Looney

Ning Yan

David B Kumhyr

Janani Janakiraman

Amal Ahmed Shaheen

Kenneth Bruce MacKenzie

Clifton Looney

A cookie compliance management system enables automated evaluation of cookie compliance within an enterprise. The system determines whether a cookie set by an application in the environment is compliant with a policy. It comprises a workflow engine, a cookie discovery engine (CDE), a cookie characterization engine (CCE), a cookie policy engine (PE), and a cookie registry. The workflow engine receives a request to initiate an evaluation of an application for cookie compliance. The CDE is invoked and returns cookies that are set by the application. The CCE receives a set of base attributes associated with a cookie discovered by the CDE, and computes a set of descriptive attributes determined to be required to enable evaluation of the cookie according to a policy. The policy engine receives policy rules and the set of descriptive attributes and, in response, determines whether the cookie is compliant with the policy. The cookie registry stores cookie data.

Cookie compliance management

According to one embodiment, a method, computer system, and computer program product for intrusion movement prediction is provided. The embodiment may include receiving environmental sensor data corresponding to a monitored space as captured by a plurality of sensors affixed to an airflow component. The embodiment may also include generating a three-dimensional model of the monitored space using the received environmental data. The method may further include, in response to determining a disturbance is present in the three-dimensional model, performing a security action.

Intrusion movement prediction

A computer-implemented method, a system, and a computer program product for detecting objects are disclosed. The method can include receiving, by a computer communicatively connected to a plurality of anemometers positioned throughout the space, first sensor data from the plurality of anemometers, creating a baseline profile of airflow in the space based on the first sensor data, and receiving second sensor data from the plurality of anemometers at a different time than the first sensor data. The method can include comparing the second sensor data with the first sensor data to determine first different data, rendering, in response to determining that the second sensor data is different from the first sensor data, a representation of the object using the first different data and first location data related to the first different data, and calculating a vector associated with the object using the first different data and the first location data.

Indoor intrusion detection

An application-centric authorization model utilizes locally-evaluated rules derived from non-local policies and provided to the application via an authorization object, preferably in the subject's session context. Preferably, the approach does not involve a runtime determination regarding the policy or policies; rather, one or more existing policies are merely used to derive authorization rules associated with a subject, and which are then evaluated and enforced at runtime in a computationally-efficient manner within the local runtime context of the application or service.

Local evaluation of runtime authorization rules derived from externally-derived policy

A real-time plugin command-driven administrative control interface is provided that implements direct real-time command-driven control of operational functionality of application server plugins deployed at a group of application servers. One of request-level application server functionality and server-level application server functionality of at least one of the group of application servers is changed by issuing a real-time application-server plugin command received from the real-time plugin command-driven administrative control interface to a deployed application server plugin.

Dynamic extensible application server management

A proxy is integrated within an F-SSO environment and interacts with an external identity provider (IdP) instance discovery service. The proxy proxies IdP instance requests to the discovery service and receives responses that include the IdP instance assignments. The proxy maintains a cache of the instance assignment(s). As new instance requests are received, the cached assignment data is used to provide appropriate responses in lieu of proxying these requests to the discovery service, thereby reducing the time needed to identify the required IdP instance. The proxy dynamically maintains and manages its cache by subscribing to updates from the discovery service. The updates identify IdP instance changes (such as servers being taken offline for maintenance, new services being added, etc.) occurring within the set of geographically-distributed instances that comprise the IdP service. The updates are provided via a publication-subscription model such that the proxy receives change notifications proactively.

Identity provider discovery service using a publish-subscribe model

An administrative control interface is provided that controls deployed application server plugins that operate within an application-server plugin framework deployed at a group of application servers. The administrative control interface controls dynamic adjustment of runtime application server plugin configurations that perform request-level management and server-level management of the group of application servers. Request-level application server functionality and server-level application server functionality of at least one of the group of application servers is controlled using at least one of the deployed application server plugins as specified by application-server plugin commands received from the administrative control interface.

Mechanisms are provided for performing centralized monitoring of application sessions across a distributed computing environment comprising a plurality of application servers. A request to perform an application session monitoring operation to monitor at least one of input or output streams of application sessions associated with a specified user account identifier is received. A plurality of application instances upon which to perform the requested application session monitoring operation are identified. An application session monitoring request is transmitted to a plurality of session control clients associated with the application instances on a plurality of application servers of the distributed computing environment. The application session monitoring request causes each session control client to monitor at least one of an input or an output stream of application sessions of application instances that are associated with the specified user account identifier, and report results of the monitoring back to the data processing system.

Enterprise application session control and monitoring in a large distributed environment

Mechanisms are provided for performing centralized control of application sessions across a distributed computing environment comprising a plurality of application servers. A request to perform an application session control operation to control the application sessions associated with a specified user account identifier across the plurality of application servers in the distributed computing environment is received. A plurality of application instances upon which to perform the requested application session control operation are identified. An application session control request is transmitted to a plurality of session control clients associated with the application instances on the plurality of application servers of the distributed computing environment. The application session control request causes each session control client to control a user's ability to use the application sessions of application instances, associated with the session control client, that are associated with the specified user account identifier, to access the associated application instances.

Growing community of inventors

Austin, TX, United States of America

Richard James McCarty